magic control agent recalcitrant Résolu

Question

Bonjour , j'ai depuis plusieurs jours magic control agent qui apparait dans spyboot sans que celui ci ne puisse le supprimer.J'ai déja fait quelques manip vues dans des forums mais rien n'y fait.(J'ai executé cleanup ,ad aware,spyboot et a2free en mode sans echec apres avoir decoche les fichiers protegés du système d'exploitation).
Voici le rapport de hijackthis :
Logfile of HijackThis v1.99.1
Scan saved at 15:58:21, on 22/06/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\dllhost.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\MESSAG~1\Demon.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\PROGRA~1\mcafee.com\mps\mscifapp.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\Program Files\WistitiSoft\Agent.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\PROGRA~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\System32\snmp.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\system32\RAMASST.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\GALSVW32.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Propriétaire\Mes documents\Unzipped\hijackthis[1]\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\program files\mcafee.com\mps\mcbrhlpr.dll
O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll (file missing)
O2 - BHO: McAfee PopupKiller - {3EC8255F-E043-4cae-8B3B-B191550C2A22} - c:\program files\mcafee.com\mps\popupkiller.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Demon] C:\PROGRA~1\MESSAG~1\Demon.exe
O4 - HKLM\..\Run: [eCarteBleue-LP-P1] "C:\Program Files\e-Carte Bleue\LA POSTE\CVD ADESIO\ECB.exe" /dontopenmycards
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MPSExe] c:\PROGRA~1\mcafee.com\mps\mscifapp.exe /embedding
O4 - HKLM\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe
O4 - HKLM\..\Run: [MSKDetectorExe] C:\PROGRA~1\McAfee\SPAMKI~1\MskDetct.exe /startup
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [ExtraFilmHemmaAgent] "C:\Program Files\WistitiSoft\Agent.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKCU\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Easy-WebPrint Ajouter à la Liste à Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: fdjeux - https://www.fdjeux.net/classes/fdjeux.cab
O16 - DPF: Yahoo! Fleet - http://download.games.yahoo.com/games/clients/y/fltt3_x.cab
O16 - DPF: Yahoo! Hearts - http://download.games.yahoo.com/games/clients/y/ht1_x.cab
O16 - DPF: {084DAC27-6FA3-4F55-9005-033F2F102F5C} (ITPPDiagIE Class) - http://data.jeuxclassiques.com/npwwg.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {FD40EC41-D860-4579-8BA4-52671A45C71C} (AxHtChat Class) - http://images.goa.com/it/Woo2/fr/chat/nPaxChat.cab
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\System32\DVDRAMSV.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: McAfee SpamKiller Server (MskService) - McAfee Inc. - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe

Merci pour votre aide

green day · Answer

Salut

# Télécharge ceci: (merci a S!RI pour ce petit programme).

http://siri.urz.free.fr/Fix/SmitfraudFix.zip

Exécute le, Double click sur Smitfraudfix.cmd choisit l’option 1,
voila a quoi cela ressemble : http://siri.urz.free.fr/Fix/SmitfraudFix.php
il va générer un rapport : copie/colle le sur le poste stp.

++

nbloquet · Answer

Voici le rapport demandé.Merci

SmitFraudFix v2.64

Rapport fait à 18:49:35,75, 22/06/2006
Executé à partir de C:\Documents and Settings\Propri‚taire\Mes documents\Unzipped\SmitfraudFix[1]\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» C:\

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Propri‚taire\Application Data

»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\PROPRI~1\Favoris

»»»»»»»»»»»»»»»»»»»»»»»» Bureau

»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

»»»»»»»»»»»»»»»»»»»»»»»» Fin

green day · Answer

re

ok, tu peux supprimer SmitFraudFix

Télécharge Blacklight (de F-Secure) :

https://www.f-secure.com/en

et sauvegarde le sur ton Bureau.

Double-clique blbeta.exe et accepte la licence ;clique Scan puis Next

Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport, sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres).

Copie et colle le contenu de ce rapport dans ta prochaine réponse

@+

nbloquet · Answer

Re, voici le rapport de Blackl06/22/06 20:48:40 [Info]: BlackLight Engine 1.0.41 initialized
06/22/06 20:48:40 [Info]: OS: 5.1 build 2600 (Service Pack 2)
06/22/06 20:48:40 [Note]: 7019 4
06/22/06 20:48:40 [Note]: 7005 0
06/22/06 20:48:43 [Note]: 7006 0
06/22/06 20:48:43 [Note]: 7011 1912
06/22/06 20:48:43 [Note]: 7026 0
06/22/06 20:48:43 [Note]: 7026 0
06/22/06 20:48:43 [Note]: 7024 3
06/22/06 20:48:43 [Info]: Hidden process: C:\windows\system32\tomnfqzbpw.exe
06/22/06 20:48:43 [Note]: FSRAW library version 1.7.1018
06/22/06 20:51:53 [Info]: Hidden file: c:\WINDOWS\system32\tomnfqzbpw_nav.dat
06/22/06 20:51:53 [Note]: 10002 1
06/22/06 20:51:53 [Info]: Hidden file: c:\WINDOWS\system32\tomnfqzbpw.dat
06/22/06 20:51:53 [Note]: 10002 1
06/22/06 20:51:54 [Info]: Hidden file: C:\windows\system32\tomnfqzbpw.exe
06/22/06 20:51:54 [Note]: 10002 1
06/22/06 20:52:05 [Info]: Hidden file: c:\WINDOWS\Prefetch\TOMNFQZBPW.EXE-0DF7B264.pf
06/22/06 20:52:05 [Note]: 10002 1
06/22/06 20:52:55 [Note]: 7007 0
ight :

green day · Answer

re

ok !

relance BlackLight et fait l'option 2 'cleaning" pour faire le nettoyage et colle le rapport généré ici avec un nouveau rapport hijackthis

@+

***j'ai decidé d'être heureux parce que c'est bon pour la santé ! ( Voltaire )***

nbloquet · Answer

Et Re Re rapport de BlackLight apres cleaning ( j'ai du refaire un scan)
06/22/06 21:08:33 [Info]: BlackLight Engine 1.0.41 initialized
06/22/06 21:08:33 [Info]: OS: 5.1 build 2600 (Service Pack 2)
06/22/06 21:08:33 [Note]: 7019 4
06/22/06 21:08:33 [Note]: 7005 0
06/22/06 21:08:42 [Note]: 7006 0
06/22/06 21:08:42 [Note]: 7011 1912
06/22/06 21:08:42 [Note]: 7026 0
06/22/06 21:08:42 [Note]: 7026 0
06/22/06 21:08:42 [Note]: 7024 3
06/22/06 21:08:42 [Info]: Hidden process: C:\windows\system32\tomnfqzbpw.exe
06/22/06 21:08:42 [Note]: FSRAW library version 1.7.1018
06/22/06 21:11:33 [Info]: Hidden file: c:\WINDOWS\system32\tomnfqzbpw_nav.dat
06/22/06 21:11:33 [Note]: 10002 1
06/22/06 21:11:33 [Info]: Hidden file: c:\WINDOWS\system32\tomnfqzbpw.dat
06/22/06 21:11:33 [Note]: 10002 1
06/22/06 21:11:34 [Info]: Hidden file: C:\windows\system32\tomnfqzbpw.exe
06/22/06 21:11:34 [Note]: 10002 1
06/22/06 21:11:44 [Info]: Hidden file: c:\WINDOWS\Prefetch\TOMNFQZBPW.EXE-0DF7B264.pf
06/22/06 21:11:44 [Note]: 10002 1
06/22/06 21:13:04 [Note]: 7007 0

et rapport de hijackthis apres:
Logfile of HijackThis v1.99.1
Scan saved at 21:14:13, on 22/06/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\dllhost.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\MESSAG~1\Demon.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\PROGRA~1\mcafee.com\mps\mscifapp.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\Program Files\WistitiSoft\Agent.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\PROGRA~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
C:\WINDOWS\system32\RAMASST.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\GALSVW32.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Propriétaire\Mes documents\Unzipped\hijackthis[1]\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\program files\mcafee.com\mps\mcbrhlpr.dll
O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll (file missing)
O2 - BHO: McAfee PopupKiller - {3EC8255F-E043-4cae-8B3B-B191550C2A22} - c:\program files\mcafee.com\mps\popupkiller.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Demon] C:\PROGRA~1\MESSAG~1\Demon.exe
O4 - HKLM\..\Run: [eCarteBleue-LP-P1] "C:\Program Files\e-Carte Bleue\LA POSTE\CVD ADESIO\ECB.exe" /dontopenmycards
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MPSExe] c:\PROGRA~1\mcafee.com\mps\mscifapp.exe /embedding
O4 - HKLM\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe
O4 - HKLM\..\Run: [MSKDetectorExe] C:\PROGRA~1\McAfee\SPAMKI~1\MskDetct.exe /startup
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [ExtraFilmHemmaAgent] "C:\Program Files\WistitiSoft\Agent.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKCU\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Easy-WebPrint Ajouter à la Liste à Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: fdjeux - https://www.fdjeux.net/classes/fdjeux.cab
O16 - DPF: Yahoo! Fleet - http://download.games.yahoo.com/games/clients/y/fltt3_x.cab
O16 - DPF: Yahoo! Hearts - http://download.games.yahoo.com/games/clients/y/ht1_x.cab
O16 - DPF: {084DAC27-6FA3-4F55-9005-033F2F102F5C} (ITPPDiagIE Class) - http://data.jeuxclassiques.com/npwwg.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {FD40EC41-D860-4579-8BA4-52671A45C71C} (AxHtChat Class) - http://images.goa.com/it/Woo2/fr/chat/nPaxChat.cab
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\System32\DVDRAMSV.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: McAfee SpamKiller Server (MskService) - McAfee Inc. - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe

green day · Answer

re

ok,

Relance HijackThis : choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked" :

O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

O16 - DPF: fdjeux - https://www.fdjeux.net/classes/fdjeux.cab
O16 - DPF: Yahoo! Fleet - http://download.games.yahoo.com/games/clients/y/fltt3_x.cab
O16 - DPF: Yahoo! Hearts - http://download.games.yahoo.com/games/clients/y/ht1_x.cab
O16 - DPF: {084DAC27-6FA3-4F55-9005-033F2F102F5C} (ITPPDiagIE Class) - http://data.jeuxclassiques.com/npwwg.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {FD40EC41-D860-4579-8BA4-52671A45C71C} (AxHtChat Class) - http://images.goa.com/it/Woo2/fr/chat/nPaxChat.cab

*Telecharge et installe ceci, dans la colonne de gauche clique sur "erreurs" coche toute les cases, puis clique en bas sur "chercher des erreurs" une fois finit, clique sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs .

*Relance Ccleaner ,vas dans l'onglet "nettoyeur" present sur la gauche, decoche la derniere case (Avancé si elle
est cochée) puis clique sur "lancer le nettoyage"

https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

ensuite refais un scan avec spybot et dis nous s'il te le detecte toujours

@+

***j'ai decidé d'être heureux parce que c'est bon pour la santé ! ( Voltaire )***

nbloquet · Answer

Hélas apres les manip magic est toujours present dans spybot.Coriace cette bestiole!

green day · Answer

lol

oui, vraiment corriace !

refais ceci :

relance BlackLight et fait l'option 2 'cleaning" pour faire le nettoyage et colle le rapport généré ici avec un nouveau rapport hijackthis

ensuite fais ceci :

· Allez sur le poste de travail
· Cliquez sur disque C:\ (disque où se trouve votre système d'exploitation)
· Ensuite cliquez sur le dossier Windows C:\Windows
· Ouvrez le dossier prefetch C:\Windows\prefetch

Supprimez tous les fichiers de ce dossier

et dis moi où est-ce qu'il te le detecte !

++

nbloquet · Answer

Nouveau rapport de ccleaner :
06/22/06 22:02:35 [Info]: BlackLight Engine 1.0.41 initialized
06/22/06 22:02:35 [Info]: OS: 5.1 build 2600 (Service Pack 2)
06/22/06 22:02:35 [Note]: 7019 4
06/22/06 22:02:35 [Note]: 7005 0
06/22/06 22:02:44 [Note]: 7007 0

Et celui de hijackthis:

Logfile of HijackThis v1.99.1
Scan saved at 22:07:29, on 22/06/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\dllhost.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\MESSAG~1\Demon.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\PROGRA~1\mcafee.com\mps\mscifapp.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\Program Files\WistitiSoft\Agent.exe
C:\PROGRA~1\mcafee.com\vso\mcvsescn.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
C:\WINDOWS\system32\RAMASST.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\GALSVW32.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Propriétaire\Mes documents\Unzipped\hijackthis[1]\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\program files\mcafee.com\mps\mcbrhlpr.dll
O2 - BHO: (no name) - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - (no file)
O2 - BHO: McAfee Privacy Service Popup Blocker - {3EC8255F-E043-4cae-8B3B-B191550C2A22} - c:\program files\mcafee.com\mps\popupkiller.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Demon] C:\PROGRA~1\MESSAG~1\Demon.exe
O4 - HKLM\..\Run: [eCarteBleue-LP-P1] "C:\Program Files\e-Carte Bleue\LA POSTE\CVD ADESIO\ECB.exe" /dontopenmycards
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MPSExe] c:\PROGRA~1\mcafee.com\mps\mscifapp.exe /embedding
O4 - HKLM\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe
O4 - HKLM\..\Run: [MSKDetectorExe] C:\PROGRA~1\McAfee\SPAMKI~1\MskDetct.exe /startup
O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [ExtraFilmHemmaAgent] "C:\Program Files\WistitiSoft\Agent.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKCU\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Easy-WebPrint Ajouter à la Liste à Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\System32\DVDRAMSV.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: McAfee SpamKiller Server (MskService) - McAfee Inc. - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe

Ensuite j'ai supprimé tous les fichiers de C:\Windows\prefetch

Apres avoir relancé spybot toujours la la bougre !
Il est dans :
HKEY_USERS\S-1-5-21-789336058-706699826-1417001333-1003\software\laconfig

Merci pour ta rapidité et ta patience

green day · Answer

on a pas encore dit notre dernier mot lol

télécharge RKFiles
http://skads.org/special/rkfiles.zip

dézippe-le sur ton bureau

démarre en mode sans échec
Double-click sur RKFiles.bat pour le lancer.
attends que la fenêtre dos se ferme, ca peut prendre un certain temps.
le log sera sauvé dans le fichier c:\log.txt
Poste-le.

