ordi infecté ordi très lent

Question

Bonjour,

C'est la première fois que je viens sur votre forum, je ne suis pas une experte en informatique (j'ai 68 ans)
je me suis fait aider pour faire un rapport hijackthis
Mon ordi est de 2006 et il est de plus en plus lent, j'ai installé malwarebytes antimalware il y a quelque temps qui m'avait trouvé 600 infections.
Je fais une analyse par ad-aware tous les 2 jours qui me trouve une cinquantaine d'infections environ à chaque analyse.
Je n'en suis pas à mon premier ordi mais je trouve que celui-là est très très lent.
Je te poste un rapport hijackthis.
Je te remercie par avance de ton aide et j'attends ta réponse pour la suite.




Scan saved at 17:18:30, on 09/03/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Neuf\Widget Neuf\9widget.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com/search/ie.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
O2 - BHO: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O3 - Toolbar: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Widget Neuf] "C:\Program Files\Neuf\Widget Neuf\9widget.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {24757662-8772-4986-8E5A-A1C939CDF219} (CPlayFirstSweetopiaControl Object) - http://games.bigfishgames.com/fr_sweetopia/online/Sweetopia.1.0.0.22_fr.cab
O16 - DPF: {2EB1E425-74DC-4DC0-A9E1-03A4C852E1F2} (CPlayFirstTriJinxControl Object) - http://games.bigfishgames.com/fr_trijinx/online/TriJinx.1.0.0.55.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://gamenextfr.oberon-media.com/online/online2/luxor_amun_rising/mjolauncher.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game07.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

gen-hackman · Answer

Bonsoir

réouvre hijackthis 
fais scan only 
coches ces lignes sur leur gauche: 

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) 
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) 
O2 - BHO: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file) 
O3 - Toolbar: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file) 
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" 
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" 
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe 


tu les coches et tu clic sur "fix checked"

et tu fermes le programme. 

ensuite :

Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau. 

! Déconnecte toi et ferme toutes tes applications en cours ! 

Double-clique sur " RSIT.exe " pour le lancer . 

-> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " . 

* Devant l'option "List files/folders created ..." , tu choisis : 2 months 

* clique ensuite sur " Continue " pour lancer l'analyse ... 


-> laisse faire le scan et ne touche pas au PC ... 


Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note). 

Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ... 

Important : poste un rapport, puis l'autre dans la réponse suivante
Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum 


( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )

mangareva · Answer

re

je te poste le log.txt


Logfile of random's system information tool 1.05 (written by random/random)
Run by Compaq_Propriétaire at 2009-03-09 19:21:28
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 169 GB (73%) free of 232 GB
Total RAM: 510 MB (36% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:26:54, on 09/03/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Neuf\Widget Neuf\9widget.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\RSIT.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\Compaq_Propriétaire.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com/search/ie.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Widget Neuf] "C:\Program Files\Neuf\Widget Neuf\9widget.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {24757662-8772-4986-8E5A-A1C939CDF219} (CPlayFirstSweetopiaControl Object) - http://games.bigfishgames.com/fr_sweetopia/online/Sweetopia.1.0.0.22_fr.cab
O16 - DPF: {2EB1E425-74DC-4DC0-A9E1-03A4C852E1F2} (CPlayFirstTriJinxControl Object) - http://games.bigfishgames.com/fr_trijinx/online/TriJinx.1.0.0.55.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://gamenextfr.oberon-media.com/online/online2/luxor_amun_rising/mjolauncher.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game07.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

mangareva · Answer

re

Je te poste le rapport info.txt



info.txt logfile of random's system information tool 1.05 2009-03-09 19:26:59

======Uninstall list======

-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->c:\WINDOWS\system32\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
-->c:\WINDOWS\system32\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
-->c:\WINDOWS\system32\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
10 Talismans Deluxe-->"C:\Program Files\Zylom Games\10 Talismans Deluxe\GameInstlr.exe" --uninstall UnInstall.log
100+ Great Games Vol 2-->C:\WINDOWS\iun506.exe C:\Program Files\100+ Great Games Vol 2\irunin.ini
24 Jeux de Cartes-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{35E34743-1E7A-4764-896F-50CCB2305143}\SETUP.EXE" -l0x40c 
24 Jeux de Cartes-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EDA5945B-CF67-48E2-A910-762619901D7A}\SETUP.EXE" -l0x40c 
4 Elements Deluxe-->"C:\Program Files\Zylom Games\4 Elements Deluxe\GameInstlr.exe" --uninstall UnInstall.log
4 Super Jeux 1.1-->"C:\Program Files\Micro Application\4 Super Jeux\unins000.exe"
Absolute Mastermind v1.4-->C:\WINDOWS\iun6002.exe "C:\Program Files\Absolute Mastermind\irunin.ini"
Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Alice Greenfingers Deluxe-->"C:\Program Files\Zylom Games\Alice Greenfingers Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Alice's Magical Mahjong Deluxe-->"C:\Program Files\Zylom Games\Alice's Magical Mahjong Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Amazing Adventures - Around The World-->"C:\Program Files\Zylom Games\Amazing Adventures - Around The World\GameInstlr.exe" --uninstall UnInstall.log
Amazing Adventures The Lost Tomb Deluxe-->"C:\Program Files\Zylom Games\Amazing Adventures The Lost Tomb Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Aqual Ball-->MsiExec.exe /I{1542713D-8992-49D5-89B9-099A8B52E052}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Arkanoid 4000-->C:\Program Files\Arkanoid 4000\uninstal.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
Astral Arrows 1.1-->C:\Program Files\Arrows\UnGins.exe "C:\Program Files\Arrows\install.log"
ATI Control Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe" 
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Atlas Mondial Microsoft Encarta-->E:\install.exe
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
aXiebal 2004-->"C:\Program Files\aXiebal\unins000.exe"
aXiebal Winter-->"C:\Program Files\aXiebalWinter\unins000.exe"
Azkend Deluxe-->"C:\Program Files\Zylom Games\Azkend Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Backgammon-->MsiExec.exe /I{FD128599-B6EC-4763-B1F5-00447C78E333}
Balance!-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\JoWooD & ITEM MULTIMEDA\Balance\Uninst.isu"
Ball Fighter-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23075E8F-1084-4B69-8978-D1CA70F88AC5}\setup.exe" -l0x40c 
Beetle Ju-->MsiExec.exe /I{59BC65DB-8E21-47A3-A11D-1351FD9945FE}
Big City Adventure - San Francisco Deluxe-->"C:\Program Files\Zylom Games\Big City Adventure - San Francisco Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Big City Adventure - Sydney Deluxe-->"C:\Program Files\Zylom Games\Big City Adventure - Sydney Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Billard-->MsiExec.exe /I{05E14F24-070F-43F7-B85E-062263BCFD34}
BINIAX-->"C:\WINDOWS\lsb_un20.exe" /C=UC /N=BINIAX
Birds on a Wire Deluxe-->"C:\Program Files\Zylom Games\Birds on a Wire Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Bliss Island Deluxe-->"C:\Program Files\Zylom Games\Bliss Island Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Blood Ties Deluxe-->"C:\Program Files\Zylom Games\Blood Ties Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Bubble Fever-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9792C556-B4A1-4AE0-A08A-F4DFE8B2951C}\SETUP.EXE" -l0x40c 
Bubble Snooker-->MsiExec.exe /I{1D451864-82EA-4D49-9E83-21558C52FF3E}
Burger Rush Deluxe-->"C:\Program Files\Zylom Games\Burger Rush Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Cadox Mania-->MsiExec.exe /I{5CED88DF-4B9A-436E-BC30-5BC9502B1EE8}
Can You See What I See Deluxe-->"C:\Program Files\Zylom Games\Can You See What I See Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Casse Briques-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C392BF3C-D8D5-47FA-962D-A79651A2737C}\SETUP.EXE" -l0x40c 
Casse Tête Mania-->MsiExec.exe /X{6D58EAA4-9777-4493-B14D-804CC9693362}
Casse Tete Mania-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6966F1CB-6E3E-4D36-A011-7E01D2676218}\setup.exe" -l0x40c 
Cate West - The Vanishing Files Deluxe-->"C:\Program Files\Zylom Games\Cate West - The Vanishing Files Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Caveman Adventures-->C:\Program Files\Caveman\Uninstal.exe
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Chasemaze-->C:\Program Files\Crystal Software\Chasemaze\Uninstal.exe
Chasse au Trésor-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{509A8600-FAAD-41A3-ACBB-2AEE762056B0}\Setup.exe" -l0x40c 
Chicken Attack-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9643ED70-62CC-4336-A89A-65471924C5D3}\setup.exe" -l0x40c 
Chuzzle Deluxe 1.0.3.1132-->C:\Program Files\PopCap Games\Chuzzle Deluxe\PopUninstall.exe "C:\Program Files\PopCap Games\Chuzzle Deluxe\Install.log"
Classic Pacman-->"C:\Program Files\Classic Pacman\unins000.exe"
Cluedo-->"C:\Program Files\Zylom Games\Cluedo\GameInstlr.exe" --uninstall UnInstall.log
Codec Pack - All In 1 6.0.1.3-->C:\WINDOWS\iun6002.exe "C:\Program Files\Codec Pack - All In 1\irunin.ini"
Color Eggs-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0A30A96E-1DAE-453D-8FF0-ED53E516D804}\setup.exe" -l0x40c 
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Cosmic Puzzle-->MsiExec.exe /I{B4F2E927-ADD7-4080-BAAA-8B9F44EC8B71}
Cradle of Persia Deluxe-->"C:\Program Files\Zylom Games\Cradle of Persia Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Cubemaster Gold v4.3-->C:\WINDOWS\iun6002.exe "C:\Program Files\Cubemaster Gold\irunin.ini"
Dairy Dash Deluxe-->"C:\Program Files\Zylom Games\Dairy Dash Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Dam Beavers Deluxe-->"C:\Program Files\Zylom Games\Dam Beavers Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Dames et  Autres Jeux de Pions-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\The Learning Company\Dames et  Autres Jeux de Pions\Uninst.isu"
Dames-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{528A4EAE-F483-4272-B085-42EF836391D7}\SETUP.EXE" -l0x40c 
Diamond Drop 2 Deluxe-->"C:\Program Files\Zylom Games\Diamond Drop 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Diamond Drop-->MsiExec.exe /I{B84040B8-AC93-4A6E-94DB-D6643636835A}
Doulber-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6D778B39-3C79-4E76-A929-3A49C82F7BF3}\SETUP.EXE" -l0x40c 
Dream Chronicles 2 - The Eternal Maze Deluxe-->"C:\Program Files\Zylom Games\Dream Chronicles 2 - The Eternal Maze Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Dream Chronicles Deluxe-->"C:\Program Files\Zylom Games\Dream Chronicles Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Drop and Blow-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Drop and Blow\Uninst.isu"
DweebsMazeMania-->C:\Program Files\GJ Games\DweebsMazeMania\Uninstal.exe
Echecs-->"C:\Program Files\Micro Application\Echecs\unins000.exe"
Ecran de Veille - Grands Fonds-->C:\WINDOWS\unins000.exe
Ecran de Veille - Mers du Sud-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{10667692-82F1-4744-8AD6-7309DD46382E}\SETUP.EXE"  -uninst 
Egg vs Chicken Deluxe-->"C:\Program Files\Zylom Games\Egg vs Chicken Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Emerald Tale Deluxe-->"C:\Program Files\Zylom Games\Emerald Tale Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Emperor's Mahjong pour Windows-->C:\WINDOWS\unvise32.exe C:\Program Files\Mindscape\Mahjong Windows\uninstal.log
Encyclopédie Microsoft Encarta 99-->RunDll32 C:\Educatif\ENCYCL~1\UNENC99.DLL,Uninstall  C:\Educatif\ENCYCL~1\SETUP99F\INST99F.LOG
Enhanced Multimedia Keyboard Solution-->C:\HP\KBD\Install.exe /u
Fairy Treasure Deluxe-->"C:\Program Files\Zylom Games\Fairy Treasure Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Family Pack 2002-->MsiExec.exe /X{AA66B9C7-73EA-11D6-8EF1-004F4E08E4CD}
Farm Frenzy 2 Deluxe-->"C:\Program Files\Zylom Games\Farm Frenzy 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Farm Frenzy Deluxe-->"C:\Program Files\Zylom Games\Farm Frenzy Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Fat Head-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-Fat Head.dat
Fishdom Deluxe-->"C:\Program Files\Zylom Games\Fishdom Deluxe\GameInstlr.exe" --uninstall UnInstall.log
FizzBall Deluxe-->"C:\Program Files\Zylom Games\FizzBall Deluxe\GameInstlr.exe" --uninstall UnInstall.log
G.H.O.S.T. Hunters Deluxe-->"C:\Program Files\Zylom Games\G.H.O.S.T. Hunters Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Galerie de photos Windows Live-->MsiExec.exe /X{A70FA218-6598-4AC9-813D-63597C5DD068}
Gamino-->"C:\Program Files\Micro Application\CASSE-TETE\Gamino\Uninstall.exe" "C:\Program Files\Micro Application\CASSE-TETE\Gamino\install.log"
Garfield 2 -->C:\Program Files\Garfield 2\uninst.exe
Gekko Mahjongg-->C:\PROGRA~1\MICROA~1\MAXIMA~1\Data\System\Unwise32.exe C:\PROGRA~1\MICROA~1\MAXIMA~1\Data\System\Install.log
Glyph 2 Deluxe-->"C:\Program Files\Zylom Games\Glyph 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Gold Rush - Treasure Hunt Deluxe-->"C:\Program Files\Zylom Games\Gold Rush - Treasure Hunt Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
Grinbo Demo-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Quotix Software\Grinbo Demo\Uninst.isu"
Happyland Adventures - Xmas Edition v1.3-->c:\games\happy\unins000.exe
Heroes of Hellas Deluxe-->"C:\Program Files\Zylom Games\Heroes of Hellas Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Hide and Secret Deluxe-->"C:\Program Files\Zylom Games\Hide and Secret Deluxe\GameInstlr.exe" --uninstall UnInstall.log
High Definition Audio - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Documents and Settings\Compaq_Propriétaire\Bureau\HijackThis.exe" /uninstall
HoowaBall 1.0-->C:\Program Files\HoowaBall\uninst.exe
Hotel Mahjong Deluxe-->"C:\Program Files\Zylom Games\Hotel Mahjong Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
HP Image Zone 4.7-->C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP PSC & OfficeJet 4.7-->"C:\Program Files\HP\Digital Imaging\{342C7C88-D335-4bc2-8CF1-281857629CE2}\setup\hpzscr01.exe" -datfile hposcr05.dat
HP Software Update-->MsiExec.exe /X{64FC0C98-B035-4530-B15D-3D30610B6DF1}
HP Software Update-->MsiExec.exe /X{ECFDD6BD-E0C0-41CC-A171-E6D6AF4C0E93}
Iggle Pop Deluxe-->"C:\Program Files\Zylom Games\Iggle Pop Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Inca Quest Deluxe-->"C:\Program Files\Zylom Games\Inca Quest Deluxe\GameInstlr.exe" --uninstall UnInstall.log
IncrediMail Xe-->C:\PROGRA~1\INCRED~1\bin\imsetup.exe /remove /addon:IncrediMail /log:IncMail.log
Interpol - The Trail of Dr. Chaos Deluxe-->"C:\Program Files\Zylom Games\Interpol - The Trail of Dr. Chaos Deluxe\GameInstlr.exe" --uninstall UnInstall.log
InterVideo WinDVD Player-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
iTunes-->MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371}
J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
J2SE Runtime Environment 5.0-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150000}
JARKANOÏD 3 PACK #2-->"C:\Program Files\Jarkanoid 3\unins001.exe"
JARKANOÏD 3 PACK #3-->"C:\Program Files\Jarkanoid 3\unins002.exe"
Jarkanoid 3-->"C:\Program Files\Jarkanoid 3\unins000.exe"
Jeu de Plates Formes-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2ADCC659-4D61-43E0-848B-EC636AA97686}\SETUP.EXE" -l0x40c 
Jeux pour tous - Mah-jong-->C:\WINDOWS\IsUn040c.exe -f"c:\Jeux Mamée\Mah Jong D Stress\SIERRA\Jeux pour tous\Mah-jong\Uninst.isu"
Jewel Match 2 Deluxe-->"C:\Program Files\Zylom Games\Jewel Match 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Jewel Match Deluxe-->"C:\Program Files\Zylom Games\Jewel Match Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Jimmy Neutron Un Garçon Génial-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\THQ\Jimmy Neutron\Jimmy Neutron Un Garçon Génial\Uninst.isu"
Jumping Jeff-->MsiExec.exe /I{F85C4511-69DD-4B55-AEB1-31FF10BFFA01}
Jurassic Realm Deluxe-->"C:\Program Files\Zylom Games\Jurassic Realm Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Kakuro-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{02769DA5-8F9F-47AD-89BA-6B9B1D00ACFA}\SETUP.EXE" -l0x40c 
Kao - 2nd round-->C:\Program Files\JoWooD\Kao - 2nd round\Uninstall.exe
Kings Mahjongg-->C:\PROGRA~1\KINGSM~1\UNWISE.EXE C:\PROGRA~1\KINGSM~1\INSTALL.LOG
Kookabonga-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C4982795-D635-47C3-9D08-0B72491F1D08}\setup.exe" -l0x40c  -removeonly
LE PÈRE NOËL-->"C:\Program Files\Play\LE PÈRE NOËL\unins000.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
L'Encyclopédie générale 1999-->C:\WINDOWS\IsUn040c.exe -f"C:\Educatif\L'Encyclopédie générale 1999\Uninst.isu"
Les Razmokets (TM) plus grands-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{08C1D270-DD63-4E4A-875B-1347C5998E08}\setup.exe" -l0x40c  -uninst 
Les Sims Abracadabra-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9A00D1BA-D03A-44E5-AF28-86A1F377DF61}\setup.exe"  -l040c
Little Shop - City Lights Deluxe-->"C:\Program Files\Zylom Games\Little Shop - City Lights Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Little Shop - Road Trip Deluxe-->"C:\Program Files\Zylom Games\Little Shop - Road Trip Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Little Shop of Treasures 2 Deluxe-->"C:\Program Files\Zylom Games\Little Shop of Treasures 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Little Shop of Treasures Deluxe-->"C:\Program Files\Zylom Games\Little Shop of Treasures Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Lucy's Expedition Deluxe-->"C:\Program Files\Zylom Games\Lucy's Expedition Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Macromedia Flash Player 8-->C:\WINDOWS\system32\Macromed\Flash\UninstFl.exe
Magic Farm Deluxe-->"C:\Program Files\Zylom Games\Magic Farm Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Magic Puzzle-->MsiExec.exe /I{F18C3368-1077-47DD-8145-3FFB0120A29C}
MagikWord-->"C:\Program Files\Micro Application\JEUX DE LETTRES\MagikWord\Uninstall.exe" "C:\Program Files\Micro Application\JEUX DE LETTRES\MagikWord\install.log"
Mahjong (Supprimer uniquement)-->C:\Program Files\Micro Application\Mahjong\Uninst.exe
Mahjong Fortuna 2 Deluxe-->"C:\Program Files\Zylom Games\Mahjong Fortuna 2 Deluxe\GameInstaller.exe" --uninstall UnInstall.log
MahJong Suite-->C:\PROGRA~1\MAHJON~1\UNWISE.EXE C:\PROGRA~1\MAHJON~1\INSTALL.LOG
Mahjong World Deluxe-->"C:\Program Files\Zylom Games\Mahjong World Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Mahjongg Artifacts Chapter 2-->"C:\Program Files\Mahjongg Artifacts Chapter 2\ReflexiveArcade\unins000.exe"
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Maxi Puzzles-->"C:\Program Files\Micro Application\Maxi Puzzles\unins000.exe"
Maxthon Browser (remove only)-->C:\Program Files\Maxthon\MaxthonUINST.exe
Micro Application - 1, 2, 3 Photo 2006-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A20B1BE5-F7DC-4201-A72F-EE432AAD5BCD}\SETUP.EXE" -l0x40c 
Micro Application - 1500 Patiences et réussites-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F5BFB554-D857-4A1A-8577-83A8CED41436}\SETUP.EXE" -l0x40c 
Micro Application - 52 Patiences et Réussites-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Jeux Mamée\52 Patiences et Réussites\Uninst.isu"
Micro Application - Crazy Blocks-->C:\Program Files\Micro Application\Crazy Blocs\uninstall.exe
Micro Application - Jeu de Belote-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Micro Application\Jeu de Belote\Uninst.isu"
Micro Application - Super Casse-Briques 2-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Micro Application\Super Casse-Briques 2\Uninst.isu"
Micro Application - Super Casse-Briques 4-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{93004131-5C36-4610-939C-A4FC61365ABA}\SETUP.EXE" -l0x40c 
Micro Application - Super Jeux de Lettres-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Micro Application\Super Jeux de Lettres\Uninst.isu"
Micro Application - Super Patiences et Réussites-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Micro Application\Super Patiences et Réussites\Uninst.isu"
Micro Lettres-->C:\Program Files\Micro Application\Super Jeux de lettres et variantes\Micro Lettres\Uninstal.exe
Micro Mots-->C:\Program Files\Micro Application\Super Jeux de lettres et variantes\Micro Mots\Uninstal.exe
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Money 2000 Suite Financière-->C:\Program Files\Microsoft Money\setup\setup.exe
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Web Publishing Wizard 1.52-->RunDll32 ADVPACK.DLL,LaunchINFSection C:\WINDOWS\INF\wpie4x86.inf,WebPostUninstall
Microsoft Windows Media Video 9 VCM-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmv9vcm.inf, Uninstall
Microsoft Works-->MsiExec.exe /I{A059DE09-1B49-4450-B340-7AE097EC3F04}
Mind Medley Deluxe-->"C:\Program Files\Zylom Games\Mind Medley Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Minigolf 3D-->C:\WINDOWS\IsUn040c.exe -f"C:\Jeux Mamée\Minigolf 3D\Uninst.isu"
Miriel the Magical Merchant Deluxe-->"C:\Program Files\Zylom Games\Miriel the Magical Merchant Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Mirror Magic Deluxe-->"C:\Program Files\Zylom Games\Mirror Magic Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Miss Teri Tale-->"C:\Program Files\Zylom Games\Miss Teri Tale\GameInstlr.exe" --uninstall UnInstall.log
Mortimer Beckett and the Time Paradox-->"C:\Program Files\Zylom Games\Mortimer Beckett and the Time Paradox\GameInstlr.exe" --uninstall UnInstall.log
Mouse Trophy-->C:\WINDOWS\system32\_setupu.exe /u/dC:\Program Files\Micro Application\Mouse Trophy
MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Myst-->C:\WINDOWS\system32\sdbinst.exe -u "C:\WINDOWS\AppPatch\Custom\{34cdd9ca-f4f7-443e-81cd-2a0949d3e531}.sdb"
Mystery P.I. - The New York Fortune Deluxe-->"C:\Program Files\Zylom Games\Mystery P.I. - The New York Fortune Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Mystery P.I. - The Vegas Heist Deluxe-->"C:\Program Files\Zylom Games\Mystery P.I. - The Vegas Heist Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Mystery P.I. The Lottery Ticket Deluxe-->"C:\Program Files\Zylom Games\Mystery P.I. The Lottery Ticket Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Neptune's Secret Deluxe-->"C:\Program Files\Zylom Games\Neptune's Secret Deluxe\GameInstlr.exe" --uninstall UnInstall.log
PacDoom 1.0-->C:\Program Files\PacDoom\uninst.exe
Pakoombo Deluxe-->"C:\Program Files\Zylom Games\Pakoombo Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Paparazzi Deluxe-->"C:\Program Files\Zylom Games\Paparazzi Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Pastry Passion Deluxe-->"C:\Program Files\Zylom Games\Pastry Passion Deluxe\GameInstlr.exe" --uninstall UnInstall.log
PC-Doctor 5 for Windows-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{AB61A692-5543-4C48-979B-8CEA1C52FE9C} /l1036 
Peggle Deluxe 1.0-->C:\Program Files\PopCap Games\Peggle Deluxe\PopUninstall.exe "C:\Program Files\PopCap Games\Peggle Deluxe\Install.log"
Peggle Deluxe-->"C:\Program Files\Zylom Games\Peggle Deluxe\GameInstlr.exe" --uninstall UnInstall.log
PERCEL 4.1-->c:\Program Files\percel\Uninstal.exe
Pet Shop Hop(TM) Deluxe-->"C:\Program Files\Zylom Games\Pet Shop Hop(TM) Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Petz-->C:\WINDOWS\IsUn040c.exe -fc:\petz\Uninst.isu
PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe"
Pirateville Deluxe-->"C:\Program Files\Zylom Games\Pirateville Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Pixelus Deluxe-->"C:\Program Files\Zylom Games\Pixelus Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Plus de 110,000 Cliparts-->C:\WINDOWS\IsUn040c.exe -f"c:\Cliparts\Plus de 110,000 Cliparts\Uninst.isu"
Poker-->MsiExec.exe /I{58A7D3F8-0EBC-4AC6-9782-FC2C4F457E85}
PS2-->C:\WINDOWS\system32\ps2.exe uninstall
Puzzle Hero Deluxe-->"C:\Program Files\Zylom Games\Puzzle Hero Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Python 2.2 pywin32 extensions (build 203)-->"C:\Python22\Removepywin32.exe" -u "C:\Python22\pywin32-wininst.log"
Python 2.2.3-->C:\Python22\UNWISE.EXE C:\Python22\INSTALL.LOG
Q*bert-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Atari\Qbert\Uninst.isu"
QuickTime-->MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4}
Rainbow Web 2 Deluxe-->"C:\Program Files\Zylom Games\Rainbow Web 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Ramdam Deluxe-->"C:\WINDOWS\gotouninstall.exe" "C:\Program Files\GOTO.games\Ramdam Deluxe\GOTOUNINSTALL.INI"
rayman2-->C:\WINDOWS\UbiSoft\SetupUbi.exe -uninstall rayman2
Reversi 3D Deluxe 1.4-->"C:\Program Files\Micro Application\Reversi 3D Deluxe\unins000.exe"
Robin Hood-->"C:\WINDOWS\lsb_un20.exe" /C=UC /N=Robin Hood
Rolling Marbles-->"C:\Program Files\Micro Application\Rolling Marbles\unins000.exe"
Safari Island Deluxe-->"C:\Program Files\Zylom Games\Safari Island Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Saqqarah-->"C:\Program Files\Zylom Games\Saqqarah\GameInstlr.exe" --uninstall UnInstall.log
ScaraBall-->"C:\Program Files\GameTop.com\ScaraBall\unins000.exe"
Secrets of Olympus Deluxe-->"C:\Program Files\Zylom Games\Secrets of Olympus Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
SFR - Kit de connexion-->C:\Program Files\Neuf\Kit\uninstall.exe
SFR - Widget neufbox-->C:\Program Files\Neuf\Widget Neuf\uninstall.exe
Shanghai: Great Moments version 2.0-->C:\Shanghai Grands Moments\uninstal.exe
Skyrock Toolbar-->C:\Program Files\skyrocktbar\uninstall.exe
Sokoban YASC-->"C:\Program Files\BDSokobanYASC\unins000.exe"
SokoStation3-->"C:\Program Files\SokoStation3\unins000.exe"
Sonic Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Sonic MyDVD Plus-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic RecordNow Audio-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Sonic RecordNow Copy-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
Sonic RecordNow Data-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
Sonic Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
SPIDI-->"C:\WINDOWS\lsb_un20.exe" /C=UC /N=SPIDI
Spirit of Wandering Deluxe-->"C:\Program Files\Zylom Games\Spirit of Wandering Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Splash Deluxe-->"C:\Program Files\Zylom Games\Splash Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Spyware Terminator-->"C:\Program Files\Spyware Terminator\unins000.exe"
Stand O Food-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A9306271-9A8D-4A46-8EC9-4F5A88EE2556}\setup.exe" -l0x40c 
Stratajong (French)-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1CC31FDA-B7B0-4BAC-8422-DE41CEA78410}\setup.exe" 
Submarine-->MsiExec.exe /I{EDB06D02-8B20-473D-AE13-31D56FBBB784}
SubTerra-->C:\WINDOWS\iun504.exe C:\Program Files\SubTerra\Data\irunin.ini
Sudoku-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E0F79456-B282-4F9D-829C-757C2F55EFDE}\SETUP.EXE" -l0x40c 
Sunset Studio Deluxe-->"C:\Program Files\Zylom Games\Sunset Studio Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Super Casse Briques 3D-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{30D6DCDA-4AE4-4531-9A48-FF91C98D7F05}\SETUP.EXE" -l0x40c 
Super Casse-briques 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4E63A075-4252-48C4-AFEB-3E13C8424426}\SETUP.EXE" -l0x40c 
Super Casse-Tête-->MsiExec.exe /X{1F6EA582-6AF3-4FD3-AC28-731CD2664CE4}
Super Diamant-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AAAC43A3-E9E8-4E53-8ED5-0122F5E25249}\setup.exe" -l0x40c 
Super Grilles-->C:\Program Files\Micro Application\Super Grilles\Désinstaller Super Grilles.exe
Super Jeux de Lettres 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D9D91DC8-307E-4C79-91A9-E2D0B9993112}\SETUP.EXE" -l0x40c 
Super jeux de mots-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{64DF0D62-8F33-4AA8-91D8-D42C62B426A2}\Setup.exe" 
Super Mahjong-->MsiExec.exe /I{8644D791-86EE-4797-85B1-421171B63999}
Super Puzzle-->MsiExec.exe /I{F3115C5D-0AE6-463B-BA28-09371D7EB9A8}
Supercow Deluxe-->"C:\Program Files\Zylom Games\Supercow Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Tetris Worlds-->C:\PROGRA~1\TETRIS~1\UNWISE.EXE C:\PROGRA~1\TETRIS~1\INSTALL.LOG
Tetrix Games-->"C:\Program Files\Hobby Concept\Tetrix Games\unins000.exe"
The Gift-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\The Gift\Uninst.isu"
The Hidden Object Show Deluxe-->"C:\Program Files\Zylom Games\The Hidden Object Show Deluxe\GameInstlr.exe" --uninstall UnInstall.log
The Magician's Handbook Deluxe-->"C:\Program Files\Zylom Games\The Magician's Handbook Deluxe\GameInstlr.exe" --uninstall UnInstall.log
The Mystery of the Crystal Portal Deluxe-->"C:\Program Files\Zylom Games\The Mystery of the Crystal Portal Deluxe\GameInstlr.exe" --uninstall UnInstall.log
The Rise of Atlantis (remove only)-->C:\Program Files\The Rise of Atlantis\Uninstall.exe
The Scruffs Deluxe-->"C:\Program Files\Zylom Games\The Scruffs Deluxe\GameInstlr.exe" --uninstall UnInstall.log
The Sudoku Challenge-->C:\Program Files\Empire Interactive\The Sudoku Challenge\uninst.exe
The Treasures of Montezuma-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{22AAEE15-AF0A-4E38-A423-D0EED6368D51}\setup.exe" -l0x40c 
TINcan!-Escape-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{679588AD-37E0-4014-8B90-0AD99A54526B}\Setup.exe" -l0x40c 
Tomb Raider III-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Core Design\Tomb Raider III\Uninst.isu"
TriJinx Deluxe-->"C:\Program Files\Zylom Games\TriJinx Deluxe\GameInstlr.exe" --uninstall UnInstall.log
TriJinx-->C:\PROGRA~1\PLAYFI~1\TriJinx\UNWISE.EXE C:\PROGRA~1\PLAYFI~1\TriJinx\INSTALL.LOG
TuneUp Utilities 2007-->MsiExec.exe /I{C8BB4912-12D9-42AE-B571-E580D8CD1B5B}
Turtle Odyssey 2 Deluxe-->"C:\Program Files\Zylom Games\Turtle Odyssey 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
TV sur PC-->C:\Program Files\Neuf\TV_PC\uninstall.exe
Ulead PhotoImpact 8 Trial-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{3D960387-76B3-4758-BAF7-D156B14A032F} 
Update for Windows XP (KB953356)-->"C:\WINDOWS\$NtUninstallKB953356$\spuninst\spuninst.exe"
Virtual Villagers - The Secret City Deluxe-->"C:\Program Files\Zylom Games\Virtual Villagers - The Secret City Deluxe\GameInstlr.exe" --uninstall UnInstall.log
VSO Image Resizer 1.3.4d-->"C:\Program Files\VSO\Image Resizer\unins000.exe"
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Zapper-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8EACA373-D8B8-490E-80A1-1368F750B10C}\setup.exe" -l0x40c 
Zeal Deluxe-->"C:\Program Files\Zylom Games\Zeal Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Zeek the Geek Part One-->C:\Zeek\Zeek1\UNINSTAL.EXE C:\Zeek\Zeek1 UNINSTAL.LOG
Zodiac Tower Deluxe-->"C:\Program Files\Zylom Games\Zodiac Tower Deluxe\GameInstlr.exe" --uninstall UnInstall.log

