Infection Smitfraud-c

Résolu
quick157 Messages postés 1458 Statut Membre -  
S!Ri Messages postés 932 Statut Contributeur sécurité -
Salut,

Apparemment, je me suis chopé une saleté.
Ma page de démarrage IE est bloquée sur :

http://www.yoursystemupdate.com/

J'ai un petit triangle jaune avec un point d'exclamation dans la barre des tâches qui me signale sans arrêt : "system alert : spyware detected" et lorsqu'on clique dessus, ça envoie à l'adresse :

http://www.spytrooper.com/?advid=29

J'ai lancé Spybot qui me détecte SMITFRAUD-C mais ne peut pas le supprimer.

Norton Antivirus ne trouve rien.

Quelqu'un peut m'aider ?

Merci

18 réponses

  2.
    quick157 Messages postés 1458 Statut Membre 475
     
    Salut balltrap,

    J'ai téléchargé le fichier mais quand je l'exécute, j'ai une fenêtre style dos qui s'ouvre avec le message :

    fichier process.exe absent !
    dézippez la totalité de l'archive dans un dossier c\fix\
    appuyez sur une touche pour continuer ...

    Je clique sur une touche et la fenêtre se ferme.
    0
  3. balltrap34 Messages postés 16241 Statut Contributeur sécurité 332
     
    il faut decompresser quand tu la telecharger
    la tu te retrouve avec un dossier smitfraud tu l ouvre et la tu double clik sur smitfraudfix.cmd
    0
  4. quick157 Messages postés 1458 Statut Membre 475
     
    Mea culpa, pas bien dézippé

    Voici le rapport :

    SmitFraudFix v2.06

    Rapport fait à 1:49:25,09 le dim. 11/12/2005
    Executé à partir de C:\fix\SmitfraudFix\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600]

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\Web

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system32

    C:\WINDOWS\system32\hp????.tmp PRESENT !
    C:\WINDOWS\system32\ld????.tmp PRESENT !
    C:\WINDOWS\system32\mscornet.exe PRESENT !
    C:\WINDOWS\system32\mssearchnet.exe PRESENT !
    C:\WINDOWS\system32\msvol.tlb PRESENT !
    C:\WINDOWS\system32\ncompat.tlb PRESENT !
    C:\WINDOWS\system32\nvctrl.exe PRESENT !
    C:\WINDOWS\system32\ot.ico PRESENT !
    C:\WINDOWS\system32\ts.ico PRESENT !
    C:\WINDOWS\system32\1024\ PRESENT!

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Documents and Settings\User\Application Data

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche Menu Démarrer

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche Bureau

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Program Files

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche présence de clés corrompues

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche éléments du bureau

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="About:Home"
    "SubscribedURL"="About:Home"
    "FriendlyName"="Ma page d'accueil"

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche Sharedtaskscheduler

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pr‚-chargeur Browseui"
    "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="D‚mon de cache des cat‚gories de composant"

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

    »»»»»»»»»»»»»»»»»»»»»»»» Fin du rapport
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. balltrap34 Messages postés 16241 Statut Contributeur sécurité 332
     
    oki relance le et cette fois option2
    0
  7. quick157 Messages postés 1458 Statut Membre 475
     
    Re,

    J'ai lancé l'option 2
    Ca m'a signalé que certains processus étaient en cours et ne pouvaient pas être supprimés
    Ensuite, une demande de nettoyage de regsitre que j'ai accepté
    Reboot
    Un rapport généré automatiquement après reboot :

    SmitFraudFix v2.06

    Rapport fait à 1:54:48,10 le dim. 11/12/2005
    Executé à partir de C:\fix\SmitfraudFix\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600]

    »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

    »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

    C:\WINDOWS\system32\hp????.tmp supprimé
    Problème suppression C:\WINDOWS\system32\ld????.tmp
    Problème suppression C:\WINDOWS\system32\mscornet.exe
    Problème suppression C:\WINDOWS\system32\mssearchnet.exe
    C:\WINDOWS\system32\msvol.tlb supprimé
    Problème suppression C:\WINDOWS\system32\ncompat.tlb
    C:\WINDOWS\system32\nvctrl.exe supprimé
    C:\WINDOWS\system32\ot.ico supprimé
    C:\WINDOWS\system32\ts.ico supprimé
    C:\WINDOWS\system32\1024\ supprimé

    »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

    Nettoyage terminé.

    »»»»»»»»»»»»»»»»»»»»»»»» Reboot

    C:\WINDOWS\system32\ld????.tmp supprimé
    C:\WINDOWS\system32\mscornet.exe supprimé
    C:\WINDOWS\system32\mssearchnet.exe supprimé
    C:\WINDOWS\system32\ncompat.tlb supprimé

    »»»»»»»»»»»»»»»»»»»»»»»» Fin du rapport

    J'en suis où ?
    0
  8. balltrap34 Messages postés 16241 Statut Contributeur sécurité 332
     
    lol desoler il faut le faire en mode sans echec
    0
  9. ben13010 Messages postés 3369 Statut Contributeur 387
     
    salut quick

    sais pas si balltrap est encore la

    t'es sur que tu as fais le scan 2 en mode sans echec ? parce que en mode sans echec , les processus sont desactivés
    0
  10. quick157 Messages postés 1458 Statut Membre 475
     
    Voilà, suis revenu, j'ai refait une recherche, voilà le dernier rapport :

    SmitFraudFix v2.06

    Rapport fait à 2:11:29,32 le dim. 11/12/2005
    Executé à partir de C:\fix\SmitfraudFix\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600]

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\Web

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system32

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Documents and Settings\User\Application Data

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche Menu Démarrer

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche Bureau

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Program Files

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche présence de clés corrompues

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche éléments du bureau

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche Sharedtaskscheduler

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pr‚-chargeur Browseui"
    "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="D‚mon de cache des cat‚gories de composant"

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

    »»»»»»»»»»»»»»»»»»»»»»»» Fin du rapport

    Ca paraît bon ?

    Autre chose, depuis que je suis infecté ,à l'arrivée sur le bureau, j'ai un message windows installer qui me dit (en gros, j'i pas noté)que je dois désinstaller norton antivirus et le réinstaller. Il serait KO ?
    0
  11. quick157 Messages postés 1458 Statut Membre 475
     
    Re Balltrap,

    Suite à l'infection de mon pc, spybot et norton antivirus ont été endommagés. Je les ai donc réinstallés et ils semblent fonctionner correctement.

    Par contre, spybot continue à me détecter Smitfraud-C sans pouvoir le supprimer. Pourtant, mon pc semble refonctionner comme avant l'infection. D'autre part, spybot ne détecte rien en mode sans échec mais bien en mode normal. Après retour du mode sans échec, mon papier peint est disparu (fonf bleu) et ma page de démarrage dans IE est changée sur MSN. Rien de bien grave apparemment, mais je pense que le problème ne doit pas être tout à fait résolu.

    Quant au dernier rapport que j'ai posté, qu'en penses-tu ?
    0
  12. S!Ri Messages postés 932 Statut Contributeur sécurité 10
     
    Salut

    quick157, poste le log de spybot pour voir les erreurs qu'il signale.

    a+
    0
  13. quick157 Messages postés 1458 Statut Membre 475
     
    Salut Siri,

    Tu veux le log complet (très long) ou uniquement le problème détecté relatif à Smitfraud-C ?
    0
  14. S!Ri Messages postés 932 Statut Contributeur sécurité 10
     
    Bah, poste tout, on fera le tri nous même ;-)

    a+
    0
  15. quick157 Messages postés 1458 Statut Membre 475
     
    No prob, voici :

    --- Search result list ---
    Smitfraud-C.: Réglages utilisateur (Modification du registre, nothing done)
    HKEY_USERS\S-1-5-21-1220945662-2111687655-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\free-spy-cam.net\*!=W=4

