Infecte par Bagle, besoin d'aide

Bonsoir

1- Télécharge et installe le logiciel HijackThis :

https://www.commentcamarche.net/telecharger/securite/11747-hijackthis/
ou ici http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
ou ici https://www.clubic.com/telecharger-fiche17891-hijackthis.html

-->Clique sur le setup pour lancer l'installation : laisse toi guider et ne modifie pas les paramètres d'installation .
A la fin de l’installation, le programme se lance automatiquement : ferme le en cliquant sur la croix rouge.
Au final, tu dois avoir un raccourci sur ton bureau et aussi un cheminement comme :
"C:\ program files\Trend Micro\HijackThis\HijackThis.exe " .

(Ne lance pas ce prg pour l'instant et fais la suite ... )

2- Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

-> http://images.malwareremoval.com/random/RSIT.exe

! Déconnecte toi et ferme toutes tes applications en cours !

Double-clique sur " RSIT.exe " pour le lancer.

Clic droit sous VISTA (exécuter en tant que…)

-> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

* Devant l'option "List files/folders created ..." , tu choisis : 2 months

* clique ensuite sur " Continue " pour lancer l'analyse ...

-> laisse faire le scan et ne touche pas au PC ...

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-notes).

Poste le contenu de " log.txt " (c'est celui qui apparaît à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

Important : poste un rapport, puis l'autre dans la réponse suivante ...
Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum ...
( Et si "log.txt" seul, ne passe pas non plus , fais le en 2 fois ... merci ... )

( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )

Merci

Bonsoir Guillaume5188,

Merci de bien vouloir m'aider.

Je vais proceder suivant tes instruction et je reviens poster les resultats

a+

re,

j'ai installé HijackThis sans le lancer.

j'ai lancer rsit . A son sujet 2 remarques :

1) Devant l'option "List files/folders created ..." , l n'y avait qu'1 mois de proposé

2) Le scan me parait bien long, cela fait 1/2 heure qu'il tourne. Est-ce normal ?

re,

Une autre question, fallait-il lancer RSIT en mode sans echec ?

Re,

Finalement j'ai arreté le scan de RSIT car cela faisait plus d'1 heure qu'il tournait.
Je l'ai relancé en mode sans echec. Cela n'a duré que qq secondes.
Voici le "log.txt" , je poste le second "info.txt" dans le prochain message.

---------------------------------------------------------------------------------------------------------------------

Logfile of random's system information tool 1.06 (written by random/random)
Run by Napoleon at 2009-10-09 23:35:10
Microsoft Windows 2000 Professionnel Service Pack 4
System drive C: has 12 GB (42%) free of 30 GB
Total RAM: 1535 MB (85% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:35:13, on 09/10/2009
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP4 (5.00.2920.0000)
Boot mode: Safe mode

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\Explorer.EXE
C:\WINNT\explorer.exe
C:\Documents and Settings\Napoleon\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Napoleon.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=101699&gct=&gc=1&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://toolbar.ask.com/toolbarv/askRedirect?o=101699&gct=&gc=1&q=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Foxit Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Probe\AsusProb.exe
O4 - HKLM\..\Run: [FileZilla Server Interface] "C:\Program Files\FileZilla Server\FileZilla Server Interface.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [NavX-Sync] "C:\Program Files\NavX\Sync\NavxSync.exe" --autostart
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - Startup: EssentialPIM.lnk = C:\Program Files\EssentialPIM\EssentialPIM.exe
O4 - Global Startup: Monitor Apache Servers.lnk = C:\Program Files\Apache Group\Apache2\bin\ApacheMonitor.exe
O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINNT\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINNT\bdoscandel.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.fr.msn.com
O14 - IERESET.INF: MS_START_PAGE_URL=http://www.fr.msn.com
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {7876E4A5-78B7-4020-B08F-C960A1ED54C9} (WebWatch Class) - http://82.235.101.174/WinWebPush.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{1B893EBC-BC38-4AB8-8566-C1B06F8DD608}: NameServer = 212.27.40.240,212.27.40.241
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apache2 - Apache Software Foundation - C:\Program Files\Apache Group\Apache2\bin\Apache.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:\Program Files\FileZilla Server\FileZilla Server.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
O23 - Service: Service Google Update (gupdate1c98c19c461f096) (gupdate1c98c19c461f096) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logishrd\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