=====HijackThis Backups=====

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O2 - BHO: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O3 - Toolbar: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)

======Hosts File======

127.0.0.1	007guard.com
127.0.0.1	www.007guard.com
127.0.0.1	008i.com
127.0.0.1	008k.com
127.0.0.1	www.008k.com
127.0.0.1	00hq.com
127.0.0.1	www.00hq.com
127.0.0.1	010402.com
127.0.0.1	032439.com
127.0.0.1	www.032439.com

======Security center information======

AV: AVG Anti-Virus Free (disabled)
AV: Avira AntiVir PersonalEdition Classic

System event log

Computer Name: JOUBIER
Event Code: 7036
Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : en cours d'exécution.

Record Number: 91697
Source Name: Service Control Manager
Time Written: 20090205201315.000000+060
Event Type: Informations
User: 

Computer Name: JOUBIER
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service COM de gravage de CD IMAPI.

Record Number: 91696
Source Name: Service Control Manager
Time Written: 20090205201315.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: JOUBIER
Event Code: 7036
Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : arrêté.

Record Number: 91695
Source Name: Service Control Manager
Time Written: 20090205200312.000000+060
Event Type: Informations
User: 

Computer Name: JOUBIER
Event Code: 7036
Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : en cours d'exécution.

Record Number: 91694
Source Name: Service Control Manager
Time Written: 20090205195313.000000+060
Event Type: Informations
User: 

Computer Name: JOUBIER
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service COM de gravage de CD IMAPI.

Record Number: 91693
Source Name: Service Control Manager
Time Written: 20090205195313.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Application event log

Computer Name: JOUBIER
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 5
Source Name: SecurityCenter
Time Written: 20080901074458.000000+120
Event Type: Informations
User: 

Computer Name: JOUBIER
Event Code: 4096
Message: Le service AntiVir a bien démarré!

Record Number: 4
Source Name: Avira AntiVir
Time Written: 20080831073604.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: JOUBIER
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 3
Source Name: SecurityCenter
Time Written: 20080831073603.000000+120
Event Type: Informations
User: 

Computer Name: JOUBIER
Event Code: 4096
Message: Le service AntiVir a bien démarré!

Record Number: 2
Source Name: Avira AntiVir
Time Written: 20080830210904.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: JOUBIER
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 1
Source Name: SecurityCenter
Time Written: 20080830210903.000000+120
Event Type: Informations
User: 

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;c:\Python22;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 47 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=2f02
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"SonicCentral"=c:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\
"CLASSPATH"=.;C:\Program Files\Java\jre1.5.0_06\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.5.0_06\lib\ext\QTJava.zip