@+

nbloquet · Answer

Effectivement , c'est un peu long....
Voici le log :

C:\Documents and Settings\Propri‚taire\Mes documents\Unzipped\rkfiles

PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, THERE MIGHT BE LEGIT FILES LISTED AND PLEASE BE CAREFUL WHILE FIXING. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.
Files Found in system Folder............
------------------------
C:\WINDOWS\system32\MACDec.dll: UPX!
C:\WINDOWS\system32\MonkeySource.ax: UPX!
C:\WINDOWS\system32\SrchSTS.exe: UPX!
C:\WINDOWS\system32\swreg.exe: UPX!
C:\WINDOWS\system32\swsc.exe: UPX!
C:\WINDOWS\system32\dfrg.msc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAwGpEc213
C:\WINDOWS\system32\dfrg.msc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAwGpEc213

Files Found in all users startup Folder............
------------------------
C:\WINDOWS\system32\MACDec.dll: UPX!
C:\WINDOWS\system32\MonkeySource.ax: UPX!
C:\WINDOWS\system32\SrchSTS.exe: UPX!
C:\WINDOWS\system32\swreg.exe: UPX!
C:\WINDOWS\system32\swsc.exe: UPX!
Files Found in all users windows Folder............
------------------------
Finished
bye

Encore merciiiiiiii

green day · Answer

il dit quoi mantenant spaybot ? :))))++

nbloquet · Answer

Il se repete spybot !!!Magic control agent toujours present !

green day · Answer

ok, on essaye autre chose :

passe spybot + ewido en mode sans echec ( redemarre en appuillant sur F8)

et dis moi s'ils ont pu le neutraliser !

http://www.infos-du-net.com/telecharger/Ewido-Security-Suite.html

bon courage, @+

nbloquet · Answer

Désolée d'avoir tarder a repondre mais j'avais du boulot.
J'ai donc essayé ewido et spybot en mode sans echec : ewido ne m'a detecté que des cookies , par contre spybot detecte magic , j'ai corrigé les problemes et refait un scan (toujours en mode sans echec ) et surpreise magi control agent avait disparu .....
J'ai redemaré en mode normal et refait un scan immediatement et la deception : il est reaparu .
J'ai eu aussi un message de mon firewall(mc cafee) me signalant la presence d'un programme potentiellement indesirable , il sagit de : c:\windows\system32\process.exe
Je n'ai pas osé le supprimer.
Bon maintenant dodo , la nuit porte conseil .....
Bonne nuit et encore merci
A+

^^Marie^^ · Answer

Salut,Concernant ton soucis : c:\windows\system32\process.exe Une discution sur le forum :system32 process exe grave ou pas graveA++

aranjuez31 · Answer

hellojuste pour suivre

incognito02 · Answer

Salut

Pour process; il provient de smitfraudfix surrement, si c est le cas, n y touche pas.
process.exe est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
http://www.beyondlogic.org/consulting/processutil/processutil.htm

A+

nbloquet · Answer

Bonjour , je n'ai pas touché à process .Mon vrai pbrobleme c'est magic control agent.
Je vous remet un log :
Logfile of HijackThis v1.99.1
Scan saved at 11:17:37, on 23/06/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\dllhost.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\MESSAG~1\Demon.exe
C:\WINDOWS\System32\snmp.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\mcafee.com\mps\mscifapp.exe
C:\PROGRA~1\mcafee\SPAMKI~1\mskagent.exe
C:\Program Files\WistitiSoft\Agent.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\system32\RAMASST.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
c:\program files\mcafee.com\vso\mcmnhdlr.exe
c:\program files\mcafee.com\shared\mghtml.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Propriétaire\Mes documents\Unzipped\hijackthis[1]\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\PROGRA~1\mcafee.com\mps\mcbrhlpr.dll
O2 - BHO: (no name) - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - (no file)
O2 - BHO: McAfee Privacy Service Popup Blocker - {3EC8255F-E043-4cae-8B3B-B191550C2A22} - c:\program files\mcafee.com\mps\popupkiller.dll
O2 - BHO: McAfee AntiPhishing Filter - {41D68ED8-4CFF-4115-88A6-6EBB8AF19000} - c:\PROGRA~1\mcafee\SPAMKI~1\mcapfbho.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Demon] C:\PROGRA~1\MESSAG~1\Demon.exe
O4 - HKLM\..\Run: [eCarteBleue-LP-P1] "C:\Program Files\e-Carte Bleue\LA POSTE\CVD ADESIO\ECB.exe" /dontopenmycards
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MPSExe] c:\PROGRA~1\mcafee.com\mps\mscifapp.exe /embedding
O4 - HKLM\..\Run: [MSKAGENTEXE] C:\PROGRA~1\mcafee\SPAMKI~1\mskagent.exe
O4 - HKLM\..\Run: [MSKDetectorExe] C:\PROGRA~1\McAfee\SPAMKI~1\MskDetct.exe /startup
O4 - HKLM\..\Run: [ExtraFilmHemmaAgent] "C:\Program Files\WistitiSoft\Agent.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe
O4 - HKCU\..\Run: [MSKAGENTEXE] c:\PROGRA~1\mcafee\SPAMKI~1\mskagent.exe
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Easy-WebPrint Ajouter à la Liste à Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\PROGRA~1\mcafee\SPAMKI~1\mcapfbho.dll
O9 - Extra 'Tools' menuitem: McAfee AntiPhishing Filter - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\PROGRA~1\mcafee\SPAMKI~1\mcapfbho.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\System32\DVDRAMSV.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
O23 - Service: McAfee SpamKiller Server (MskService) - McAfee Inc. - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe

incognito02 · Answer

salut;¤Relance HijackThis, coche les cases devant ces lignes et ensuite clique sur fix checked :O2 - BHO: (no name) - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - (no file) Relance spybot et a la fin du scan, clik droit et copie colle moi le rapporta+