    --- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

    2005-05-31 blindman.exe (1.0.0.1)
    2005-05-31 SpybotSD.exe (1.4.0.3)
    2005-05-31 TeaTimer.exe (1.4.0.2)
    2005-12-11 unins000.exe (51.41.0.0)
    2005-05-31 Update.exe (1.4.0.0)
    2005-05-31 advcheck.dll (1.0.2.0)
    2005-05-31 aports.dll (2.1.0.0)
    2005-05-31 borlndmm.dll (7.0.4.453)
    2005-05-31 delphimm.dll (7.0.4.453)
    2005-05-31 SDHelper.dll (1.4.0.0)
    2005-05-31 Tools.dll (2.0.0.2)
    2005-05-31 UnzDll.dll (1.73.1.1)
    2005-05-31 ZipDll.dll (1.73.2.0)
    2005-12-09 Includes\Cookies.sbi (*)
    2005-12-09 Includes\Dialer.sbi (*)
    2005-12-09 Includes\Hijackers.sbi (*)
    2005-12-09 Includes\Keyloggers.sbi (*)
    2004-11-29 Includes\LSP.sbi (*)
    2005-12-09 Includes\Malware.sbi (*)
    2005-12-09 Includes\PUPS.sbi (*)
    2005-12-09 Includes\Revision.sbi (*)
    2005-12-09 Includes\Security.sbi (*)
    2005-12-09 Includes\Spybots.sbi (*)
    2005-02-17 Includes\Tracks.uti
    2005-12-09 Includes\Trojans.sbi (*)

    --- System information ---
    Windows XP (Build: 2600) Service Pack 2
    / Windows XP / SP3: Correctif Windows XP - KB873339
    / Windows XP / SP3: Correctif Windows XP - KB885250
    / Windows XP / SP3: Correctif Windows XP - KB885835
    / Windows XP / SP3: Correctif Windows XP - KB885836
    / Windows XP / SP3: Correctif Windows XP - KB886185
    / Windows XP / SP3: Correctif Windows XP - KB887472
    / Windows XP / SP3: Correctif Windows XP - KB887742
    / Windows XP / SP3: Correctif Windows XP - KB887797
    / Windows XP / SP3: Correctif Windows XP - KB888113
    / Windows XP / SP3: Correctif Windows XP - KB888302
    / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB890046)
    / Windows XP / SP3: Correctif Windows XP - KB890859
    / Windows XP / SP3: Correctif Windows XP - KB891781
    / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB893066)
    / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB893756)
    / Windows XP / SP3: Windows Installer 3.1 (KB893803)
    / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896358)
    / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896422)
    / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896423)
    / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896424)
    / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896428)
    / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896688)
    / Windows XP / SP3: Mise à jour pour Windows XP (KB898461)
    / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899587)
    / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899591)
    / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB900725)
    / Windows XP / SP3: Mise à jour pour Windows XP (KB900930)
    / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901017)
    / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901214)
    / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB902400)
    / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB904706)
    / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905414)
    / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905749)

    --- Startup entries list ---
    Located: HK_LM:Run, ccApp
    command: "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
    file: C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
    size: 58992
    MD5: 565126cc4a79ca46d555ffdd479e71e3

    Located: HK_LM:Run, CmCardRun
    command: C:\WINDOWS\system32\CmWatch.exe
    file: C:\WINDOWS\system32\CmWatch.exe
    size: 229376
    MD5: 5d7d38cda0b45c1fd1698ce6798c0f50

    Located: HK_LM:Run, DSLAGENTEXE
    command: dslagent.exe USB
    file: C:\WINDOWS\system32\dslagent.exe
    size: 16384
    MD5: 989e130e5e841bea68ba361d292a0207

    Located: HK_LM:Run, GSICONEXE
    command: GSICON.EXE
    file: C:\WINDOWS\system32\GSICON.EXE
    size: 90112
    MD5: 3f1cdf749fe69c525a1a9a7ff3c3d8d1

    Located: HK_LM:Run, LogitechVideoRepair
    command: C:\Program Files\Logitech\Video\ISStart.exe
    file: C:\Program Files\Logitech\Video\ISStart.exe
    size: 458752
    MD5: 3c0ee706ceb7e9a154bf8e7749ca5a91

    Located: HK_LM:Run, LogitechVideoTray
    command: C:\Program Files\Logitech\Video\LogiTray.exe
    file: C:\Program Files\Logitech\Video\LogiTray.exe
    size: 217088
    MD5: 2d3bcca5c7ca55fedd60e3336d3a92af

    Located: HK_LM:Run, LVCOMSX
    command: C:\WINDOWS\system32\LVCOMSX.EXE
    file: C:\WINDOWS\system32\LVCOMSX.EXE
    size: 221184
    MD5: 5ba8a7da5d0573f7923e02b260aad2f1

    Located: HK_LM:Run, NeroFilterCheck
    command: C:\WINDOWS\system32\NeroCheck.exe
    file: C:\WINDOWS\system32\NeroCheck.exe
    size: 155648
    MD5: 3e4c03cefad8de135263236b61a49c90

    Located: HK_LM:Run, nTrayFw
    command: C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
    file: C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
    size: 266240
    MD5: 144d815eba5f324cdd5128841abf3b1a

    Located: HK_LM:Run, NvCplDaemon
    command: RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    file: C:\WINDOWS\system32\RUNDLL32.EXE
    size: 33792
    MD5: f5402cd47b7389ddc21f92119a906eee

    Located: HK_LM:Run, NvMediaCenter
    command: RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    file: C:\WINDOWS\system32\RUNDLL32.EXE
    size: 33792
    MD5: f5402cd47b7389ddc21f92119a906eee

    Located: HK_LM:Run, NVMixerTray
    command: "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
    file: C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
    size: 131072
    MD5: 37fff683aee7f09f5f7087138192bf02

    Located: HK_LM:Run, nwiz
    command: nwiz.exe /install
    file: C:\WINDOWS\system32\nwiz.exe
    size: 1519616
    MD5: 60d44ef1cb5f41160e9d0a7e637cc8aa

    Located: HK_LM:Run, RemoteControl
    command: "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    file: C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    size: 32768
    MD5: 915a106a2fb87292cef0ad4f36adf313

    Located: HK_LM:Run, SoundMan
    command: SOUNDMAN.EXE
    file: C:\WINDOWS\SOUNDMAN.EXE
    size: 77824
    MD5: ff86e640e4e0fd18cfb4696b38867222

    Located: HK_LM:Run, SunJavaUpdateSched
    command: C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    file: C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    size: 36975
    MD5: 61a3a9d5d98bf0331df5b716144a8100

    Located: HK_LM:Run, Symantec NetDriver Monitor
    command: C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
    file: C:\PROGRA~1\SYMNET~1\SNDMon.exe
    size: 100056
    MD5: f9418981ee4d7e995d359833adab59d5

    Located: HK_LM:Run, URLLSTCK.exe
    command: C:\Program Files\Norton Internet Security\UrlLstCk.exe
    file: C:\Program Files\Norton Internet Security\UrlLstCk.exe
    size: 34432
    MD5: f78f7e1890239e00487c083255abe209

    Located: HK_LM:Run, WINCINEMAMGR
    command: "C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe"
    file: C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    size: 270336
    MD5: 46a6365179ee6c91a6b483b36794049a

    Located: HK_LM:RunServices, DJSNetCN
    command: C:\Program Files\Fichiers communs\Symantec Shared\DJSNETCN.exe
    file: C:\Program Files\Fichiers communs\Symantec Shared\DJSNETCN.exe
    size: 43152
    MD5: 0bda75a3de9dde31b77ef830c3cc2ff1

    Located: HK_CU:Run, ASUS SmartDoctor
    command: C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe /start
    file:

    Located: HK_CU:Run, LogitechSoftwareUpdate
    command: "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
    file: C:\Program Files\Logitech\Video\ManifestEngine.exe
    size: 196608
    MD5: d679346402cbf2330cad1fcf815c6524

    Located: HK_CU:Run, updateMgr
    command: C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
    file:

    Located: Démarrage (tous utilisateurs), InterVideo WinCinema Manager.lnk
    command: C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    file: C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    size: 270336
    MD5: 46a6365179ee6c91a6b483b36794049a

    Located: Démarrage (tous utilisateurs), Lancement rapide d'Adobe Reader.lnk
    command: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    file: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    size: 29696
    MD5: 43362b96870ce8649f4f2ec893da93f0