-----------------EOF-----------------

mangareva · Answer

re

Je te poste le rapport info.txt



info.txt logfile of random's system information tool 1.05 2009-03-09 19:26:59

======Uninstall list======

-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->c:\WINDOWS\system32\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
-->c:\WINDOWS\system32\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
-->c:\WINDOWS\system32\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
10 Talismans Deluxe-->"C:\Program Files\Zylom Games\10 Talismans Deluxe\GameInstlr.exe" --uninstall UnInstall.log
100+ Great Games Vol 2-->C:\WINDOWS\iun506.exe C:\Program Files\100+ Great Games Vol 2\irunin.ini
24 Jeux de Cartes-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{35E34743-1E7A-4764-896F-50CCB2305143}\SETUP.EXE" -l0x40c 
24 Jeux de Cartes-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EDA5945B-CF67-48E2-A910-762619901D7A}\SETUP.EXE" -l0x40c 
4 Elements Deluxe-->"C:\Program Files\Zylom Games\4 Elements Deluxe\GameInstlr.exe" --uninstall UnInstall.log
4 Super Jeux 1.1-->"C:\Program Files\Micro Application\4 Super Jeux\unins000.exe"
Absolute Mastermind v1.4-->C:\WINDOWS\iun6002.exe "C:\Program Files\Absolute Mastermind\irunin.ini"
Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Alice Greenfingers Deluxe-->"C:\Program Files\Zylom Games\Alice Greenfingers Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Alice's Magical Mahjong Deluxe-->"C:\Program Files\Zylom Games\Alice's Magical Mahjong Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Amazing Adventures - Around The World-->"C:\Program Files\Zylom Games\Amazing Adventures - Around The World\GameInstlr.exe" --uninstall UnInstall.log
Amazing Adventures The Lost Tomb Deluxe-->"C:\Program Files\Zylom Games\Amazing Adventures The Lost Tomb Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Aqual Ball-->MsiExec.exe /I{1542713D-8992-49D5-89B9-099A8B52E052}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Arkanoid 4000-->C:\Program Files\Arkanoid 4000\uninstal.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
Astral Arrows 1.1-->C:\Program Files\Arrows\UnGins.exe "C:\Program Files\Arrows\install.log"
ATI Control Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe" 
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Atlas Mondial Microsoft Encarta-->E:\install.exe
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
aXiebal 2004-->"C:\Program Files\aXiebal\unins000.exe"
aXiebal Winter-->"C:\Program Files\aXiebalWinter\unins000.exe"
Azkend Deluxe-->"C:\Program Files\Zylom Games\Azkend Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Backgammon-->MsiExec.exe /I{FD128599-B6EC-4763-B1F5-00447C78E333}
Balance!-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\JoWooD & ITEM MULTIMEDA\Balance\Uninst.isu"
Ball Fighter-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23075E8F-1084-4B69-8978-D1CA70F88AC5}\setup.exe" -l0x40c 
Beetle Ju-->MsiExec.exe /I{59BC65DB-8E21-47A3-A11D-1351FD9945FE}
Big City Adventure - San Francisco Deluxe-->"C:\Program Files\Zylom Games\Big City Adventure - San Francisco Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Big City Adventure - Sydney Deluxe-->"C:\Program Files\Zylom Games\Big City Adventure - Sydney Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Billard-->MsiExec.exe /I{05E14F24-070F-43F7-B85E-062263BCFD34}
BINIAX-->"C:\WINDOWS\lsb_un20.exe" /C=UC /N=BINIAX
Birds on a Wire Deluxe-->"C:\Program Files\Zylom Games\Birds on a Wire Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Bliss Island Deluxe-->"C:\Program Files\Zylom Games\Bliss Island Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Blood Ties Deluxe-->"C:\Program Files\Zylom Games\Blood Ties Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Bubble Fever-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9792C556-B4A1-4AE0-A08A-F4DFE8B2951C}\SETUP.EXE" -l0x40c 
Bubble Snooker-->MsiExec.exe /I{1D451864-82EA-4D49-9E83-21558C52FF3E}
Burger Rush Deluxe-->"C:\Program Files\Zylom Games\Burger Rush Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Cadox Mania-->MsiExec.exe /I{5CED88DF-4B9A-436E-BC30-5BC9502B1EE8}
Can You See What I See Deluxe-->"C:\Program Files\Zylom Games\Can You See What I See Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Casse Briques-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C392BF3C-D8D5-47FA-962D-A79651A2737C}\SETUP.EXE" -l0x40c 
Casse Tête Mania-->MsiExec.exe /X{6D58EAA4-9777-4493-B14D-804CC9693362}
Casse Tete Mania-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6966F1CB-6E3E-4D36-A011-7E01D2676218}\setup.exe" -l0x40c 
Cate West - The Vanishing Files Deluxe-->"C:\Program Files\Zylom Games\Cate West - The Vanishing Files Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Caveman Adventures-->C:\Program Files\Caveman\Uninstal.exe
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Chasemaze-->C:\Program Files\Crystal Software\Chasemaze\Uninstal.exe
Chasse au Trésor-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{509A8600-FAAD-41A3-ACBB-2AEE762056B0}\Setup.exe" -l0x40c 
Chicken Attack-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9643ED70-62CC-4336-A89A-65471924C5D3}\setup.exe" -l0x40c 
Chuzzle Deluxe 1.0.3.1132-->C:\Program Files\PopCap Games\Chuzzle Deluxe\PopUninstall.exe "C:\Program Files\PopCap Games\Chuzzle Deluxe\Install.log"
Classic Pacman-->"C:\Program Files\Classic Pacman\unins000.exe"
Cluedo-->"C:\Program Files\Zylom Games\Cluedo\GameInstlr.exe" --uninstall UnInstall.log
Codec Pack - All In 1 6.0.1.3-->C:\WINDOWS\iun6002.exe "C:\Program Files\Codec Pack - All In 1\irunin.ini"
Color Eggs-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0A30A96E-1DAE-453D-8FF0-ED53E516D804}\setup.exe" -l0x40c 
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Cosmic Puzzle-->MsiExec.exe /I{B4F2E927-ADD7-4080-BAAA-8B9F44EC8B71}
Cradle of Persia Deluxe-->"C:\Program Files\Zylom Games\Cradle of Persia Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Cubemaster Gold v4.3-->C:\WINDOWS\iun6002.exe "C:\Program Files\Cubemaster Gold\irunin.ini"
Dairy Dash Deluxe-->"C:\Program Files\Zylom Games\Dairy Dash Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Dam Beavers Deluxe-->"C:\Program Files\Zylom Games\Dam Beavers Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Dames et  Autres Jeux de Pions-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\The Learning Company\Dames et  Autres Jeux de Pions\Uninst.isu"
Dames-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{528A4EAE-F483-4272-B085-42EF836391D7}\SETUP.EXE" -l0x40c 
Diamond Drop 2 Deluxe-->"C:\Program Files\Zylom Games\Diamond Drop 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Diamond Drop-->MsiExec.exe /I{B84040B8-AC93-4A6E-94DB-D6643636835A}
Doulber-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6D778B39-3C79-4E76-A929-3A49C82F7BF3}\SETUP.EXE" -l0x40c 
Dream Chronicles 2 - The Eternal Maze Deluxe-->"C:\Program Files\Zylom Games\Dream Chronicles 2 - The Eternal Maze Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Dream Chronicles Deluxe-->"C:\Program Files\Zylom Games\Dream Chronicles Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Drop and Blow-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Drop and Blow\Uninst.isu"
DweebsMazeMania-->C:\Program Files\GJ Games\DweebsMazeMania\Uninstal.exe
Echecs-->"C:\Program Files\Micro Application\Echecs\unins000.exe"
Ecran de Veille - Grands Fonds-->C:\WINDOWS\unins000.exe
Ecran de Veille - Mers du Sud-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{10667692-82F1-4744-8AD6-7309DD46382E}\SETUP.EXE"  -uninst 
Egg vs Chicken Deluxe-->"C:\Program Files\Zylom Games\Egg vs Chicken Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Emerald Tale Deluxe-->"C:\Program Files\Zylom Games\Emerald Tale Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Emperor's Mahjong pour Windows-->C:\WINDOWS\unvise32.exe C:\Program Files\Mindscape\Mahjong Windows\uninstal.log
Encyclopédie Microsoft Encarta 99-->RunDll32 C:\Educatif\ENCYCL~1\UNENC99.DLL,Uninstall  C:\Educatif\ENCYCL~1\SETUP99F\INST99F.LOG
Enhanced Multimedia Keyboard Solution-->C:\HP\KBD\Install.exe /u
Fairy Treasure Deluxe-->"C:\Program Files\Zylom Games\Fairy Treasure Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Family Pack 2002-->MsiExec.exe /X{AA66B9C7-73EA-11D6-8EF1-004F4E08E4CD}
Farm Frenzy 2 Deluxe-->"C:\Program Files\Zylom Games\Farm Frenzy 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Farm Frenzy Deluxe-->"C:\Program Files\Zylom Games\Farm Frenzy Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Fat Head-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-Fat Head.dat
Fishdom Deluxe-->"C:\Program Files\Zylom Games\Fishdom Deluxe\GameInstlr.exe" --uninstall UnInstall.log
FizzBall Deluxe-->"C:\Program Files\Zylom Games\FizzBall Deluxe\GameInstlr.exe" --uninstall UnInstall.log
G.H.O.S.T. Hunters Deluxe-->"C:\Program Files\Zylom Games\G.H.O.S.T. Hunters Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Galerie de photos Windows Live-->MsiExec.exe /X{A70FA218-6598-4AC9-813D-63597C5DD068}
Gamino-->"C:\Program Files\Micro Application\CASSE-TETE\Gamino\Uninstall.exe" "C:\Program Files\Micro Application\CASSE-TETE\Gamino\install.log"
Garfield 2 -->C:\Program Files\Garfield 2\uninst.exe
Gekko Mahjongg-->C:\PROGRA~1\MICROA~1\MAXIMA~1\Data\System\Unwise32.exe C:\PROGRA~1\MICROA~1\MAXIMA~1\Data\System\Install.log
Glyph 2 Deluxe-->"C:\Program Files\Zylom Games\Glyph 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Gold Rush - Treasure Hunt Deluxe-->"C:\Program Files\Zylom Games\Gold Rush - Treasure Hunt Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
Grinbo Demo-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Quotix Software\Grinbo Demo\Uninst.isu"
Happyland Adventures - Xmas Edition v1.3-->c:\games\happy\unins000.exe
Heroes of Hellas Deluxe-->"C:\Program Files\Zylom Games\Heroes of Hellas Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Hide and Secret Deluxe-->"C:\Program Files\Zylom Games\Hide and Secret Deluxe\GameInstlr.exe" --uninstall UnInstall.log
High Definition Audio - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Documents and Settings\Compaq_Propriétaire\Bureau\HijackThis.exe" /uninstall
HoowaBall 1.0-->C:\Program Files\HoowaBall\uninst.exe
Hotel Mahjong Deluxe-->"C:\Program Files\Zylom Games\Hotel Mahjong Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
HP Image Zone 4.7-->C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP PSC & OfficeJet 4.7-->"C:\Program Files\HP\Digital Imaging\{342C7C88-D335-4bc2-8CF1-281857629CE2}\setup\hpzscr01.exe" -datfile hposcr05.dat
HP Software Update-->MsiExec.exe /X{64FC0C98-B035-4530-B15D-3D30610B6DF1}
HP Software Update-->MsiExec.exe /X{ECFDD6BD-E0C0-41CC-A171-E6D6AF4C0E93}
Iggle Pop Deluxe-->"C:\Program Files\Zylom Games\Iggle Pop Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Inca Quest Deluxe-->"C:\Program Files\Zylom Games\Inca Quest Deluxe\GameInstlr.exe" --uninstall UnInstall.log
IncrediMail Xe-->C:\PROGRA~1\INCRED~1\bin\imsetup.exe /remove /addon:IncrediMail /log:IncMail.log
Interpol - The Trail of Dr. Chaos Deluxe-->"C:\Program Files\Zylom Games\Interpol - The Trail of Dr. Chaos Deluxe\GameInstlr.exe" --uninstall UnInstall.log
InterVideo WinDVD Player-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
iTunes-->MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371}
J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
J2SE Runtime Environment 5.0-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150000}
JARKANOÏD 3 PACK #2-->"C:\Program Files\Jarkanoid 3\unins001.exe"
JARKANOÏD 3 PACK #3-->"C:\Program Files\Jarkanoid 3\unins002.exe"
Jarkanoid 3-->"C:\Program Files\Jarkanoid 3\unins000.exe"
Jeu de Plates Formes-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2ADCC659-4D61-43E0-848B-EC636AA97686}\SETUP.EXE" -l0x40c 
Jeux pour tous - Mah-jong-->C:\WINDOWS\IsUn040c.exe -f"c:\Jeux Mamée\Mah Jong D Stress\SIERRA\Jeux pour tous\Mah-jong\Uninst.isu"
Jewel Match 2 Deluxe-->"C:\Program Files\Zylom Games\Jewel Match 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Jewel Match Deluxe-->"C:\Program Files\Zylom Games\Jewel Match Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Jimmy Neutron Un Garçon Génial-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\THQ\Jimmy Neutron\Jimmy Neutron Un Garçon Génial\Uninst.isu"
Jumping Jeff-->MsiExec.exe /I{F85C4511-69DD-4B55-AEB1-31FF10BFFA01}
Jurassic Realm Deluxe-->"C:\Program Files\Zylom Games\Jurassic Realm Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Kakuro-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{02769DA5-8F9F-47AD-89BA-6B9B1D00ACFA}\SETUP.EXE" -l0x40c 
Kao - 2nd round-->C:\Program Files\JoWooD\Kao - 2nd round\Uninstall.exe
Kings Mahjongg-->C:\PROGRA~1\KINGSM~1\UNWISE.EXE C:\PROGRA~1\KINGSM~1\INSTALL.LOG
Kookabonga-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C4982795-D635-47C3-9D08-0B72491F1D08}\setup.exe" -l0x40c  -removeonly
LE PÈRE NOËL-->"C:\Program Files\Play\LE PÈRE NOËL\unins000.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
L'Encyclopédie générale 1999-->C:\WINDOWS\IsUn040c.exe -f"C:\Educatif\L'Encyclopédie générale 1999\Uninst.isu"
Les Razmokets (TM) plus grands-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{08C1D270-DD63-4E4A-875B-1347C5998E08}\setup.exe" -l0x40c  -uninst 
Les Sims Abracadabra-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9A00D1BA-D03A-44E5-AF28-86A1F377DF61}\setup.exe"  -l040c
Little Shop - City Lights Deluxe-->"C:\Program Files\Zylom Games\Little Shop - City Lights Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Little Shop - Road Trip Deluxe-->"C:\Program Files\Zylom Games\Little Shop - Road Trip Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Little Shop of Treasures 2 Deluxe-->"C:\Program Files\Zylom Games\Little Shop of Treasures 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Little Shop of Treasures Deluxe-->"C:\Program Files\Zylom Games\Little Shop of Treasures Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Lucy's Expedition Deluxe-->"C:\Program Files\Zylom Games\Lucy's Expedition Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Macromedia Flash Player 8-->C:\WINDOWS\system32\Macromed\Flash\UninstFl.exe
Magic Farm Deluxe-->"C:\Program Files\Zylom Games\Magic Farm Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Magic Puzzle-->MsiExec.exe /I{F18C3368-1077-47DD-8145-3FFB0120A29C}
MagikWord-->"C:\Program Files\Micro Application\JEUX DE LETTRES\MagikWord\Uninstall.exe" "C:\Program Files\Micro Application\JEUX DE LETTRES\MagikWord\install.log"
Mahjong (Supprimer uniquement)-->C:\Program Files\Micro Application\Mahjong\Uninst.exe
Mahjong Fortuna 2 Deluxe-->"C:\Program Files\Zylom Games\Mahjong Fortuna 2 Deluxe\GameInstaller.exe" --uninstall UnInstall.log
MahJong Suite-->C:\PROGRA~1\MAHJON~1\UNWISE.EXE C:\PROGRA~1\MAHJON~1\INSTALL.LOG
Mahjong World Deluxe-->"C:\Program Files\Zylom Games\Mahjong World Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Mahjongg Artifacts Chapter 2-->"C:\Program Files\Mahjongg Artifacts Chapter 2\ReflexiveArcade\unins000.exe"
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Maxi Puzzles-->"C:\Program Files\Micro Application\Maxi Puzzles\unins000.exe"
Maxthon Browser (remove only)-->C:\Program Files\Maxthon\MaxthonUINST.exe
Micro Application - 1, 2, 3 Photo 2006-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A20B1BE5-F7DC-4201-A72F-EE432AAD5BCD}\SETUP.EXE" -l0x40c 
Micro Application - 1500 Patiences et réussites-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F5BFB554-D857-4A1A-8577-83A8CED41436}\SETUP.EXE" -l0x40c 
Micro Application - 52 Patiences et Réussites-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Jeux Mamée\52 Patiences et Réussites\Uninst.isu"
Micro Application - Crazy Blocks-->C:\Program Files\Micro Application\Crazy Blocs\uninstall.exe
Micro Application - Jeu de Belote-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Micro Application\Jeu de Belote\Uninst.isu"
Micro Application - Super Casse-Briques 2-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Micro Application\Super Casse-Briques 2\Uninst.isu"
Micro Application - Super Casse-Briques 4-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{93004131-5C36-4610-939C-A4FC61365ABA}\SETUP.EXE" -l0x40c 
Micro Application - Super Jeux de Lettres-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Micro Application\Super Jeux de Lettres\Uninst.isu"
Micro Application - Super Patiences et Réussites-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Micro Application\Super Patiences et Réussites\Uninst.isu"
Micro Lettres-->C:\Program Files\Micro Application\Super Jeux de lettres et variantes\Micro Lettres\Uninstal.exe
Micro Mots-->C:\Program Files\Micro Application\Super Jeux de lettres et variantes\Micro Mots\Uninstal.exe
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Money 2000 Suite Financière-->C:\Program Files\Microsoft Money\setup\setup.exe
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Web Publishing Wizard 1.52-->RunDll32 ADVPACK.DLL,LaunchINFSection C:\WINDOWS\INF\wpie4x86.inf,WebPostUninstall
Microsoft Windows Media Video 9 VCM-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmv9vcm.inf, Uninstall
Microsoft Works-->MsiExec.exe /I{A059DE09-1B49-4450-B340-7AE097EC3F04}
Mind Medley Deluxe-->"C:\Program Files\Zylom Games\Mind Medley Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Minigolf 3D-->C:\WINDOWS\IsUn040c.exe -f"C:\Jeux Mamée\Minigolf 3D\Uninst.isu"
Miriel the Magical Merchant Deluxe-->"C:\Program Files\Zylom Games\Miriel the Magical Merchant Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Mirror Magic Deluxe-->"C:\Program Files\Zylom Games\Mirror Magic Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Miss Teri Tale-->"C:\Program Files\Zylom Games\Miss Teri Tale\GameInstlr.exe" --uninstall UnInstall.log
Mortimer Beckett and the Time Paradox-->"C:\Program Files\Zylom Games\Mortimer Beckett and the Time Paradox\GameInstlr.exe" --uninstall UnInstall.log
Mouse Trophy-->C:\WINDOWS\system32\_setupu.exe /u/dC:\Program Files\Micro Application\Mouse Trophy
MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Myst-->C:\WINDOWS\system32\sdbinst.exe -u "C:\WINDOWS\AppPatch\Custom\{34cdd9ca-f4f7-443e-81cd-2a0949d3e531}.sdb"
Mystery P.I. - The New York Fortune Deluxe-->"C:\Program Files\Zylom Games\Mystery P.I. - The New York Fortune Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Mystery P.I. - The Vegas Heist Deluxe-->"C:\Program Files\Zylom Games\Mystery P.I. - The Vegas Heist Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Mystery P.I. The Lottery Ticket Deluxe-->"C:\Program Files\Zylom Games\Mystery P.I. The Lottery Ticket Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Neptune's Secret Deluxe-->"C:\Program Files\Zylom Games\Neptune's Secret Deluxe\GameInstlr.exe" --uninstall UnInstall.log
PacDoom 1.0-->C:\Program Files\PacDoom\uninst.exe
Pakoombo Deluxe-->"C:\Program Files\Zylom Games\Pakoombo Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Paparazzi Deluxe-->"C:\Program Files\Zylom Games\Paparazzi Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Pastry Passion Deluxe-->"C:\Program Files\Zylom Games\Pastry Passion Deluxe\GameInstlr.exe" --uninstall UnInstall.log
PC-Doctor 5 for Windows-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{AB61A692-5543-4C48-979B-8CEA1C52FE9C} /l1036 
Peggle Deluxe 1.0-->C:\Program Files\PopCap Games\Peggle Deluxe\PopUninstall.exe "C:\Program Files\PopCap Games\Peggle Deluxe\Install.log"
Peggle Deluxe-->"C:\Program Files\Zylom Games\Peggle Deluxe\GameInstlr.exe" --uninstall UnInstall.log
PERCEL 4.1-->c:\Program Files\percel\Uninstal.exe
Pet Shop Hop(TM) Deluxe-->"C:\Program Files\Zylom Games\Pet Shop Hop(TM) Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Petz-->C:\WINDOWS\IsUn040c.exe -fc:\petz\Uninst.isu
PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe"
Pirateville Deluxe-->"C:\Program Files\Zylom Games\Pirateville Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Pixelus Deluxe-->"C:\Program Files\Zylom Games\Pixelus Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Plus de 110,000 Cliparts-->C:\WINDOWS\IsUn040c.exe -f"c:\Cliparts\Plus de 110,000 Cliparts\Uninst.isu"
Poker-->MsiExec.exe /I{58A7D3F8-0EBC-4AC6-9782-FC2C4F457E85}
PS2-->C:\WINDOWS\system32\ps2.exe uninstall
Puzzle Hero Deluxe-->"C:\Program Files\Zylom Games\Puzzle Hero Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Python 2.2 pywin32 extensions (build 203)-->"C:\Python22\Removepywin32.exe" -u "C:\Python22\pywin32-wininst.log"
Python 2.2.3-->C:\Python22\UNWISE.EXE C:\Python22\INSTALL.LOG
Q*bert-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Atari\Qbert\Uninst.isu"
QuickTime-->MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4}
Rainbow Web 2 Deluxe-->"C:\Program Files\Zylom Games\Rainbow Web 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Ramdam Deluxe-->"C:\WINDOWS\gotouninstall.exe" "C:\Program Files\GOTO.games\Ramdam Deluxe\GOTOUNINSTALL.INI"
rayman2-->C:\WINDOWS\UbiSoft\SetupUbi.exe -uninstall rayman2
Reversi 3D Deluxe 1.4-->"C:\Program Files\Micro Application\Reversi 3D Deluxe\unins000.exe"
Robin Hood-->"C:\WINDOWS\lsb_un20.exe" /C=UC /N=Robin Hood
Rolling Marbles-->"C:\Program Files\Micro Application\Rolling Marbles\unins000.exe"
Safari Island Deluxe-->"C:\Program Files\Zylom Games\Safari Island Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Saqqarah-->"C:\Program Files\Zylom Games\Saqqarah\GameInstlr.exe" --uninstall UnInstall.log
ScaraBall-->"C:\Program Files\GameTop.com\ScaraBall\unins000.exe"
Secrets of Olympus Deluxe-->"C:\Program Files\Zylom Games\Secrets of Olympus Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
SFR - Kit de connexion-->C:\Program Files\Neuf\Kit\uninstall.exe
SFR - Widget neufbox-->C:\Program Files\Neuf\Widget Neuf\uninstall.exe
Shanghai: Great Moments version 2.0-->C:\Shanghai Grands Moments\uninstal.exe
Skyrock Toolbar-->C:\Program Files\skyrocktbar\uninstall.exe
Sokoban YASC-->"C:\Program Files\BDSokobanYASC\unins000.exe"
SokoStation3-->"C:\Program Files\SokoStation3\unins000.exe"
Sonic Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Sonic MyDVD Plus-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic RecordNow Audio-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Sonic RecordNow Copy-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
Sonic RecordNow Data-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
Sonic Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
SPIDI-->"C:\WINDOWS\lsb_un20.exe" /C=UC /N=SPIDI
Spirit of Wandering Deluxe-->"C:\Program Files\Zylom Games\Spirit of Wandering Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Splash Deluxe-->"C:\Program Files\Zylom Games\Splash Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Spyware Terminator-->"C:\Program Files\Spyware Terminator\unins000.exe"
Stand O Food-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A9306271-9A8D-4A46-8EC9-4F5A88EE2556}\setup.exe" -l0x40c 
Stratajong (French)-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1CC31FDA-B7B0-4BAC-8422-DE41CEA78410}\setup.exe" 
Submarine-->MsiExec.exe /I{EDB06D02-8B20-473D-AE13-31D56FBBB784}
SubTerra-->C:\WINDOWS\iun504.exe C:\Program Files\SubTerra\Data\irunin.ini
Sudoku-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E0F79456-B282-4F9D-829C-757C2F55EFDE}\SETUP.EXE" -l0x40c 
Sunset Studio Deluxe-->"C:\Program Files\Zylom Games\Sunset Studio Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Super Casse Briques 3D-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{30D6DCDA-4AE4-4531-9A48-FF91C98D7F05}\SETUP.EXE" -l0x40c 
Super Casse-briques 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4E63A075-4252-48C4-AFEB-3E13C8424426}\SETUP.EXE" -l0x40c 
Super Casse-Tête-->MsiExec.exe /X{1F6EA582-6AF3-4FD3-AC28-731CD2664CE4}
Super Diamant-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AAAC43A3-E9E8-4E53-8ED5-0122F5E25249}\setup.exe" -l0x40c 
Super Grilles-->C:\Program Files\Micro Application\Super Grilles\Désinstaller Super Grilles.exe
Super Jeux de Lettres 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D9D91DC8-307E-4C79-91A9-E2D0B9993112}\SETUP.EXE" -l0x40c 
Super jeux de mots-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{64DF0D62-8F33-4AA8-91D8-D42C62B426A2}\Setup.exe" 
Super Mahjong-->MsiExec.exe /I{8644D791-86EE-4797-85B1-421171B63999}
Super Puzzle-->MsiExec.exe /I{F3115C5D-0AE6-463B-BA28-09371D7EB9A8}
Supercow Deluxe-->"C:\Program Files\Zylom Games\Supercow Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Tetris Worlds-->C:\PROGRA~1\TETRIS~1\UNWISE.EXE C:\PROGRA~1\TETRIS~1\INSTALL.LOG
Tetrix Games-->"C:\Program Files\Hobby Concept\Tetrix Games\unins000.exe"
The Gift-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\The Gift\Uninst.isu"
The Hidden Object Show Deluxe-->"C:\Program Files\Zylom Games\The Hidden Object Show Deluxe\GameInstlr.exe" --uninstall UnInstall.log
The Magician's Handbook Deluxe-->"C:\Program Files\Zylom Games\The Magician's Handbook Deluxe\GameInstlr.exe" --uninstall UnInstall.log
The Mystery of the Crystal Portal Deluxe-->"C:\Program Files\Zylom Games\The Mystery of the Crystal Portal Deluxe\GameInstlr.exe" --uninstall UnInstall.log
The Rise of Atlantis (remove only)-->C:\Program Files\The Rise of Atlantis\Uninstall.exe
The Scruffs Deluxe-->"C:\Program Files\Zylom Games\The Scruffs Deluxe\GameInstlr.exe" --uninstall UnInstall.log
The Sudoku Challenge-->C:\Program Files\Empire Interactive\The Sudoku Challenge\uninst.exe
The Treasures of Montezuma-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{22AAEE15-AF0A-4E38-A423-D0EED6368D51}\setup.exe" -l0x40c 
TINcan!-Escape-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{679588AD-37E0-4014-8B90-0AD99A54526B}\Setup.exe" -l0x40c 
Tomb Raider III-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Core Design\Tomb Raider III\Uninst.isu"
TriJinx Deluxe-->"C:\Program Files\Zylom Games\TriJinx Deluxe\GameInstlr.exe" --uninstall UnInstall.log
TriJinx-->C:\PROGRA~1\PLAYFI~1\TriJinx\UNWISE.EXE C:\PROGRA~1\PLAYFI~1\TriJinx\INSTALL.LOG
TuneUp Utilities 2007-->MsiExec.exe /I{C8BB4912-12D9-42AE-B571-E580D8CD1B5B}
Turtle Odyssey 2 Deluxe-->"C:\Program Files\Zylom Games\Turtle Odyssey 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
TV sur PC-->C:\Program Files\Neuf\TV_PC\uninstall.exe
Ulead PhotoImpact 8 Trial-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{3D960387-76B3-4758-BAF7-D156B14A032F} 
Update for Windows XP (KB953356)-->"C:\WINDOWS\$NtUninstallKB953356$\spuninst\spuninst.exe"
Virtual Villagers - The Secret City Deluxe-->"C:\Program Files\Zylom Games\Virtual Villagers - The Secret City Deluxe\GameInstlr.exe" --uninstall UnInstall.log
VSO Image Resizer 1.3.4d-->"C:\Program Files\VSO\Image Resizer\unins000.exe"
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Zapper-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8EACA373-D8B8-490E-80A1-1368F750B10C}\setup.exe" -l0x40c 
Zeal Deluxe-->"C:\Program Files\Zylom Games\Zeal Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Zeek the Geek Part One-->C:\Zeek\Zeek1\UNINSTAL.EXE C:\Zeek\Zeek1 UNINSTAL.LOG
Zodiac Tower Deluxe-->"C:\Program Files\Zylom Games\Zodiac Tower Deluxe\GameInstlr.exe" --uninstall UnInstall.log