nbloquet · Answer

--- Search result list ---MagicControl.Agent: Réglages utilisateur (Clé du registre, nothing done)  HKEY_USERS\S-1-5-21-789336058-706699826-1417001333-1003\Software\LanConfigWinsoftware.WinAntiVirusPro2006: Cookie traceur (Internet Explorer: Propriétaire) (Cookie, nothing done)  Winsoftware.WinAntiVirusPro2006: Cookie traceur (Internet Explorer: Propriétaire) (Cookie, nothing done)  Winsoftware.WinAntiVirusPro2006: Cookie traceur (Internet Explorer: Propriétaire) (Cookie, nothing done)  --- Spybot - Search & Destroy version: 1.4  (build: 20050523) ---2005-05-31 blindman.exe (1.0.0.1)2005-05-31 SpybotSD.exe (1.4.0.3)2005-05-31 TeaTimer.exe (1.4.0.2)2006-04-13 unins000.exe (51.41.0.0)2005-05-31 Update.exe (1.4.0.0)2006-02-06 advcheck.dll (1.0.2.0)2005-05-31 aports.dll (2.1.0.0)2005-05-31 borlndmm.dll (7.0.4.453)2005-05-31 delphimm.dll (7.0.4.453)2005-05-31 SDHelper.dll (1.4.0.0)2006-02-20 Tools.dll (2.0.0.2)2005-05-31 UnzDll.dll (1.73.1.1)2005-05-31 ZipDll.dll (1.73.2.0)2006-06-16 Includes\Cookies.sbi (*)2006-06-16 Includes\Dialer.sbi (*)2006-06-16 Includes\Hijackers.sbi (*)2006-06-16 Includes\Keyloggers.sbi (*)2004-11-29 Includes\LSP.sbi (*)2006-06-16 Includes\Malware.sbi (*)2006-06-16 Includes\PUPS.sbi (*)2006-06-16 Includes\Revision.sbi (*)2006-06-16 Includes\Security.sbi (*)2006-06-16 Includes\Spybots.sbi (*)2005-02-17 Includes\Tracks.uti2006-06-16 Includes\Trojans.sbi (*)--- System information ---Windows XP (Build: 2600) Service Pack 2 / DataAccess: Microsoft Data Access Components KB870669 / DataAccess: Security Update for Microsoft Data Access Components / DirectX / DX9 / SP1: Correctif pour DirectX 9 - KB839643 / Internet Explorer 6 / SP1: Correctif Windows XP - Article Base de Connaissances 834707 / Internet Explorer 6 / SP1: Correctif Windows XP - KB896688 / Windows Media Player: Correctif pour le Lecteur Windows Media [Voir Q828026 pour plus d'informations] / Windows Media Player / SP0: Correctif pour le Lecteur Windows Media [Voir Q828026 pour plus d'informations] / Windows Media Player: Windows Media Update 817787 / Windows Media Player 10: Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565) / Windows Media Player 10: Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734) / Windows XP / SP2: Windows XP Hotfix (SP2) [See KB810243 for more information] / Windows XP / SP2: Windows XP Service Pack 2 / Windows XP / SP2: Pack réseau avancé pour Windows XP / Windows XP / SP2: Correctif Windows XP - KB820291 / Windows XP / SP2: Correctif Windows XP - KB821253 / Windows XP / SP2: Correctif Windows XP - KB822603 / Windows XP / SP2: Correctif Windows XP - KB823182 / Windows XP / SP2: Correctif Windows XP - KB823980 / Windows XP / SP2: Correctif Windows XP - KB824105 / Windows XP / SP2: Correctif Windows XP - KB824141 / Windows XP / SP2: Correctif Windows XP - KB825119 / Windows XP / SP2: Correctif Windows XP - KB826939 / Windows XP / SP2: Correctif Windows XP - KB826942 / Windows XP / SP2: Correctif Windows XP - KB828028 / Windows XP / SP2: Correctif Windows XP - KB828035 / Windows XP / SP2: Correctif Windows XP - KB829558 / Windows XP / SP2: Correctif Windows XP - KB833407 / Windows XP / SP2: Correctif Windows XP - KB833998 / Windows XP / SP2: Correctif Windows XP - KB837001 / Windows XP / SP2: Correctif Windows XP - KB839643 / Windows XP / SP2: Correctif Windows XP - KB839645 / Windows XP / SP2: Correctif Windows XP - KB840315 / Windows XP / SP2: Correctif Windows XP - KB840374 / Windows XP / SP2: Correctif Windows XP - KB841873 / Windows XP / SP2: Correctif Windows XP - KB883357 / Windows XP / SP2: Correctif Windows XP (SP2) Q322011 / Windows XP / SP2: Correctif Windows XP (SP2) Q327979 / Windows XP / SP2: Correctif Windows XP (SP2) Q814995 / Windows XP / SP2: Correctif Windows XP (SP2) Q815021 / Windows XP / SP2: Correctif Windows XP (SP2) Q819696 / Windows XP / SP3: Correctif Windows XP - KB834707 / Windows XP / SP3: Correctif Windows XP - KB867282 / Windows XP / SP3: Correctif Windows XP - KB873333 / Windows XP / SP3: Correctif Windows XP - KB873339 / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB883939) / Windows XP / SP3: Correctif Windows XP - KB885250 / Windows XP / SP3: Correctif Windows XP - KB885835 / Windows XP / SP3: Correctif Windows XP - KB885836 / Windows XP / SP3: Correctif Windows XP - KB886185 / Windows XP / SP3: Correctif Windows XP - KB887472 / Windows XP / SP3: Correctif Windows XP - KB887742 / Windows XP / SP3: Correctif Windows XP - KB888113 / Windows XP / SP3: Correctif Windows XP - KB888302 / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB890046) / Windows XP / SP3: Correctif Windows XP - KB890047 / Windows XP / SP3: Correctif Windows XP - KB890175 / Windows XP / SP3: Correctif Windows XP - KB890859 / Windows XP / SP3: Correctif Windows XP - KB890923 / Windows XP / SP3: Correctif Windows XP - KB891781 / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB893066) / Windows XP / SP3: Correctif Windows XP - KB893086 / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB893756) / Windows XP / SP3: Windows Installer 3.1 (KB893803) / Windows XP / SP3: Windows Installer 3.1 (KB893803) / Windows XP / SP3: Mise à jour pour Windows XP (KB894391) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896358) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896422) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896423) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896424) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896428) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896688) / Windows XP / SP3: Mise à jour pour Windows XP (KB896727) / Windows XP / SP3: Mise à jour pour Windows XP (KB898461) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899587) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899588) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899591) / Windows XP / SP3: Mise à jour pour Windows XP (KB900485) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB900725) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901017) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901214) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB902400) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB903235) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB904706) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905414) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905749) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905915) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB908519) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB908531) / Windows XP / SP3: Mise à jour pour Windows XP (KB910437) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911280) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911562) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911567) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911927) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB912812) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB912919) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB913446) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB913580) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB914389) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB916281) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917344) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917953) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB918439)--- Startup entries list ---Located: HK_LM:Run, ATIPTAcommand: C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe   file: C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe   size: 339968    MD5: c4708c52ac71338b49334c972de96682Located: HK_LM:Run, eCarteBleue-LP-P1command: "C:\Program Files\e-Carte Bleue\LA POSTE\CVD ADESIO\ECB.exe"  /dontopenmycards   file: C:\Program Files\e-Carte Bleue\LA POSTE\CVD ADESIO\ECB.exe   size: 200704    MD5: 6344642e6cbefabb7e367388d09900e8Located: HK_LM:Run, MCAgentExecommand: c:\PROGRA~1\mcafee.com\agent\mcagent.exe   file: c:\PROGRA~1\mcafee.com\agent\mcagent.exe   size: 303104    MD5: e8d2dcece015f4558aa3853514664f15Located: HK_LM:Run, MCUpdateExecommand: C:\PROGRA~1\mcafee.com\agent\mcupdate.exe   file: C:\PROGRA~1\mcafee.com\agent\mcupdate.exe   size: 212992    MD5: dec79e9887924b82837b9b7730ecaa1fLocated: HK_LM:Run, MPFExecommand: C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe   file: C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe   size: 1005096    MD5: d76dcba1bce72093e00a4efa114a4e98Located: HK_LM:Run, MPFExecommand: C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe   file: C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe   size: 1005096    MD5: d76dcba1bce72093e00a4efa114a4e98Located: HK_LM:Run, MPSExecommand: c:\PROGRA~1\mcafee.com\mps\mscifapp.exe /embedding   file: c:\PROGRA~1\mcafee.com\mps\mscifapp.exe   size: 296488    MD5: 98ba8f513cb0dda119c99d33f758a416Located: HK_LM:Run, MSKAGENTEXEcommand: C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe   file: C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe   size: 110592    MD5: 493a8bb01e9cbf9164f321272ed9e652Located: HK_LM:Run, MSKDetectorExecommand: C:\PROGRA~1\McAfee\SPAMKI~1\MskDetct.exe /startup   file: C:\PROGRA~1\McAfee\SPAMKI~1\MskDetct.exe   size: 1121792    MD5: a5f0ef1a69f6707f27e53ee54b8f8ac4Located: HK_LM:Run, OASClntcommand: C:\Program Files\McAfee.com\VSO\oasclnt.exe   file: C:\Program Files\McAfee.com\VSO\oasclnt.exe   size: 53248    MD5: 76e033f33912bfaca4a05be8d1f3a740Located: HK_LM:Run, VirusScan Onlinecommand: C:\Program Files\McAfee.com\VSO\mcvsshld.exe   file: C:\Program Files\McAfee.com\VSO\mcvsshld.exe   size: 163840    MD5: b154ac6dbd82f96476003e58e1625bd8Located: HK_LM:Run, VSOCheckTaskcommand: "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask   file: C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe   size: 151552    MD5: 3c943ceb913520f9981d82db93ba7a8aLocated: HK_CU:Run, MSKAGENTEXEcommand: c:\PROGRA~1\mcafee\SPAMKI~1\mskagent.exe   file: c:\PROGRA~1\mcafee\SPAMKI~1\mskagent.exe   size: 110592    MD5: 493a8bb01e9cbf9164f321272ed9e652Located: Démarrage (tous utilisateurs), RAMASST.lnkcommand: C:\WINDOWS\system32\RAMASST.exe   file: C:\WINDOWS\system32\RAMASST.exe   size: 155648    MD5: 7c86a098d2a2e5d0cc8ec60f90637e9eLocated: Démarrage (tous utilisateurs), WinZip Quick Pick.lnkcommand: C:\Program Files\WinZip\WZQKPICK.EXE   file: C:\Program Files\WinZip\WZQKPICK.EXE   size: 118784    MD5: 67b2e7b6ae3b400d832f0456068ea83dLocated: System.ini, AtiExtEventcommand: Ati2evxx.dll   file: Ati2evxx.dllLocated: System.ini, crypt32chaincommand: crypt32.dll   file: crypt32.dllLocated: System.ini, cryptnetcommand: cryptnet.dll   file: cryptnet.dllLocated: System.ini, cscdllcommand: cscdll.dll   file: cscdll.dllLocated: System.ini, ScCertPropcommand: wlnotify.dll   file: wlnotify.dllLocated: System.ini, Schedulecommand: wlnotify.dll   file: wlnotify.dllLocated: System.ini, sclgntfycommand: sclgntfy.dll   file: sclgntfy.dllLocated: System.ini, SensLogncommand: WlNotify.dll   file: WlNotify.dllLocated: System.ini, termsrvcommand: wlnotify.dll   file: wlnotify.dllLocated: System.ini, wlballooncommand: wlnotify.dll   file: wlnotify.dll--- Browser helper object list ---{3EC8255F-E043-4cae-8B3B-B191550C2A22} (McAfee Privacy Service Popup Blocker)          BHO name:         CLSID name: McAfee Privacy Service Popup Blocker              Path: c:\program files\mcafee.com\mps\         Long name:    PopupKiller.dll        Short name:       POPUPK~1.DLL    Date (created): 24/06/2005 00:43:18Date (last access): 23/06/2006 13:14:02 Date (last write): 28/10/2005 10:30:36          Filesize:             132648        Attributes:           archive                MD5: 77D107A323259FF27D6121CA30304C82             CRC32:           ADBD1E43           Version:          8.1.0.120{41D68ED8-4CFF-4115-88A6-6EBB8AF19000} (McAfee AntiPhishing Filter)          BHO name:         CLSID name: McAfee AntiPhishing Filter              Path: c:\PROGRA~1\mcafee\SPAMKI~1\         Long name:       McApfBHO.dll        Short name:                       Date (created): 23/06/2006 01:21:04Date (last access): 23/06/2006 13:14:02 Date (last write): 09/11/2005 15:01:00          Filesize:             348160        Attributes:           archive                MD5: 91D084FD19C549AD74F8C4E75A9E40E6             CRC32:           2B368A1A           Version:            7.0.2.3{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)          BHO name:         CLSID name: SSVHelper Class              Path: C:\Program Files\Java\jre1.5.0_06\bin\         Long name:            ssv.dll        Short name:                       Date (created): 10/11/2005 14:03:56Date (last access): 23/06/2006 13:14:02 Date (last write): 10/11/2005 14:22:10          Filesize:             184423        Attributes:           archive                MD5: F01726F7CA8538FDD4663C9DB8FEAEDC             CRC32:           0111B892           Version:           5.0.60.5--- ActiveX list ---{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} (Java Runtime Environment 1.5.0)          DPF name: Java Runtime Environment 1.5.0        CLSID name: Java Plug-in 1.5.0_06         Installer:           Codebase: http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab              Path: C:\Program Files\Java\jre1.5.0_06\bin\         Long name:    NPJPI150_06.dll        Short name:       NPJPI1~1.DLL    Date (created): 10/11/2005 14:03:56Date (last access): 22/06/2006 22:17:30 Date (last write): 10/11/2005 14:22:10          Filesize:              69746        Attributes:           archive                MD5: D2CF6BB5E9020E6707B62575F8083954             CRC32:           7F39DC54           Version:           5.0.60.5{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.5.0)          DPF name: Java Runtime Environment 1.5.0        CLSID name: Java Plug-in 1.5.0_06         Installer:           Codebase: http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab              Path: C:\Program Files\Java\jre1.5.0_06\bin\         Long name:    NPJPI150_06.dll        Short name:       NPJPI1~1.DLL    Date (created): 10/11/2005 14:03:56Date (last access): 23/06/2006 13:26:28 Date (last write): 10/11/2005 14:22:10          Filesize:              69746        Attributes:           archive                MD5: D2CF6BB5E9020E6707B62575F8083954             CRC32:           7F39DC54           Version:           5.0.60.5{D27CDB55-0000-0000-0000-000000000000} ()          DPF name:         CLSID name:          Installer: C:\WINDOWS\Downloaded Program Files\swflash.inf          Codebase: http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab--- Process list ---PID:    0 (   0) [System]PID:  912 (   4) \SystemRoot\System32\smss.exePID:  960 ( 912) \??\C:\WINDOWS\system32\csrss.exePID:  988 ( 912) \??