    Located: Démarrage (tous utilisateurs), Logitech Desktop Messenger.lnk
    command: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    file: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    size: 450560
    MD5: a5e4cd281c93e174181c5873fafd4f16

    Located: Démarrage (utilisateur), Démarrage d'Office.lnk
    command: C:\Program Files\Microsoft Office\Office\OSA.EXE
    file: C:\Program Files\Microsoft Office\Office\OSA.EXE
    size: 51984
    MD5: d06276d4cad46cdceabefdeb1a0d3c0d

    Located: Démarrage (utilisateur), Microsoft Recherche accélérée.lnk
    command: C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
    file: C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
    size: 111376
    MD5: 505bec5c5179ab1cf642003ead916be7

    Located: Démarrage (utilisateur), OpenOffice.org 2.0.lnk
    command: C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
    file: C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
    size: 61440
    MD5: 7ad01eef5a7689da15d8597bf5790884

    Located: System.ini, crypt32chain
    command: crypt32.dll
    file: crypt32.dll

    Located: System.ini, cryptnet
    command: cryptnet.dll
    file: cryptnet.dll

    Located: System.ini, cscdll
    command: cscdll.dll
    file: cscdll.dll

    Located: System.ini, ScCertProp
    command: wlnotify.dll
    file: wlnotify.dll

    Located: System.ini, Schedule
    command: wlnotify.dll
    file: wlnotify.dll

    Located: System.ini, sclgntfy
    command: sclgntfy.dll
    file: sclgntfy.dll

    Located: System.ini, SensLogn
    command: WlNotify.dll
    file: WlNotify.dll

    Located: System.ini, termsrv
    command: wlnotify.dll
    file: wlnotify.dll

    Located: System.ini, wlballoon
    command: wlnotify.dll
    file: wlnotify.dll

    --- Browser helper object list ---
    {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
    BHO name:
    CLSID name: SSVHelper Class
    Path: C:\Program Files\Java\jre1.5.0_06\bin\
    Long name: ssv.dll
    Short name:
    Date (created): 10/11/2005 13:03:56
    Date (last access): 11/12/2005 20:21:02
    Date (last write): 10/11/2005 13:22:10
    Filesize: 184423
    Attributes: archive
    MD5: F01726F7CA8538FDD4663C9DB8FEAEDC
    CRC32: 0111B892
    Version: 5.0.60.5

    --- ActiveX list ---
    {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} ()
    DPF name:
    CLSID name:
    Installer: C:\WINDOWS\Downloaded Program Files\ZylomGamesPlayer.inf
    Codebase: http://game01.zylom.com/activex/zylomgamesplayer.cab

    {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} (Java Runtime Environment 1.5.0)
    DPF name: Java Runtime Environment 1.5.0
    CLSID name: Java Plug-in 1.5.0_06
    Installer:
    Codebase: http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
    Path: C:\Program Files\Java\jre1.5.0_06\bin\
    Long name: NPJPI150_06.dll
    Short name: NPJPI1~1.DLL
    Date (created): 10/11/2005 13:03:56
    Date (last access): 11/12/2005 16:23:48
    Date (last write): 10/11/2005 13:22:10
    Filesize: 69746
    Attributes: archive
    MD5: D2CF6BB5E9020E6707B62575F8083954
    CRC32: 7F39DC54
    Version: 5.0.60.5

    {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.5.0)
    DPF name: Java Runtime Environment 1.5.0
    CLSID name: Java Plug-in 1.5.0_06
    Installer:
    Codebase: http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
    Path: C:\Program Files\Java\jre1.5.0_06\bin\
    Long name: NPJPI150_06.dll
    Short name: NPJPI1~1.DLL
    Date (created): 10/11/2005 13:03:56
    Date (last access): 11/12/2005 20:52:44
    Date (last write): 10/11/2005 13:22:10
    Filesize: 69746
    Attributes: archive
    MD5: D2CF6BB5E9020E6707B62575F8083954
    CRC32: 7F39DC54
    Version: 5.0.60.5

    {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} ()
    DPF name:
    CLSID name:
    Installer: C:\WINDOWS\Downloaded Program Files\zylomloader.inf
    Codebase: http://eu.download.games.yahoo.com/zylom/activex/zylomloader.cab

    --- Process list ---
    PID: 0 ( 0) [System]
    PID: 804 ( 4) \SystemRoot\System32\smss.exe
    PID: 876 ( 804) \??\C:\WINDOWS\system32\csrss.exe
    PID: 900 ( 804) \??\C:\WINDOWS\system32\winlogon.exe
    PID: 944 ( 900) C:\WINDOWS\system32\services.exe
    size: 108544
    MD5: 732E0B1ABAACE15D80EC19056B0A2AF9
    PID: 956 ( 900) C:\WINDOWS\system32\lsass.exe
    size: 13312
    MD5: 9F3744A5C6F49291A7A685040A013399
    PID: 1100 ( 944) C:\WINDOWS\system32\svchost.exe
    size: 14336
    MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
    PID: 1148 ( 944) C:\WINDOWS\system32\svchost.exe
    size: 14336
    MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
    PID: 1192 ( 944) C:\WINDOWS\System32\svchost.exe
    size: 14336
    MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
    PID: 1240 ( 944) C:\WINDOWS\system32\svchost.exe
    size: 14336
    MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
    PID: 1324 ( 944) C:\WINDOWS\system32\svchost.exe
    size: 14336
    MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
    PID: 1512 ( 944) C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
    size: 235120
    MD5: 8F3A6DA3CA461D9635901FC42FEEE570
    PID: 1648 (1632) C:\WINDOWS\Explorer.EXE
    size: 1036288
    MD5: 4C33E5B9A6197B6ED215F6CFBA0A2DAA
    PID: 1700 ( 944) C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
    size: 181872
    MD5: 5655B64E2989EA0380C2FD9004ED1B6C
    PID: 1712 ( 944) C:\Program Files\Norton Internet Security\ISSVC.exe
    size: 83584
    MD5: 2D943734CF559CF5EF16610A4A429BCE
    PID: 1724 ( 944) C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
    size: 206552
    MD5: 443E397643965E08C5AB6A6CAA732B97
    PID: 1796 ( 944) C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
    size: 173160
    MD5: 08FA56B7C13B4CBF0E5D351AECAD92B1
    PID: 1816 ( 944) C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
    size: 198256
    MD5: 8B975B91F6339389B11D30B7FE87C8DE
    PID: 196 ( 944) C:\WINDOWS\system32\spoolsv.exe
    size: 57856
    MD5: DA81EC57ACD4CDC3D4C51CF3D409AF9F
    PID: 276 ( 944) C:\WINDOWS\ATKKBService.exe
    size: 253952
    MD5: 3F23027D8F33754F6E084B6E59E0B0BF
    PID: 316 ( 944) C:\Program Files\Fichiers communs\Symantec Shared\DJSNETCN.exe
    size: 43152
    MD5: 0BDA75A3DE9DDE31B77EF830C3CC2FF1
    PID: 340 ( 944) C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
    size: 20543
    MD5: B81F8778F5BB485F3B75114F0C99A49F
    PID: 376 ( 944) C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    size: 177288
    MD5: 998E500C07D76D4E7AAEFBA32EDC26D5
    PID: 448 ( 944) C:\Program Files\Norton Utilities\NPROTECT.EXE
    size: 139264
    MD5: D64AD3C38E8774D9839CE3DE861909C5
    PID: 540 ( 340) C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
    size: 20543
    MD5: B81F8778F5BB485F3B75114F0C99A49F
    PID: 580 ( 944) C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
    size: 131136
    MD5: CF0FA7F8366002692BF7E46805F531B9
    PID: 2528 ( 944) C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
    size: 57412
    MD5: ACE9C161B76C066288A17FEA4BB7BFFC
    PID: 2552 ( 944) C:\WINDOWS\system32\nvsvc32.exe
    size: 131139
    MD5: 0B24AB7CC5B7ED2AA7F438A4072459F4
    PID: 2592 ( 944) C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
    size: 198368
    MD5: 63EE66B5229A14809E5D89A9275325AD
    PID: 2692 ( 944) C:\Program Files\Speed Disk\nopdb.exe
    size: 172065
    MD5: 5EF5D09F97E0113B35F916B57B0ADC75
    PID: 2708 ( 944) C:\WINDOWS\system32\svchost.exe
    size: 14336
    MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
    PID: 2768 ( 944) C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
    size: 826512
    MD5: 4770F773C1417B913196FBF9E13A5ECB
    PID: 2796 ( 944) C:\WINDOWS\system32\wdfmgr.exe
    size: 38912
    MD5: AB0A7CA90D9E3D6A193905DC1715DED0
    PID: 2856 ( 944) C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
    size: 139264
    MD5: B47576825F0A397E1C807C7EC23E1560
    PID: 3156 ( 944) C:\WINDOWS\System32\alg.exe
    size: 44544
    MD5: 2FE681D10C5FC343DBBC0610B8DD4D24
    PID: 3328 (1648) C:\WINDOWS\SOUNDMAN.EXE
    size: 77824
    MD5: FF86E640E4E0FD18CFB4696B38867222
    PID: 3372 (1648) C:\WINDOWS\system32\CmWatch.exe
    size: 229376
    MD5: 5D7D38CDA0B45C1FD1698CE6798C0F50
    PID: 3504 (1648) C:\WINDOWS\system32\GSICON.EXE
    size: 90112
    MD5: 3F1CDF749FE69C525A1A9A7FF3C3D8D1
    PID: 3512 (1648) C:\WINDOWS\system32\dslagent.exe
    size: 16384
    MD5: 989E130E5E841BEA68BA361D292A0207
    PID: 3644 (1648) C:\WINDOWS\system32\RUNDLL32.EXE
    size: 33792
    MD5: F5402CD47B7389DDC21F92119A906EEE
    PID: 3660 (1648) C:\WINDOWS\system32\LVCOMSX.EXE
    size: 221184
    MD5: 5BA8A7DA5D0573F7923E02B260AAD2F1
    PID: 3680 (1648) C:\Program Files\Logitech\Video\LogiTray.exe
    size: 217088
    MD5: 2D3BCCA5C7CA55FEDD60E3336D3A92AF
    PID: 3696 (1648) C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
    size: 131072
    MD5: 37FFF683AEE7F09F5F7087138192BF02
    PID: 3728 (1648) C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
    size: 58992
    MD5: 565126CC4A79CA46D555FFDD479E71E3
    PID: 3836 (1648) C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    size: 36975
    MD5: 61A3A9D5D98BF0331DF5B716144A8100
    PID: 4016 (1100) C:\Program Files\Logitech\Video\FxSvr2.exe
    size: 192512
    MD5: 1B11C113DC4383C6C07A45BFFBDC7D63
    PID: 3724 (1648) C:\Program Files\Internet Explorer\IEXPLORE.EXE
    size: 93184
    MD5: 833E2B3F0E2484C0F2B804AE871B4381
    PID: 4412 (1648) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
    size: 4393096
    MD5: 09CA174A605B480318731E691DC98539
    PID: 4856 (1100) C:\Program Files\Messenger\msmsgs.exe
    size: 1694208
    MD5: 74E6E96C6F0E2ECA4EDBB7F7A468F259
    PID: 4936 (1100) C:\WINDOWS\system32\wbem\wmiprvse.exe
    size: 218112
    MD5: DB493DD6BC2FA5B38811F2BCDCF03D2B
    PID: 4 ( 0) System