=====HijackThis Backups=====

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O2 - BHO: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O3 - Toolbar: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)

======Hosts File======

127.0.0.1	007guard.com
127.0.0.1	www.007guard.com
127.0.0.1	008i.com
127.0.0.1	008k.com
127.0.0.1	www.008k.com
127.0.0.1	00hq.com
127.0.0.1	www.00hq.com
127.0.0.1	010402.com
127.0.0.1	032439.com
127.0.0.1	www.032439.com

======Security center information======

AV: AVG Anti-Virus Free (disabled)
AV: Avira AntiVir PersonalEdition Classic

System event log

Computer Name: JOUBIER
Event Code: 7036
Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : en cours d'exécution.

Record Number: 91697
Source Name: Service Control Manager
Time Written: 20090205201315.000000+060
Event Type: Informations
User: 

Computer Name: JOUBIER
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service COM de gravage de CD IMAPI.

Record Number: 91696
Source Name: Service Control Manager
Time Written: 20090205201315.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: JOUBIER
Event Code: 7036
Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : arrêté.

Record Number: 91695
Source Name: Service Control Manager
Time Written: 20090205200312.000000+060
Event Type: Informations
User: 

Computer Name: JOUBIER
Event Code: 7036
Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : en cours d'exécution.

Record Number: 91694
Source Name: Service Control Manager
Time Written: 20090205195313.000000+060
Event Type: Informations
User: 

Computer Name: JOUBIER
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service COM de gravage de CD IMAPI.

Record Number: 91693
Source Name: Service Control Manager
Time Written: 20090205195313.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Application event log

Computer Name: JOUBIER
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 5
Source Name: SecurityCenter
Time Written: 20080901074458.000000+120
Event Type: Informations
User: 

Computer Name: JOUBIER
Event Code: 4096
Message: Le service AntiVir a bien démarré!

Record Number: 4
Source Name: Avira AntiVir
Time Written: 20080831073604.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: JOUBIER
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 3
Source Name: SecurityCenter
Time Written: 20080831073603.000000+120
Event Type: Informations
User: 

Computer Name: JOUBIER
Event Code: 4096
Message: Le service AntiVir a bien démarré!

Record Number: 2
Source Name: Avira AntiVir
Time Written: 20080830210904.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: JOUBIER
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 1
Source Name: SecurityCenter
Time Written: 20080830210903.000000+120
Event Type: Informations
User: 

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;c:\Python22;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 47 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=2f02
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"SonicCentral"=c:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\
"CLASSPATH"=.;C:\Program Files\Java\jre1.5.0_06\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.5.0_06\lib\ext\QTJava.zip