\C:\WINDOWS\system32\winlogon.exePID: 1032 ( 988) C:\WINDOWS\system32\services.exe size: 108544  MD5: 63DCDE1A0D86EEB8924D6738FF616EADPID: 1044 ( 988) C:\WINDOWS\system32\lsass.exe size: 13312  MD5: 259AF82A0932EEA4F316F92DB94707B6PID: 1220 (1032) C:\WINDOWS\System32\Ati2evxx.exe size: 376832  MD5: 5CCA7DF290D82D1048F217E3C6272384PID: 1232 (1032) C:\WINDOWS\system32\svchost.exe size: 14336  MD5: 2979B03D5382A602623C0535B16AB9C0PID: 1288 (1032) C:\WINDOWS\system32\svchost.exe size: 14336  MD5: 2979B03D5382A602623C0535B16AB9C0PID: 1424 (1032) C:\WINDOWS\System32\svchost.exe size: 14336  MD5: 2979B03D5382A602623C0535B16AB9C0PID: 1548 (1032) C:\WINDOWS\system32\spoolsv.exe size: 57856  MD5: DA81EC57ACD4CDC3D4C51CF3D409AF9FPID: 1660 (1032) C:\WINDOWS\System32\alg.exe size: 44544  MD5: B43CC0F07752D456038CD0268E4D84E9PID: 1672 (1032) C:\WINDOWS\System32\dllhost.exe size: 5120  MD5: 9B2CE161927038D4CABE0482A14FD052PID: 1792 (1032) c:\program files\mcafee.com\agent\mcdetect.exe size: 126976  MD5: F73B0F3EBD90B1C87A3B93BE94E831C7PID: 1804 (1032) c:\PROGRA~1\mcafee.com\vso\mcshield.exe size: 221184  MD5: FAE84A2F9C11B7C532950BF0AE1EC26APID: 1840 (1032) c:\PROGRA~1\mcafee.com\agent\mctskshd.exe size: 122368  MD5: A214E217784D1002411DCA8E9793D4A4PID:  172 (1032) C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe size: 548864  MD5: 316535E69181703D4CE4623DEA29FECBPID:  340 (1032) C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe size: 963072  MD5: 4DB8F824F17B8D9CC5826FBDF0205870PID: 1624 ( 988) C:\WINDOWS\system32\Ati2evxx.exe size: 376832  MD5: 5CCA7DF290D82D1048F217E3C6272384PID: 1940 (1716) C:\WINDOWS\Explorer.EXE size: 1036288  MD5: 2A7BD330924252A2FD80344FC949BB72PID:  188 (1940) C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe size: 339968  MD5: C4708C52AC71338B49334C972DE96682PID:  252 (1940) C:\PROGRA~1\mcafee.com\agent\mcagent.exe size: 303104  MD5: E8D2DCECE015F4558AA3853514664F15PID:  312 (1940) C:\PROGRA~1\mcafee.com\mps\mscifapp.exe size: 296488  MD5: 98BA8F513CB0DDA119C99D33F758A416PID:  324 (1940) C:\PROGRA~1\mcafee\SPAMKI~1\mskagent.exe size: 110592  MD5: 493A8BB01E9CBF9164F321272ED9E652PID:  428 (1940) C:\Program Files\McAfee.com\VSO\mcvsshld.exe size: 163840  MD5: B154AC6DBD82F96476003E58E1625BD8PID:  440 (1940) C:\Program Files\McAfee.com\VSO\oasclnt.exe size: 53248  MD5: 76E033F33912BFACA4A05BE8D1F3A740PID:  456 (1940) C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe size: 1005096  MD5: D76DCBA1BCE72093E00A4EFA114A4E98PID:  748 ( 724) c:\progra~1\mcafee.com\vso\mcvsescn.exe size: 483328  MD5: 3B1A1BAA8D7444DEFCE4093611212ED6PID:  864 (1940) C:\WINDOWS\system32\RAMASST.exe size: 155648  MD5: 7C86A098D2A2E5D0CC8EC60F90637E9EPID:  904 (1032) C:\WINDOWS\System32\snmp.exe size: 32768  MD5: F143B2E34BA845F3631D1FB623ED538APID: 1504 (1032) C:\WINDOWS\System32\svchost.exe size: 14336  MD5: 2979B03D5382A602623C0535B16AB9C0PID: 1612 (1032) C:\WINDOWS\System32\svchost.exe size: 14336  MD5: 2979B03D5382A602623C0535B16AB9C0PID:  176 (1940) C:\Program Files\WinZip\WZQKPICK.EXE size: 118784  MD5: 67B2E7B6AE3B400D832F0456068EA83DPID: 2480 (1032) C:\WINDOWS\system32\fxssvc.exe size: 268800  MD5: FBE05797F3A311596D0DDBB6AB60FE19PID: 3692 (1232) C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe size: 524288  MD5: EFFC4B0F270FC1A6EDF49A274BF5CDF8PID: 3816 ( 220) C:\WINDOWS\GALSVW32.EXE size: 45056  MD5: E8FD16F032B8FA448692EB845768DC83PID: 3732 (1940) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe size: 4393096  MD5: 09CA174A605B480318731E691DC98539PID: 3248 (1940) C:\Program Files\Internet Explorer\iexplore.exe size: 93184  MD5: 385D1644E676C96EB07848ADA63E37FAPID:    4 (   0) System--- Browser start & search pages list ---Spybot - Search & Destroy browser pages report, 23/06/2006 13:26:27HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page  C:\WINDOWS\system32\blank.htmHKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page  http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearchHKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar  https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9FHKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page  https://fr.yahoo.com/HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\@  http://home.microsoft.com/access/autosearch.asp?p=%sHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page  %SystemRoot%\system32\blank.htmHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page  http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearchHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Bar  https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htmHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page  http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=homeHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL  http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhomeHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL  http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearchHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant  https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htmHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch  https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm--- Winsock Layered Service Provider list ---Protocol  0: MC_LAYERED MSAFD Tcpip [TCP/IP]        GUID: {0B9D8FB6-69A0-4624-8BCA-EA0340C608CF}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol  1: MC_LAYERED MSAFD Tcpip [UDP/IP]        GUID: {6C0E11C6-78B8-4E29-9B12-29CD08B8F51A}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol  2: MC_LAYERED MSAFD Tcpip [RAW/IP]        GUID: {BEE25B8F-32E2-408D-B822-D9857A7B6EEE}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol  3: MC_LAYERED RSVP UDP Service Provider        GUID: {91CC483A-575C-426C-8DFB-0EA134725A53}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol  4: MC_LAYERED RSVP TCP Service Provider        GUID: {EEAB33C7-3169-4060-A17F-70F85AAD370D}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol  5: MC_LAYERED MSAFD Tcpip [TCP/IPv6]        GUID: {7A1B989D-0511-41AF-8B2A-8753BDC4854D}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol  6: MC_LAYERED MSAFD Tcpip [UDP/IPv6]        GUID: {D9BB1B99-1DD3-4AE0-8F05-CCFB800BEEA2}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol  7: MC_LAYERED MSAFD Tcpip [RAW/IPv6]        GUID: {F19BA7A6-7925-4DB9-B193-52ADDE7C86AC}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol  8: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{710F4751-932C-4152-B44B-C01D35DDFA4A}] SEQPACKET 14        GUID: {7A6D09AA-331A-481D-B308-B5351FCA0E66}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol  9: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{710F4751-932C-4152-B44B-C01D35DDFA4A}] DATAGRAM 14        GUID: {5A5FBC11-E660-4EDA-BDF9-1FA4310DB976}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 10: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{20F39AFE-EFAE-43D1-98C3-1D19BEC79CA8}] SEQPACKET 10        GUID: {B38EDAE9-8502-4D7A-9A38-696AB4CBC564}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 11: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{20F39AFE-EFAE-43D1-98C3-1D19BEC79CA8}] DATAGRAM 10        GUID: {7C413131-1E4A-47F9-9E6B-7D8EBEE2D0CC}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 12: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{7320543D-C232-4E31-A1A7-53661D475F39}] SEQPACKET 7        GUID: {3AD79C3F-F798-4A02-8AF7-92CFD5D6D72A}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 13: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{7320543D-C232-4E31-A1A7-53661D475F39}] DATAGRAM 7        GUID: {FA139D03-7664-4603-A0DA-BC13E74FE2A2}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 14: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{6ECE68F8-9E8D-40A7-864A-C5646DA8D524}] SEQPACKET 0        GUID: {E698F817-3AF3-49A9-B76C-9B92CC38B476}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 15: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{6ECE68F8-9E8D-40A7-864A-C5646DA8D524}] DATAGRAM 0        GUID: {513318F4-253F-4D25-B1FB-2104F7C0C57E}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 16: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{B39F8CC8-9B5B-45D2-BD83-4ADDE6041FB2}] SEQPACKET 5        GUID: {9CEA0009-7D57-4B81-A472-01211CA89520}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 17: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{B39F8CC8-9B5B-45D2-BD83-4ADDE6041FB2}] DATAGRAM 5        GUID: {4F5BEDB8-726F-48F5-BF0A-ABA13BA05896}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 18: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{D5247F29-DAC2-472B-A10F-56D5665B6DC8}] SEQPACKET 6        GUID: {504C9445-2515-4E6A-BE4E-EED741E17FC7}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 19: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{D5247F29-DAC2-472B-A10F-56D5665B6DC8}] DATAGRAM 6        GUID: {782E8699-4226-46DC-A20B-941CD9B8BA43}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 20: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{710F4751-932C-4152-B44B-C01D35DDFA4A}] SEQPACKET 15        GUID: {0E7BC478-C39C-4073-A85C-EAB802728AD6}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 21: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{710F4751-932C-4152-B44B-C01D35DDFA4A}] DATAGRAM 15        GUID: {BC9F6153-693B-484E-85FF-E294DCC1D754}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 22: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{20F39AFE-EFAE-43D1-98C3-1D19BEC79CA8}] SEQPACKET 11        GUID: {33A47701-6EB7-4A02-A988-8F378478730D}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 23: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{20F39AFE-EFAE-43D1-98C3-1D19BEC79CA8}] DATAGRAM 11        GUID: {A5316A9E-AAFC-468A-948B-9D25956B8A87}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 24: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{20D4471C-1AA6-474B-8FB4-3BA78CF134F3}] SEQPACKET 9        GUID: {10A6D070-FD8F-4263-8D49-DC3012BE6E46}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 25: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{20D4471C-1AA6-474B-8FB4-3BA78CF134F3}] DATAGRAM 9        GUID: {F0852ECA-E352-478B-A8EA-DE85E0B43B07}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 26: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{7320543D-C232-4E31-A1A7-53661D475F39}] SEQPACKET 8        GUID: {7FC382AB-040A-418C-AE1B-1A06107AEF3A}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 27: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{7320543D-C232-4E31-A1A7-53661D475F39}] DATAGRAM 8        GUID: {6AD954A4-66BA-4C08-BA9A-0E9AFDF98722}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 28: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{6ECE68F8-9E8D-40A7-864A-C5646DA8D524}] SEQPACKET 4        GUID: {11DE53BA-FD0B-4875-BBC2-52C098016C68}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 29: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{6ECE68F8-9E8D-40A7-864A-C5646DA8D524}] DATAGRAM 4        GUID: {B86D1AD7-3CC9-43CC-ADEB-44FE64574DB4}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 30: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{B39F8CC8-9B5B-45D2-BD83-4ADDE6041FB2}] SEQPACKET 3        GUID: {31BF12D1-0A21-4135-81CE-D90E96C43695}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 31: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{B39F8CC8-9B5B-45D2-BD83-4ADDE6041FB2}] DATAGRAM 3        GUID: {3D38A711-DD82-47B9-BCFB-0DDDC82600AB}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 32: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{03C37C1C-40D2-413A-9C0F-FC6781F0829B}] SEQPACKET 1        GUID: {C6933E43-2EC2-4B88-8366-1A01377B0BA7}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 33: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{03C37C1C-40D2-413A-9C0F-FC6781F0829B}] DATAGRAM 1        GUID: {03C97547-298F-4EC2-AB41-37EE2DDDCB3C}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 34: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{BDC2FA56-D992-4F43-B53B-8D99A1F59E2F}] SEQPACKET 2        GUID: {B7E4823C-A2F6-4E37-9A18-B80A0982E1A0}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 35: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{BDC2FA56-D992-4F43-B53B-8D99A1F59E2F}] DATAGRAM 2        GUID: {207E9A9B-0256-4F20-B8DF-E4091D7074B9}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 36: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{732C52C4-B831-44F5-AB0F-EFBC5DE2003F}] SEQPACKET 12        GUID: {F4A9C918-548E-4239-87A8-B944D6BDCEFA}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 37: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{732C52C4-B831-44F5-AB0F-EFBC5DE2003F}] DATAGRAM 12        GUID: {F8C44DC6-B7C4-415D-9CA7-4E825C6D618B}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 38: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{C600A6DA-81D2-4266-AC43-F0AC16DDBF1A}] SEQPACKET 13        GUID: {003FFEC0-5B7F-4AE6-8112-C50B8B6076C3}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 39: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{C600A6DA-81D2-4266-AC43-F0AC16DDBF1A}] DATAGRAM 13        GUID: {777BA36E-83DC-429A-A764-51CD0B027265}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 80: McAfee.com Layered Provider        GUID: {BEAA9090-2D12-11D4-9B80-00C04FF40D52}    Filename: C:\WINDOWS\system32\mclsp.dll--- Uninstall list ---a-squared Free 1.6.5 1.6 (a-squared Free_is1)install location: C:\Program Files\a-squared\   uninstall cmd: "C:\Program Files\a-squared\unins000.exe"       publisher: Emsi Software GmbH        comments: a-squared       help link: https://support.emsisoft.com/Ad-Aware SE Personal 1.06 (Ad-Aware SE Personal)   uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG       publisher: Lavasoft       help link: https://www.adaware.com/  (AddressBook)Adobe Acrobat 5.0 5.0 (Adobe Acrobat 5.0) version (major): 5install location: C:\Program Files\Adobe\Acrobat 5.0  install source: C:\Documents and Settings\Propriétaire\Local Settings\Temp\pft8~tmp\   uninstall cmd: C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"       publisher: Adobe Systems, Inc.       help link: https://acrobat.adobe.com/us/en/acrobat.htmlAdobe Photoshop Elements 2.0 2.0 (Adobe Photoshop Elements 2.0) version (major): 2install location: C:\Program Files\Adobe\Photoshop Elements 2  install source: E:\Adobe Photoshop Elements\   uninstall cmd: C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Adobe\Photoshop Elements 2\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop Elements 2\Uninst.dll"       publisher: Adobe Systems, Inc.ATI - Utilitaire de désinstallation du logiciel 6.14.10.1009 (All ATI Software)   uninstall cmd: C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exeATI Display Driver 8.03-040610a-016126C-ATI (ATI Display Driver)   uninstall cmd: rundll32 C:\WINDOWS\System32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean  (Branding)Canon i965  (CANONBJ_Deinstall_CNMCP5n.DLL)   uninstall cmd: C:\WINDOWS\System32\CNMCP5n.exe "-PRINTERNAMECanon i965" "-HELPERDLLC:\BJPrinter\CNMWINDOWS\Canon i965 Installer\Inst2\cnmis.dll" "-RCDLLC:\BJPrinter\CNMWINDOWS\Canon i965 Installer\Inst2\cnmi040c.dll"CCleaner (remove only)  (CCleaner)   uninstall cmd: "C:\Program Files\CCleaner\uninst.exe"CleanUp!  (CleanUp!)   uninstall cmd: C:\Program Files\CleanUp!