    --- Browser start & search pages list ---
    Spybot - Search & Destroy browser pages report, 11/12/2005 20:52:43

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
    C:\windows\system32\blank.htm
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
    http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
    http://www.skynet.be/
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
    http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\@
    http://home.microsoft.com/access/autosearch.asp?p=%s
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
    C:\windows\system32\blank.htm
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
    http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
    http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
    http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
    http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant
    http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
    http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm

    --- Winsock Layered Service Provider list ---
    Protocol 0: NVIDIA App Filter over [MSAFD Tcpip [TCP/IP]]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 1: NVIDIA App Filter over [MSAFD Tcpip [UDP/IP]]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 2: NVIDIA App Filter over [MSAFD Tcpip [RAW/IP]]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 3: NVIDIA App Filter over [RSVP UDP Service Provider]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 4: NVIDIA App Filter over [RSVP TCP Service Provider]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 5: NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{DF5E46B7-35FE-4985-A721-C0C0DC04A15A}] SEQPACKET 7]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 6: NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{DF5E46B7-35FE-4985-A721-C0C0DC04A15A}] DATAGRAM 7]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 7: NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{5695C6CB-DCEA-4EA0-8E5A-E1A2D94C5F22}] SEQPACKET 4]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 8: NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{5695C6CB-DCEA-4EA0-8E5A-E1A2D94C5F22}] DATAGRAM 4]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 9: NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{597E1A74-A576-4FD1-92A1-F1ECAC4E84F8}] SEQPACKET 3]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 10: NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{597E1A74-A576-4FD1-92A1-F1ECAC4E84F8}] DATAGRAM 3]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 11: NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{E36BD9C6-90B8-4DD0-BC68-EA8FB9961A87}] SEQPACKET 0]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 12: NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{E36BD9C6-90B8-4DD0-BC68-EA8FB9961A87}] DATAGRAM 0]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 13: NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{984CD0BE-06D7-40BE-8277-728496D34362}] SEQPACKET 1]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 14: NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{984CD0BE-06D7-40BE-8277-728496D34362}] DATAGRAM 1]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 15: NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{E7BCE046-B3E0-422D-8121-CF73589166F1}] SEQPACKET 2]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 16: NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{E7BCE046-B3E0-422D-8121-CF73589166F1}] DATAGRAM 2]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 17: NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{7DAED0A9-F022-460D-944C-5F3D15A3DB62}] SEQPACKET 5]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 18: NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{7DAED0A9-F022-460D-944C-5F3D15A3DB62}] DATAGRAM 5]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 19: NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{400BCACE-7340-4926-B59F-C247864449E2}] SEQPACKET 6]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 20: NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{400BCACE-7340-4926-B59F-C247864449E2}] DATAGRAM 6]
    GUID: {4F949FA1-7C6E-4E5D-B13A-75364173CCFC}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    Protocol 42: NVIDIA App Filter
    GUID: {561A1E9F-D78B-40E3-866D-4CE5CF6BB83F}
    Filename: %SYSTEMROOT%\system32\nvappfilter.dll

    --- Uninstall list ---
    Ad-Aware SE Personal 1.06 (Ad-Aware SE Personal)
    uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
    publisher: Lavasoft
    help link: http://www.lavasoft.com

    (AddressBook)

    BeClean 1.4 (BeClean_is1)
    uninstall cmd: "C:\Program Files\BeClean\unins000.exe"
    publisher: Budy Setiawan Kusumah
    help link: http://boozet.xepher.net

    (Branding)

    C-Media USB Mass Storage Driver (C-Media Card Reader Driver)
    uninstall cmd: C:\WINDOWS\system32\CmCardRm.exe

    CCleaner (remove only) (CCleaner)
    uninstall cmd: "C:\Program Files\CCleaner\uninst.exe"

    (Connection Manager)

    (DirectAnimation)

    (DirectDrawEx)

    (DXM_Runtime)

    (Fontcore)

    (ICW)

    (IE40)

    (IE4Data)

    (IE5BAKEX)

    (IEData)

    (InstallShield Uninstall Information)

    ASUS SmartDoctor 4.78 (InstallShield_{12E11FBB-7CA6-4A86-834D-5E6390D51009})
    version: 72220672
    version (major): 4
    version (minor): 78
    estimated size: 9287
    install date: 20051028
    install source: C:\Documents and Settings\User\Mes documents\Benoit\INTERNET\Archives d'installation\SmartDoc478\SmartDoc\
    uninstall cmd: C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{12E11FBB-7CA6-4A86-834D-5E6390D51009} /l1036
    publisher: Nom de votre société
    comments: SmartDoctor moinitors graphic card's healthy
    contact: http://www.asus.com.tw
    help link: http://www.asus.com.tw
    help telephone: 886-2-28943447