re,

... et le second fichier

-----------------------------------------------------------------------------------------------------------------------

info.txt logfile of random's system information tool 1.06 2009-10-09 21:41:15

======Uninstall list======

-->MsiExec.exe /X{E9F81423-211E-46B6-9AE0-38568BC5CF6F}
-->C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINNT\system32\ddexinst.exe -,LaunchINFSectionEx,ddrawex.dll,Uninstall,1,22d6f312-b0f6-11d0-94ab-0080c74c7e95,
-->C:\WINNT\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINNT\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINNT\UNNeroShowTime.exe /UNINSTALL
-->C:\WINNT\UNNeroVision.exe /UNINSTALL
-->C:\WINNT\UNRecode.exe /UNINSTALL
3Com NIC Diagnostics-->un3cdiag.exe /remove
3DVIA player 4.1-->MsiExec.exe /X{4E868D3D-6EEB-4273-926C-2287236B5B79}
7-Zip 4.65-->"C:\Program Files\7-Zip\Uninstall.exe"
ABC (remove only)-->C:\Program Files\ABC\Uninstall.exe
abgx360 v0.9.4-->"C:\Program Files\abgx360\uninstall.exe"
ACDSee Trial Version-->C:\PROGRA~1\ACDSYS~1\ACDSEE~1\UNWISE.EXE C:\PROGRA~1\ACDSYS~1\ACDSEE~1\INSTALL.LOG
Active WebCam-->"C:\Program Files\Active WebCam\PY_UNINSTAL.EXE" SOFTWARE\PySoft\Act_WebCam
Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Flash Player 10 ActiveX-->C:\WINNT\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINNT\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Photoshop 7.0.1-->C:\WINNT\ISUN040C.EXE -f"C:\Program Files\Adobe\Photoshop 7.0\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop 7.0\Uninst.dll"
AnumanLive-->"C:\Documents and Settings\Napoleon\Application Data\Anuman Interactive\AnumanLive\AnumanLive.exe" /UNINSTALL
Apache HTTP Server 2.0.63-->MsiExec.exe /I{3A862C7D-0504-48BC-AEF8-7F7479C7C158}
ASUS Probe V2.19.07-->C:\WINNT\uninst.exe -f"C:\Program Files\ASUS\Probe\DeIsL1.isu" -c"C:\Program Files\ASUS\Probe\probunis.dll"
Beauty Studio 1.45-->"C:\Program Files\AMS Beauty Studio\unins000.exe"
Canon Camera Support Core Library-->"C:\Program Files\Fichiers communs\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\CSCLIB\Uninst.ini"
Canon Camera TWAIN Driver 6.6-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{3519A06E-33A4-4910-BB14-7BCE133BF46F} /l1036
Canon Camera Window DC_DV 5 for ZoomBrowser EX-->"C:\Program Files\Fichiers communs\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\CameraWindowDVC\Uninst.ini"
Canon Camera Window DC_DV 6 for ZoomBrowser EX-->"C:\Program Files\Fichiers communs\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\CameraWindowDVC6\Uninst.ini"
Canon Camera Window MC 6 for ZoomBrowser EX-->"C:\Program Files\Fichiers communs\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\CameraWindowMC\Uninst.ini"
Canon G.726 WMP-Decoder-->"C:\Program Files\Fichiers communs\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\G726Decoder\G726DecUnInstall.ini"
CANON iMAGE GATEWAY Task-->"C:\Program Files\Fichiers communs\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX\Program\CRWUnInstall.ini"
Canon Internet Library for ZoomBrowser EX-->"C:\Program Files\Fichiers communs\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX\Program\CIGUnInstall.ini"
Canon MovieEdit Task for ZoomBrowser EX-->"C:\Program Files\Fichiers communs\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX\Program\MVWUninst.ini"
Canon RAW Image Task for ZoomBrowser EX-->"C:\Program Files\Fichiers communs\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\RAW Image Task\Uninst.ini"
Canon RemoteCapture Task for ZoomBrowser EX-->"C:\Program Files\Fichiers communs\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\RemoteCaptureTask DC\Uninst.ini"