\uninstall.exeSoftV92 Data Fax Modem  (CNXT_MODEM_PCI)   uninstall cmd: C:\Program Files\CONEXANT\CNXT_MODEM_PCI\HXFSETUP.EXE -U -IVEN_14F1&DEV_2F00  (Connection Manager)  (DirectAnimation)  (DirectDrawEx)  (DXM_Runtime)e-Carte Bleue Adésio La Banque Postale  (e-Carte Bleue Adésio La Banque Postale)   uninstall cmd: RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\ECB-LP1.INF, DefaultUninstall.ntx86e-Carte Bleue Adésio La Poste  (e-Carte Bleue Adésio La Poste)   uninstall cmd: RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\ECB-LP1.INF, DefaultUninstall.ntx86Canon Utilities Easy-PhotoPrint  (Easy-PhotoPrint)   uninstall cmd: C:\WINDOWS\ISUN040C.EXE  -f"C:\Program Files\Canon\Easy-PhotoPrint\Uninst.isu" -c"C:\Program Files\Canon\Easy-PhotoPrint\EZUNINST.DLL"Canon Utilities Easy-PhotoPrint Plus  (Easy-PhotoPrint Plus)   uninstall cmd: C:\WINDOWS\ISUN040C.EXE  -f"C:\Program Files\Canon\Easy-PhotoPrint Plus\Uninst.isu" -c"C:\Program Files\Canon\Easy-PhotoPrint Plus\EZUNINST.DLL"Easy-WebPrint  (Easy-WebPrint)   uninstall cmd: C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Canon\Easy-WebPrint\Uninst.isu"eMule  (eMule)   uninstall cmd: "C:\Program Files\eMule\Uninstall.exe"  (expinst)Firebird SQL Server - MAGIX Edition (F) 2.0.0.1 (Firebird SQL Server F)install location: C:\MAGIX\Common\Database   uninstall cmd: C:\MAGIX\Common\Database\uninstall.exe       publisher: MAGIX AG  (Fontcore)HijackThis 1.99.1 1.99.1 (HijackThis)   uninstall cmd: C:\Documents and Settings\Propriétaire\Mes documents\Unzipped\hijackthis[1]\HijackThis.exe /uninstall       publisher: Soeperman Enterprises Ltd.Hollywood FX 5.5 Additional Effects  (Hollywood FX 5.5 Additional Effects)   uninstall cmd: C:\WINDOWS\unvise32.exe C:\Program Files\Pinnacle\Hollywood FX for Studio\5.5\unextralogPinnacle Hollywood FX for Studio  (Hollywood FX for Studio)   uninstall cmd: C:\WINDOWS\unvise32.exe C:\Program Files\Pinnacle\Hollywood FX for Studio\5.5\uninstal.logHollywood FX Pack 26 - Extra FX  (Hollywood FX Pack 26 - Extra FX)   uninstall cmd: C:\WINDOWS\unvise32.exe C:\WINDOWS\unextrafx.log  (ICW)  (IE40)  (IE4Data)  (IE5BAKEX)  (IEData)  (InstallShield Uninstall Information)SmartSound Quicktracks Plugin 3.0.2.4 (InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E})         version: 50331650 version (major): 3  estimated size: 17690    install date: 20050615install location: C:\Program Files\SmartSound Software\Quicktracks\  install source: C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\_is2F\   uninstall cmd: C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}        publisher: SmartSound Software Inc        comments: Built by Chris Coble         contact: Customer Support Department       help link: https://www.smartsound.com/support  help telephone: 1-818-920-9122Canon RemoteCapture Task for ZoomBrowser EX 0.9.0 (InstallShield_{822586CA-0B15-428C-859A-64B3728F28E7})         version: 589824 version (minor): 9  estimated size: 121    install date: 20040715  install source: E:\Zoombrsr\French\RCTASK\   uninstall cmd: C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{822586CA-0B15-428C-859A-64B3728F28E7}        publisher: Canon        comments:           contact:         help link:    help telephone:  QuickTime 7.0.4 (InstallShield_{929408E6-D265-4174-805F-81D1D914E2A4})         version: 117440516 version (major): 7  estimated size: 66739    install date: 20060329install location: C:\Program Files\QuickTime\  install source: C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\_is72\   uninstall cmd: C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{929408E6-D265-4174-805F-81D1D914E2A4} /l1036        publisher: Apple Computer, Inc.         contact: Assistance AppleCare       help link: https://support.apple.com/fr-fr  help telephone: (33) 0825 888 024Canon Camera Window for ZoomBrowser EX 4.5.2 (InstallShield_{A29EA741-24F7-4C07-9B2C-06CB6491BE4A})         version: 67436546 version (major): 4 version (minor): 5  estimated size: 15231    install date: 20040715  install source: E:\cw\French\   uninstall cmd: C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{A29EA741-24F7-4C07-9B2C-06CB6491BE4A}        publisher: Canon        comments:           contact:         help link:    help telephone:            readme:  Canon RAW Image Task for ZoomBrowser EX 0.9.0 (InstallShield_{D076E06B-F74B-454F-A56E-7510D7B6C9F0})         version: 589824 version (minor): 9  estimated size: 126    install date: 20040715  install source: E:\Zoombrsr\French\RAWTASK\   uninstall cmd: C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{D076E06B-F74B-454F-A56E-7510D7B6C9F0}        publisher: Canon        comments:           contact:         help link:    help telephone:    (InstallShield_{DA13B1E3-4362-4442-8345-CCA945A8F760})  (Intel® Integrated Performance Primitives 1.1)   uninstall cmd: C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\System32\UninstIPP.isuMicrosoft Data Access Components KB870669  (KB870669)   uninstall cmd: C:\WINDOWS\muninst.exe C:\WINDOWS\INF\KB870669.inf       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-usCorrectif Windows XP - KB873339 20041117.092459 (KB873339)   uninstall cmd: C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/873339  (KB884016)Correctif Windows XP - KB885250 20050118.202711 (KB885250)   uninstall cmd: C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/885250Correctif Windows XP - KB885835 20041027.181713 (KB885835)   uninstall cmd: C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/885835/ms04-044-vulnerabilities-in-windows-kernel-and-lsass-could-allow-elevaCorrectif Windows XP - KB885836 20041028.173203 (KB885836)   uninstall cmd: C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/885836/ms04-041-a-vulnerability-in-wordpad-could-allow-code-executionCorrectif Windows XP - KB886185 20041021.090540 (KB886185)   uninstall cmd: C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/886185Correctif Windows XP - KB888113 20041116.131036 (KB888113)   uninstall cmd: C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/888113Correctif Windows XP - KB888302 20041207.111426 (KB888302)   uninstall cmd: C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/888302Mise à jour de sécurité pour Windows XP (KB890046) 1 (KB890046)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/890046Correctif Windows XP - KB890859 1 (KB890859)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/890859Correctif Windows XP - KB891781 20050110.165439 (KB891781)   uninstall cmd: C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/891781Mise à jour de sécurité pour Windows XP (KB893066) 2 (KB893066)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/893066/ms05-019-vulnerabilities-in-tcp-ip-could-allow-remote-code-execution-aMise à jour de sécurité pour Windows XP (KB893756) 1 (KB893756)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/893756  (KB893803) 3.1 (KB893803v2)       help link: https://support.microsoft.com/en-us/help/893803/windows-installer-3-1-v2-3-1-4000-2435-is-availableMise à jour de sécurité pour Windows XP (KB896358) 1 (KB896358)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/896358/ms05-026-a-vulnerability-in-html-help-could-allow-remote-code-executioMise à jour de sécurité pour Windows XP (KB896422) 1 (KB896422)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/896422/ms05-027-vulnerability-in-server-message-block-could-allow-remote-codeMise à jour de sécurité pour Windows XP (KB896423) 1 (KB896423)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/windows?ui=en-US&rs=en-001&ad=USMise à jour de sécurité pour Windows XP (KB896424) 1 (KB896424)    install date: 20051109   uninstall cmd: "C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/896424Mise à jour de sécurité pour Windows XP (KB896428) 1 (KB896428)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/896428Mise à jour de sécurité pour Windows XP (KB896688) 1 (KB896688)    install date: 20051107   uninstall cmd: "C:\WINDOWS\$NtUninstallKB896688$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/896688/ms05-052-cumulative-security-update-for-internet-explorerMise à jour de sécurité pour Windows XP (KB899587) 1 (KB899587)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/899587Mise à jour de sécurité pour Windows XP (KB899588) 1 (KB899588)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB899588$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/899588Mise à jour de sécurité pour Windows XP (KB899591) 1 (KB899591)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/899591Mise à jour pour Windows XP (KB900485) 2 (KB900485)    install date: 20060426   uninstall cmd: "C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/900485Mise à jour de sécurité pour Windows XP (KB900725) 1 (KB900725)    install date: 20051012   uninstall cmd: "C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/900725Mise à jour de sécurité pour Windows XP (KB901017) 1 (KB901017)    install date: 20051012   uninstall cmd: "C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/901017Mise à jour de sécurité pour Windows XP (KB901214) 1 (KB901214)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/901214Mise à jour de sécurité pour Windows XP (KB902400) 1 (KB902400)    install date: 20051012   uninstall cmd: "C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/902400/ms05-051-vulnerabilities-in-ms-dtc-and-com-could-allow-remote-code-exeMise à jour de sécurité pour Windows XP (KB904706) 1 (KB904706)    install date: 20051012       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/904706Mise à jour de sécurité pour Windows XP (KB905414) 1 (KB905414)    install date: 20051012   uninstall cmd: "C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/905414Mise à jour de sécurité pour Windows XP (KB905749) 1 (KB905749)    install date: 20051012   uninstall cmd: "C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/905749Mise à jour de sécurité pour Windows XP (KB905915) 1 (KB905915)    install date: 20051214   uninstall cmd: "C:\WINDOWS\$NtUninstallKB905915$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/905915Mise à jour de sécurité pour Windows XP (KB908519) 1 (KB908519)    install date: 20060110   uninstall cmd: "C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/908519Mise à jour de sécurité pour Windows XP (KB908531) 1 (KB908531)    install date: 20060413   uninstall cmd: "C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/908531Mise à jour pour Windows XP (KB910437) 1 (KB910437)    install date: 20051214   uninstall cmd: "C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/910437Mise à jour de sécurité pour Windows XP (KB911280) 1 (KB911280)    install date: 20060614   uninstall cmd: "C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/911280Mise à jour de sécurité pour Windows XP (KB911562) 1 (KB911562)    install date: 20060413   uninstall cmd: "C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/911562Mise à jour de sécurité pour Lecteur Windows Media (KB911564)  (KB911564)    install date: 20060217   uninstall cmd: "C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/911564Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)  (KB911565)    install date: 20060217   uninstall cmd: "C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/911565Mise à jour de sécurité pour Windows XP (KB911567) 1 (KB911567)    install date: 20060413   uninstall cmd: "C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/911567Mise à jour de sécurité pour Windows XP (KB911927) 1 (KB911927)    install date: 20060217   uninstall cmd: "C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/911927Mise à jour de sécurité pour Windows XP (KB912812) 1 (KB912812)    install date: 20060413   uninstall cmd: "C:\WINDOWS\$NtUninstallKB912812$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/912812/ms06-013-cumulative-security-update-for-internet-explorerMise à jour de sécurité pour Windows XP (KB912919) 1 (KB912919)    install date: 20060106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/912919Mise à jour de sécurité pour Windows XP (KB913446) 1 (KB913446)    install date: 20060217   uninstall cmd: "C:\WINDOWS\$NtUninstallKB913446$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/913446Mise à jour de sécurité pour Windows XP (KB913580) 1 (KB913580)    install date: 20060509   uninstall cmd: "C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/913580Mise à jour de sécurité pour Windows XP (KB914389) 1 (KB914389)    install date: 20060614   uninstall cmd: "C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/914389Mise à jour de sécurité pour Windows XP (KB916281) 1 (KB916281)    install date: 20060614   uninstall cmd: "C:\WINDOWS\$NtUninstallKB916281$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/916281Mise à jour de sécurité pour Windows XP (KB917344) 1 (KB917344)    install date: 20060614   uninstall cmd: "C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/917344Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)  (KB917734_WMP10)    install date: 20060614   uninstall cmd: "C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/917734Mise à jour de sécurité pour Windows XP (KB917953) 1 (KB917953)    install date: 20060614   uninstall cmd: "C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/917953Mise à jour de sécurité pour Windows XP (KB918439) 1 (KB918439)    install date: 20060614   uninstall cmd: "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/918439K-Lite Codec Pack 2.33 Full 2.33 (KLiteCodecPack_is1)install location: C:\Program Files\K-Lite Codec Pack\   uninstall cmd: "C:\Program Files\K-Lite Codec Pack\unins001.exe"Language Pack for Ad-aware 6 2.0 (Language Pack for Ad-aware 6)   uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~1\Lang\Lang\LANGUA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\Lang\Lang\LANGUA~1\INSTALL.LOG       publisher: Lavasoft Sweden        comments: Language pack for Ad-aware 6Language pack for Ad-Aware SE  (Language pack for Ad-Aware SE)   uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\INSTALL.LOG       publisher: Lavasoft       help link: http://www.lavasoft.deLeechFTP   (LeechFTP)   uninstall cmd: C:\WINDOWS\eraser.exe KILL "C:\Program Files\LeechFTP\uninstall.uif"Ludiclub.com 2 (Ludiclub.com)   uninstall cmd: C:\WINDOWS\system32\GKSUI20.EXE C:\Program Files\Ludiclub\Uninstall8E41.DAT       publisher: LudiclubMAGIX Music Manager 2006 (F) 7.0.2.194 (MAGIX Music Manager 2006 F)install location: C:\MAGIX\Music_Manager_2006   uninstall cmd: C:\MAGIX\Music_Manager_2006\instslct.exe       publisher: MAGIX AGMAGIX Photo Clinic 4.5 (F) 4.5.7.0 (MAGIX Photo Clinic 4.5 F)install location: C:\MAGIX\Photo_Clinic_45   uninstall cmd: C:\MAGIX\Photo_Clinic_45\instslct.exe       publisher: MAGIX AGMAGIX Photo Manager 2006 (F) 3.1.0.102 (MAGIX Photo Manager 2006 F)install location: C:\MAGIX\Photo_Manager_2006   uninstall cmd: C:\MAGIX\Photo_Manager_2006\instslct.exe       publisher: MAGIX AGMAGIX Photos sur CD & DVD 3.0 3.0.2.0 (MAGIX Photos sur CD & DVD 3.0)   uninstall cmd: C:\MAGIX\Photos_sur_CD_DVD_3\instslct.exe       publisher: MAGIX AGMAGIX Photos sur CD & DVD 5.0 deluxe (F) 5.0.3.0 (MAGIX Photos sur CD & DVD 5.0 deluxe F)install location: C:\MAGIX\Photos_sur_CD_DVD_5_dlx   uninstall cmd: C:\MAGIX\Photos_sur_CD_DVD_5_dlx\instslct.exe       publisher: MAGIX AG  (McAfee Personal Firewall Plus)   uninstall cmd: c:\PROGRA~1\mcafee.com\shared\mcappins.exe /v=3 /uninstall=1 /appid=mpf /interact=1 /script_proactive=0 /start=c:\PROGRA~1\mcafee.com\agent\uninst\mpfrem.ui::uninstall.htm  (McAfee Privacy Service)   uninstall cmd: c:\PROGRA~1\mcafee.com\shared\mcappins.exe /v=3 /uninstall=1 /appid=mps /interact=1 /script_proactive=0 /start=c:\PROGRA~1\mcafee.com\agent\uninst\mpsrem.ui::uninstall.htm  (Mcafee SecurityCenter)   uninstall cmd: c:\PROGRA~1\mcafee.com\shared\mcappins.exe /v=3 /uninstall=1 /appid=msc /interact=1 /script_proactive=0 /start=c:\PROGRA~1\mcafee.com\agent\uninst\screm.ui::uninstall.htm  (McAfee SpamKiller)   uninstall cmd: c:\PROGRA~1\mcafee.com\shared\mcappins.exe /v=3 /appid=MSK /uninstall=1 /interact=1 /script_proactive=0 /start="c:\PROGRA~1\mcafee.com\agent\uninst\mskremui.dll::uninstall.htm"Assistant de désinstallation de McAfee  (McAfee Uninstall Utility)   uninstall cmd: C:\PROGRA~1\McAfee.com\Shared\mcappins.exe /v=3 /uninstall=1 /interact=1 /script_proactive=0 /start=c:\PROGRA~1\mcafee.com\agent\uninst\comrem.dll::uninstall.htmCD-LabelPrint  (MediaNavigation.CDLabelPrint)install location: C:\Program Files\Canon\CD-LabelPrint\   uninstall cmd: "C:\Program Files\Canon\CD-LabelPrint\Uninstal.exe" Canon.CDLabelPrint.Application  (Microsoft NetShow Player 2.0)  (MobileOptionPack)  (MPlayer2)  (MSI30-Beta1)  (MSI30-Beta2)  (MSI30-KB884016)  (MSI30-RC1)  (MSI30-RC2)  (MSI30a-KB884016)  (MSI31-Beta)  (MSI31-RC1)  (MsJavaVM)Nero 6 Demo  (Nero - Burning Rom!UninstallKey)   uninstall cmd: C:\Program Files\Ahead
ero\uninstall\UNNERO.exe /UNINSTALLNeroVision Express 2  (NeroVision!UninstallKey)   uninstall cmd: C:\WINDOWS\UNNeroVision.exe /UNINSTALL  (NetMeeting)Objective Tarot  (Objective Tarot)   uninstall cmd: "C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-Objective Tarot.dat  (OutlookExpress)  (PCHealth)   uninstall cmd: rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf  (RealJukebox 1.0)   uninstall cmd: C:\Program Files\Fichiers communs\Real\Update_OB1puninst.exe RealNetworks|R