    ASUS Video Security 3.0.0.8 (InstallShield_{169E414A-37C7-434E-9021-27A03AE087CD})
    version: 50331648
    version (major): 3
    estimated size: 5848
    install date: 20051008
    install source: E:\Utility\VideoSec\
    uninstall cmd: C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{169E414A-37C7-434E-9021-27A03AE087CD}
    publisher: ASUSTek Computer Inc.
    comments:
    contact: http://www.asus.com.tw
    help link: http://www.asus.com.tw
    help telephone: 886-2-29843447
    readme: C:\Program Files\ASUS\ASUS Video Security\ReadMe.txt

    NVIDIA ForceWare Network Access Manager 2.03.467 (InstallShield_{1F6423DE-7959-4178-80E0-023C7EAA5347})
    version: 33751507
    version (major): 2
    version (minor): 3
    estimated size: 38633
    install date: 20051209
    install source: C:\WINDOWS\Downloaded Installations\{9DF687E7-381C-4882-A05F-4ADF1DD53394}\
    uninstall cmd: C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{1F6423DE-7959-4178-80E0-023C7EAA5347} /l1036
    publisher: NVIDIA Corporation
    comments: 0
    contact: 0
    help link: 0
    help telephone: 0
    readme: 0

    (InstallShield_{524C56E0-6560-45D6-8C37-34C9DDBE3BF6})

    ASUS GameFace Live 2.50.0002 (InstallShield_{68D8533B-9EE7-46AB-B8B2-D643F888C5DF})
    version: 36831234
    version (major): 2
    version (minor): 50
    estimated size: 22032
    install date: 20051008
    install location: C:\Program Files\ASUS\ASUS GameFace Live\
    install source: E:\Utility\GameFace\
    uninstall cmd: C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{68D8533B-9EE7-46AB-B8B2-D643F888C5DF}
    publisher: ASUSTeK Computer Inc.
    contact: Technical Support Department
    help link: http://www.asus.com
    help telephone: +886-2-2894-3447

    ASUS Utilities 1.02 (InstallShield_{F4026ECE-9F19-43EC-9FC8-474C2DB7D2BE})
    version: 16908288
    version (major): 1
    version (minor): 2
    install date: 20051008
    install location: C:\Program Files\ASUS\
    install source: E:\utility\
    uninstall cmd: C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{F4026ECE-9F19-43EC-9FC8-474C2DB7D2BE} /l1036
    publisher: ASUSTek Computer Inc.
    contact: Technical Dept.
    help link: http://www.asus.com.tw
    help telephone: +886-2-28943447

    (KB884016)

    (KB893803)

    Language pack for Ad-Aware SE (Language pack for Ad-Aware SE)
    uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\INSTALL.LOG
    publisher: Lavasoft
    help link: http://www.lavasoft.de

    LiveReg (Symantec Corporation) 3.1.0 (LiveReg)
    install location: C:\Program Files\Fichiers communs\Symantec Shared\LiveReg
    uninstall cmd: C:\Program Files\Fichiers communs\Symantec Shared\LiveReg\VCSetup.exe /REMOVE
    publisher: Symantec Corporation

    LiveUpdate 2.6 (Symantec Corporation) 2.6.14.0 (LiveUpdate)
    install location: C:\Program Files\Symantec\LiveUpdate
    uninstall cmd: C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
    publisher: Symantec Corporation

    Logitech Print Service (Logitech Print Service)
    uninstall cmd: C:\PROGRA~1\Logitech\PRINTS~1\UNWISE.EXE C:\PROGRA~1\Logitech\PRINTS~1\INSTALL.LOG

    Macromedia Shockwave Player 10.1.0.11 (Macromedia Shockwave Player)
    uninstall cmd: C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
    publisher: Macromedia, Inc.
    help link: http://www.macromedia.com/fr/support/shockwave

    Micro Application - Mah-Jong II (Mah-Jong II)
    uninstall cmd: C:\WINDOWS\IsUn040c.exe -f"c:\documents and settings\user\mes documents\jeux\Uninst.isu"

    (MobileOptionPack)

    (MPlayer2)

    (MSI30-Beta1)

    (MSI30-Beta2)

    (MSI30-KB884016)

    (MSI30-RC1)

    (MSI30-RC2)

    (MSI30a-KB884016)

    (MSI31-Beta)

    (MSI31-RC1)

    MSN (MSNINST)
    uninstall cmd: C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP

    (Nero - Burning Rom!UninstallKey)
    uninstall cmd: C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL

    Nero Suite (NeroMultiInstaller!UninstallKey)
    uninstall cmd: C:\Program Files\Fichiers communs\Ahead\Uninstall\Setup.exe /uninstall

    (NeroVision!UninstallKey)
    uninstall cmd: C:\WINDOWS\UNNeroVision.exe /UNINSTALL

    (NetMeeting)

    (NMPUninstallKey)
    uninstall cmd: C:\WINDOWS\UNNMP.exe /UNINSTALL

    Norton Speed Disk 6.0 pour Windows NT (Norton Speed Disk)

    Norton Utilities 2002 pour Windows (Norton Utilities)
    version (major): 6
    install location: C:\Program Files\Norton Utilities\NORTON.EXE
    uninstall cmd: C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Norton Utilities\Uninst.isu" -c"C:\Program Files\Norton Utilities\_ISNU.DLL"
    publisher: Symantec Corporation

    NVIDIA Drivers (NVIDIA Drivers)
    uninstall cmd: C:\WINDOWS\system32\NVUNINST.EXE UninstallGUI

    Microsoft Office 97 Professional (Office8.0)
    uninstall cmd: C:\Program Files\Microsoft Office\Office\Install\Acme.exe /w Off97Pro.STF

    (OutlookExpress)

    (PCHealth)
    uninstall cmd: rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

    Programme de gestion Camera de Logitech® (QcDrv)
    install location: C:\Program Files\Fichiers communs\Logitech\QCDRV
    install source: D:\Drivers\Bin
    uninstall cmd: "C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT

    (SchedulingAgent)

    (Sevinst)

    Shareaza version 2.2.1.0 2.2.1.0 (Shareaza_is1)
    install location: C:\Program Files\Shareaza\
    uninstall cmd: "C:\Program Files\Shareaza\Uninstall\unins000.exe"
    publisher: Shareaza Development Team
    comments: Shareaza Ultimate File Sharing
    help link: http://www.shareaza.com/?id=support

    (Shockwave)

    Macromedia Flash Player 8 8 (ShockwaveFlash)
    uninstall cmd: RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\swflash.inf,DefaultUninstall,5
    publisher: Macromedia
    help link: http://www.macromedia.com/go/flashplayer_support/

    Spybot - Search & Destroy 1.4 1.4 (Spybot - Search & Destroy_is1)
    install location: C:\Program Files\Spybot - Search & Destroy\
    uninstall cmd: "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
    publisher: Safer Networking Limited

    StartupRun 1.22 (StartupRun)
    install location: C:\Program Files\StartupRun
    uninstall cmd: C:\WINDOWS\zipinst.exe /uninst "C:\Program Files\StartupRun\uninst1~.nsu"
    publisher: NirSoft

    Norton Internet Security 2005 (Symantec Corporation) 8.0.6.2 (SymSetup.{A93C9E60-29B6-49da-BA21-F70AC6AADE20})
    install location: C:\Program Files\Norton Internet Security
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS
    uninstall cmd: C:\Program Files\Fichiers communs\Symantec Shared\SymSetup\{A93C9E60-29B6-49da-BA21-F70AC6AADE20}.exe /X
    publisher: Symantec Corporation

    Windows Media Format Runtime (Windows Media Format Runtime)
    uninstall cmd: "C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll

    ASUS SmartDoctor 4.78 ({12E11FBB-7CA6-4A86-834D-5E6390D51009})
    version: 72220672
    version (major): 4
    version (minor): 78
    estimated size: 9287
    install date: 20051028
    install source: C:\Documents and Settings\User\Mes documents\Benoit\INTERNET\Archives d'installation\SmartDoc478\SmartDoc\
    publisher: Nom de votre société
    comments: SmartDoctor moinitors graphic card's healthy
    contact: http://www.asus.com.tw
    help link: http://www.asus.com.tw
    help telephone: 886-2-28943447