-----------------EOF-----------------

mangareva · Answer

re

Je te poste le rapport info.txt



info.txt logfile of random's system information tool 1.05 2009-03-09 19:26:59

======Uninstall list======

-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->c:\WINDOWS\system32\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
-->c:\WINDOWS\system32\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
-->c:\WINDOWS\system32\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
10 Talismans Deluxe-->"C:\Program Files\Zylom Games\10 Talismans Deluxe\GameInstlr.exe" --uninstall UnInstall.log
100+ Great Games Vol 2-->C:\WINDOWS\iun506.exe C:\Program Files\100+ Great Games Vol 2\irunin.ini
24 Jeux de Cartes-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{35E34743-1E7A-4764-896F-50CCB2305143}\SETUP.EXE" -l0x40c 
24 Jeux de Cartes-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EDA5945B-CF67-48E2-A910-762619901D7A}\SETUP.EXE" -l0x40c 
4 Elements Deluxe-->"C:\Program Files\Zylom Games\4 Elements Deluxe\GameInstlr.exe" --uninstall UnInstall.log
4 Super Jeux 1.1-->"C:\Program Files\Micro Application\4 Super Jeux\unins000.exe"
Absolute Mastermind v1.4-->C:\WINDOWS\iun6002.exe "C:\Program Files\Absolute Mastermind\irunin.ini"
Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Alice Greenfingers Deluxe-->"C:\Program Files\Zylom Games\Alice Greenfingers Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Alice's Magical Mahjong Deluxe-->"C:\Program Files\Zylom Games\Alice's Magical Mahjong Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Amazing Adventures - Around The World-->"C:\Program Files\Zylom Games\Amazing Adventures - Around The World\GameInstlr.exe" --uninstall UnInstall.log
Amazing Adventures The Lost Tomb Deluxe-->"C:\Program Files\Zylom Games\Amazing Adventures The Lost Tomb Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Aqual Ball-->MsiExec.exe /I{1542713D-8992-49D5-89B9-099A8B52E052}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Arkanoid 4000-->C:\Program Files\Arkanoid 4000\uninstal.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
Astral Arrows 1.1-->C:\Program Files\Arrows\UnGins.exe "C:\Program Files\Arrows\install.log"
ATI Control Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe" 
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Atlas Mondial Microsoft Encarta-->E:\install.exe
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
aXiebal 2004-->"C:\Program Files\aXiebal\unins000.exe"
aXiebal Winter-->"C:\Program Files\aXiebalWinter\unins000.exe"
Azkend Deluxe-->"C:\Program Files\Zylom Games\Azkend Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Backgammon-->MsiExec.exe /I{FD128599-B6EC-4763-B1F5-00447C78E333}
Balance!-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\JoWooD & ITEM MULTIMEDA\Balance\Uninst.isu"
Ball Fighter-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23075E8F-1084-4B69-8978-D1CA70F88AC5}\setup.exe" -l0x40c 
Beetle Ju-->MsiExec.exe /I{59BC65DB-8E21-47A3-A11D-1351FD9945FE}
Big City Adventure - San Francisco Deluxe-->"C:\Program Files\Zylom Games\Big City Adventure - San Francisco Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Big City Adventure - Sydney Deluxe-->"C:\Program Files\Zylom Games\Big City Adventure - Sydney Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Billard-->MsiExec.exe /I{05E14F24-070F-43F7-B85E-062263BCFD34}
BINIAX-->"C:\WINDOWS\lsb_un20.exe" /C=UC /N=BINIAX
Birds on a Wire Deluxe-->"C:\Program Files\Zylom Games\Birds on a Wire Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Bliss Island Deluxe-->"C:\Program Files\Zylom Games\Bliss Island Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Blood Ties Deluxe-->"C:\Program Files\Zylom Games\Blood Ties Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Bubble Fever-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9792C556-B4A1-4AE0-A08A-F4DFE8B2951C}\SETUP.EXE" -l0x40c 
Bubble Snooker-->MsiExec.exe /I{1D451864-82EA-4D49-9E83-21558C52FF3E}
Burger Rush Deluxe-->"C:\Program Files\Zylom Games\Burger Rush Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Cadox Mania-->MsiExec.exe /I{5CED88DF-4B9A-436E-BC30-5BC9502B1EE8}
Can You See What I See Deluxe-->"C:\Program Files\Zylom Games\Can You See What I See Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Casse Briques-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C392BF3C-D8D5-47FA-962D-A79651A2737C}\SETUP.EXE" -l0x40c 
Casse Tête Mania-->MsiExec.exe /X{6D58EAA4-9777-4493-B14D-804CC9693362}
Casse Tete Mania-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6966F1CB-6E3E-4D36-A011-7E01D2676218}\setup.exe" -l0x40c 
Cate West - The Vanishing Files Deluxe-->"C:\Program Files\Zylom Games\Cate West - The Vanishing Files Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Caveman Adventures-->C:\Program Files\Caveman\Uninstal.exe
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Chasemaze-->C:\Program Files\Crystal Software\Chasemaze\Uninstal.exe
Chasse au Trésor-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{509A8600-FAAD-41A3-ACBB-2AEE762056B0}\Setup.exe" -l0x40c 
Chicken Attack-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9643ED70-62CC-4336-A89A-65471924C5D3}\setup.exe" -l0x40c 
Chuzzle Deluxe 1.0.3.1132-->C:\Program Files\PopCap Games\Chuzzle Deluxe\PopUninstall.exe "C:\Program Files\PopCap Games\Chuzzle Deluxe\Install.log"
Classic Pacman-->"C:\Program Files\Classic Pacman\unins000.exe"
Cluedo-->"C:\Program Files\Zylom Games\Cluedo\GameInstlr.exe" --uninstall UnInstall.log
Codec Pack - All In 1 6.0.1.3-->C:\WINDOWS\iun6002.exe "C:\Program Files\Codec Pack - All In 1\irunin.ini"
Color Eggs-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0A30A96E-1DAE-453D-8FF0-ED53E516D804}\setup.exe" -l0x40c 
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Cosmic Puzzle-->MsiExec.exe /I{B4F2E927-ADD7-4080-BAAA-8B9F44EC8B71}
Cradle of Persia Deluxe-->"C:\Program Files\Zylom Games\Cradle of Persia Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Cubemaster Gold v4.3-->C:\WINDOWS\iun6002.exe "C:\Program Files\Cubemaster Gold\irunin.ini"
Dairy Dash Deluxe-->"C:\Program Files\Zylom Games\Dairy Dash Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Dam Beavers Deluxe-->"C:\Program Files\Zylom Games\Dam Beavers Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Dames et  Autres Jeux de Pions-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\The Learning Company\Dames et  Autres Jeux de Pions\Uninst.isu"
Dames-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{528A4EAE-F483-4272-B085-42EF836391D7}\SETUP.EXE" -l0x40c 
Diamond Drop 2 Deluxe-->"C:\Program Files\Zylom Games\Diamond Drop 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Diamond Drop-->MsiExec.exe /I{B84040B8-AC93-4A6E-94DB-D6643636835A}
Doulber-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6D778B39-3C79-4E76-A929-3A49C82F7BF3}\SETUP.EXE" -l0x40c 
Dream Chronicles 2 - The Eternal Maze Deluxe-->"C:\Program Files\Zylom Games\Dream Chronicles 2 - The Eternal Maze Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Dream Chronicles Deluxe-->"C:\Program Files\Zylom Games\Dream Chronicles Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Drop and Blow-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Drop and Blow\Uninst.isu"
DweebsMazeMania-->C:\Program Files\GJ Games\DweebsMazeMania\Uninstal.exe
Echecs-->"C:\Program Files\Micro Application\Echecs\unins000.exe"
Ecran de Veille - Grands Fonds-->C:\WINDOWS\unins000.exe
Ecran de Veille - Mers du Sud-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{10667692-82F1-4744-8AD6-7309DD46382E}\SETUP.EXE"  -uninst 
Egg vs Chicken Deluxe-->"C:\Program Files\Zylom Games\Egg vs Chicken Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Emerald Tale Deluxe-->"C:\Program Files\Zylom Games\Emerald Tale Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Emperor's Mahjong pour Windows-->C:\WINDOWS\unvise32.exe C:\Program Files\Mindscape\Mahjong Windows\uninstal.log
Encyclopédie Microsoft Encarta 99-->RunDll32 C:\Educatif\ENCYCL~1\UNENC99.DLL,Uninstall  C:\Educatif\ENCYCL~1\SETUP99F\INST99F.LOG
Enhanced Multimedia Keyboard Solution-->C:\HP\KBD\Install.exe /u
Fairy Treasure Deluxe-->"C:\Program Files\Zylom Games\Fairy Treasure Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Family Pack 2002-->MsiExec.exe /X{AA66B9C7-73EA-11D6-8EF1-004F4E08E4CD}
Farm Frenzy 2 Deluxe-->"C:\Program Files\Zylom Games\Farm Frenzy 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Farm Frenzy Deluxe-->"C:\Program Files\Zylom Games\Farm Frenzy Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Fat Head-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-Fat Head.dat
Fishdom Deluxe-->"C:\Program Files\Zylom Games\Fishdom Deluxe\GameInstlr.exe" --uninstall UnInstall.log
FizzBall Deluxe-->"C:\Program Files\Zylom Games\FizzBall Deluxe\GameInstlr.exe" --uninstall UnInstall.log
G.H.O.S.T. Hunters Deluxe-->"C:\Program Files\Zylom Games\G.H.O.S.T. Hunters Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Galerie de photos Windows Live-->MsiExec.exe /X{A70FA218-6598-4AC9-813D-63597C5DD068}
Gamino-->"C:\Program Files\Micro Application\CASSE-TETE\Gamino\Uninstall.exe" "C:\Program Files\Micro Application\CASSE-TETE\Gamino\install.log"
Garfield 2 -->C:\Program Files\Garfield 2\uninst.exe
Gekko Mahjongg-->C:\PROGRA~1\MICROA~1\MAXIMA~1\Data\System\Unwise32.exe C:\PROGRA~1\MICROA~1\MAXIMA~1\Data\System\Install.log
Glyph 2 Deluxe-->"C:\Program Files\Zylom Games\Glyph 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Gold Rush - Treasure Hunt Deluxe-->"C:\Program Files\Zylom Games\Gold Rush - Treasure Hunt Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
Grinbo Demo-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Quotix Software\Grinbo Demo\Uninst.isu"
Happyland Adventures - Xmas Edition v1.3-->c:\games\happy\unins000.exe
Heroes of Hellas Deluxe-->"C:\Program Files\Zylom Games\Heroes of Hellas Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Hide and Secret Deluxe-->"C:\Program Files\Zylom Games\Hide and Secret Deluxe\GameInstlr.exe" --uninstall UnInstall.log
High Definition Audio - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Documents and Settings\Compaq_Propriétaire\Bureau\HijackThis.exe" /uninstall
HoowaBall 1.0-->C:\Program Files\HoowaBall\uninst.exe
Hotel Mahjong Deluxe-->"C:\Program Files\Zylom Games\Hotel Mahjong Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
HP Image Zone 4.7-->C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP PSC & OfficeJet 4.7-->"C:\Program Files\HP\Digital Imaging\{342C7C88-D335-4bc2-8CF1-281857629CE2}\setup\hpzscr01.exe" -datfile hposcr05.dat
HP Software Update-->MsiExec.exe /X{64FC0C98-B035-4530-B15D-3D30610B6DF1}
HP Software Update-->MsiExec.exe /X{ECFDD6BD-E0C0-41CC-A171-E6D6AF4C0E93}
Iggle Pop Deluxe-->"C:\Program Files\Zylom Games\Iggle Pop Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Inca Quest Deluxe-->"C:\Program Files\Zylom Games\Inca Quest Deluxe\GameInstlr.exe" --uninstall UnInstall.log
IncrediMail Xe-->C:\PROGRA~1\INCRED~1\bin\imsetup.exe /remove /addon:IncrediMail /log:IncMail.log
Interpol - The Trail of Dr. Chaos Deluxe-->"C:\Program Files\Zylom Games\Interpol - The Trail of Dr. Chaos Deluxe\GameInstlr.exe" --uninstall UnInstall.log
InterVideo WinDVD Player-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
iTunes-->MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371}
J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
J2SE Runtime Environment 5.0-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150000}
JARKANOÏD 3 PACK #2-->"C:\Program Files\Jarkanoid 3\unins001.exe"
JARKANOÏD 3 PACK #3-->"C:\Program Files\Jarkanoid 3\unins002.exe"
Jarkanoid 3-->"C:\Program Files\Jarkanoid 3\unins000.exe"
Jeu de Plates Formes-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2ADCC659-4D61-43E0-848B-EC636AA97686}\SETUP.EXE" -l0x40c 
Jeux pour tous - Mah-jong-->C:\WINDOWS\IsUn040c.exe -f"c:\Jeux Mamée\Mah Jong D Stress\SIERRA\Jeux pour tous\Mah-jong\Uninst.isu"
Jewel Match 2 Deluxe-->"C:\Program Files\Zylom Games\Jewel Match 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Jewel Match Deluxe-->"C:\Program Files\Zylom Games\Jewel Match Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Jimmy Neutron Un Garçon Génial-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\THQ\Jimmy Neutron\Jimmy Neutron Un Garçon Génial\Uninst.isu"
Jumping Jeff-->MsiExec.exe /I{F85C4511-69DD-4B55-AEB1-31FF10BFFA01}
Jurassic Realm Deluxe-->"C:\Program Files\Zylom Games\Jurassic Realm Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Kakuro-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{02769DA5-8F9F-47AD-89BA-6B9B1D00ACFA}\SETUP.EXE" -l0x40c 
Kao - 2nd round-->C:\Program Files\JoWooD\Kao - 2nd round\Uninstall.exe
Kings Mahjongg-->C:\PROGRA~1\KINGSM~1\UNWISE.EXE C:\PROGRA~1\KINGSM~1\INSTALL.LOG
Kookabonga-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C4982795-D635-47C3-9D08-0B72491F1D08}\setup.exe" -l0x40c  -removeonly
LE PÈRE NOËL-->"C:\Program Files\Play\LE PÈRE NOËL\unins000.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
L'Encyclopédie générale 1999-->C:\WINDOWS\IsUn040c.exe -f"C:\Educatif\L'Encyclopédie générale 1999\Uninst.isu"
Les Razmokets (TM) plus grands-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{08C1D270-DD63-4E4A-875B-1347C5998E08}\setup.exe" -l0x40c  -uninst 
Les Sims Abracadabra-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9A00D1BA-D03A-44E5-AF28-86A1F377DF61}\setup.exe"  -l040c
Little Shop - City Lights Deluxe-->"C:\Program Files\Zylom Games\Little Shop - City Lights Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Little Shop - Road Trip Deluxe-->"C:\Program Files\Zylom Games\Little Shop - Road Trip Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Little Shop of Treasures 2 Deluxe-->"C:\Program Files\Zylom Games\Little Shop of Treasures 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Little Shop of Treasures Deluxe-->"C:\Program Files\Zylom Games\Little Shop of Treasures Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Lucy's Expedition Deluxe-->"C:\Program Files\Zylom Games\Lucy's Expedition Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Macromedia Flash Player 8-->C:\WINDOWS\system32\Macromed\Flash\UninstFl.exe
Magic Farm Deluxe-->"C:\Program Files\Zylom Games\Magic Farm Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Magic Puzzle-->MsiExec.exe /I{F18C3368-1077-47DD-8145-3FFB0120A29C}
MagikWord-->"C:\Program Files\Micro Application\JEUX DE LETTRES\MagikWord\Uninstall.exe" "C:\Program Files\Micro Application\JEUX DE LETTRES\MagikWord\install.log"
Mahjong (Supprimer uniquement)-->C:\Program Files\Micro Application\Mahjong\Uninst.exe
Mahjong Fortuna 2 Deluxe-->"C:\Program Files\Zylom Games\Mahjong Fortuna 2 Deluxe\GameInstaller.exe" --uninstall UnInstall.log
MahJong Suite-->C:\PROGRA~1\MAHJON~1\UNWISE.EXE C:\PROGRA~1\MAHJON~1\INSTALL.LOG
Mahjong World Deluxe-->"C:\Program Files\Zylom Games\Mahjong World Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Mahjongg Artifacts Chapter 2-->"C:\Program Files\Mahjongg Artifacts Chapter 2\ReflexiveArcade\unins000.exe"
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Maxi Puzzles-->"C:\Program Files\Micro Application\Maxi Puzzles\unins000.exe"
Maxthon Browser (remove only)-->C:\Program Files\Maxthon\MaxthonUINST.exe
Micro Application - 1, 2, 3 Photo 2006-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A20B1BE5-F7DC-4201-A72F-EE432AAD5BCD}\SETUP.EXE" -l0x40c 
Micro Application - 1500 Patiences et réussites-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F5BFB554-D857-4A1A-8577-83A8CED41436}\SETUP.EXE" -l0x40c 
Micro Application - 52 Patiences et Réussites-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Jeux Mamée\52 Patiences et Réussites\Uninst.isu"
Micro Application - Crazy Blocks-->C:\Program Files\Micro Application\Crazy Blocs\uninstall.exe
Micro Application - Jeu de Belote-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Micro Application\Jeu de Belote\Uninst.isu"
Micro Application - Super Casse-Briques 2-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Micro Application\Super Casse-Briques 2\Uninst.isu"
Micro Application - Super Casse-Briques 4-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{93004131-5C36-4610-939C-A4FC61365ABA}\SETUP.EXE" -l0x40c 
Micro Application - Super Jeux de Lettres-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Micro Application\Super Jeux de Lettres\Uninst.isu"
Micro Application - Super Patiences et Réussites-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Micro Application\Super Patiences et Réussites\Uninst.isu"
Micro Lettres-->C:\Program Files\Micro Application\Super Jeux de lettres et variantes\Micro Lettres\Uninstal.exe
Micro Mots-->C:\Program Files\Micro Application\Super Jeux de lettres et variantes\Micro Mots\Uninstal.exe
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Money 2000 Suite Financière-->C:\Program Files\Microsoft Money\setup\setup.exe
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Web Publishing Wizard 1.52-->RunDll32 ADVPACK.DLL,LaunchINFSection C:\WINDOWS\INF\wpie4x86.inf,WebPostUninstall
Microsoft Windows Media Video 9 VCM-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmv9vcm.inf, Uninstall
Microsoft Works-->MsiExec.exe /I{A059DE09-1B49-4450-B340-7AE097EC3F04}
Mind Medley Deluxe-->"C:\Program Files\Zylom Games\Mind Medley Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Minigolf 3D-->C:\WINDOWS\IsUn040c.exe -f"C:\Jeux Mamée\Minigolf 3D\Uninst.isu"
Miriel the Magical Merchant Deluxe-->"C:\Program Files\Zylom Games\Miriel the Magical Merchant Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Mirror Magic Deluxe-->"C:\Program Files\Zylom Games\Mirror Magic Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Miss Teri Tale-->"C:\Program Files\Zylom Games\Miss Teri Tale\GameInstlr.exe" --uninstall UnInstall.log
Mortimer Beckett and the Time Paradox-->"C:\Program Files\Zylom Games\Mortimer Beckett and the Time Paradox\GameInstlr.exe" --uninstall UnInstall.log
Mouse Trophy-->C:\WINDOWS\system32\_setupu.exe /u/dC:\Program Files\Micro Application\Mouse Trophy
MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Myst-->C:\WINDOWS\system32\sdbinst.exe -u "C:\WINDOWS\AppPatch\Custom\{34cdd9ca-f4f7-443e-81cd-2a0949d3e531}.sdb"
Mystery P.I. - The New York Fortune Deluxe-->"C:\Program Files\Zylom Games\Mystery P.I. - The New York Fortune Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Mystery P.I. - The Vegas Heist Deluxe-->"C:\Program Files\Zylom Games\Mystery P.I. - The Vegas Heist Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Mystery P.I. The Lottery Ticket Deluxe-->"C:\Program Files\Zylom Games\Mystery P.I. The Lottery Ticket Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Neptune's Secret Deluxe-->"C:\Program Files\Zylom Games\Neptune's Secret Deluxe\GameInstlr.exe" --uninstall UnInstall.log
PacDoom 1.0-->C:\Program Files\PacDoom\uninst.exe
Pakoombo Deluxe-->"C:\Program Files\Zylom Games\Pakoombo Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Paparazzi Deluxe-->"C:\Program Files\Zylom Games\Paparazzi Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Pastry Passion Deluxe-->"C:\Program Files\Zylom Games\Pastry Passion Deluxe\GameInstlr.exe" --uninstall UnInstall.log
PC-Doctor 5 for Windows-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{AB61A692-5543-4C48-979B-8CEA1C52FE9C} /l1036 
Peggle Deluxe 1.0-->C:\Program Files\PopCap Games\Peggle Deluxe\PopUninstall.exe "C:\Program Files\PopCap Games\Peggle Deluxe\Install.log"
Peggle Deluxe-->"C:\Program Files\Zylom Games\Peggle Deluxe\GameInstlr.exe" --uninstall UnInstall.log
PERCEL 4.1-->c:\Program Files\percel\Uninstal.exe
Pet Shop Hop(TM) Deluxe-->"C:\Program Files\Zylom Games\Pet Shop Hop(TM) Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Petz-->C:\WINDOWS\IsUn040c.exe -fc:\petz\Uninst.isu
PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe"
Pirateville Deluxe-->"C:\Program Files\Zylom Games\Pirateville Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Pixelus Deluxe-->"C:\Program Files\Zylom Games\Pixelus Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Plus de 110,000 Cliparts-->C:\WINDOWS\IsUn040c.exe -f"c:\Cliparts\Plus de 110,000 Cliparts\Uninst.isu"
Poker-->MsiExec.exe /I{58A7D3F8-0EBC-4AC6-9782-FC2C4F457E85}
PS2-->C:\WINDOWS\system32\ps2.exe uninstall
Puzzle Hero Deluxe-->"C:\Program Files\Zylom Games\Puzzle Hero Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Python 2.2 pywin32 extensions (build 203)-->"C:\Python22\Removepywin32.exe" -u "C:\Python22\pywin32-wininst.log"
Python 2.2.3-->C:\Python22\UNWISE.EXE C:\Python22\INSTALL.LOG
Q*bert-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Atari\Qbert\Uninst.isu"
QuickTime-->MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4}
Rainbow Web 2 Deluxe-->"C:\Program Files\Zylom Games\Rainbow Web 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Ramdam Deluxe-->"C:\WINDOWS\gotouninstall.exe" "C:\Program Files\GOTO.games\Ramdam Deluxe\GOTOUNINSTALL.INI"
rayman2-->C:\WINDOWS\UbiSoft\SetupUbi.exe -uninstall rayman2
Reversi 3D Deluxe 1.4-->"C:\Program Files\Micro Application\Reversi 3D Deluxe\unins000.exe"
Robin Hood-->"C:\WINDOWS\lsb_un20.exe" /C=UC /N=Robin Hood
Rolling Marbles-->"C:\Program Files\Micro Application\Rolling Marbles\unins000.exe"
Safari Island Deluxe-->"C:\Program Files\Zylom Games\Safari Island Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Saqqarah-->"C:\Program Files\Zylom Games\Saqqarah\GameInstlr.exe" --uninstall UnInstall.log
ScaraBall-->"C:\Program Files\GameTop.com\ScaraBall\unins000.exe"
Secrets of Olympus Deluxe-->"C:\Program Files\Zylom Games\Secrets of Olympus Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
SFR - Kit de connexion-->C:\Program Files\Neuf\Kit\uninstall.exe
SFR - Widget neufbox-->C:\Program Files\Neuf\Widget Neuf\uninstall.exe
Shanghai: Great Moments version 2.0-->C:\Shanghai Grands Moments\uninstal.exe
Skyrock Toolbar-->C:\Program Files\skyrocktbar\uninstall.exe
Sokoban YASC-->"C:\Program Files\BDSokobanYASC\unins000.exe"
SokoStation3-->"C:\Program Files\SokoStation3\unins000.exe"
Sonic Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Sonic MyDVD Plus-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic RecordNow Audio-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Sonic RecordNow Copy-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
Sonic RecordNow Data-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
Sonic Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
SPIDI-->"C:\WINDOWS\lsb_un20.exe" /C=UC /N=SPIDI
Spirit of Wandering Deluxe-->"C:\Program Files\Zylom Games\Spirit of Wandering Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Splash Deluxe-->"C:\Program Files\Zylom Games\Splash Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Spyware Terminator-->"C:\Program Files\Spyware Terminator\unins000.exe"
Stand O Food-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A9306271-9A8D-4A46-8EC9-4F5A88EE2556}\setup.exe" -l0x40c 
Stratajong (French)-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1CC31FDA-B7B0-4BAC-8422-DE41CEA78410}\setup.exe" 
Submarine-->MsiExec.exe /I{EDB06D02-8B20-473D-AE13-31D56FBBB784}
SubTerra-->C:\WINDOWS\iun504.exe C:\Program Files\SubTerra\Data\irunin.ini
Sudoku-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E0F79456-B282-4F9D-829C-757C2F55EFDE}\SETUP.EXE" -l0x40c 
Sunset Studio Deluxe-->"C:\Program Files\Zylom Games\Sunset Studio Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Super Casse Briques 3D-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{30D6DCDA-4AE4-4531-9A48-FF91C98D7F05}\SETUP.EXE" -l0x40c 
Super Casse-briques 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4E63A075-4252-48C4-AFEB-3E13C8424426}\SETUP.EXE" -l0x40c 
Super Casse-Tête-->MsiExec.exe /X{1F6EA582-6AF3-4FD3-AC28-731CD2664CE4}
Super Diamant-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AAAC43A3-E9E8-4E53-8ED5-0122F5E25249}\setup.exe" -l0x40c 
Super Grilles-->C:\Program Files\Micro Application\Super Grilles\Désinstaller Super Grilles.exe
Super Jeux de Lettres 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D9D91DC8-307E-4C79-91A9-E2D0B9993112}\SETUP.EXE" -l0x40c 
Super jeux de mots-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{64DF0D62-8F33-4AA8-91D8-D42C62B426A2}\Setup.exe" 
Super Mahjong-->MsiExec.exe /I{8644D791-86EE-4797-85B1-421171B63999}
Super Puzzle-->MsiExec.exe /I{F3115C5D-0AE6-463B-BA28-09371D7EB9A8}
Supercow Deluxe-->"C:\Program Files\Zylom Games\Supercow Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Tetris Worlds-->C:\PROGRA~1\TETRIS~1\UNWISE.EXE C:\PROGRA~1\TETRIS~1\INSTALL.LOG
Tetrix Games-->"C:\Program Files\Hobby Concept\Tetrix Games\unins000.exe"
The Gift-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\The Gift\Uninst.isu"
The Hidden Object Show Deluxe-->"C:\Program Files\Zylom Games\The Hidden Object Show Deluxe\GameInstlr.exe" --uninstall UnInstall.log
The Magician's Handbook Deluxe-->"C:\Program Files\Zylom Games\The Magician's Handbook Deluxe\GameInstlr.exe" --uninstall UnInstall.log
The Mystery of the Crystal Portal Deluxe-->"C:\Program Files\Zylom Games\The Mystery of the Crystal Portal Deluxe\GameInstlr.exe" --uninstall UnInstall.log
The Rise of Atlantis (remove only)-->C:\Program Files\The Rise of Atlantis\Uninstall.exe
The Scruffs Deluxe-->"C:\Program Files\Zylom Games\The Scruffs Deluxe\GameInstlr.exe" --uninstall UnInstall.log
The Sudoku Challenge-->C:\Program Files\Empire Interactive\The Sudoku Challenge\uninst.exe
The Treasures of Montezuma-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{22AAEE15-AF0A-4E38-A423-D0EED6368D51}\setup.exe" -l0x40c 
TINcan!-Escape-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{679588AD-37E0-4014-8B90-0AD99A54526B}\Setup.exe" -l0x40c 
Tomb Raider III-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Core Design\Tomb Raider III\Uninst.isu"
TriJinx Deluxe-->"C:\Program Files\Zylom Games\TriJinx Deluxe\GameInstlr.exe" --uninstall UnInstall.log
TriJinx-->C:\PROGRA~1\PLAYFI~1\TriJinx\UNWISE.EXE C:\PROGRA~1\PLAYFI~1\TriJinx\INSTALL.LOG
TuneUp Utilities 2007-->MsiExec.exe /I{C8BB4912-12D9-42AE-B571-E580D8CD1B5B}
Turtle Odyssey 2 Deluxe-->"C:\Program Files\Zylom Games\Turtle Odyssey 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
TV sur PC-->C:\Program Files\Neuf\TV_PC\uninstall.exe
Ulead PhotoImpact 8 Trial-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{3D960387-76B3-4758-BAF7-D156B14A032F} 
Update for Windows XP (KB953356)-->"C:\WINDOWS\$NtUninstallKB953356$\spuninst\spuninst.exe"
Virtual Villagers - The Secret City Deluxe-->"C:\Program Files\Zylom Games\Virtual Villagers - The Secret City Deluxe\GameInstlr.exe" --uninstall UnInstall.log
VSO Image Resizer 1.3.4d-->"C:\Program Files\VSO\Image Resizer\unins000.exe"
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Zapper-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8EACA373-D8B8-490E-80A1-1368F750B10C}\setup.exe" -l0x40c 
Zeal Deluxe-->"C:\Program Files\Zylom Games\Zeal Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Zeek the Geek Part One-->C:\Zeek\Zeek1\UNINSTAL.EXE C:\Zeek\Zeek1 UNINSTAL.LOG
Zodiac Tower Deluxe-->"C:\Program Files\Zylom Games\Zodiac Tower Deluxe\GameInstlr.exe" --uninstall UnInstall.log

=====HijackThis Backups=====

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O2 - BHO: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O3 - Toolbar: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)

======Hosts File======

127.0.0.1	007guard.com
127.0.0.1	www.007guard.com
127.0.0.1	008i.com
127.0.0.1	008k.com
127.0.0.1	www.008k.com
127.0.0.1	00hq.com
127.0.0.1	www.00hq.com
127.0.0.1	010402.com
127.0.0.1	032439.com
127.0.0.1	www.032439.com

======Security center information======

AV: AVG Anti-Virus Free (disabled)
AV: Avira AntiVir PersonalEdition Classic

System event log

Computer Name: JOUBIER
Event Code: 7036
Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : en cours d'exécution.

Record Number: 91697
Source Name: Service Control Manager
Time Written: 20090205201315.000000+060
Event Type: Informations
User: 

Computer Name: JOUBIER
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service COM de gravage de CD IMAPI.

Record Number: 91696
Source Name: Service Control Manager
Time Written: 20090205201315.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: JOUBIER
Event Code: 7036
Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : arrêté.

Record Number: 91695
Source Name: Service Control Manager
Time Written: 20090205200312.000000+060
Event Type: Informations
User: 

Computer Name: JOUBIER
Event Code: 7036
Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : en cours d'exécution.

Record Number: 91694
Source Name: Service Control Manager
Time Written: 20090205195313.000000+060
Event Type: Informations
User: 

Computer Name: JOUBIER
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service COM de gravage de CD IMAPI.

Record Number: 91693
Source Name: Service Control Manager
Time Written: 20090205195313.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Application event log

Computer Name: JOUBIER
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 5
Source Name: SecurityCenter
Time Written: 20080901074458.000000+120
Event Type: Informations
User: 

Computer Name: JOUBIER
Event Code: 4096
Message: Le service AntiVir a bien démarré!

Record Number: 4
Source Name: Avira AntiVir
Time Written: 20080831073604.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: JOUBIER
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 3
Source Name: SecurityCenter
Time Written: 20080831073603.000000+120
Event Type: Informations
User: 

Computer Name: JOUBIER
Event Code: 4096
Message: Le service AntiVir a bien démarré!

Record Number: 2
Source Name: Avira AntiVir
Time Written: 20080830210904.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: JOUBIER
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 1
Source Name: SecurityCenter
Time Written: 20080830210903.000000+120
Event Type: Informations
User: 

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;c:\Python22;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 47 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=2f02
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"SonicCentral"=c:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\
"CLASSPATH"=.;C:\Program Files\Java\jre1.5.0_06\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.5.0_06\lib\ext\QTJava.zip

-----------------EOF-----------------

gen-hackman · Answer

Télécharge ToolBar S&D ( de Eric_71/Team IDN ) sur ton bureau : 

TOOLBAR S&D

( Tuto : https://sites.google.com/site/toolbarsd/aideenimages ) 

!! Déconnecte toi et ferme toutes tes applications en cours le temps de la manipe !! 

* Double-clique sur ToolBar SD.exe pour lancer l'outil et laisse toi guider ... 
--> Tapes  ( option " recherche " ) puis tape sur [Entrée].  