Canon Utilities EOS Utility-->"C:\Program Files\Fichiers communs\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\EOS Utility\Uninst.ini"
Canon Utilities PhotoStitch-->"C:\Program Files\Fichiers communs\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\PhotoStitch\Uninst.ini"
Canon Utilities ZoomBrowser EX-->"C:\Program Files\Fichiers communs\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX\Program\Uninst.ini"
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CD Audio Reader Filter (remove only)-->"C:\Program Files\CD Audio Reader Filter\uninstall.exe"
CD/DVD Diagnostic-->C:\Program Files\InfinaDyne\Diagnostic\UNWISE.EXE "C:\Program Files\InfinaDyne\Diagnostic\INSTALL.LOG"
CDex extraction audio-->"C:\Program Files\CDex_150\uninstall.exe"
Chessmaster 10ème Edition-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{E9AE9A91-AB45-4321-87BD-AD34855D944F}
CloneCD-->"C:\Program Files\SlySoft\CloneCD\ccd-uninst.exe" /D="C:\Program Files\SlySoft\CloneCD"
Combined Community Codec Pack 2008-09-21 16:18-->"C:\Program Files\Combined Community Codec Pack\unins000.exe"
Compact95-->C:\WINNT\uninst.exe -fc:\ric95\DeIsL1.isu
ConvertXtoDVD 3.5.3.139-->"C:\Program Files\VSO\ConvertX\3\unins000.exe"
Correctif cumulatif 1 pour Windows 2000 SP4-->"C:\WINNT\$NtUpdateRollupPackUninstall$\spuninst\spuninst.exe"
Correctif pour le Lecteur Windows Media [Voir Q828026 pour plus d'informations]-->C:\WINNT\$NtUninstallQ828026$\spuninst\spuninst.exe
Correctif Windows 2000 - KB842773-->C:\WINNT\$NtUninstallKB842773$\spuninst\spuninst.exe
Correctif Windows 2000 - KB923561-->"C:\WINNT\$NtUninstallKB923561$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB938127-->"C:\WINNT\$NtUninstallKB938127-IE501SP4-20070626.120000$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB952004-->"C:\WINNT\$NtUninstallKB952004$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB956844-->"C:\WINNT\$NtUninstallKB956844$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB958470-->"C:\WINNT\$NtUninstallKB958470$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB958687-->"C:\WINNT\$NtUninstallKB958687$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB958690-->"C:\WINNT\$NtUninstallKB958690$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB959426-->"C:\WINNT\$NtUninstallKB959426$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB960225-->"C:\WINNT\$NtUninstallKB960225$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB960715-->"C:\WINNT\$NtUninstallKB960715$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB960803-->"C:\WINNT\$NtUninstallKB960803$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB960859-->"C:\WINNT\$NtUninstallKB960859$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB961371-->"C:\WINNT\$NtUninstallKB961371$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB961371-V2-->"C:\WINNT\$NtUninstallKB961371-V2$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB961501-->"C:\WINNT\$NtUninstallKB961501$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB963027-->"C:\WINNT\$NtUninstallKB963027-IE6SP1-20090303.120000$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB967715-->"C:\WINNT\$NtUninstallKB967715$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB968537-->"C:\WINNT\$NtUninstallKB968537$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB969897-->"C:\WINNT\$NtUninstallKB969897-IE6SP1-20090501.120000$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB969898-->"C:\WINNT\$NtUninstallKB969898$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB970238-->"C:\WINNT\$NtUninstallKB970238$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB971557-->"C:\WINNT\$NtUninstallKB971557$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB971961-->"C:\WINNT\$NtUninstallKB971961$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB972260-->"C:\WINNT\$NtUninstallKB972260-IE6SP1-20090722.120000$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB973346-->"C:\WINNT\$NtUninstallKB973346$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB973354-->"C:\WINNT\$NtUninstallKB973354-OE6SP1-20090710.120000$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB973507-->"C:\WINNT\$NtUninstallKB973507$\spuninst\spuninst.exe"
Correctif Windows 2000 - KB973869-->"C:\WINNT\$NtUninstallKB973869$\spuninst\spuninst.exe"
Crayon Physics Deluxe - release 51-->"C:\Program Files\Crayon Physics Deluxe\unins000.exe"
DC-Bass Source 1.1.1-->"C:\Program Files\DSP-worx\DC-Bass Source\Uninstall.exe"
DirectX Eradicator-->C:\WINNT\INF\dxe2k5.exe /Q:A /R:N /c:"rundll32 advpack.dll,LaunchINFSection remove.inf,NtUninstall"
dMC 10.1-->"C:\Program Files\dBpowerAMP\unins000.exe"
Dragon NaturallySpeaking 9-->MsiExec.exe /I{DDDD90B2-80F2-413A-8A8E-38C5076A7DBA}
Dress Shop-->MsiExec.exe /I{6884F323-BFBF-40CC-9CD1-A6E571121C11}
DVD Decrypter (Remove Only)-->"C:\Program Files\DVD Decrypter\uninstall.exe"
DVD Shrink 3.2-->"C:\Program Files\DVD Shrink\unins000.exe"
DVDInfoPro-->"C:\Program Files\DVDInfoPro\uninstall.exe"
dvdSanta 4.50-->"C:\Program Files\dvdSanta\unins000.exe"
EasyRecovery Professional-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{268723B7-A994-4286-9F85-B974D5CAFC7B} /l1036
EdHex 1.7-->C:\Program Files\EdHex\EdHex.exe /UNINSTALL
eMule-->"d:\Programmes\emule\Uninstall.exe"
EPSON Attach To Email-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG
EPSON Copy Utility 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\SETUP.EXE" -l0x40c -UnInstall
EPSON File Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E86BC406-944E-41F6-ADE6-2C136734C96B}\Setup.exe" -l0x40c UNINST
EPSON Logiciel imprimante-->C:\WINNT\system32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EPSON Scan Assistant-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x40c -u
EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r
EPSON Web-To-Page-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x40c -anything
ESDX6000_CX5900 Guide util.-->C:\Program Files\EPSON\TPMANUAL\ESDX6000_CX5900\USE_G\DOCUNINS.EXE
EssentialPIM-->C:\Program Files\EssentialPIM\uninstall.exe
Feneris Video Downloader-->MsiExec.exe /I{86AED2CA-EE00-400B-8516-5152CC10B32E}
ffdshow [rev 2280] [2008-11-02]-->"C:\Program Files\ffdshow\unins000.exe"
FILEminimizer Pictures-->"C:\Program Files\FILEminimizer Pictures\unins000.exe"
FileZilla Client 3.2.6.1-->C:\Program Files\FileZilla FTP Client\uninstall.exe
FileZilla Server (Suppression uniquement)-->"C:\Program Files\FileZilla Server\uninstall.exe"
Firebird SQL Server - MAGIX Edition-->C:\Program Files\MAGIX\Common\Database\unwise.exe
FLV Player-->C:\Program Files\FLV Player\uninstall.exe
Foxit Reader-->C:\Program Files\Foxit Software\Foxit Reader\Uninstall.exe
Foxit Toolbar-->"C:\Program Files\AskBarDis\unins000.exe"
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Earth-->MsiExec.exe /X{CC016F21-3970-11DE-B878-005056806466}
Harmony Assistant-->C:\Program Files\Harmony Assistant\Uninstal\Uninstal.exe
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for MDAC 2.53 (KB927779)-->"C:\WINNT\$SQLUninstallMDAC25SP3-KB927779-x86-FRA$\spuninst\spuninst.exe"
HyperSnap 6-->C:\Program Files\HyperSnap 6\HprUnInst.exe
ImgBurn 2.3.2.0 Fr-->"C:\Program Files\ImgBurn\unins000.exe"