    Norton Internet Security 8.0.6.2 ({12E2B9E9-05B1-407d-B0FD-B5F350535125})
    version: 134217734
    version (major): 8
    estimated size: 15067
    install date: 20051211
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\Setup\
    uninstall cmd: MsiExec.exe /I{12E2B9E9-05B1-407d-B0FD-B5F350535125}
    publisher: Symantec Corporation

    ASUS Video Security 3.0.0.8 ({169E414A-37C7-434E-9021-27A03AE087CD})
    version: 50331648
    version (major): 3
    estimated size: 5848
    install date: 20051008
    install source: E:\Utility\VideoSec\
    publisher: ASUSTek Computer Inc.
    comments:
    contact: http://www.asus.com.tw
    help link: http://www.asus.com.tw
    help telephone: 886-2-29843447
    readme: C:\Program Files\ASUS\ASUS Video Security\ReadMe.txt

    NVIDIA ForceWare Network Access Manager 2.03.467 ({1F6423DE-7959-4178-80E0-023C7EAA5347})
    version: 33751507
    version (major): 2
    version (minor): 3
    estimated size: 38633
    install date: 20051209
    install source: C:\WINDOWS\Downloaded Installations\{9DF687E7-381C-4882-A05F-4ADF1DD53394}\
    publisher: NVIDIA Corporation
    comments: 0
    contact: 0
    help link: 0
    help telephone: 0
    readme: 0

    SymNet 5.4.4.17 ({2DA85B02-13C0-4E6D-9A76-22E6B3DD0CB2})
    version: 84148228
    version (major): 5
    version (minor): 4
    estimated size: 2722
    install date: 20051211
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\Support\SymNet\
    uninstall cmd: MsiExec.exe /I{2DA85B02-13C0-4E6D-9A76-22E6B3DD0CB2}
    publisher: Symantec Corporation

    2.0.14.551 ({2FCE4FC5-6930-40E7-A4F1-F862207424EF})
    version (major): 2
    install location: C:\Program Files\InterVideo\WCreator2
    uninstall cmd: C:\ADSL\setup.exe REMOVEALL
    publisher: InterVideo Inc.
    contact: support@intervideo.com
    help link: http://www.intervideo.com/jsp/Support.jsp

    ASUS Enhanced Display Driver 6.14.10.0121 ({315ACD04-BCEB-478B-9B1D-5431D0E6CB11})
    version: 101580810
    install location: C:\Program Files\ASUSTeK COMPUTER INC.\ASUS Enhanced Display Driver
    uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{315ACD04-BCEB-478B-9B1D-5431D0E6CB11}\setup.exe" -l0x40c

    J2SE Runtime Environment 5.0 Update 6 1.5.0.60 ({3248F0A8-6813-11D6-A77B-00B0D0150060})
    version: 17104896
    version (major): 1
    version (minor): 5
    estimated size: 122273
    install date: 20051211
    install source: http://jdl.sun.com/webapps/download/GetFile/1.5.0_06-b05/windows-i586//
    uninstall cmd: MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
    publisher: Sun Microsystems, Inc.
    contact: http://java.com
    help link: http://java.com
    readme: C:\Program Files\Java\jre1.5.0_06\README.txt

    WebFldrs XP 9.50.7523 ({350C940c-3D7C-4EE8-BAA9-00BCB3D54227})
    version: 154279267
    version (major): 9
    version (minor): 50
    estimated size: 2608
    install date: 20051006
    install source: C:\WINDOWS\system32\
    publisher: Microsoft Corporation
    help link: http://www.microsoft.com/windows

    Norton AntiSpam 2005.1.0.163 ({3B29A786-5803-4e9e-9B58-3014A5B4E519})
    version (major): 2005
    version (minor): 1
    estimated size: 929
    install date: 20051211
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\Setup\
    uninstall cmd: MsiExec.exe /I{3B29A786-5803-4e9e-9B58-3014A5B4E519}
    publisher: Symantec Corporation

    Google Earth 3.0.0548 ({3DE5E7D4-7B88-403C-A3FD-2017A8240C5B})
    version: 50332196
    install date: 20051018
    install location: C:\Program Files\Google\Google Earth
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\bye9A.tmp\Disk1\
    uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}\setup.exe" -l0x9 -removeonly
    publisher: Google

    ({40602E2C-AB5C-4887-8093-3BFE5B8B95B3})
    uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{40602E2C-AB5C-4887-8093-3BFE5B8B95B3}\setup.exe" REMOVEALL

    Visionneuse Journal Windows Microsoft 1.5.2316.0 ({43DCF766-6838-4F9A-8C91-D92DA586DFA8})
    version: 17107212
    version (major): 1
    version (minor): 5
    estimated size: 3864
    install date: 20051126
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\IXP000.TMP\
    uninstall cmd: MsiExec.exe /X{43DCF766-6838-4F9A-8C91-D92DA586DFA8}
    publisher: Microsoft
    comments: Visionneuse de documents créés avec l'application Journal Windows.
    contact: Microsoft

    Norton Internet Security 8.0.6.2 ({449F3A9E-9903-4a0d-A209-08030D45A935})
    version: 134217734
    version (major): 8
    estimated size: 717
    install date: 20051211
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\Setup\
    uninstall cmd: MsiExec.exe /I{449F3A9E-9903-4a0d-A209-08030D45A935}
    publisher: Symantec Corporation

    Norton Internet Security 8.0.6.2 ({48185814-A224-447a-81DA-71BD20580E1B})
    version: 134217734
    version (major): 8
    estimated size: 2321
    install date: 20051211
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\Setup\
    uninstall cmd: MsiExec.exe /I{48185814-A224-447a-81DA-71BD20580E1B}
    publisher: Symantec Corporation

    Norton Internet Security 8.0.6.2 ({526AD5DC-CFC4-4f2a-8442-C84CC91D6C7F})
    version: 134217734
    version (major): 8
    estimated size: 1081
    install date: 20051211
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\Setup\
    uninstall cmd: MsiExec.exe /I{526AD5DC-CFC4-4f2a-8442-C84CC91D6C7F}
    publisher: Symantec Corporation

    Norton AntiSpam 2005.1.0.163 ({5677563D-0CB1-485f-9E18-C5025306BB3F})
    version (major): 2005
    version (minor): 1
    estimated size: 10147
    install date: 20051211
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\Setup\
    uninstall cmd: MsiExec.exe /I{5677563D-0CB1-485f-9E18-C5025306BB3F}
    publisher: Symantec Corporation

    Windows Genuine Advantage v1.3.0254.0 1.3.0254.0 ({63569CE9-FA00-469C-AF5C-E5D4D93ACF91})
    version: 16974078
    version (major): 1
    version (minor): 3
    estimated size: 519
    install date: 20051018
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\IXP000.TMP\
    uninstall cmd: MsiExec.exe /I{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}
    publisher: Microsoft
    comments: Your Comments
    contact: Customer Support Department
    help link: http://www.microsoft.com/genuine/downloads/whyValidate.aspx/help
    help telephone: 1-425.882.8080

    PowerDVD ({6811CAA0-BF12-11D4-9EA1-0050BAE317E1})
    uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall

    ASUS GameFace Live 2.50.0002 ({68D8533B-9EE7-46AB-B8B2-D643F888C5DF})
    version: 36831234
    version (major): 2
    version (minor): 50
    estimated size: 22032
    install date: 20051008
    install location: C:\Program Files\ASUS\ASUS GameFace Live\
    install source: E:\Utility\GameFace\
    publisher: ASUSTeK Computer Inc.
    contact: Technical Support Department
    help link: http://www.asus.com
    help telephone: +886-2-2894-3447

    SPBBC 1.00.0000 ({77772678-817F-4401-9301-ED1D01A8DA56})
    version: 16777216
    version (major): 1
    estimated size: 1423
    install date: 20051211
    install location: C:\Program Files\Norton Internet Security\Norton AntiVirus\
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\Support\SPBBC\
    uninstall cmd: MsiExec.exe /I{77772678-817F-4401-9301-ED1D01A8DA56}
    publisher: Your Company Name

    Symantec SCSSDist MSI 1.0.0 ({845AF1DD-3618-471F-9745-B1CD9378F669})
    version: 16777216
    version (major): 1
    estimated size: 240
    install date: 20051211
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\Setup\
    uninstall cmd: MsiExec.exe /I{845AF1DD-3618-471F-9745-B1CD9378F669}
    publisher: Symantec Corporation