Un rapport sera généré à la fin du processus : poste son contenu dans ta prochaine réponse 

( le rapport est en outre sauvegardé ici -> C:\TB.txt )

mangareva · Answer

re 

je te poste le rapport toolbar S&D


   -----------\  ToolBar S&D 1.2.8   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3400+ )
   BIOS : Phoenix - Award BIOS v6.00PG
   USER : Compaq_Propriétaire ( Administrator )
   BOOT : Normal boot
   Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
   C:\ (Local Disk) - NTFS - Total:226 Go (Free:165 Go)
   D:\ (Local Disk) - FAT32 - Total:5 Go (Free:2 Go)
   E:\ (CD or DVD)
   F:\ (USB)
   G:\ (USB)
   H:\ (USB)
   I:\ (USB)
   J:\ (USB)

   "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
   Option : [1] ( 09/03/2009|20:22 )

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\WINDOWS\iun6002.exe

   -----------\  Extensions

   (All Users) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="https://www.google.fr/?gws_rd=ssl"
   "Search Page"="https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fhome.microsoft.com%2fintl%2fbr%2faccess%2fallinone.asp%3f"
   "Search Bar"="http://www.yahoo.com/search/ie.html"
   "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
   "Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\COMPAQ~1\Mes documents\Mahjong.Suite.2006.v3.2\crack
   C:\DOCUME~1\COMPAQ~1\Mes documents\Mahjong.Suite.2006.v3.2\crack\MahjongSuite.exe
   C:\DOCUME~1\COMPAQ~1\Mes documents\PeggleD\Peggle Deluxe Crack
   C:\DOCUME~1\COMPAQ~1\Mes documents\PeggleD\Peggle Deluxe Crack\partner.xml
   C:\DOCUME~1\COMPAQ~1\Mes documents\PeggleD\Peggle Deluxe Crack\partner.xml.sig
   C:\DOCUME~1\COMPAQ~1\Mes documents\PeggleD\Peggle Deluxe Crack\Peggle.exe
   C:\DOCUME~1\COMPAQ~1\Mes documents\PeggleD\Peggle Deluxe Crack\properties
   C:\DOCUME~1\COMPAQ~1\Mes documents\PeggleD\Peggle Deluxe Crack\properties\partner.xml
   C:\DOCUME~1\COMPAQ~1\Mes documents\PeggleD\Peggle Deluxe Crack\properties\partner.xml.sig
   C:\DOCUME~1\COMPAQ~1\Mes documents\Utilitaires\PhotoImpact 8\photo_Imp\photo_Imp\Crack.exe



   1 - "C:\ToolBar SD\TB_1.txt" - 09/03/2009|20:24 - Option : [1]

   -----------\  Fin du rapport a 20:24:51,59

gen-hackman · Answer

C:\DOCUME~1\COMPAQ~1\Mes documents\Mahjong.Suite.2006.v3.2\crack
C:\DOCUME~1\COMPAQ~1\Mes documents\Mahjong.Suite.2006.v3.2\crack\MahjongSuite.exe
C:\DOCUME~1\COMPAQ~1\Mes documents\PeggleD\Peggle Deluxe Crack
C:\DOCUME~1\COMPAQ~1\Mes documents\PeggleD\Peggle Deluxe Crack\partner.xml
C:\DOCUME~1\COMPAQ~1\Mes documents\PeggleD\Peggle Deluxe Crack\partner.xml.sig
C:\DOCUME~1\COMPAQ~1\Mes documents\PeggleD\Peggle Deluxe Crack\Peggle.exe
C:\DOCUME~1\COMPAQ~1\Mes documents\PeggleD\Peggle Deluxe Crack\properties
C:\DOCUME~1\COMPAQ~1\Mes documents\PeggleD\Peggle Deluxe Crack\properties\partner.xml
C:\DOCUME~1\COMPAQ~1\Mes documents\PeggleD\Peggle Deluxe Crack\properties\partner.xml.sig
C:\DOCUME~1\COMPAQ~1\Mes documents\Utilitaires\PhotoImpact 8\photo_Imp\photo_Imp\Crack.exe

tous ces cracks sont a supprimer pour risques de plantage du PC

ensuite :


Relance Toolbar-S&D en double-cliquant sur le raccourci
. 
Ø Tape sur "2" puis valide en appuyant sur "Entrée".
 
! Ne ferme pas la fenêtre lors de la suppression !
 
Un rapport sera généré, poste son contenu ici. 

NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches. 
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..." 
Tape explorer puis valide.

mangareva · Answer

re

je te poste le rapport toolbar-S&D




   -----------\  ToolBar S&D 1.2.8   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3400+ )
   BIOS : Phoenix - Award BIOS v6.00PG
   USER : Compaq_Propriétaire ( Administrator )
   BOOT : Normal boot
   Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
   C:\ (Local Disk) - NTFS - Total:226 Go (Free:165 Go)
   D:\ (Local Disk) - FAT32 - Total:5 Go (Free:2 Go)
   E:\ (CD or DVD)
   F:\ (USB)
   G:\ (USB)
   H:\ (USB)
   I:\ (USB)
   J:\ (USB)

   "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
   Option : [2] ( 09/03/2009|21:13 )

   -----------\ SUPPRESSION

   Supprime! - C:\WINDOWS\iun6002.exe

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  Extensions

   (All Users) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="https://www.google.fr/?gws_rd=ssl"
   "Search Page"="https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fhome.microsoft.com%2fintl%2fbr%2faccess%2fallinone.asp%3f"
   "Search Bar"="http://www.yahoo.com/search/ie.html"
   "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
   "Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr/"


   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !


   1 - "C:\ToolBar SD\TB_1.txt" - 09/03/2009|20:24 - Option : [1]
   2 - "C:\ToolBar SD\TB_2.txt" - 09/03/2009|21:15 - Option : [2]

   -----------\  Fin du rapport a 21:15:23,26

gen-hackman · Answer

possible de l avoir entier le rapport de Toolbar S&D option 2 ?

mangareva · Answer

Je viens de relancer toolbar une deuxième fois et je t'envoie le rapport tel quel.




   -----------\  ToolBar S&D 1.2.8   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3400+ )
   BIOS : Phoenix - Award BIOS v6.00PG
   USER : Compaq_Propriétaire ( Administrator )
   BOOT : Normal boot
   Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
   C:\ (Local Disk) - NTFS - Total:226 Go (Free:165 Go)
   D:\ (Local Disk) - FAT32 - Total:5 Go (Free:2 Go)
   E:\ (CD or DVD)
   F:\ (USB)
   G:\ (USB)
   H:\ (USB)
   I:\ (USB)
   J:\ (USB)

   "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
   Option : [2] ( 09/03/2009|21:30 )

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  Extensions

   (All Users) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="https://www.google.fr/?gws_rd=ssl"
   "Search Page"="https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fhome.microsoft.com%2fintl%2fbr%2faccess%2fallinone.asp%3f"
   "Search Bar"="http://www.yahoo.com/search/ie.html"
   "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
   "Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr/"


   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !


   1 - "C:\ToolBar SD\TB_1.txt" - 09/03/2009|20:24 - Option : [1]
   2 - "C:\ToolBar SD\TB_2.txt" - 09/03/2009|21:15 - Option : [2]
   3 - "C:\ToolBar SD\TB_3.txt" - 09/03/2009|21:32 - Option : [2]

   -----------\  Fin du rapport a 21:32:14,31

gen-hackman · Answer

Imprime ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.



Télécharge MalwareByte's :
Malwarebytes  ou  :
Malwarebytes

* Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

(NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : COMCTL32.OCX

* Potasse le tuto pour te familiariser avec le prg :

Tuto

( cela dis, il est très simple d'utilisation ).

relance malwarebytes en suivant scrupuleusement ces consignes :

! Déconnecte toi et ferme toutes applications en cours !

* Lance Malwarebyte's .

Fais un examen dit "Complet" .

--> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
--> à la fin tu cliques sur "résultat" .
--> Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .

Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !


Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)

mangareva · Answer

Bonjour,

Je n'ai pas compris : COMCTL32.OCX   
J'ai lancé Malwarebyte's il ne m'a rien trouvé je te poste le rapport :


Malwarebytes' Anti-Malware 1.34
Version de la base de données: 1831
Windows 5.1.2600 Service Pack 3

10/03/2009 13:18:53
mbam-log-2009-03-10 (13-18-53).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 302434
Temps écoulé: 1 hour(s), 42 minute(s), 5 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

gen-hackman · Answer

bonjour.......????

relances rsit et poste le log.txt

mangareva · Answer

re

je te poste le log.txt


Logfile of random's system information tool 1.05 (written by random/random)
Run by Compaq_Propriétaire at 2009-03-10 15:59:11
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 170 GB (73%) free of 232 GB
Total RAM: 510 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:59:29, on 10/03/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Neuf\Widget Neuf\9widget.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\RSIT.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\Compaq_Propriétaire.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com/search/ie.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Widget Neuf] "C:\Program Files\Neuf\Widget Neuf\9widget.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {24757662-8772-4986-8E5A-A1C939CDF219} (CPlayFirstSweetopiaControl Object) - http://games.bigfishgames.com/fr_sweetopia/online/Sweetopia.1.0.0.22_fr.cab
O16 - DPF: {2EB1E425-74DC-4DC0-A9E1-03A4C852E1F2} (CPlayFirstTriJinxControl Object) - http://games.bigfishgames.com/fr_trijinx/online/TriJinx.1.0.0.55.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://gamenextfr.oberon-media.com/online/online2/luxor_amun_rising/mjolauncher.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game07.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

mangareva · Answer

re


Je viens de trouver ça sur mon bureau je te l'envoie à tout hasard


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:59:29, on 10/03/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Neuf\Widget Neuf\9widget.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\RSIT.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\Compaq_Propriétaire.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com/search/ie.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Widget Neuf] "C:\Program Files\Neuf\Widget Neuf\9widget.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {24757662-8772-4986-8E5A-A1C939CDF219} (CPlayFirstSweetopiaControl Object) - http://games.bigfishgames.com/fr_sweetopia/online/Sweetopia.1.0.0.22_fr.cab
O16 - DPF: {2EB1E425-74DC-4DC0-A9E1-03A4C852E1F2} (CPlayFirstTriJinxControl Object) - http://games.bigfishgames.com/fr_trijinx/online/TriJinx.1.0.0.55.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://gamenextfr.oberon-media.com/online/online2/luxor_amun_rising/mjolauncher.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game07.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

gen-hackman · Answer

Télécharge HostsXpert sur ton Bureau :
 
HostXpert

---> Décompresse-le (Clic droit >> Extraire ici) 

---> Double-clique sur HostsXpert pour le lancer 

---> clique sur le bouton "Restore MS Hosts File" puis ferme le programme 

PS : Avant de cliquer sur le bouton "Restore MS Hosts File", vérifie que le cadenas en haut à gauche est ouvert sinon tu vas avoir un message d'erreur. 

s'il est fermé , clique dessus  :)

ensuite :


Télécharges AD-Remover ( de Cyrildu17 / C_XX ) sur ton bureau :


/!\ Déconnectes toi et fermes toutes applications en cours

? Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:\Program files )
? Double clique sur l'icône Ad-removersituée sur ton bureau
? Au menu principal choisi l'option "Recherche"
? Postes le rapport qui apparait à la fin .

( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Note :

"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall)

mangareva · Answer

re



je te poste le rapport ad-remover :



------- LOGFILE OF AD-REMOVER 1.1.1.6 | ONLY XP/VISTA -------

Updated by C_XX on 09/03/2009 at 21:20

Start at: 16:27:25, Mar 10/03/2009 | Boot mode: Normal Boot
Option: SCAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Operating System: Microsoft® Windows XP™  Service Pack 3 (version 5.1.2600)
Computer Name: JOUBIER
Current User: Compaq_Propri‚taire - Administrator
Drive(s): 
- C:\  (File System: NTFS)
- D:\  (File System: FAT32)
System Drive: C:\
Windows Directory: C:\WINDOWS\
System Directory: C:\WINDOWS\System32\

--- Running Processes: 33

+-----------------| Boonty/Boonty Games Elements Found:

.
.

+-----------------| Eorezo Elements Found:

.

+-----------------| Infected Poker Softwares Elements Found:

.

+-----------------| FunWebProducts/MyWay/MyWebSearch Elements Found:

.
.

+-----------------| It's TV Elements Found:

.

+-----------------| Sweetim Elements Found:

HKCU\Software\SWEETIE
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A0AADCD-3A72-4B5F-900F-E3BB5A838E2A}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938}
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
.

+-----------------| Other Adwares Found:

.
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}
HKLM\Software\Trymedia Systems
.

+-----------------| Added Scan:

---- Internet Explorer Version 7.0.5730.13 ----

+-[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Default_Search_URL: hxxp://www.google.com/ie
Search bar: hxxp://www.yahoo.com/search/ie.html
Search Page: hxxp://home.microsoft.com/access/allinone.asp
Start page: hxxp://www.google.fr/

+-[HKEY_USERS\S-1-5-21-2024976807-2065362112-3418631200-1008\..\Internet Explorer\Main]

Default_Search_URL: hxxp://www.google.com/ie
Search bar: hxxp://www.yahoo.com/search/ie.html
Search Page: hxxp://home.microsoft.com/access/allinone.asp
Start page: hxxp://www.google.fr/

+-[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start page: hxxp://www.msn.com/

+-[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: hxxp://ieframe.dll/tabswelcome.htm

+---------------------------------------------------------------------------+

2781 Byte(s) - C:\Ad-Report-Scan-10.03.2009.log

0 File(s) - C:\Program Files\Ad-remover\TOOLS\BACKUP
0 File(s) - C:\Program Files\Ad-remover\TOOLS\QUARANTINE

Before run:       177,956,859,904 Byte(s) free
After run:       177,956,761,600 Byte(s) free

End at: 16:29:00 | 10/03/2009
.
+-----------------| E.O.F - 59 Lines
.

gen-hackman · Answer

/!\ Déconnecte-toi et ferme toutes applications en cours /!\ 


 Double-clique sur AD-Remover pour le lancer : au menu principal, choisis l'option B. 

Choisis A

Puis choisis S, le programme va travailler. 

Poste le rapport qui apparaît à la fin. 

(Le rapport est sauvegardé aussi sous C:\Ad-report.log) 

/!\ Si le Bureau ne réapparaît pas, presse Ctrl + Alt + Suppr, Onglet "Fichier", "Nouvelle tâche", tape explorer.exe et valide) /!\

Note :

"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...)

mangareva · Answer

re


je te poste le rapport ad-remover :



------- LOGFILE OF AD-REMOVER 1.1.1.6 | ONLY XP/VISTA -------

Updated by C_XX on 09/03/2009 at 21:20

**** LIMITED TO ****

Boonty/BoontyGames
Eorezo
Infected Poker Softwares
FunWebProduct/MyWay/MyWebSearch
It's TV
Sweetim
Other Adwares

********************

Start at: 16:57:31, Mar 10/03/2009 | Boot mode: Normal Boot
Option: CLEAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Operating System: Microsoft® Windows XP™  Service Pack 3 (version 5.1.2600)
Computer Name: JOUBIER
Current User: Compaq_Propri‚taire - Administrator
Drive(s): 
- C:\  (File System: NTFS)
- D:\  (File System: FAT32)
System Drive: C:\
Windows Directory: C:\WINDOWS\
System Directory: C:\WINDOWS\System32\

--- Running Processes: 34

(!) ---- IE start pages/Tabs reset

+-----------------| Boonty/Boonty Games Elements Deleted :

.
.

+-----------------| Eorezo Elements Deleted :

.

+-----------------| Infected Poker Softwares Elements Deleted :

.

+-----------------| FunWebProducts/MyWay/MyWebSearch Elements Deleted :

.
.

+-----------------| It's TV Elements Deleted :

.

+-----------------| Sweetim Elements Deleted :

HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938}
HKCU\Software\SWEETIE
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A0AADCD-3A72-4B5F-900F-E3BB5A838E2A}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
.

+-----------------| Other Adwares Deleted:

.
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}
HKLM\Software\Trymedia Systems
.

(!) ---- Temp files deleted.
(!) ---- Recycle bin emptied in all drives.


+-----------------| Added Scan :

---- Internet Explorer Version 7.0.5730.13 ----

+-[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://home.microsoft.com/access/allinone.asp
Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

+-[HKEY_USERS\S-1-5-21-2024976807-2065362112-3418631200-1008\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://home.microsoft.com/access/allinone.asp
Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

+-[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start page: hxxp://fr.msn.com/

+-[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: hxxp://ieframe.dll/tabswelcome.htm

+---------------------------------------------------------------------------+

3518 Byte(s) - C:\Ad-Report-Clean-10.03.2009.log
3118 Byte(s) - C:\Ad-Report-Scan-10.03.2009.log

0 File(s) - C:\Program Files\Ad-remover\TOOLS\BACKUP
0 File(s) - C:\Program Files\Ad-remover\TOOLS\QUARANTINE

Before run:       177,956,294,656 Byte(s) free
After run:       178,013,343,744 Byte(s) free

End at: 17:02:06 | 10/03/2009
.
+-----------------| E.O.F - 74 Lines
.

gen-hackman · Answer

relances une analyse avec rsit et poste le rapport stp

mangareva · Answer

re

je te poste le rapport rsit :



Logfile of random's system information tool 1.05 (written by random/random)
Run by Compaq_Propriétaire at 2009-03-10 17:24:31
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 170 GB (73%) free of 232 GB
Total RAM: 510 MB (40% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:24:45, on 10/03/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Neuf\Widget Neuf\9widget.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\RSIT.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\Compaq_Propriétaire.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Widget Neuf] "C:\Program Files\Neuf\Widget Neuf\9widget.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {24757662-8772-4986-8E5A-A1C939CDF219} (CPlayFirstSweetopiaControl Object) - http://games.bigfishgames.com/fr_sweetopia/online/Sweetopia.1.0.0.22_fr.cab
O16 - DPF: {2EB1E425-74DC-4DC0-A9E1-03A4C852E1F2} (CPlayFirstTriJinxControl Object) - http://games.bigfishgames.com/fr_trijinx/online/TriJinx.1.0.0.55.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://gamenextfr.oberon-media.com/online/online2/luxor_amun_rising/mjolauncher.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game07.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

gen-hackman · Answer

réouvre hijackthis 
fais scan only 
coches ces lignes sur leur gauche: 

R3 - Default URLSearchHook is missing
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe


tu les coches et tu clic sur "fix checked"

et tu fermes le programme. 

ensuite :

desinstalle AD-Aware

ensuite :

relaznce rsit et envoie le rapport

mangareva · Answer

re

je t'envoie le rapport rsit


Logfile of random's system information tool 1.05 (written by random/random)
Run by Compaq_Propriétaire at 2009-03-10 18:24:28
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 170 GB (73%) free of 232 GB
Total RAM: 510 MB (24% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:24:43, on 10/03/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Neuf\Widget Neuf\9widget.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Compaq_Propriétaire\Bureau\RSIT.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\Compaq_Propriétaire.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Widget Neuf] "C:\Program Files\Neuf\Widget Neuf\9widget.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {24757662-8772-4986-8E5A-A1C939CDF219} (CPlayFirstSweetopiaControl Object) - http://games.bigfishgames.com/fr_sweetopia/online/Sweetopia.1.0.0.22_fr.cab
O16 - DPF: {2EB1E425-74DC-4DC0-A9E1-03A4C852E1F2} (CPlayFirstTriJinxControl Object) - http://games.bigfishgames.com/fr_trijinx/online/TriJinx.1.0.0.55.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://gamenextfr.oberon-media.com/online/online2/luxor_amun_rising/mjolauncher.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game07.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

gen-hackman · Answer

connais tu ceci :

C:\Program Files\TimeSink       ???????

mangareva · Answer

je ne vois pas ce que tu veux dire je ne connais pas TimeSink et je ne le vois pas dans C\Program Files 


???

gen-hackman · Answer

en v'la une affaire bizzare !!!!

Clique sur le menu Demarrer /Panneau de configuration/Options des dossiers/ puis dans l'onglet Affichage
  - Coche    Afficher les fichiers et dossiers cachés
  - Décoche Masquer les extensions des fichiers dont le type est connu
  - Décoche Masquer les fichiers protégés du système d'exploitation (recommandé)
clique sur Appliquer, puis OK.

N'oublie pas de recacher à nouveau les fichiers cachés et protégés du système d'exploitation en fin de désinfection, c'est important

Fais analyser le(s) fichier(s) suivants sur Virustotal :

Virus Total

    * Clique sur Parcourir en haut, choisis Poste de travail et cherche ce fichier :

 C:\Program Files\TimeSink\AdGateway\TSAdBot.exe  

    * Clique maintenant sur Envoyer le fichier. et laisse travailler tant que "Situation actuelle : en cours d'analyse" est affiché.
    * Il est possible que le fichier soit mis en file d'attente en raison d'un grand nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser la page.
    * Lorsque l'analyse est terminée ("Situation actuelle: terminé"), clique sur Formaté
    * Une nouvelle fenêtre de ton navigateur va apparaître
    * Clique alors sur les deux fleches
    * Fais un clic droit sur la page, et choisis Sélectionner tout, puis copier
    * Enfin colle le résultat dans ta prochaine réponse.

mangareva · Answer

hello

comme tu dis c'est une drôle d'affaire
J'ai fait comme tu l'as dit je suis allée dans panneau de configuration et j'ai fait les manips que tu as demandées
j'ai suivi tes démarches dans virus Total j'ai bien trouvé C\Program Files mais pas Time Sink ????
Et du coup, j'ai tout remis comme avant dans panneau de configuration.

gen-hackman · Answer

---> Désactive ton antivirus le temps de la manipulation car OTMoveIt3 est détecté comme une infection à tort. 

---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau : 

OtMoveIt 3 

---> Double-clique sur OTMoveIt3.exe afin de le lancer. 

---> Copie (Ctrl+C) le texte suivant ci-dessous : 





:processes 
explorer.exe

:files 
C:\Program Files\TimeSink

:reg 
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TimeSink Ad Client]



:commands 
[purity] 
[emptytemp] 
[start explorer] 
[reboot] 





---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved. 

---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3. 

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer. 
Accepte en cliquant sur YES. 

---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\ 
Le nom du rapport correspond au moment de sa création : date_heure.log

ensuite :


Télécharge SDFix sur ton bureau : 
ici :SDFix 
ou ici SDFix 
ou ici SDFix 

--> Double-clique sur SDFix.exe et choisis "Install" . 

Tuto 

Puis une fois l'installe faite , 

Impératif : Démarrer en mode sans echec . 