incognito02 · Answer

SalutVa dans panneau de configuration < option internet < onglet general < supprime cookies, fichier temp.Puis relance spybot et idem, remet le rapporta+

nbloquet · Answer

Re  , j'ai effectué les manips , voici le rapport apres.Merci --- Search result list ---MagicControl.Agent: Réglages utilisateur (Clé du registre, nothing done)  HKEY_USERS\S-1-5-21-789336058-706699826-1417001333-1003\Software\LanConfig--- Spybot - Search & Destroy version: 1.4  (build: 20050523) ---2005-05-31 blindman.exe (1.0.0.1)2005-05-31 SpybotSD.exe (1.4.0.3)2005-05-31 TeaTimer.exe (1.4.0.2)2006-04-13 unins000.exe (51.41.0.0)2005-05-31 Update.exe (1.4.0.0)2006-02-06 advcheck.dll (1.0.2.0)2005-05-31 aports.dll (2.1.0.0)2005-05-31 borlndmm.dll (7.0.4.453)2005-05-31 delphimm.dll (7.0.4.453)2005-05-31 SDHelper.dll (1.4.0.0)2006-02-20 Tools.dll (2.0.0.2)2005-05-31 UnzDll.dll (1.73.1.1)2005-05-31 ZipDll.dll (1.73.2.0)2006-06-16 Includes\Cookies.sbi (*)2006-06-16 Includes\Dialer.sbi (*)2006-06-16 Includes\Hijackers.sbi (*)2006-06-16 Includes\Keyloggers.sbi (*)2004-11-29 Includes\LSP.sbi (*)2006-06-16 Includes\Malware.sbi (*)2006-06-16 Includes\PUPS.sbi (*)2006-06-16 Includes\Revision.sbi (*)2006-06-16 Includes\Security.sbi (*)2006-06-16 Includes\Spybots.sbi (*)2005-02-17 Includes\Tracks.uti2006-06-16 Includes\Trojans.sbi (*)--- System information ---Windows XP (Build: 2600) Service Pack 2 / DataAccess: Microsoft Data Access Components KB870669 / DataAccess: Security Update for Microsoft Data Access Components / DirectX / DX9 / SP1: Correctif pour DirectX 9 - KB839643 / Internet Explorer 6 / SP1: Correctif Windows XP - Article Base de Connaissances 834707 / Internet Explorer 6 / SP1: Correctif Windows XP - KB896688 / Windows Media Player: Correctif pour le Lecteur Windows Media [Voir Q828026 pour plus d'informations] / Windows Media Player / SP0: Correctif pour le Lecteur Windows Media [Voir Q828026 pour plus d'informations] / Windows Media Player: Windows Media Update 817787 / Windows Media Player 10: Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565) / Windows Media Player 10: Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734) / Windows XP / SP2: Windows XP Hotfix (SP2) [See KB810243 for more information] / Windows XP / SP2: Windows XP Service Pack 2 / Windows XP / SP2: Pack réseau avancé pour Windows XP / Windows XP / SP2: Correctif Windows XP - KB820291 / Windows XP / SP2: Correctif Windows XP - KB821253 / Windows XP / SP2: Correctif Windows XP - KB822603 / Windows XP / SP2: Correctif Windows XP - KB823182 / Windows XP / SP2: Correctif Windows XP - KB823980 / Windows XP / SP2: Correctif Windows XP - KB824105 / Windows XP / SP2: Correctif Windows XP - KB824141 / Windows XP / SP2: Correctif Windows XP - KB825119 / Windows XP / SP2: Correctif Windows XP - KB826939 / Windows XP / SP2: Correctif Windows XP - KB826942 / Windows XP / SP2: Correctif Windows XP - KB828028 / Windows XP / SP2: Correctif Windows XP - KB828035 / Windows XP / SP2: Correctif Windows XP - KB829558 / Windows XP / SP2: Correctif Windows XP - KB833407 / Windows XP / SP2: Correctif Windows XP - KB833998 / Windows XP / SP2: Correctif Windows XP - KB837001 / Windows XP / SP2: Correctif Windows XP - KB839643 / Windows XP / SP2: Correctif Windows XP - KB839645 / Windows XP / SP2: Correctif Windows XP - KB840315 / Windows XP / SP2: Correctif Windows XP - KB840374 / Windows XP / SP2: Correctif Windows XP - KB841873 / Windows XP / SP2: Correctif Windows XP - KB883357 / Windows XP / SP2: Correctif Windows XP (SP2) Q322011 / Windows XP / SP2: Correctif Windows XP (SP2) Q327979 / Windows XP / SP2: Correctif Windows XP (SP2) Q814995 / Windows XP / SP2: Correctif Windows XP (SP2) Q815021 / Windows XP / SP2: Correctif Windows XP (SP2) Q819696 / Windows XP / SP3: Correctif Windows XP - KB834707 / Windows XP / SP3: Correctif Windows XP - KB867282 / Windows XP / SP3: Correctif Windows XP - KB873333 / Windows XP / SP3: Correctif Windows XP - KB873339 / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB883939) / Windows XP / SP3: Correctif Windows XP - KB885250 / Windows XP / SP3: Correctif Windows XP - KB885835 / Windows XP / SP3: Correctif Windows XP - KB885836 / Windows XP / SP3: Correctif Windows XP - KB886185 / Windows XP / SP3: Correctif Windows XP - KB887472 / Windows XP / SP3: Correctif Windows XP - KB887742 / Windows XP / SP3: Correctif Windows XP - KB888113 / Windows XP / SP3: Correctif Windows XP - KB888302 / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB890046) / Windows XP / SP3: Correctif Windows XP - KB890047 / Windows XP / SP3: Correctif Windows XP - KB890175 / Windows XP / SP3: Correctif Windows XP - KB890859 / Windows XP / SP3: Correctif Windows XP - KB890923 / Windows XP / SP3: Correctif Windows XP - KB891781 / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB893066) / Windows XP / SP3: Correctif Windows XP - KB893086 / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB893756) / Windows XP / SP3: Windows Installer 3.1 (KB893803) / Windows XP / SP3: Windows Installer 3.1 (KB893803) / Windows XP / SP3: Mise à jour pour Windows XP (KB894391) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896358) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896422) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896423) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896424) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896428) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896688) / Windows XP / SP3: Mise à jour pour Windows XP (KB896727) / Windows XP / SP3: Mise à jour pour Windows XP (KB898461) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899587) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899588) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899591) / Windows XP / SP3: Mise à jour pour Windows XP (KB900485) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB900725) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901017) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901214) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB902400) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB903235) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB904706) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905414) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905749) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905915) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB908519) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB908531) / Windows XP / SP3: Mise à jour pour Windows XP (KB910437) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911280) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911562) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911567) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911927) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB912812) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB912919) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB913446) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB913580) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB914389) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB916281) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917344) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917953) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB918439)--- Startup entries list ---Located: HK_LM:Run, ATIPTAcommand: C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe   file: C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe   size: 339968    MD5: c4708c52ac71338b49334c972de96682Located: HK_LM:Run, eCarteBleue-LP-P1command: "C:\Program Files\e-Carte Bleue\LA POSTE\CVD ADESIO\ECB.exe"  /dontopenmycards   file: C:\Program Files\e-Carte Bleue\LA POSTE\CVD ADESIO\ECB.exe   size: 200704    MD5: 6344642e6cbefabb7e367388d09900e8Located: HK_LM:Run, MCAgentExecommand: c:\PROGRA~1\mcafee.com\agent\mcagent.exe   file: c:\PROGRA~1\mcafee.com\agent\mcagent.exe   size: 303104    MD5: e8d2dcece015f4558aa3853514664f15Located: HK_LM:Run, MCUpdateExecommand: C:\PROGRA~1\mcafee.com\agent\mcupdate.exe   file: C:\PROGRA~1\mcafee.com\agent\mcupdate.exe   size: 212992    MD5: dec79e9887924b82837b9b7730ecaa1fLocated: HK_LM:Run, MPFExecommand: C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe   file: C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe   size: 1005096    MD5: d76dcba1bce72093e00a4efa114a4e98Located: HK_LM:Run, MPFExecommand: C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe   file: C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe   size: 1005096    MD5: d76dcba1bce72093e00a4efa114a4e98Located: HK_LM:Run, MPSExecommand: c:\PROGRA~1\mcafee.com\mps\mscifapp.exe /embedding   file: c:\PROGRA~1\mcafee.com\mps\mscifapp.exe   size: 296488    MD5: 98ba8f513cb0dda119c99d33f758a416Located: HK_LM:Run, MSKAGENTEXEcommand: C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe   file: C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe   size: 110592    MD5: 493a8bb01e9cbf9164f321272ed9e652Located: HK_LM:Run, MSKDetectorExecommand: C:\PROGRA~1\McAfee\SPAMKI~1\MskDetct.exe /startup   file: C:\PROGRA~1\McAfee\SPAMKI~1\MskDetct.exe   size: 1121792    MD5: a5f0ef1a69f6707f27e53ee54b8f8ac4Located: HK_LM:Run, OASClntcommand: C:\Program Files\McAfee.com\VSO\oasclnt.exe   file: C:\Program Files\McAfee.com\VSO\oasclnt.exe   size: 53248    MD5: 76e033f33912bfaca4a05be8d1f3a740Located: HK_LM:Run, VirusScan Onlinecommand: C:\Program Files\McAfee.com\VSO\mcvsshld.exe   file: C:\Program Files\McAfee.com\VSO\mcvsshld.exe   size: 163840    MD5: b154ac6dbd82f96476003e58e1625bd8Located: HK_LM:Run, VSOCheckTaskcommand: "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask   file: C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe   size: 151552    MD5: 3c943ceb913520f9981d82db93ba7a8aLocated: HK_CU:Run, MSKAGENTEXEcommand: c:\PROGRA~1\mcafee\SPAMKI~1\mskagent.exe   file: c:\PROGRA~1\mcafee\SPAMKI~1\mskagent.exe   size: 110592    MD5: 493a8bb01e9cbf9164f321272ed9e652Located: Démarrage (tous utilisateurs), RAMASST.lnkcommand: C:\WINDOWS\system32\RAMASST.exe   file: C:\WINDOWS\system32\RAMASST.exe   size: 155648    MD5: 7c86a098d2a2e5d0cc8ec60f90637e9eLocated: Démarrage (tous utilisateurs), WinZip Quick Pick.lnkcommand: C:\Program Files\WinZip\WZQKPICK.EXE   file: C:\Program Files\WinZip\WZQKPICK.EXE   size: 118784    MD5: 67b2e7b6ae3b400d832f0456068ea83dLocated: System.ini, AtiExtEventcommand: Ati2evxx.dll   file: Ati2evxx.dllLocated: System.ini, crypt32chaincommand: crypt32.dll   file: crypt32.dllLocated: System.ini, cryptnetcommand: cryptnet.dll   file: cryptnet.dllLocated: System.ini, cscdllcommand: cscdll.dll   file: cscdll.dllLocated: System.ini, ScCertPropcommand: wlnotify.dll   file: wlnotify.dllLocated: System.ini, Schedulecommand: wlnotify.dll   file: wlnotify.dllLocated: System.ini, sclgntfycommand: sclgntfy.dll   file: sclgntfy.dllLocated: System.ini, SensLogncommand: WlNotify.dll   file: WlNotify.dllLocated: System.ini, termsrvcommand: wlnotify.dll   file: wlnotify.dllLocated: System.ini, wlballooncommand: wlnotify.dll   file: wlnotify.dll--- Browser helper object list ---{3EC8255F-E043-4cae-8B3B-B191550C2A22} (McAfee Privacy Service Popup Blocker)          BHO name:         CLSID name: McAfee Privacy Service Popup Blocker              Path: c:\program files\mcafee.com\mps\         Long name:    PopupKiller.dll        Short name:       POPUPK~1.DLL    Date (created): 24/06/2005 00:43:18Date (last access): 23/06/2006 13:14:02 Date (last write): 28/10/2005 10:30:36          Filesize:             132648        Attributes:           archive                MD5: 77D107A323259FF27D6121CA30304C82             CRC32:           ADBD1E43           Version:          8.1.0.120{41D68ED8-4CFF-4115-88A6-6EBB8AF19000} (McAfee AntiPhishing Filter)          BHO name:         CLSID name: McAfee AntiPhishing Filter              Path: c:\PROGRA~1\mcafee\SPAMKI~1\         Long name:       McApfBHO.dll        Short name:                       Date (created): 23/06/2006 01:21:04Date (last access): 23/06/2006 13:14:02 Date (last write): 09/11/2005 15:01:00          Filesize:             348160        Attributes:           archive                MD5: 91D084FD19C549AD74F8C4E75A9E40E6             CRC32:           2B368A1A           Version:            7.0.2.3{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)          BHO name:         CLSID name: SSVHelper Class              Path: C:\Program Files\Java\jre1.5.0_06\bin\         Long name:            ssv.dll        Short name:                       Date (created): 10/11/2005 14:03:56Date (last access): 23/06/2006 13:14:02 Date (last write): 10/11/2005 14:22:10          Filesize:             184423        Attributes:           archive                MD5: F01726F7CA8538FDD4663C9DB8FEAEDC             CRC32:           0111B892           Version:           5.0.60.5--- ActiveX list ---{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} (Java Runtime Environment 1.5.0)          DPF name: Java Runtime Environment 1.5.0        CLSID name: Java Plug-in 1.5.0_06         Installer:           Codebase: http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab              Path: C:\Program Files\Java\jre1.5.0_06\bin\         Long name:    NPJPI150_06.dll        Short name:       NPJPI1~1.DLL    Date (created): 10/11/2005 14:03:56Date (last access): 23/06/2006 13:36:22 Date (last write): 10/11/2005 14:22:10          Filesize:              69746        Attributes:           archive                MD5: D2CF6BB5E9020E6707B62575F8083954             CRC32:           7F39DC54           Version:           5.0.60.5{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.5.0)          DPF name: Java Runtime Environment 1.5.0        CLSID name: Java Plug-in 1.5.0_06         Installer:           Codebase: http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab              Path: C:\Program Files\Java\jre1.5.0_06\bin\         Long name:    NPJPI150_06.dll        Short name:       NPJPI1~1.DLL    Date (created): 10/11/2005 14:03:56Date (last access): 23/06/2006 13:36:22 Date (last write): 10/11/2005 14:22:10          Filesize:              69746        Attributes:           archive                MD5: D2CF6BB5E9020E6707B62575F8083954             CRC32:           7F39DC54           Version:           5.0.60.5{D27CDB55-0000-0000-0000-000000000000} ()          DPF name:         CLSID name:          Installer: C:\WINDOWS\Downloaded Program Files\swflash.inf          Codebase: http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab--- Process list ---PID:    0 (   0) [System]PID:  912 (   4) \SystemRoot\System32\smss.exePID:  960 ( 912) \??\C:\WINDOWS\system32\csrss.exePID:  988 ( 912) \??