    InterVideo Launcher ({8AEEE6D6-C95D-465A-B8D3-B7AE2FA7B8B4})
    uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8AEEE6D6-C95D-465A-B8D3-B7AE2FA7B8B4}\setup.exe" REMOVEALL

    3114 SATARAID5 ({8E4CF4E6-062E-11D8-BCF1-005004748D87})
    uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8E4CF4E6-062E-11D8-BCF1-005004748D87}\Setup.exe" -l0x9

    Logitech Desktop Messenger ({900B1197-53F5-4F46-A882-2CFFFE2EEDCB})
    uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\Setup.exe" -l0x40c UNINSTALL

    Microsoft Office PowerPoint Viewer 2003 11.0.6458.0 ({90AF040C-6000-11D3-8CFE-0150048383C9})
    version: 184555834
    version (major): 11
    estimated size: 4111
    install date: 20051019
    install location: C:\Program Files\Microsoft Office\
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\IXP000.TMP\
    uninstall cmd: MsiExec.exe /X{90AF040C-6000-11D3-8CFE-0150048383C9}
    publisher: Microsoft Corporation
    help link: http://www.microsoft.com/support

    2.5-B9.55 ({96BF9A2A-1835-4DEE-A94F-9EA4F77976BF})
    version (major): 2
    version (minor): 5
    install location: C:\Program Files\InterVideo\DVDCopy 2
    uninstall cmd: C:\ADSL\setup.exe --u:{96BF9A2A-1835-4DEE-A94F-9EA4F77976BF}
    publisher: InterVideo Inc.
    contact: support@intervideo.com
    help link: http://www.intervideo.com/jsp/Support.jsp

    Norton Internet Security 8.0.6.2 ({A93C9E60-29B6-49da-BA21-F70AC6AADE20})
    version: 134217734
    version (major): 8
    estimated size: 5585
    install date: 20051211
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\Setup\
    uninstall cmd: MsiExec.exe /I{A93C9E60-29B6-49da-BA21-F70AC6AADE20}
    publisher: Symantec Corporation

    Adobe Reader 7.0.5 - Français 7.0.5 ({AC76BA86-7AD7-1036-7B44-A70000000000})
    version: 117440517
    version (major): 7
    estimated size: 75392
    install date: 20051019
    install source: C:\Program Files\Adobe\Acrobat 7.0\Setup Files\RdrBig\FRA\
    uninstall cmd: MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70000000000}
    publisher: Adobe Systems Incorporated
    comments:
    contact:
    help link: http://www.adobe.fr/support/main.html
    help telephone:
    readme: C:\Program Files\Adobe\Acrobat 7.0\Reader\Readme.htm

    Office Animation Runtime 11.0.5510.0 ({AEEB3643-71DE-414d-9E3F-1159177FE211})
    version: 184554886
    version (major): 11
    estimated size: 358
    install date: 20051025
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\IXP000.TMP\
    uninstall cmd: MsiExec.exe /X{AEEB3643-71DE-414d-9E3F-1159177FE211}
    publisher: Microsoft Corporation
    help link: http://www.microsoft.com
    help telephone: 555-555-5555

    Tom Clancy's Rainbow Six 3: Raven Shield 1.60.412 1.60.412 ({AF131494-F5D8-45C5-938C-D5F020CF1B0D})
    version: 16777216
    install location: C:\Program Files\Red Storm Entertainment\RavenShield
    uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AF131494-F5D8-45C5-938C-D5F020CF1B0D}\setup.exe" -l0x40c
    publisher: Red Storm Entertainment
    comments: This Game Rocks!

    MSRedist 1.0.0.0 ({B7C61755-DB48-4003-948F-3D34DB8EAF69})
    version: 16777216
    version (major): 1
    estimated size: 4507
    install date: 20051211
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\Support\Redist\
    uninstall cmd: MsiExec.exe /I{B7C61755-DB48-4003-948F-3D34DB8EAF69}
    publisher: Symantec Corporation

    MSN Messenger 7.5 7.5.0311.0 ({BAFD3C1E-03EC-11DA-BFBD-00065BBDC0B5})
    version: 117768503
    version (major): 7
    version (minor): 5
    estimated size: 16997
    install date: 20051103
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\IXP000.TMP\
    uninstall cmd: MsiExec.exe /I{BAFD3C1E-03EC-11DA-BFBD-00065BBDC0B5}
    publisher: Microsoft Corporation

    Nico Néerlandais Aqualand 10 12 2.00.0000 ({C2323807-2F5E-11D5-BA64-0050BABAFA2C})
    version: 33554432
    version (major): 2
    estimated size: 4213
    install date: 20051107
    install source: D:\
    uninstall cmd: MsiExec.exe /X{C2323807-2F5E-11D5-BA64-0050BABAFA2C}
    publisher: Intelliga
    help link: http://www.intelliga.be
    help telephone: 0032.2.675.65.10

    Logiciel QuickCam de Logitech 8.41.0000 ({C43048A9-742C-4DAD-90D2-E3B53C9DB825})
    version: 136904704
    install location: C:\Program Files\Logitech\Video
    install source: D:\QuickCam\
    uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C43048A9-742C-4DAD-90D2-E3B53C9DB825}\setup.exe" -l0x40c
    publisher: Logitech, Inc.
    contact: Service clientèle de Logitech®
    help link: http://www.logitech.com/support
    help telephone: +33-(0) 1-43 62 34 14
    readme: C:\Program Files\Logitech\Video\Readme.txt

    Norton AntiVirus 2005 11.0.15 ({C6F5B6CF-609C-428E-876F-CA83176C021B})
    version: 184549391
    version (major): 11
    estimated size: 58769
    install date: 20051211
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\NAV\
    uninstall cmd: MsiExec.exe /X{C6F5B6CF-609C-428E-876F-CA83176C021B}
    publisher: Symantec Corporation

    Diva ADSL USB ({C7B39B40-52C3-11D4-AFCE-00E0B8138A4A})
    uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C7B39B40-52C3-11D4-AFCE-00E0B8138A4A}\setup.exe" -l0x9 REMOVE

    Marvell Miniport Driver 7.21.1.3 ({C950420B-4182-49EA-850A-A6A2ABF06C6B})
    version: 118816769
    version (major): 7
    version (minor): 21
    estimated size: 489
    install date: 20051006
    install location: C:\Program Files\Marvell\Miniport Driver\
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\_is6\
    uninstall cmd: MsiExec.exe /X{C950420B-4182-49EA-850A-A6A2ABF06C6B}
    publisher: Marvell
    help link: http://www.syskonnect.de/syskonnect/support/d0105_contact.html

    Symantec Network Drivers Update 5.5.1.6 ({CA0A1E54-CE0F-4366-B09C-A87B61DC5633})
    version: 84213761
    version (major): 5
    version (minor): 5
    estimated size: 2754
    install date: 20051211
    install source: C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec\LIVEUP~1\DOWNLO~1\EXITEM~1.4_E\
    publisher: Symantec Corporation

    Symantec Script Blocking Installer 11.0.15 ({D327AFC9-7BAA-473A-8319-6EB7A0D40138})
    version: 184549391
    version (major): 11
    estimated size: 481
    install date: 20051211
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\Support\ScrBlock\
    uninstall cmd: MsiExec.exe /I{D327AFC9-7BAA-473A-8319-6EB7A0D40138}
    publisher: Symantec

    NvMixer ({D7A6C517-11F2-419F-B5BB-27772B939698})
    uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D7A6C517-11F2-419F-B5BB-27772B939698}\Setup.exe" -uninstall

    CC_ccProxyExt 103.0.4.3 ({DA42FDCA-7C5A-43EF-9A05-CCE148ADF919})
    version: 1728053252
    version (major): 103
    estimated size: 604
    install date: 20051211
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\Support\Proxy\
    uninstall cmd: MsiExec.exe /I{DA42FDCA-7C5A-43EF-9A05-CCE148ADF919}
    publisher: Symantec

    ccCommon 103.0.4.3 ({DC367608-64A7-4BF7-92F4-8BAA25BA02DB})
    version: 1728053252
    version (major): 103
    estimated size: 5723
    install date: 20051211
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\Support\ccCommon\
    uninstall cmd: MsiExec.exe /I{DC367608-64A7-4BF7-92F4-8BAA25BA02DB}
    publisher: Symantec