/!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\ 

Comment aller en Mode sans échec : 
1) Redémarre ton ordi . 
2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" . 
3) Tu tapotes jusqu' à l'apparition de l'écran avec les options de démarrage . 
4) Choisis la première option : Sans Échec , et valide en tapant sur [Entrée] . 
5) Choisis ton compte habituel ( et pas Administrateur ). 
attention : pas de connexion possible en mode sans échec , donc copie ou imprime bien la manipe pour éviter les erreurs ... 


Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double-clique sur RunThis.bat pour lancer l'outil . 
-->Tapes Y pour lancer le script ... 
Le Fix supprime les services du virus et nettoie le registre, de ce fait un redémarrage est nécessaire , donc : 
presses une touche pour redémarrer quand il te le sera demandé . 

Le PC va mettre du temps avant de démarrer ( c'est normal ), après le chargement du Bureau presses une touche lorsque "Finished" s'affiche . 

Le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier 
C:\SDFix sous le nom "Report.txt". 

Poste ce dernier dans ta prochaine réponse

gen-hackman · Answer

Merci nadir mais je pense que mon post 29 est assez explicite  :)

mangareva · Answer

hello

je te poste le rapport OTMoveIt3 :


========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
File/Folder C:\Program Files\TimeSink not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TimeSink Ad Client\ deleted successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF93B7.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF93DC.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFDFC7.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFDFDD.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Java cache emptied.
Temp folders emptied.
Explorer started successfully
 
OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 03102009_220621

Files moved on Reboot...
File C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF93B7.tmp not found!
File C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF93DC.tmp not found!
File C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFDFC7.tmp not found!
File C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFDFDD.tmp not found!
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be moved on reboot.

mangareva · Answer

hello

je te poste le rapport SDFix :



[b]SDFix: Version 1.240 [/b]
Run by Compaq_Propri‚taire on 10/03/2009 at 22:52

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


[b]Checking Files [/b]: 

No Trojan Files Found






Removing Temp Files

[b]ADS Check [/b]:
 


                                 [b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-10 23:04:29
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


[b]Remaining Services [/b]:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\AOL 9.0\waol.exe"="C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL France"
"C:\Program Files\ArcMedia\Stratajong (French)\stratajong.exe"="C:\Program Files\ArcMedia\Stratajong (French)\stratajong.exe:*:Disabled:Stratajong"
"C:\Documents and Settings\Compaq_Propri‚taire\Local Settings\Temp\WZS6.tmp\scol_install\scolsetup.exe"="C:\Documents and Settings\Compaq_Propri‚taire\Local Settings\Temp\WZS6.tmp\scol_install\scolsetup.exe:*:Enabled:scolsetup"
"C:\Program Files\SCOL\UsmWin.exe"="C:\Program Files\SCOL\UsmWin.exe:*:Enabled:UsmWin"
"C:\Documents and Settings\Compaq_Propri‚taire\Local Settings\Temporary Internet Files\Content.IE5\87CH6MH8\incredimail_install[1].exe"="C:\Documents and Settings\Compaq_Propri‚taire\Local Settings\Temporary Internet Files\Content.IE5\87CH6MH8\incredimail_install[1].exe:*:Enabled:IncrediMail Installer"
"C:\Program Files\IncrediMail\bin\IncMail.exe"="C:\Program Files\IncrediMail\bin\IncMail.exe:*:Enabled:IncrediMail"
"C:\Program Files\IncrediMail\bin\ImApp.exe"="C:\Program Files\IncrediMail\bin\ImApp.exe:*:Enabled:IncrediMail"
"C:\Program Files\IncrediMail\bin\ImpCnt.exe"="C:\Program Files\IncrediMail\bin\ImpCnt.exe:*:Enabled:IncrediMail"
"C:\Documents and Settings\Compaq_Propri‚taire\Local Settings\Temporary Internet Files\Content.IE5\6J4JEXY5\magentic_install[1].exe"="C:\Documents and Settings\Compaq_Propri‚taire\Local Settings\Temporary Internet Files\Content.IE5\6J4JEXY5\magentic_install[1].exe:*:Enabled:IncrediMail Installer"
"C:\Program Files\Magentic\bin\MgImp.exe"="C:\Program Files\Magentic\bin\MgImp.exe:*:Enabled:Magentic"
"C:\Program Files\Magentic\bin\Magentic.exe"="C:\Program Files\Magentic\bin\Magentic.exe:*:Enabled:Magentic"
"C:\Program Files\Magentic\bin\MgApp.exe"="C:\Program Files\Magentic\bin\MgApp.exe:*:Enabled:Magentic"
"C:\Documents and Settings\Compaq_Propri‚taire\Local Settings\Temporary Internet Files\Content.IE5\ZRL19LLY\incredimail_install[1].exe"="C:\Documents and Settings\Compaq_Propri‚taire\Local Settings\Temporary Internet Files\Content.IE5\ZRL19LLY\incredimail_install[1].exe:*:Enabled:IncrediMail Installer"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Micro Application\InCrazyBall\InCrazyBall.exe"="C:\Program Files\Micro Application\InCrazyBall\InCrazyBall.exe:*:Enabled:Lexis Common Player"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Documents and Settings\Compaq_Propri‚taire\Local Settings\Temp\ImInstaller\FreeEcardMovies_Installer.exe"="C:\Documents and Settings\Compaq_Propri‚taire\Local Settings\Temp\ImInstaller\FreeEcardMovies_Installer.exe:*:Enabled:IncrediMail Installer"
"C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%ProgramFiles%\iTunes\iTunes.exe"="%ProgramFiles%\iTunes\iTunes.exe:*:enabled:iTunes"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[b]Remaining Files [/b]:



[b]Files with Hidden Attributes [/b]:

Wed 15 Feb 2006           218 A.SHR --- "C:\BOOT.BAK"
Thu 22 Nov 2007         4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Thu 22 Nov 2001        20,480 A..H. --- "C:\Program Files\SubTerra\Data\DelPlr.exe"
Sun  6 Jan 2008             0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp"
Thu 22 Nov 2007         4,348 ...H. --- "C:\Documents and Settings\Compaq_Propri‚taire\Mes documents\Ma musique\Sauvegarde de la licence\drmv1key.bak"
Thu 22 Nov 2007            20 A..H. --- "C:\Documents and Settings\Compaq_Propri‚taire\Mes documents\Ma musique\Sauvegarde de la licence\drmv1lic.bak"
Thu 22 Nov 2007           400 A.SH. --- "C:\Documents and Settings\Compaq_Propri‚taire\Mes documents\Ma musique\Sauvegarde de la licence\drmv2key.bak"

[b]Finished![/b]

gen-hackman · Answer

renvoie une nouvelle analyse de rsit s'il te plait

mangareva · Answer

hello

je te poste le rapport rsit :


Logfile of random's system information tool 1.05 (written by random/random)
Run by Compaq_Propriétaire at 2009-03-10 23:35:18
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 170 GB (73%) free of 232 GB
Total RAM: 510 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:35:43, on 10/03/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Compaq_Propriétaire\Bureau\RSIT.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\Compaq_Propriétaire.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Widget Neuf] "C:\Program Files\Neuf\Widget Neuf\9widget.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {24757662-8772-4986-8E5A-A1C939CDF219} (CPlayFirstSweetopiaControl Object) - http://games.bigfishgames.com/fr_sweetopia/online/Sweetopia.1.0.0.22_fr.cab
O16 - DPF: {2EB1E425-74DC-4DC0-A9E1-03A4C852E1F2} (CPlayFirstTriJinxControl Object) - http://games.bigfishgames.com/fr_trijinx/online/TriJinx.1.0.0.55.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://gamenextfr.oberon-media.com/online/online2/luxor_amun_rising/mjolauncher.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game07.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

gen-hackman · Answer

---> Double-clique sur OTMoveIt3.exe afin de le lancer. 

---> Copie (Ctrl+C) le texte suivant ci-dessous : 





:processes 
explorer.exe

:reg 
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ffcce860-9e42-11da-8f62-806d6172696f}] 

:commands 
[purity] 
[emptytemp] 
[start explorer] 
[reboot] 





---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved. 

---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3. 

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer. 
Accepte en cliquant sur YES. 

---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\ 
Le nom du rapport correspond au moment de sa création : date_heure.log

mangareva · Answer

hello


je te poste le rapport OTMoveit :



========== PROCESSES ==========
Process explorer.exe killed successfully.
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D\ deleted successfully.
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ffcce860-9e42-11da-8f62-806d6172696f}\ deleted successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF31AA.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF32DD.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE56F.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE58A.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Java cache emptied.
Temp folders emptied.
Explorer started successfully
 
OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 03102009_235931

Files moved on Reboot...
File C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF31AA.tmp not found!
File C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF32DD.tmp not found!
File C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE56F.tmp not found!
File C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DFE58A.tmp not found!
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be moved on reboot.

gen-hackman · Answer

ok redemarre et avant tout autre chose tu refais un rsit puis tu reviens sur internet uniquement apres stp

mangareva · Answer

Bonjour, tu vas bien ?

Je te poste log.txt :



Logfile of random's system information tool 1.05 (written by random/random)
Run by Compaq_Propriétaire at 2009-03-11 08:44:11
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 170 GB (73%) free of 232 GB
Total RAM: 510 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:44:46, on 11/03/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Neuf\Widget Neuf\9widget.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\RSIT.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\Compaq_Propriétaire.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Widget Neuf] "C:\Program Files\Neuf\Widget Neuf\9widget.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {24757662-8772-4986-8E5A-A1C939CDF219} (CPlayFirstSweetopiaControl Object) - http://games.bigfishgames.com/fr_sweetopia/online/Sweetopia.1.0.0.22_fr.cab
O16 - DPF: {2EB1E425-74DC-4DC0-A9E1-03A4C852E1F2} (CPlayFirstTriJinxControl Object) - http://games.bigfishgames.com/fr_trijinx/online/TriJinx.1.0.0.55.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://gamenextfr.oberon-media.com/online/online2/luxor_amun_rising/mjolauncher.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game07.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

mangareva · Answer

Hello 2

Je te poste hijackthis.log :


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:44:46, on 11/03/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Neuf\Widget Neuf\9widget.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\RSIT.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\Compaq_Propriétaire.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Widget Neuf] "C:\Program Files\Neuf\Widget Neuf\9widget.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {24757662-8772-4986-8E5A-A1C939CDF219} (CPlayFirstSweetopiaControl Object) - http://games.bigfishgames.com/fr_sweetopia/online/Sweetopia.1.0.0.22_fr.cab
O16 - DPF: {2EB1E425-74DC-4DC0-A9E1-03A4C852E1F2} (CPlayFirstTriJinxControl Object) - http://games.bigfishgames.com/fr_trijinx/online/TriJinx.1.0.0.55.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://gamenextfr.oberon-media.com/online/online2/luxor_amun_rising/mjolauncher.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game07.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

gen-hackman · Answer

bonjour desole des deboires avec internet

tu n as plus l air d'etre infecté tu as toujours des soucis hormis la lenteur ?

mangareva · Answer

Hello,
Je suis ravie qu'il semble ne plus y avoir de virus sur mon ordi.
Aucune comparaison possible sur sa lenteur d'avant ! Il a mis un turbo.
Que faut-il faire de tous les icones qui se trouvent sur mon bureau et que tu m'as demandé de charger ?
Par ailleurs ad-aware étant supprimé faut il que je mettre autre chose pour le remplacer ? 
Actuellement j'ai : Avira - Malwarebytes - Terminator - CCleaner - Maintenance en un clic -
J'avoue que je patauge dans tous ces antivirus ne sachant pas quel est leur rôle.

Nous te remercions beaucoulp (mon ordi et moi) pour l'aide précieuse que tu nous as apportée.

gen-hackman · Answer

bonjour : Avira - Malwarebytes - Terminator - CCleaner ceci est tres bien pour une navigation normale sans risques Que faut-il faire de tous les icones qui se trouvent sur mon bureau et que tu m'as demandé de charger ? on va s'en occuper ici : Télécharge ATF Cleaner par Atribune: ATF Cleaner Double-clique ATF-Cleaner.exe afin de lancer le programme. Sous l'onglet Main, choisis : Select All Clique sur le bouton Empty Selected Si tu utilises le navigateur Firefox : Clique Firefox au haut et choisis : Select All Clique le bouton Empty Selected NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite. Si tu utilises le navigateur Opera : Clique Opera au haut et choisis : Select All Clique le bouton Empty Selected NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite. Clique Exit, du menu prinicipal, afin de fermer le programme. Pour obtenir du Support technique, double-clique l'adresse électronique située au bas de chacun des menus. __________________________________________________ ToolCleaner2 ---> Télécharge ToolsCleaner2 sur ton Bureau. * Double-clique sur ToolsCleaner2.exe pour le lancer. * Clique sur Recherche et laisse le scan agir. * Clique sur Suppression pour finaliser. * Tu peux, si tu le souhaites, te servir des Options Facultatives. * Clique sur Quitter pour obtenir le rapport. * Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\). _________________________________________________ supprime toolscleaner2 manuellement _________________________________________________ ---> Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) : CCleaner * Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc.... * Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage. * Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs tant de fois qu il en trouve a l analyse(Sauvegarde la base de registre). * Veille a ce que dans les options le reglage soit au demarrage de windows et réglé sur "effacement securisé" 35 passes (guttman) __________________________________________________ Attention : ne pas toucher au PC pendant qu'il travaille ! B-Nettoyage et Défragmentation de tes Disques *Nettoyage : Clic droit sur "poste de travail" ==>"ouvrir" ==>clic droit sur le disque C ==>Propriétés ==>onglet "Général" Cliques sur le bouton "nettoyage de disque", OK tu le fais pour chacun de tes disques ________________________________________________ *Vérifications des erreurs : Clic droit sur "poste de travail" ==>"ouvrir" ==>clic droit sur le disque C ==>Propriétés ==>onglet "Outil" "Vérifier maintenant", une boîte s'ouvre, cocher les cases : -réparer automatiquement les erreurs... -rechercher et tenter une récupération... --->Démarrer, ok Note : s'il te dis de redémarrer ton Pc pour le faire , tu redémarres et tu laisses faire, cela prend un peu de temps c'est normal tu le fais pour chacun de tes disques ________________________________________________ ensuite toujours dans le même onglet tu choisis : *Défragmentation : "défragmenter maintenant", OK une boîte s'ouvre, tu sélectionnes le disque à défragmenter, et tu cliques sur "analyser", puis après l'analyse, "défragmenter" . OK tu le fais pour chacun de tes disques _______________________________________________ Note : si tu as un utilitaire pour défragmenter , utilises le à la place pour ce faire ceci est proposé : Defraggler _________________________________________________ > Peux-tu vérifier ta console JAVA ici ? : Console Java , et installer la nouvelle version si besoin est (dans ce cas désinstalle avant l'ancienne version). Pour info. ou en cas de problème : Tuto voici pour desinstaller : JavaRa Décompresse le fichier sur le Bureau (Clic droit > Extraire tout). * Double-clique sur le répertoire JavaRa. * Puis double-clique sur le fichier JavaRa.exe (le exe peut ne pas s'afficher). * Choisis Français puis clique sur Select. * Clique sur Recherche de mises à jour. * Sélectionne Mettre à jour via jucheck.exe puis clique sur Rechercher. * Autorise le processus à se connecter s'il le demande, clique sur Installer et suis les instructions d'installation qui prennent quelques minutes. * L'installation est terminée, reviens à l'écran de JavaRa et clique sur Effacer les anciennes versions. * Clique sur Oui pour confirmer. Laisse travailler et clique ensuite sur OK, puis une deuxième fois sur OK. * Un rapport va s'ouvrir. Poste-le dans ta prochaine réponse. * Ferme l'application. Note : le rapport se trouve aussi dans C:\ sous le nom JavaRa.log. _________________________________________________ > Mets à jour Acrobat si ce n'est pas le cas (désinstalle avant la version antérieure) : Adobe Reader __________________________________________________ > Tu peux aussi vider ta corbeille,quoi que Ccleaner le fasse tout seul _____________________________________________________ > Si nous avons utilisé MalwaresByte's Anti-Malware : vide sa quarantaine. - Lance le programme puis clique sur . - Sélectionne tous les éléments puis clique sur . - Quitte la programme. ______________________________________________________ >si tu as installé Antivir : Configuration de Antivir (Merci a Nico): clic droit sur son icone dans la barre des taches et séléctionner Configurer Antivir. cocher la case : Mode Expert. => Cliquer sur Scanner dans le volet de gauche : > Dans "Fichiers" séléctionner Tous les fichiers. > Dans procédure de recherche, cocher Autoriser l'arrêt, et dans "priorité scanner" séléctionner Elevé. > Dans "Autres réglages" cocher toutes les cases. NE SURTOUT PAS OUBLIER LA RECHERCHE DES ROOTKIT QUI EST TRES IMPORTANTE ! => Cliquer sur "Recherche" dans le volet de gauche et appliquer les mêmes paramètres que précédemment. => Dérouler "Recherche" en cliquant sur le +. Cliquer sur "Heuristique" : > Cocher "Heuristique de MacroVirus" et "Heuristique fichier Win32" avec degré d'indentification ELEVE ! => Dans le volet de gauche, dérouler "Guard" puis dérouler "Recherche" : > Cocher "Heuristique de MacroVirus" et "Heuristique fichier Win32" avec degré d'identification ELEVE ! ________________________________________________________ > Idem pour ton antivirus : vide sa quarantaine si ce n'est pas déjà fait ______________________________________________________ > Désactive et réactive la restauration de système, pour cela : suis les instructions de ce lien : Lien XP Lien Vista ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Quelques conseils et recommandations pour l'avenir : > Passe un coup de MalwareByte's Anti-Malware de temps en temps (1 fois par semaine , suivant l'utilisation que tu fais de ton PC. - Utilise aussi tes autres logiciels de protection (scannes antivirus, antispywares...). N'oublie pas de faire les mises à jour avant de les utiliser. - Pense aussi à faire une défragmentation de tes disques durs de temps en temps (garde suffisamment d'espace sur C:\ (1/3 de libre pour être à l'aise)) _____________ > Pour bien protéger ton PC : [1 seul Antivirus] + [1 seul Pare feu (/!\ les routeurs et box en possèdent un)] + [Un bon Antispyware avec immunisation] + [Mises à Jour récentes Windows et Logiciels de Protection] + [Utilisation de Firefox -ou autres- (Internet Explorer présente des failles de sécurité qui mettent longtemps avant d'être corrigées mais il faut absolument le conserver pour les mises à jour Windows et Windows live Messenger)] PS : En fait la meilleure des protections c'est toi même : ce que tu fais avec ton PC : où tu surfes, télécharges...ect.... Les virus utilisent les failles de ton PC pour infecter un système. Info : http://assiste.com.free.fr/p/abc/a/zombies_et_botnets.html dans le souhait de vouloir desinstaller un antivirus au profit d'un autre , voici quelques liens : Desinstaller Antivir Desinstaller Avast Desinstaller BitDefender Desinstaller Norton Desinstaller Kaspersky Desinstaller AVG _____________ > Quelques liens utiles : - https://sebsauvage.net/safehex.html - SpywareBlaster (= petit logiciel qui bloque l'installation d'activeX nuisibles au PC.(Fonctionne en arrière plan)) ____________ Si tu as Vista n'oublie pas de réactiver le controle des comptes des utilisateurs(UAC) ___________ Si tu as Spybot S&D et que nous avons desactive le "Tea-timer" tu peux le reactiver ____________ Voila, Bonne lecture, à bientot Gen-hackman

mangareva · Answer

Bonsoir,

Je te poste le rapport TCleaner.txt comme tu me l'as demandé :

[ Rapport ToolsCleaner version 2.2.3 (par A.Rothstein & dj QUIOU) ]

-->- Recherche: 

C:\TB.txt: trouvé !
C:\SDFIX: trouvé !
C:\_OtMoveIt: trouvé !
C:\Toolbar SD: trouvé !
C:\Documents and Settings\Compaq_Propriétaire\Bureau\SdFix.exe: trouvé !
C:\Documents and Settings\Compaq_Propriétaire\Bureau\HijackThis.exe: trouvé !
C:\Documents and Settings\Compaq_Propriétaire\Bureau\ToolBarSD.exe: trouvé !