IP_Family-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{663AB8AC-4695-4395-BF9A-1F772AE1E026}\Setup.exe"
IsoBuster 2.2-->"C:\Program Files\Smart Projects\IsoBuster\Uninst\unins000.exe"
Java(TM) 6 Update 15-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Kaspersky Online Scanner-->C:\WINNT\system32\KASPER~1\KASPER~1\kavuninstall.exe
KC Softwares VideoInspector-->"C:\Program Files\KC Softwares\VideoInspector\unins000.exe"
Kill Process 5.0.0.5 (désinstaller seulement)-->"C:\Program Files\Kill Process\uninstall.exe"
Le Petit MOURRE-->C:\PROGRA~1\LEPETI~1\UNWISE.EXE C:\PROGRA~1\LEPETI~1\INSTALL.LOG
LiveReg (Symantec Corporation)-->C:\Program Files\Fichiers communs\Symantec Shared\LiveReg\VcSetup.exe /REMOVE
LiveUpdate 1.80 (Symantec Corporation)-->C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
Logitech Audio Echo Cancellation Component-->MsiExec.exe /X{BEF726DD-4037-4214-8C6A-E625C02D2870}
Logitech QuickCam-->MsiExec.exe /X{7D2370AC-D8E6-4996-986A-19824F8A167C}
Logitech Video Enumerator-->MsiExec.exe /X{EA516024-D84D-41F1-814F-83175A6188F2}
Look@LAN 2.50 Build 35-->C:\WINNT\iun6002.exe "C:\Program Files\Look@LAN\irunin.ini"
Macromedia Flash Player 8-->C:\WINNT\system32\Macromed\Flash\UninstFl.exe
MAGIX Screenshare 4.3.6.1987 (UK)-->C:\Program Files\MAGIX\PCVisit\unwise.exe
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
MathType 6-->"C:\Program Files\MathType\Setup.exe" -R
MatroskaProp (remove only)-->C:\Program Files\MatroskaProp\MatroskaProp-uninstall.exe
MaxBlast 4-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{639858DD-4966-40F3-A706-7C838BCF3A2B}\setup.exe"
MediaCoder 0.6.2-->C:\Program Files\MediaCoder\uninst.exe
MediaInfo 0.7.8-->C:\Program Files\MediaInfo\uninst.exe
MeggieSoft Games Gin Rummy-->"c:\program files\MeggieSoft Games\unins000.exe"
MeggieSoft Games Rummy 500-->"c:\program files\MeggieSoft Games\unins001.exe"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINNT\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINNT\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1 Hotfix (KB947742)-->"C:\WINNT\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINNT\Microsoft.NET\Framework\v1.1.4322\Updates\M947742\M947742Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{3F7924B9-D148-3141-87B1-68F36043A940}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft ActiveSync 3.8-->"C:\WINNT\ISUN040C.EXE" -f"C:\Program Files\Microsoft ActiveSync\DeIsL1.isu" -c"C:\Program Files\Microsoft ActiveSync\ceuninst.dll"
Microsoft Publisher 2002-->MsiExec.exe /I{9019040C-6000-11D3-8CFE-0050048383C9}
Microsoft Rise of Nations-->"C:\Program Files\Microsoft Games\Rise of Nations\UNINSTAL.EXE" /runtemp /addremove
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mise à jour de sécurité pour DirectX 9.0 (KB971633)-->"C:\WINNT\$NtUninstallKB971633_DX9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour DirectX 9.0b (KB961373)-->"C:\WINNT\$NtUninstallKB961373_DX9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINNT\$NtUninstallKB952069_WM71$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 9 (KB911565)-->"C:\WINNT\$NtUninstallKB911565$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 9 (KB936782)-->"C:\WINNT\$NtUninstallKB936782_WMP9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 9 (KB973540)-->"C:\WINNT\$NtUninstallKB973540_WM9L$\spuninst\spuninst.exe"
Mise à jour système du Lecteur Windows Media (Série 9)-->C:\PROGRA~1\WINDOW~3\setup_wm.exe /Uninstall
Mjuice Components-->"C:\Program Files\MJuice Media Player\MJUninst.exe"
MKVtoolnix 2.0.2-1-->C:\Program Files\MKVtoolnix\uninst.exe
Mobipocket Reader 6.2-->MsiExec.exe /I{342126E1-173C-4585-BFBE-3EBDD20E3E9E}