\C:\WINDOWS\system32\winlogon.exePID: 1032 ( 988) C:\WINDOWS\system32\services.exe size: 108544  MD5: 63DCDE1A0D86EEB8924D6738FF616EADPID: 1044 ( 988) C:\WINDOWS\system32\lsass.exe size: 13312  MD5: 259AF82A0932EEA4F316F92DB94707B6PID: 1220 (1032) C:\WINDOWS\System32\Ati2evxx.exe size: 376832  MD5: 5CCA7DF290D82D1048F217E3C6272384PID: 1232 (1032) C:\WINDOWS\system32\svchost.exe size: 14336  MD5: 2979B03D5382A602623C0535B16AB9C0PID: 1288 (1032) C:\WINDOWS\system32\svchost.exe size: 14336  MD5: 2979B03D5382A602623C0535B16AB9C0PID: 1424 (1032) C:\WINDOWS\System32\svchost.exe size: 14336  MD5: 2979B03D5382A602623C0535B16AB9C0PID: 1548 (1032) C:\WINDOWS\system32\spoolsv.exe size: 57856  MD5: DA81EC57ACD4CDC3D4C51CF3D409AF9FPID: 1660 (1032) C:\WINDOWS\System32\alg.exe size: 44544  MD5: B43CC0F07752D456038CD0268E4D84E9PID: 1672 (1032) C:\WINDOWS\System32\dllhost.exe size: 5120  MD5: 9B2CE161927038D4CABE0482A14FD052PID: 1792 (1032) c:\program files\mcafee.com\agent\mcdetect.exe size: 126976  MD5: F73B0F3EBD90B1C87A3B93BE94E831C7PID: 1804 (1032) c:\PROGRA~1\mcafee.com\vso\mcshield.exe size: 221184  MD5: FAE84A2F9C11B7C532950BF0AE1EC26APID: 1840 (1032) c:\PROGRA~1\mcafee.com\agent\mctskshd.exe size: 122368  MD5: A214E217784D1002411DCA8E9793D4A4PID:  172 (1032) C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe size: 548864  MD5: 316535E69181703D4CE4623DEA29FECBPID:  340 (1032) C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe size: 963072  MD5: 4DB8F824F17B8D9CC5826FBDF0205870PID: 1624 ( 988) C:\WINDOWS\system32\Ati2evxx.exe size: 376832  MD5: 5CCA7DF290D82D1048F217E3C6272384PID: 1940 (1716) C:\WINDOWS\Explorer.EXE size: 1036288  MD5: 2A7BD330924252A2FD80344FC949BB72PID:  188 (1940) C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe size: 339968  MD5: C4708C52AC71338B49334C972DE96682PID:  252 (1940) C:\PROGRA~1\mcafee.com\agent\mcagent.exe size: 303104  MD5: E8D2DCECE015F4558AA3853514664F15PID:  312 (1940) C:\PROGRA~1\mcafee.com\mps\mscifapp.exe size: 296488  MD5: 98BA8F513CB0DDA119C99D33F758A416PID:  324 (1940) C:\PROGRA~1\mcafee\SPAMKI~1\mskagent.exe size: 110592  MD5: 493A8BB01E9CBF9164F321272ED9E652PID:  428 (1940) C:\Program Files\McAfee.com\VSO\mcvsshld.exe size: 163840  MD5: B154AC6DBD82F96476003E58E1625BD8PID:  440 (1940) C:\Program Files\McAfee.com\VSO\oasclnt.exe size: 53248  MD5: 76E033F33912BFACA4A05BE8D1F3A740PID:  456 (1940) C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe size: 1005096  MD5: D76DCBA1BCE72093E00A4EFA114A4E98PID:  748 ( 724) c:\progra~1\mcafee.com\vso\mcvsescn.exe size: 483328  MD5: 3B1A1BAA8D7444DEFCE4093611212ED6PID:  864 (1940) C:\WINDOWS\system32\RAMASST.exe size: 155648  MD5: 7C86A098D2A2E5D0CC8EC60F90637E9EPID:  904 (1032) C:\WINDOWS\System32\snmp.exe size: 32768  MD5: F143B2E34BA845F3631D1FB623ED538APID: 1504 (1032) C:\WINDOWS\System32\svchost.exe size: 14336  MD5: 2979B03D5382A602623C0535B16AB9C0PID: 1612 (1032) C:\WINDOWS\System32\svchost.exe size: 14336  MD5: 2979B03D5382A602623C0535B16AB9C0PID:  176 (1940) C:\Program Files\WinZip\WZQKPICK.EXE size: 118784  MD5: 67B2E7B6AE3B400D832F0456068EA83DPID: 2480 (1032) C:\WINDOWS\system32\fxssvc.exe size: 268800  MD5: FBE05797F3A311596D0DDBB6AB60FE19PID: 3692 (1232) C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe size: 524288  MD5: EFFC4B0F270FC1A6EDF49A274BF5CDF8PID: 3816 ( 220) C:\WINDOWS\GALSVW32.EXE size: 45056  MD5: E8FD16F032B8FA448692EB845768DC83PID: 1912 (1940) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe size: 4393096  MD5: 09CA174A605B480318731E691DC98539PID:    4 (   0) System--- Browser start & search pages list ---Spybot - Search & Destroy browser pages report, 23/06/2006 14:12:38HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page  C:\WINDOWS\system32\blank.htmHKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page  http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearchHKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar  https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9FHKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page  https://fr.yahoo.com/HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\@  http://home.microsoft.com/access/autosearch.asp?p=%sHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page  %SystemRoot%\system32\blank.htmHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page  http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearchHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Bar  https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htmHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page  http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=homeHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL  http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhomeHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL  http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearchHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant  https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htmHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch  https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm--- Winsock Layered Service Provider list ---Protocol  0: MC_LAYERED MSAFD Tcpip [TCP/IP]        GUID: {0B9D8FB6-69A0-4624-8BCA-EA0340C608CF}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol  1: MC_LAYERED MSAFD Tcpip [UDP/IP]        GUID: {6C0E11C6-78B8-4E29-9B12-29CD08B8F51A}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol  2: MC_LAYERED MSAFD Tcpip [RAW/IP]        GUID: {BEE25B8F-32E2-408D-B822-D9857A7B6EEE}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol  3: MC_LAYERED RSVP UDP Service Provider        GUID: {91CC483A-575C-426C-8DFB-0EA134725A53}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol  4: MC_LAYERED RSVP TCP Service Provider        GUID: {EEAB33C7-3169-4060-A17F-70F85AAD370D}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol  5: MC_LAYERED MSAFD Tcpip [TCP/IPv6]        GUID: {7A1B989D-0511-41AF-8B2A-8753BDC4854D}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol  6: MC_LAYERED MSAFD Tcpip [UDP/IPv6]        GUID: {D9BB1B99-1DD3-4AE0-8F05-CCFB800BEEA2}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol  7: MC_LAYERED MSAFD Tcpip [RAW/IPv6]        GUID: {F19BA7A6-7925-4DB9-B193-52ADDE7C86AC}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol  8: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{710F4751-932C-4152-B44B-C01D35DDFA4A}] SEQPACKET 14        GUID: {7A6D09AA-331A-481D-B308-B5351FCA0E66}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol  9: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{710F4751-932C-4152-B44B-C01D35DDFA4A}] DATAGRAM 14        GUID: {5A5FBC11-E660-4EDA-BDF9-1FA4310DB976}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 10: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{20F39AFE-EFAE-43D1-98C3-1D19BEC79CA8}] SEQPACKET 10        GUID: {B38EDAE9-8502-4D7A-9A38-696AB4CBC564}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 11: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{20F39AFE-EFAE-43D1-98C3-1D19BEC79CA8}] DATAGRAM 10        GUID: {7C413131-1E4A-47F9-9E6B-7D8EBEE2D0CC}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 12: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{7320543D-C232-4E31-A1A7-53661D475F39}] SEQPACKET 7        GUID: {3AD79C3F-F798-4A02-8AF7-92CFD5D6D72A}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 13: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{7320543D-C232-4E31-A1A7-53661D475F39}] DATAGRAM 7        GUID: {FA139D03-7664-4603-A0DA-BC13E74FE2A2}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 14: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{6ECE68F8-9E8D-40A7-864A-C5646DA8D524}] SEQPACKET 0        GUID: {E698F817-3AF3-49A9-B76C-9B92CC38B476}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 15: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{6ECE68F8-9E8D-40A7-864A-C5646DA8D524}] DATAGRAM 0        GUID: {513318F4-253F-4D25-B1FB-2104F7C0C57E}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 16: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{B39F8CC8-9B5B-45D2-BD83-4ADDE6041FB2}] SEQPACKET 5        GUID: {9CEA0009-7D57-4B81-A472-01211CA89520}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 17: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{B39F8CC8-9B5B-45D2-BD83-4ADDE6041FB2}] DATAGRAM 5        GUID: {4F5BEDB8-726F-48F5-BF0A-ABA13BA05896}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 18: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{D5247F29-DAC2-472B-A10F-56D5665B6DC8}] SEQPACKET 6        GUID: {504C9445-2515-4E6A-BE4E-EED741E17FC7}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 19: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip6_{D5247F29-DAC2-472B-A10F-56D5665B6DC8}] DATAGRAM 6        GUID: {782E8699-4226-46DC-A20B-941CD9B8BA43}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 20: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{710F4751-932C-4152-B44B-C01D35DDFA4A}] SEQPACKET 15        GUID: {0E7BC478-C39C-4073-A85C-EAB802728AD6}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 21: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{710F4751-932C-4152-B44B-C01D35DDFA4A}] DATAGRAM 15        GUID: {BC9F6153-693B-484E-85FF-E294DCC1D754}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 22: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{20F39AFE-EFAE-43D1-98C3-1D19BEC79CA8}] SEQPACKET 11        GUID: {33A47701-6EB7-4A02-A988-8F378478730D}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 23: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{20F39AFE-EFAE-43D1-98C3-1D19BEC79CA8}] DATAGRAM 11        GUID: {A5316A9E-AAFC-468A-948B-9D25956B8A87}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 24: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{20D4471C-1AA6-474B-8FB4-3BA78CF134F3}] SEQPACKET 9        GUID: {10A6D070-FD8F-4263-8D49-DC3012BE6E46}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 25: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{20D4471C-1AA6-474B-8FB4-3BA78CF134F3}] DATAGRAM 9        GUID: {F0852ECA-E352-478B-A8EA-DE85E0B43B07}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 26: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{7320543D-C232-4E31-A1A7-53661D475F39}] SEQPACKET 8        GUID: {7FC382AB-040A-418C-AE1B-1A06107AEF3A}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 27: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{7320543D-C232-4E31-A1A7-53661D475F39}] DATAGRAM 8        GUID: {6AD954A4-66BA-4C08-BA9A-0E9AFDF98722}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 28: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{6ECE68F8-9E8D-40A7-864A-C5646DA8D524}] SEQPACKET 4        GUID: {11DE53BA-FD0B-4875-BBC2-52C098016C68}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 29: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{6ECE68F8-9E8D-40A7-864A-C5646DA8D524}] DATAGRAM 4        GUID: {B86D1AD7-3CC9-43CC-ADEB-44FE64574DB4}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 30: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{B39F8CC8-9B5B-45D2-BD83-4ADDE6041FB2}] SEQPACKET 3        GUID: {31BF12D1-0A21-4135-81CE-D90E96C43695}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 31: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{B39F8CC8-9B5B-45D2-BD83-4ADDE6041FB2}] DATAGRAM 3        GUID: {3D38A711-DD82-47B9-BCFB-0DDDC82600AB}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 32: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{03C37C1C-40D2-413A-9C0F-FC6781F0829B}] SEQPACKET 1        GUID: {C6933E43-2EC2-4B88-8366-1A01377B0BA7}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 33: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{03C37C1C-40D2-413A-9C0F-FC6781F0829B}] DATAGRAM 1        GUID: {03C97547-298F-4EC2-AB41-37EE2DDDCB3C}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 34: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{BDC2FA56-D992-4F43-B53B-8D99A1F59E2F}] SEQPACKET 2        GUID: {B7E4823C-A2F6-4E37-9A18-B80A0982E1A0}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 35: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{BDC2FA56-D992-4F43-B53B-8D99A1F59E2F}] DATAGRAM 2        GUID: {207E9A9B-0256-4F20-B8DF-E4091D7074B9}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 36: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{732C52C4-B831-44F5-AB0F-EFBC5DE2003F}] SEQPACKET 12        GUID: {F4A9C918-548E-4239-87A8-B944D6BDCEFA}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 37: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{732C52C4-B831-44F5-AB0F-EFBC5DE2003F}] DATAGRAM 12        GUID: {F8C44DC6-B7C4-415D-9CA7-4E825C6D618B}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 38: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{C600A6DA-81D2-4266-AC43-F0AC16DDBF1A}] SEQPACKET 13        GUID: {003FFEC0-5B7F-4AE6-8112-C50B8B6076C3}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 39: MC_LAYERED MSAFD NetBIOS [\Device\NetBT_Tcpip_{C600A6DA-81D2-4266-AC43-F0AC16DDBF1A}] DATAGRAM 13        GUID: {777BA36E-83DC-429A-A764-51CD0B027265}    Filename: C:\WINDOWS\system32\mclsp.dllProtocol 80: McAfee.com Layered Provider        GUID: {BEAA9090-2D12-11D4-9B80-00C04FF40D52}    Filename: C:\WINDOWS\system32\mclsp.dll--- Uninstall list ---a-squared Free 1.6.5 1.6 (a-squared Free_is1)install location: C:\Program Files\a-squared\   uninstall cmd: "C:\Program Files\a-squared\unins000.exe"       publisher: Emsi Software GmbH        comments: a-squared       help link: https://support.emsisoft.com/Ad-Aware SE Personal 1.06 (Ad-Aware SE Personal)   uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG       publisher: Lavasoft       help link: https://www.adaware.com/  (AddressBook)Adobe Acrobat 5.0 5.0 (Adobe Acrobat 5.0) version (major): 5install location: C:\Program Files\Adobe\Acrobat 5.0  install source: C:\Documents and Settings\Propriétaire\Local Settings\Temp\pft8~tmp\   uninstall cmd: C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"       publisher: Adobe Systems, Inc.       help link: https://acrobat.adobe.com/us/en/acrobat.htmlAdobe Photoshop Elements 2.0 2.0 (Adobe Photoshop Elements 2.0) version (major): 2install location: C:\Program Files\Adobe\Photoshop Elements 2  install source: E:\Adobe Photoshop Elements\   uninstall cmd: C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Adobe\Photoshop Elements 2\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop Elements 2\Uninst.dll"       publisher: Adobe Systems, Inc.ATI - Utilitaire de désinstallation du logiciel 6.14.10.1009 (All ATI Software)   uninstall cmd: C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exeATI Display Driver 8.03-040610a-016126C-ATI (ATI Display Driver)   uninstall cmd: rundll32 C:\WINDOWS\System32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean  (Branding)Canon i965  (CANONBJ_Deinstall_CNMCP5n.DLL)   uninstall cmd: C:\WINDOWS\System32\CNMCP5n.exe "-PRINTERNAMECanon i965" "-HELPERDLLC:\BJPrinter\CNMWINDOWS\Canon i965 Installer\Inst2\cnmis.dll" "-RCDLLC:\BJPrinter\CNMWINDOWS\Canon i965 Installer\Inst2\cnmi040c.dll"CCleaner (remove only)  (CCleaner)   uninstall cmd: "C:\Program Files\CCleaner\uninst.exe"CleanUp!  (CleanUp!)   uninstall cmd: C:\Program Files\CleanUp!