---------------------------------
-->- Suppression: 

C:\Documents and Settings\Compaq_Propriétaire\Bureau\SdFix.exe: supprimé !
C:\Documents and Settings\Compaq_Propriétaire\Bureau\HijackThis.exe: supprimé !
C:\Documents and Settings\Compaq_Propriétaire\Bureau\ToolBarSD.exe: supprimé !
C:\TB.txt: supprimé !
C:\SDFIX: supprimé !
C:\_OtMoveIt: supprimé !
C:\Toolbar SD: supprimé !

gen-hackman · Answer

c'est bon :)

mangareva · Answer

Bonjour, tu vas bien ?

Je vais essayer de répondre à ta lettre du 15/3 point par point :

ATF Cleaner :

C'est fait mais j'ai toujours les icones sur mon bureau, à savoir : OTMove It3 exe - Ad remover - AD-R exe -
RSIT.exe - Mozilla Firefox - ATF Cleaner - Compag Prop HijackThis que tu m'as fait ouvrir.
Que faut-il faire des dossiers de rapports qui se trouvent dans le disque C ?

FYToolCleaner2 :

C'est fait et je l'ai supprimé ensuite manuellement.

CCleaner  :

Nettoyage - Vérification des erreurs - Défragmentation c'est fait et effectivement la vérification des erreurs était très longue.

Console Java :

Je n'avais pas la nouvelle version mais je n'ai jamais réussi à décompresser le fichier de JavaRa sur mon bureau et par conséquent je n'ai pas pû t'envoyer le rapport !!!

En partant de Console Java j'ai mis la dernière version c'est à dire 6.12 mais sans supprimer la précédente.

Adobe Reader :

J'avais la dernière version : 9.1

MalwaresByte's :

La quarantaine était vide.

Antivir :

J'ai fait toutes les manipulations sans oublier les rootkit et vidé la quarantaine.

Désactiver et réactiver la restauration du système :

C'est fait.

SpywareBlaster :

C'est installé.

Suivant tes recommandations : je faisais auparavant le nettoyage ordi chaque semaine et la défragmentation tous les 15 jours donc ça correspond avec ce que tu conseilles.






Par ailleurs, petit problème : je ne peux plus renommer mes photos, j'ai un message qui me dit :

Si vous modifiez l'extension d'un fichier, le fichier risque d'être inutilisable.



J'espère avoir bien suivi tes instructions et j'attends de te lire pour les icones, Java et renommer mes photos.

Un grand merci encore pour ton aide.

gen-hackman · Answer

Bonjour, tu vas bien ? 

Que faut-il faire des dossiers de rapports qui se trouvent dans le disque C ? 

s'il en reste les supprimer

OTMove It3 exe -- AD-R exe - = supprimer

 Ad remover = Desinstaller 

RSIT.exe - Mozilla Firefox - ATF Cleaner - Compag Prop HijackThis que tu m'as fait ouvrir.

gen-hackman · Answer

Tout virer sauf firefox

je n'ai jamais réussi à décompresser le fichier de JavaRa sur mon bureau = clic droit extraire ici

Si vous modifiez l'extension d'un fichier, le fichier risque d'être inutilisable. 

ton nom de photo a une extension = .jpg , .bmp , etc....

tu dois remettre l'extension a la fin du nom

ex : DSC00000254.jpg doit devenir = A la plage.jpg par exemple(ou le format de la photo)

mangareva · Answer

re hello,

J'ai désinstallé ou supprimé les icones qui étaient sur mon bureau et rapports sur disque C, ouf je vois plus clair !

En ce qui concerne JavaRa je me suis mal exprimée : en cliquant sur le lien JavaRa que tu m'as donné, je n'ai pas le dossier compressé pour pouvoir le mettre sur le bureau ...

Pour renommer les photos j'ai essayé comme tu dis de faire et ça marche mais j'ai énormément de photos n'y a-t-il pas moyen de les faire toutes et non pas individuellement ??

A te lire, bonne soirée.

gen-hackman · Answer

hello

en cliquant sur le lien JavaRa que tu m'as donné, je n'ai pas le dossier compressé

il faut d abord l enregistrer sur le bureau et ensuite clic droit et extraire

n'y a-t-il pas moyen de les faire toutes et non pas individuellement ?? 

je crois que le seul moyen et de prendre ton mal en patience

mangareva · Answer

Bonsoir,

JavaRa :

Je suis au téléphone avec ma belle-fille qui m'aide à faire les démarches que tu me demandes de faire.
En ce qui concerne JavaRa, elle va sur le forum et clique sur le lien que tu m'as mis.
Ma belle-fille voit un encart avec le fameux dossier compressé alors que moi sur le même lien je ne vois pas ce dossier compressé, donc je ne peux pas le décompresser et le mettre sur mon bureau étant donné que je ne l'ai pas !!!
Bizarre vous avez dit bizarre  ???
A te lire, merci.

gen-hackman · Answer

une solution :

demande lui de le telecharger et de te l'envoyer tel qu il est par msn ou windows live messenger

mangareva · Answer

Hello, JavaRa : J'ai fait le début de la procédure que tu as demandée au moment de mettre à jour jucheck.exe et Rechercher, l'ordi m'a indiqué que j'avais déjà la dernière version. Ensuite je n'ai pas pu effacer les anciennes versions. Par contre j'ai trouvé 2 rapports sur mon bureau que je te poste quand même : GNU GENERAL PUBLIC LICENSE Version 2, June 1991 Copyright (C) 1989, 1991 Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users. This General Public License applies to most of the Free Software Foundation's software and to any other program whose authors commit to using it. (Some other Free Software Foundation software is covered by the GNU Lesser General Public License instead.) You can apply it to your programs, too. When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for this service if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs; and that you know you can do these things. To protect your rights, we need to make restrictions that forbid anyone to deny you these rights or to ask you to surrender the rights. These restrictions translate to certain responsibilities for you if you distribute copies of the software, or if you modify it. For example, if you distribute copies of such a program, whether gratis or for a fee, you must give the recipients all the rights that you have. You must make sure that they, too, receive or can get the source code. And you must show them these terms so they know their rights. We protect your rights with two steps: (1) copyright the software, and (2) offer you this license which gives you legal permission to copy, distribute and/or modify the software. Also, for each author's protection and ours, we want to make certain that everyone understands that there is no warranty for this free software. If the software is modified by someone else and passed on, we want its recipients to know that what they have is not the original, so that any problems introduced by others will not reflect on the original authors' reputations. Finally, any free program is threatened constantly by software patents. We wish to avoid the danger that redistributors of a free program will individually obtain patent licenses, in effect making the program proprietary. To prevent this, we have made it clear that any patent must be licensed for everyone's free use or not licensed at all. The precise terms and conditions for copying, distribution and modification follow. GNU GENERAL PUBLIC LICENSE TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION 0. This License applies to any program or other work which contains a notice placed by the copyright holder saying it may be distributed under the terms of this General Public License. The "Program", below, refers to any such program or work, and a "work based on the Program" means either the Program or any derivative work under copyright law: that is to say, a work containing the Program or a portion of it, either verbatim or with modifications and/or translated into another language. (Hereinafter, translation is included without limitation in the term "modification".) Each licensee is addressed as "you". Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the Program (independent of having been made by running the Program). Whether that is true depends on what the Program does. 1. You may copy and distribute verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty; and give any other recipients of the Program a copy of this License along with the Program. You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee. 2. You may modify your copy or copies of the Program or any portion of it, thus forming a work based on the Program, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions: a) You must cause the modified files to carry prominent notices stating that you changed the files and the date of any change. b) You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License. c) If the modified program normally reads commands interactively when run, you must cause it, when started running for such interactive use in the most ordinary way, to print or display an announcement including an appropriate copyright notice and a notice that there is no warranty (or else, saying that you provide a warranty) and that users may redistribute the program under these conditions, and telling the user how to view a copy of this License. (Exception: if the Program itself is interactive but does not normally print such an announcement, your work based on the Program is not required to print an announcement.) These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Program, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works. But when you distribute the same sections as part of a whole which is a work based on the Program, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it. Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the intent is to exercise the right to control the distribution of derivative or collective works based on the Program. In addition, mere aggregation of another work not based on the Program with the Program (or with a work based on the Program) on a volume of a storage or distribution medium does not bring the other work under the scope of this License. 3. You may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following: a) Accompany it with the complete corresponding machine-readable source code, which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, b) Accompany it with a written offer, valid for at least three years, to give any third party, for a charge no more than your cost of physically performing source distribution, a complete machine-readable copy of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, c) Accompany it with the information you received as to the offer to distribute corresponding source code. (This alternative is allowed only for noncommercial distribution and only if you received the program in object code or executable form with such an offer, in accord with Subsection b above.) The source code for a work means the preferred form of the work for making modifications to it. For an executable work, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the executable. However, as a special exception, the source code distributed need not include anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component itself accompanies the executable. If distribution of executable or object code is made by offering access to copy from a designated place, then offering equivalent access to copy the source code from the same place counts as distribution of the source code, even though third parties are not compelled to copy the source along with the object code. 4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance. 5. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Program or its derivative works. These actions are prohibited by law if you do not accept this License. Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it. 6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions. You may not impose any further restrictions on the recipients' exercise of the rights granted herein. You are not responsible for enforcing compliance by third parties to this License. 7. If, as a consequence of a court judgment or allegation of patent infringement or for any other reason (not limited to patent issues), conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not distribute the Program at all. For example, if a patent license would not permit royalty-free redistribution of the Program by all those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Program. If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is intended to apply and the section as a whole is intended to apply in other circumstances. It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system, which is implemented by public license practices. Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system; it is up to the author/donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice. This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License. 8. If the distribution and/or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Program under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded. In such case, this License incorporates the limitation as if written in the body of this License. 9. The Free Software Foundation may publish revised and/or new versions of the General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Program specifies a version number of this License which applies to it and "any later version", you have the option of following the terms and conditions either of that version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of this License, you may choose any version ever published by the Free Software Foundation. 10. If you wish to incorporate parts of the Program into other free programs whose distribution conditions are different, write to the author to ask for permission. For software which is copyrighted by the Free Software Foundation, write to the Free Software Foundation; we sometimes make exceptions for this. Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally. NO WARRANTY 11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. END OF TERMS AND CONDITIONS How to Apply These Terms to Your New Programs If you develop a new program, and you want it to be of the greatest possible use to the public, the best way to achieve this is to make it free software which everyone can redistribute and change under these terms. To do so, attach the following notices to the program. It is safest to attach them to the start of each source file to most effectively convey the exclusion of warranty; and each file should have at least the "copyright" line and a pointer to where the full notice is found. Copyright (C) This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. Also add information on how to contact you by electronic and paper mail. If the program is interactive, make it output a short notice like this when it starts in an interactive mode: Gnomovision version 69, Copyright (C) year name of author Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'. This is free software, and you are welcome to redistribute it under certain conditions; type `show c' for details. The hypothetical commands `show w' and `show c' should show the appropriate parts of the General Public License. Of course, the commands you use may be called something other than `show w' and `show c'; they could even be mouse-clicks or menu items--whatever suits your program. You should also get your employer (if you work as a programmer) or your school, if any, to sign a "copyright disclaimer" for the program, if necessary. Here is a sample; alter the names: Yoyodyne, Inc., hereby disclaims all copyright interest in the program `Gnomovision' (which makes passes at compilers) written by James Hacker. , 1 April 1989 Ty Coon, President of Vice This General Public License does not permit incorporating your program into proprietary programs. If your program is a subroutine library, you may consider it more useful to permit linking proprietary applications with the library. If this is what you want to do, use the GNU Lesser General Public License instead of this License. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\jre.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\JRE 1.1 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaSoft.JavaBeansBridge HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaSoft.JavaBeansBridge.1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\javaw.Exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\JRE 1.2 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\JRE 1.3 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0005-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0006-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0007-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0008-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0009-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0010-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0011-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0012-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0013-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0014-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0015-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0016-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.140 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.140_01 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.140_02 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.140_03 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.140_04 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.140_05 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.140_06 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.140_07 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.140_08 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.140_09 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.140_10 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.140_11 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.140_12 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.140_13 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.140_14 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.140_15 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.140_16 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.4.0 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.4.0_01 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.4.0_02 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.4.0_03 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.4.0_04 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.4.0_05 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.4.0_06 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.4.0_07 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.4.0_08 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.4.0_09 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.4.0_10 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.4.0_11 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.4.0_12 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.4.0_13 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.4.0_14 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.4.0_15 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.4.0_16 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.4 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.4.0 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.4.0_01 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.4.0_02 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.4.0_03 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.4.0_04 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.4.0_05 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.4.0_06 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.4.0_07 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.4.0_08 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.4.0_09 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.4.0_10 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.4.0_11 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.4.0_12 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.4.0_13 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.4.0_14 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.4.0_15 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.4.0_16 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0000-0005-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0000-0006-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0000-0007-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0000-0008-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0000-0009-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0000-0010-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0000-0011-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0000-0012-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0000-0013-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0000-0014-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0000-0015-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0000-0016-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{F4588301-0A06-11D6-A761-00B0D079AF64} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Java Web Start HKEY_CURRENT_USER\Software\JavaSoft\Java2D\1.5.0 HKEY_CURRENT_USER\Software\JavaSoft\Java2D\1.5.0_01 HKEY_CURRENT_USER\Software\JavaSoft\Java2D\1.5.0_02 HKEY_CURRENT_USER\Software\JavaSoft\Java2D\1.5.0_03 HKEY_CURRENT_USER\Software\JavaSoft\Java2D\1.5.0_04 HKEY_CURRENT_USER\Software\JavaSoft\Java2D\1.5.0_05 HKEY_CURRENT_USER\Software\JavaSoft\Java2D\1.5.0_06 HKEY_CURRENT_USER\Software\JavaSoft\Java2D\1.5.0_07 HKEY_CURRENT_USER\Software\JavaSoft\Java2D\1.5.0_08 HKEY_CURRENT_USER\Software\JavaSoft\Java2D\1.5.0_09 HKEY_CURRENT_USER\Software\JavaSoft\Java2D\1.5.0_10 HKEY_CURRENT_USER\Software\JavaSoft\Java2D\1.5.0_11 HKEY_CURRENT_USER\Software\JavaSoft\Java2D\1.5.0_12 HKEY_CURRENT_USER\Software\JavaSoft\Java2D\1.5.0_13 HKEY_CURRENT_USER\Software\JavaSoft\Java2D\1.5.0_14 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510000 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510001 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510002 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510003 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510004 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510005 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510006 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510007 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510008 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510009 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D511000 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D511001 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D511002 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D511003 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D511004 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510000 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510001 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510002 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510003 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510004 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510005 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510006 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510007 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510008 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510009 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D511000 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D511001 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D511002 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D511003 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D511004 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510000 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510001 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510002 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510003 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510004 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510005 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510006 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510007 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510008 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510009 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D511000 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D511001 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D511002 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D511003 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D511004 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.150 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.150_01 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.150_02 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.150_03 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.150_04 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.150_05 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.150_06 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.150_07 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.150_08 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.150_09 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.150_10 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.150_11 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.150_12 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.150_13 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.150_14 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaWebStart.isInstalled.1.5.0.0 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.5.0 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.5.0_01 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.5.0_02 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.5.0_03 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.5.0_04 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.5.0_05 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.5.0_06 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.5.0_07 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.5.0_08 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.5.0_09 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.5.0_10 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.5.0_11 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.5.0_12 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.5.0_13 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.5.0_14 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.5 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_01 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_02 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_03 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_04 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_05 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_06 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_07 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_08 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_09 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_10 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_11 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_12 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_13 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_14 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510000 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510001 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510002 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510003 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510004 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510005 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510006 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510007 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510008 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510009 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D511000 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D511001 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D511002 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D511003 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D511004 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510000 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510001 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510002 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510003 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510004 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510005 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510006 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510007 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510008 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510009 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D511000 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D511001 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D511002 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D511003 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D511004 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150000} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150010} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150020} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150030} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150040} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150050} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150060} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150070} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150080} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150090} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150100} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150110} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150120} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150130} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150140} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610000 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610001 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610002 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610003 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610004 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610005 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610006 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610000 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610001 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610002 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610003 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610004 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610005 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610006 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610000 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610001 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610002 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610003 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610004 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610005 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610006 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.160 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.160_01 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.160_02 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.160_03 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.160_04 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.160_05 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.160_06 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.6.0 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.6.0_01 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.6.0_02 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.6.0_03 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.6.0_04 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.6.0_05 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.6.0_06 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_01 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_02 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_03 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_04 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_05 HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_06 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610000 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610001 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610002 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610003 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610004 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610005 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610006 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610000 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610001 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610002 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610003 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610004 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610005 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610006 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610001 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610002 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610003 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610004 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610005 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610006 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160010} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160020} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160030} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160040} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160050} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160060} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7CF31609-270B-11D6-9445-000102308676} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B12D5A1-E544-11D6-9D1C-00010240CE95} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC1E4C93-C1E7-11D6-9D10-00010240CE95} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CD0159C9-17FB-11D6-A76A-00B0D079AF64} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{082F1B07-797C-11D6-9CFB-00010240CE95} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1666FA7C-CB5F-11D6-A78C-00B0D079AF64} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B2F032F-CC54-11D7-9D67-00010240CE95} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{78D082B3-ACEE-11D7-9D64-00010240CE95} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ACD27BF3-7CDC-11D7-9D4D-00010240CE95} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C4B03AEB-33D3-11D7-9D37-00010240CE95} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CA532E73-1BB7-11D8-9D6A-00010240CE95} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EFCE5837-FC21-11D6-9D24-00010240CE95} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142000} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142010} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142020} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142030} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142040} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142050} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142060} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142070} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142080} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142090} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142100} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142110} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142120} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142130} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142140} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142150} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142160} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F841731866D117AB7000B0D410200 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F841731866D117AB7000B0D410201 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F841731866D117AB7000B0D410202 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F841731866D117AB7000B0D410203 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F841731866D117AB7000B0D410204 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F841731866D117AB7000B0D410205 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F841731866D117AB7000B0D410206 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F841731866D117AB7000B0D410207 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F841731866D117AB7000B0D410208 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F841731866D117AB7000B0D410209 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F841731866D117AB7000B0D411200 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F841731866D117AB7000B0D411201 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F841731866D117AB7000B0D411202 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F841731866D117AB7000B0D411203 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F841731866D117AB7000B0D411204 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F841731866D117AB7000B0D411205 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F841731866D117AB7000B0D411206 HKEY_LOCAL_MACHINE\SOFTWARE\Microsof

gen-hackman · Answer

ok envoie-nous ton rapport ici et donne le lien pour le récupérer :

http://www.cijoint.fr/

mangara · Answer

re hello


Je ne sais pas si j'ai tout bien fait, le site ne m'a pris qu'un seul rapport car il n'accepte pas les dossiers se terminant par .def


http://www.cijoint.fr/cjlink.php?file=cj200903/cij3XGddRE.txt 

A te lire ....

gen-hackman · Answer

ok pas grave :

desinstalle tes version anterieures de Java par ajour/suppression de programmes

mangareva · Answer

Hello,

Dans ajout/suppression de programme, j'ai 3 dossiers :

J2SE Runtime Environnement 5.0
J2SE Runtime Environnement 5.0 update 6
Java (TM) 6 update 12

Comme il n'y a pas de date (juste marqué : utilisé rarement) je ne sais pas quoi désinstaller ?

Au fait ça sert à quoi Java ???

A te lire ...

gen-hackman · Answer

sur ton rapport qui finit par .def change l'extension en .txt et essaie de l envoyer

mangareva · Answer

Hello


Ils ont dû prendre le rapport car ils m'ont donné un lien :

http://www.cijoint.fr/cjlink.php?file=cj200903/cijcvmNYbI.txt 


A te lire ...

gen-hackman · Answer

ok desinstalle ca si encore present :

J2SE Runtime Environnement 5.0 

l 'autre je ne me pronoce pas j'ai un doute....5....6 mmhh !:(

mangareva · Answer

Et ben voilà c'est fait (il était toujours dans ajout/suppression)

A te lire ....

gen-hackman · Answer

bien ,ben...bon surf et au plaisir

mangareva · Answer

Bonsoir,

Si je comprends bien tout est OK ?

Je te remercie beaucoup tu as été super patient avec moi, j'espère avoir été à la hauteur malgré mes 68 ans, je ne comprends pas toujours tout !!!

Je te dis merci, encore merci, un ENORME MERCI et si j'ai un problème je n'hésiterai pas à te demander ton aide.

Bonne soirée à toi.

gen-hackman · Answer

de rien je t'en prei mais ne suis pas le seul sur ce site :)

et d'autres sont bien meilleurs que moi !

:)

Ordi infecté ordi très lent - Page 4

Newsletters