Motherboard Monitor 5-->"C:\Program Files\Motherboard Monitor 5\unins000.exe"
Mozilla Firefox (3.5.3)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (2.0.0.23)-->C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6 Service Pack 2 (KB954459)-->MsiExec.exe /I{97AA1F3C-DD64-4AA6-AEC5-F8F9F4CC21C5}
MSXML4 Parser-->MsiExec.exe /I{01501EBA-EC35-4F9F-8889-3BE346E5DA13}
MuseScore 0.9 MuseScore score typesetter-->C:\Program Files\MuseScore 0.9\Uninstall.exe
MVision-->MsiExec.exe /I{35725FBC-A136-4A46-9F29-091759D9BB93}
My Pictures And Sounds 8.03-->C:\Program Files\SAGEM\My Pictures And Sounds\Uninstall.exe
NavX Sync-->"C:\Program Files\NavX\Sync\unins000.exe"
Nero 7 Ultra Edition-->MsiExec.exe /I{27DB0F69-452E-4EB9-850C-972CB47D1036}
NetSelector-->"C:\Program Files\NetSelector\unins000.exe"
NewsBin Pro 4.3-->d:\Programmes\nbpro\uninst-nbpro.exe
Norton Ghost-->MsiExec.exe /I{6975E810-C92F-45F0-0BFD-187B312F10E8}
Notepad++-->C:\Program Files\Notepad++\uninstall.exe
NVIDIA Drivers-->C:\WINNT\system32\nvudisp.exe UninstallGUI
NVIDIA nForce Utilities-->C:\WINNT\system32\rundll32.exe setupapi,InstallHinfSection Remove_SSUtilsNT 132 C:\WINNT\INF\nvautlml.inf
O&O Defrag Professional-->MsiExec.exe /I{B15B4D42-6B57-4A36-9458-A07D7F8955F9}
O&O DiskRecovery-->MsiExec.exe /X{53480880-18E0-4097-A460-F22DD3AC6D70}
OMeR-->C:\Program Files\Omer\Uninstal\Uninstal.exe
OpenOffice.org 3.0-->MsiExec.exe /I{6860B340-530D-46B3-91F8-1AE1F70F7C33}
OpenSource Flash Video Splitter (remove only)-->"C:\Program Files\OpenSource Flash Video Splitter\uninstall.exe"
Package de base Microsoft de service de chiffrement pour cartes à puce-->"C:\WINNT\$NtUninstallbasecsp$\spuninst\spuninst.exe"
PDFtoMusic Pro-->C:\Program Files\PDFtoMusic Pro\Uninstal\Uninstal.exe
Pilotes NVIDIA nForce pour Windows 2000/XP-->rundll32.exe C:\WINNT\system32\NVNFINST.DLL,NvUninstallCrush
PowerISO-->"C:\Program Files\PowerISO\uninstall.exe"
PowerQuest PartitionMagic 8.0-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}
Programme de gestion Camera de Logitech®-->"C:\Program Files\Fichiers communs\LogiShrd\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT
QuickPar 0.9-->C:\Program Files\QuickPar\uninst.exe
QuickSFV (Remove only)-->C:\Program Files\QuickSFV\QSFVUNST.EXE C:\Program Files\QuickSFV\
QuickTime Alternative 1.71 Beta 3-->"C:\Program Files\QuickTime Alternative\unins000.exe"
Real Alternative 1.9.0-->"C:\Program Files\Real Alternative\unins000.exe"
Repertoire-->C:\Program Files\Repertoire\uninstall.exe
Resplendent Registrar 3.22 (registered)-->"C:\Program Files\Resplendent Registrar\unwise.exe" C:\PROGRA~1\RESPLE~1\INSTALL.LOG
Resplendent Registrar 3.30 (registered)-->C:\PROGRA~1\RESPLE~1\UNWISE.EXE C:\PROGRA~1\RESPLE~1\INSTALL.LOG
Sapiens-->C:\Program Files\Sapiens\Uninstal\Uninstal.exe
Savvy TV-->MsiExec.exe /X{26019AC3-711C-4041-9379-3C7D52FAA8B3}
SHOUTcast Source (remove only)-->"C:\Program Files\SHOUTcast Source\uninstall.exe"
Simulateur de conduite 3D Demo-->"C:\program files\Simulateur de conduite 3D Demo\uninstall.exe"
Skype™ 4.0-->MsiExec.exe /X{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}
Sony Sound Forge 7.0-->MsiExec.exe /I{0712667C-A171-49AE-A098-4ACDA28625F8}
SpeedFan (remove only)-->"C:\Program Files\SpeedFan\uninstall.exe"
SpeedyFox-->"C:\Program Files\SpeedyFox\unins000.exe"
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Thrustmapper-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A11FC73C-41FE-11D4-9EB2-00104B07382B}\Setup.exe" -l0x40c
Thrustmaster Force Feedback Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8F5A0981-5CDC-41D0-BCA2-AD3B777FC358}\setup.exe" -l0x40c -remo