    OpenOffice.org 2.0 2.0.8968 ({E2C356F6-84B5-4CCB-8FED-12E0F1C2E97B})
    version: 33563400
    version (major): 2
    estimated size: 211093
    install date: 20051020
    install source: C:\Documents and Settings\User\Mes documents\Benoit\INTERNET\Archives d'installation\Openoffice 2.0\
    uninstall cmd: MsiExec.exe /I{E2C356F6-84B5-4CCB-8FED-12E0F1C2E97B}
    publisher: OpenOffice.org
    comments: OpenOffice.org 2.0 (fr) (OOO680m3(Build:8968))
    contact: Support technique
    help link: http://www.openoffice.org
    help telephone: x-xxx-xxx-xxx

    Norton Internet Security 1.0.0 ({E3EFA461-EB83-4C3B-9C47-2C1D58A01555})
    version: 16777216
    version (major): 1
    estimated size: 1420
    install date: 20051211
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\Support\HelpMSI\
    uninstall cmd: MsiExec.exe /I{E3EFA461-EB83-4C3B-9C47-2C1D58A01555}
    publisher: Symantec Corp.

    Norton Internet Security 8.0.6.2 ({E5EE9939-259F-4DE2-8023-5C49E16A4F43})
    version: 134217734
    version (major): 8
    estimated size: 430
    install date: 20051211
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\NAV\
    uninstall cmd: MsiExec.exe /I{E5EE9939-259F-4DE2-8023-5C49E16A4F43}
    publisher: Symantec Corporation

    Norton WMI Update 2005.1.2.20 ({E85FA9A1-C241-4698-893B-DD99509B8DB0})
    version (major): 2005
    version (minor): 1
    estimated size: 613
    install date: 20051211
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\Support\SymSC\
    uninstall cmd: MsiExec.exe /X{E85FA9A1-C241-4698-893B-DD99509B8DB0}
    publisher: Symantec Corporation

    2.5-B33.29 ({F366D0C4-18F2-44A6-A4E7-7ED2DD37F3D3})
    version (major): 2
    version (minor): 5
    install location: C:\Program Files\InterVideo\Disc Master 2.5
    uninstall cmd: C:\ADSL\setup.exe --u:{F366D0C4-18F2-44A6-A4E7-7ED2DD37F3D3}
    publisher: InterVideo Inc.
    contact: support@intervideo.com
    help link: http://www.intervideo.com/jsp/Support.jsp

    ASUS Utilities 1.02 ({F4026ECE-9F19-43EC-9FC8-474C2DB7D2BE})
    version: 16908288
    version (major): 1
    version (minor): 2
    install date: 20051008
    install location: C:\Program Files\ASUS\
    install source: E:\utility\
    publisher: ASUSTek Computer Inc.
    contact: Technical Dept.
    help link: http://www.asus.com.tw
    help telephone: +886-2-28943447

    Norton WMI Update 2005.1.2.20 ({F64306A5-4C32-41bb-B153-53986527FAB4})
    version (major): 2005
    version (minor): 1
    estimated size: 613
    install date: 20051211
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\Support\SymSC\
    uninstall cmd: MsiExec.exe /X{F64306A5-4C32-41bb-B153-53986527FAB4}
    publisher: Symantec Corporation

    ccPxyCore 103.0.4.3 ({FC08587A-4F01-4188-819F-F55880022917})
    version: 1728053252
    version (major): 103
    estimated size: 2821
    install date: 20051211
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\Support\Proxy\
    uninstall cmd: MsiExec.exe /I{FC08587A-4F01-4188-819F-F55880022917}
    publisher: Symantec

    Norton Internet Security 8.0.6.2 ({FC2C0536-583C-46c0-844A-62CECAE01F22})
    version: 134217734
    version (major): 8
    estimated size: 308
    install date: 20051211
    install source: C:\DOCUME~1\User\LOCALS~1\Temp\NIS\Setup\
    uninstall cmd: MsiExec.exe /I{FC2C0536-583C-46c0-844A-62CECAE01F22}
    publisher: Symantec Corporation

    --- System Services ---
    Service (registry key): Abiosdsk
    Start: 4
    Type: 1
    Error Control: 0

    Service (registry key): abp480n5
    Start: 4
    Type: 1
    Error Control: 1

    Service (registry key): acap2000
    Start: 0
    Type: 0
    Error Control: 0

    Service (registry key): ACPI
    Display name: Pilote ACPI Microsoft
    Image path: system32\DRIVERS\ACPI.sys
    Image size: 188672
    Image MD5: 0BD94FBFC14EA3606CD6CA4C0255BAA3
    Start: 0
    Type: 1
    Error Control: 1

    Service (registry key): ACPIEC
    Start: 4
    Type: 1
    Error Control: 1

    Service (registry key): adpu160m
    Start: 4
    Type: 1
    Error Control: 1

    Service (registry key): aec
    Display name: Suppresseur d'écho acoustique (Noyau Microsoft)
    Image path: system32\drivers\aec.sys
    Image size: 142464
    Image MD5: 841F385C6CFAF66B58FBD898722BB4F0
    Start: 3
    Type: 1
    Error Control: 1

    Service (registry key): AFD
    Display name: AFD
    Description: Environnement de prise en charge de réseau AFD
    Image path: \SystemRoot\System32\drivers\afd.sys
    Start: 1
    Type: 1
    Error Control: 1

    Service (registry key): Aha154x
    Start: 4
    Type: 1
    Error Control: 1

    Service (registry key): aic78u2
    Start: 4
    Type: 1
    Error Control: 1

    Service (registry key): aic78xx
    Start: 4
    Type: 1
    Error Control: 1

    Service (registry key): ALCXWDM
    Display name: Service for Realtek AC97 Audio (WDM)
    Image path: system32\drivers\ALCXWDM.SYS
    Image size: 2297664
    Image MD5: 933933288DF5ED26D1928215C97D05C7
    Start: 3
    Type: 1
    Error Control: 1

    Service (registry key): Alerter
    Display name: Avertissement
    Description: Informe les utilisateurs et les ordinateurs sélectionnés des alertes administratives. Si ce service est arrêté, les programmes qui utilisent les alertes administratives ne les recevront pas. Si ce service est désactivé, les services qui en dépendent ne pourront pas démarrer.
    Object name: NT AUTHORITY\LocalService
    Image path: %SystemRoot%\system32\svchost.exe -k LocalService
    Image size: 14336
    Image MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
    Start: 4
    Type: 32
    Error Control: 1
    Depends On services: LanmanWorkstation

    Service (registry key): ALG
    Display name: Service de la passerelle de la couche Application
    Descripti
    0
  16. S!Ri Messages postés 932 Statut Contributeur sécurité 10
     
    Re'

    Lance SmitfraudFix,
    Selectionne 3 dans le menu

    Le problème devrait disparaitre.

    a+
    0
  17. quick157 Messages postés 1458 Statut Membre 475
     
    Re S!Ri,

    Voilà, c'est fait, problème résolu.

    Petite question subsidiare : pkoi spybot ne détectait pas Smitfraud-c en mode sans échec alors qu'il le détectait en mode normal (déjà avant la supression de l'infection) ?

    Bien à toi
    0
  18. vincente66 Messages postés 75 Date d'inscription   Statut Membre 26
     
    SLT S!RI ! pourrais tu venir jeter un oeil chez moi please?
    0
  19. S!Ri Messages postés 932 Statut Contributeur sécurité 10
     
    Salut Quick157

    Certaines clés du registre ne sont pas chargées en mode sans echec.
    Du coup Spybot Search & Destroy ne voit pas tout...

    a+
    0

Discussions similaires

Smitfraud-C
Lasto97 -
Lasto97 -

25 réponses
[XP] Desinfection smitfraud
titelea -
green day -

9 réponses
Infection
toast3r -
toast3r -

44 réponses
infection
céline0034 -
totobetourne -

12 réponses
message de securité smitfraud
fuertes -
xam -

59 réponses