\uninstall.exeSoftV92 Data Fax Modem  (CNXT_MODEM_PCI)   uninstall cmd: C:\Program Files\CONEXANT\CNXT_MODEM_PCI\HXFSETUP.EXE -U -IVEN_14F1&DEV_2F00  (Connection Manager)  (DirectAnimation)  (DirectDrawEx)  (DXM_Runtime)e-Carte Bleue Adésio La Banque Postale  (e-Carte Bleue Adésio La Banque Postale)   uninstall cmd: RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\ECB-LP1.INF, DefaultUninstall.ntx86e-Carte Bleue Adésio La Poste  (e-Carte Bleue Adésio La Poste)   uninstall cmd: RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\ECB-LP1.INF, DefaultUninstall.ntx86Canon Utilities Easy-PhotoPrint  (Easy-PhotoPrint)   uninstall cmd: C:\WINDOWS\ISUN040C.EXE  -f"C:\Program Files\Canon\Easy-PhotoPrint\Uninst.isu" -c"C:\Program Files\Canon\Easy-PhotoPrint\EZUNINST.DLL"Canon Utilities Easy-PhotoPrint Plus  (Easy-PhotoPrint Plus)   uninstall cmd: C:\WINDOWS\ISUN040C.EXE  -f"C:\Program Files\Canon\Easy-PhotoPrint Plus\Uninst.isu" -c"C:\Program Files\Canon\Easy-PhotoPrint Plus\EZUNINST.DLL"Easy-WebPrint  (Easy-WebPrint)   uninstall cmd: C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Canon\Easy-WebPrint\Uninst.isu"eMule  (eMule)   uninstall cmd: "C:\Program Files\eMule\Uninstall.exe"  (expinst)Firebird SQL Server - MAGIX Edition (F) 2.0.0.1 (Firebird SQL Server F)install location: C:\MAGIX\Common\Database   uninstall cmd: C:\MAGIX\Common\Database\uninstall.exe       publisher: MAGIX AG  (Fontcore)HijackThis 1.99.1 1.99.1 (HijackThis)   uninstall cmd: C:\Documents and Settings\Propriétaire\Mes documents\Unzipped\hijackthis[1]\HijackThis.exe /uninstall       publisher: Soeperman Enterprises Ltd.Hollywood FX 5.5 Additional Effects  (Hollywood FX 5.5 Additional Effects)   uninstall cmd: C:\WINDOWS\unvise32.exe C:\Program Files\Pinnacle\Hollywood FX for Studio\5.5\unextralogPinnacle Hollywood FX for Studio  (Hollywood FX for Studio)   uninstall cmd: C:\WINDOWS\unvise32.exe C:\Program Files\Pinnacle\Hollywood FX for Studio\5.5\uninstal.logHollywood FX Pack 26 - Extra FX  (Hollywood FX Pack 26 - Extra FX)   uninstall cmd: C:\WINDOWS\unvise32.exe C:\WINDOWS\unextrafx.log  (ICW)  (IE40)  (IE4Data)  (IE5BAKEX)  (IEData)  (InstallShield Uninstall Information)SmartSound Quicktracks Plugin 3.0.2.4 (InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E})         version: 50331650 version (major): 3  estimated size: 17690    install date: 20050615install location: C:\Program Files\SmartSound Software\Quicktracks\  install source: C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\_is2F\   uninstall cmd: C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}        publisher: SmartSound Software Inc        comments: Built by Chris Coble         contact: Customer Support Department       help link: https://www.smartsound.com/support  help telephone: 1-818-920-9122Canon RemoteCapture Task for ZoomBrowser EX 0.9.0 (InstallShield_{822586CA-0B15-428C-859A-64B3728F28E7})         version: 589824 version (minor): 9  estimated size: 121    install date: 20040715  install source: E:\Zoombrsr\French\RCTASK\   uninstall cmd: C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{822586CA-0B15-428C-859A-64B3728F28E7}        publisher: Canon        comments:           contact:         help link:    help telephone:  QuickTime 7.0.4 (InstallShield_{929408E6-D265-4174-805F-81D1D914E2A4})         version: 117440516 version (major): 7  estimated size: 66739    install date: 20060329install location: C:\Program Files\QuickTime\  install source: C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\_is72\   uninstall cmd: C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{929408E6-D265-4174-805F-81D1D914E2A4} /l1036        publisher: Apple Computer, Inc.         contact: Assistance AppleCare       help link: https://support.apple.com/fr-fr  help telephone: (33) 0825 888 024Canon Camera Window for ZoomBrowser EX 4.5.2 (InstallShield_{A29EA741-24F7-4C07-9B2C-06CB6491BE4A})         version: 67436546 version (major): 4 version (minor): 5  estimated size: 15231    install date: 20040715  install source: E:\cw\French\   uninstall cmd: C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{A29EA741-24F7-4C07-9B2C-06CB6491BE4A}        publisher: Canon        comments:           contact:         help link:    help telephone:            readme:  Canon RAW Image Task for ZoomBrowser EX 0.9.0 (InstallShield_{D076E06B-F74B-454F-A56E-7510D7B6C9F0})         version: 589824 version (minor): 9  estimated size: 126    install date: 20040715  install source: E:\Zoombrsr\French\RAWTASK\   uninstall cmd: C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{D076E06B-F74B-454F-A56E-7510D7B6C9F0}        publisher: Canon        comments:           contact:         help link:    help telephone:    (InstallShield_{DA13B1E3-4362-4442-8345-CCA945A8F760})  (Intel® Integrated Performance Primitives 1.1)   uninstall cmd: C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\System32\UninstIPP.isuMicrosoft Data Access Components KB870669  (KB870669)   uninstall cmd: C:\WINDOWS\muninst.exe C:\WINDOWS\INF\KB870669.inf       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-usCorrectif Windows XP - KB873339 20041117.092459 (KB873339)   uninstall cmd: C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/873339  (KB884016)Correctif Windows XP - KB885250 20050118.202711 (KB885250)   uninstall cmd: C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/885250Correctif Windows XP - KB885835 20041027.181713 (KB885835)   uninstall cmd: C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/885835/ms04-044-vulnerabilities-in-windows-kernel-and-lsass-could-allow-elevaCorrectif Windows XP - KB885836 20041028.173203 (KB885836)   uninstall cmd: C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/885836/ms04-041-a-vulnerability-in-wordpad-could-allow-code-executionCorrectif Windows XP - KB886185 20041021.090540 (KB886185)   uninstall cmd: C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/886185Correctif Windows XP - KB888113 20041116.131036 (KB888113)   uninstall cmd: C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/888113Correctif Windows XP - KB888302 20041207.111426 (KB888302)   uninstall cmd: C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/888302Mise à jour de sécurité pour Windows XP (KB890046) 1 (KB890046)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/890046Correctif Windows XP - KB890859 1 (KB890859)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/890859Correctif Windows XP - KB891781 20050110.165439 (KB891781)   uninstall cmd: C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/891781Mise à jour de sécurité pour Windows XP (KB893066) 2 (KB893066)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/893066/ms05-019-vulnerabilities-in-tcp-ip-could-allow-remote-code-execution-aMise à jour de sécurité pour Windows XP (KB893756) 1 (KB893756)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/893756  (KB893803) 3.1 (KB893803v2)       help link: https://support.microsoft.com/en-us/help/893803/windows-installer-3-1-v2-3-1-4000-2435-is-availableMise à jour de sécurité pour Windows XP (KB896358) 1 (KB896358)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/896358/ms05-026-a-vulnerability-in-html-help-could-allow-remote-code-executioMise à jour de sécurité pour Windows XP (KB896422) 1 (KB896422)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/896422/ms05-027-vulnerability-in-server-message-block-could-allow-remote-codeMise à jour de sécurité pour Windows XP (KB896423) 1 (KB896423)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/windows?ui=en-US&rs=en-001&ad=USMise à jour de sécurité pour Windows XP (KB896424) 1 (KB896424)    install date: 20051109   uninstall cmd: "C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/896424Mise à jour de sécurité pour Windows XP (KB896428) 1 (KB896428)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/896428Mise à jour de sécurité pour Windows XP (KB896688) 1 (KB896688)    install date: 20051107   uninstall cmd: "C:\WINDOWS\$NtUninstallKB896688$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/896688/ms05-052-cumulative-security-update-for-internet-explorerMise à jour de sécurité pour Windows XP (KB899587) 1 (KB899587)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/899587Mise à jour de sécurité pour Windows XP (KB899588) 1 (KB899588)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB899588$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/899588Mise à jour de sécurité pour Windows XP (KB899591) 1 (KB899591)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/899591Mise à jour pour Windows XP (KB900485) 2 (KB900485)    install date: 20060426   uninstall cmd: "C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/900485Mise à jour de sécurité pour Windows XP (KB900725) 1 (KB900725)    install date: 20051012   uninstall cmd: "C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/900725Mise à jour de sécurité pour Windows XP (KB901017) 1 (KB901017)    install date: 20051012   uninstall cmd: "C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/901017Mise à jour de sécurité pour Windows XP (KB901214) 1 (KB901214)    install date: 20051106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/901214Mise à jour de sécurité pour Windows XP (KB902400) 1 (KB902400)    install date: 20051012   uninstall cmd: "C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/902400/ms05-051-vulnerabilities-in-ms-dtc-and-com-could-allow-remote-code-exeMise à jour de sécurité pour Windows XP (KB904706) 1 (KB904706)    install date: 20051012       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/904706Mise à jour de sécurité pour Windows XP (KB905414) 1 (KB905414)    install date: 20051012   uninstall cmd: "C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/905414Mise à jour de sécurité pour Windows XP (KB905749) 1 (KB905749)    install date: 20051012   uninstall cmd: "C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/905749Mise à jour de sécurité pour Windows XP (KB905915) 1 (KB905915)    install date: 20051214   uninstall cmd: "C:\WINDOWS\$NtUninstallKB905915$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/905915Mise à jour de sécurité pour Windows XP (KB908519) 1 (KB908519)    install date: 20060110   uninstall cmd: "C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/908519Mise à jour de sécurité pour Windows XP (KB908531) 1 (KB908531)    install date: 20060413   uninstall cmd: "C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/908531Mise à jour pour Windows XP (KB910437) 1 (KB910437)    install date: 20051214   uninstall cmd: "C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/910437Mise à jour de sécurité pour Windows XP (KB911280) 1 (KB911280)    install date: 20060614   uninstall cmd: "C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/911280Mise à jour de sécurité pour Windows XP (KB911562) 1 (KB911562)    install date: 20060413   uninstall cmd: "C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/911562Mise à jour de sécurité pour Lecteur Windows Media (KB911564)  (KB911564)    install date: 20060217   uninstall cmd: "C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/911564Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)  (KB911565)    install date: 20060217   uninstall cmd: "C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/911565Mise à jour de sécurité pour Windows XP (KB911567) 1 (KB911567)    install date: 20060413   uninstall cmd: "C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/911567Mise à jour de sécurité pour Windows XP (KB911927) 1 (KB911927)    install date: 20060217   uninstall cmd: "C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/911927Mise à jour de sécurité pour Windows XP (KB912812) 1 (KB912812)    install date: 20060413   uninstall cmd: "C:\WINDOWS\$NtUninstallKB912812$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/912812/ms06-013-cumulative-security-update-for-internet-explorerMise à jour de sécurité pour Windows XP (KB912919) 1 (KB912919)    install date: 20060106   uninstall cmd: "C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/912919Mise à jour de sécurité pour Windows XP (KB913446) 1 (KB913446)    install date: 20060217   uninstall cmd: "C:\WINDOWS\$NtUninstallKB913446$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/913446Mise à jour de sécurité pour Windows XP (KB913580) 1 (KB913580)    install date: 20060509   uninstall cmd: "C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/913580Mise à jour de sécurité pour Windows XP (KB914389) 1 (KB914389)    install date: 20060614   uninstall cmd: "C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/914389Mise à jour de sécurité pour Windows XP (KB916281) 1 (KB916281)    install date: 20060614   uninstall cmd: "C:\WINDOWS\$NtUninstallKB916281$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/916281Mise à jour de sécurité pour Windows XP (KB917344) 1 (KB917344)    install date: 20060614   uninstall cmd: "C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/917344Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)  (KB917734_WMP10)    install date: 20060614   uninstall cmd: "C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/917734Mise à jour de sécurité pour Windows XP (KB917953) 1 (KB917953)    install date: 20060614   uninstall cmd: "C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/917953Mise à jour de sécurité pour Windows XP (KB918439) 1 (KB918439)    install date: 20060614   uninstall cmd: "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"       publisher: Microsoft Corporation       help link: https://support.microsoft.com/en-us/help/918439K-Lite Codec Pack 2.33 Full 2.33 (KLiteCodecPack_is1)install location: C:\Program Files\K-Lite Codec Pack\   uninstall cmd: "C:\Program Files\K-Lite Codec Pack\unins001.exe"Language Pack for Ad-aware 6 2.0 (Language Pack for Ad-aware 6)   uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~1\Lang\Lang\LANGUA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\Lang\Lang\LANGUA~1\INSTALL.LOG       publisher: Lavasoft Sweden        comments: Language pack for Ad-aware 6Language pack for Ad-Aware SE  (Language pack for Ad-Aware SE)   uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\INSTALL.LOG       publisher: Lavasoft       help link: http://www.lavasoft.deLeechFTP   (LeechFTP)   uninstall cmd: C:\WINDOWS\eraser.exe KILL "C:\Program Files\LeechFTP\uninstall.uif"Ludiclub.com 2 (Ludiclub.com)   uninstall cmd: C:\WINDOWS\system32\GKSUI20.EXE C:\Program Files\Ludiclub\Uninstall8E41.DAT       publisher: LudiclubMAGIX Music Manager 2006 (F) 7.0.2.194 (MAGIX Music Manager 2006 F)install location: C:\MAGIX\Music_Manager_2006   uninstall cmd: C:\MAGIX\Music_Manager_2006\instslct.exe       publisher: MAGIX AGMAGIX Photo Clinic 4.5 (F) 4.5.7.0 (MAGIX Photo Clinic 4.5 F)install location: C:\MAGIX\Photo_Clinic_45   uninstall cmd: C:\MAGIX\Photo_Clinic_45\instslct.exe       publisher: MAGIX AGMAGIX Photo Manager 2006 (F) 3.1.0.102 (MAGIX Photo Manager 2006 F)install location: C:\MAGIX\Photo_Manager_2006   uninstall cmd: C:\MAGIX\Photo_Manager_2006\instslct.exe       publisher: MAGIX AGMAGIX Photos sur CD & DVD 3.0 3.0.2.0 (MAGIX Photos sur CD & DVD 3.0)   uninstall cmd: C:\MAGIX\Photos_sur_CD_DVD_3\instslct.exe       publisher: MAGIX AGMAGIX Photos sur CD & DVD 5.0 deluxe (F) 5.0.3.0 (MAGIX Photos sur CD & DVD 5.0 deluxe F)install location: C:\MAGIX\Photos_sur_CD_DVD_5_dlx   uninstall cmd: C:\MAGIX\Photos_sur_CD_DVD_5_dlx\instslct.exe       publisher: MAGIX AG  (McAfee Personal Firewall Plus)   uninstall cmd: c:\PROGRA~1\mcafee.com\shared\mcappins.exe /v=3 /uninstall=1 /appid=mpf /interact=1 /script_proactive=0 /start=c:\PROGRA~1\mcafee.com\agent\uninst\mpfrem.ui::uninstall.htm  (McAfee Privacy Service)   uninstall cmd: c:\PROGRA~1\mcafee.com\shared\mcappins.exe /v=3 /uninstall=1 /appid=mps /interact=1 /script_proactive=0 /start=c:\PROGRA~1\mcafee.com\agent\uninst\mpsrem.ui::uninstall.htm  (Mcafee SecurityCenter)   uninstall cmd: c:\PROGRA~1\mcafee.com\shared\mcappins.exe /v=3 /uninstall=1 /appid=msc /interact=1 /script_proactive=0 /start=c:\PROGRA~1\mcafee.com\agent\uninst\screm.ui::uninstall.htm  (McAfee SpamKiller)   uninstall cmd: c:\PROGRA~1\mcafee.com\shared\mcappins.exe /v=3 /appid=MSK /uninstall=1 /interact=1 /script_proactive=0 /start="c:\PROGRA~1\mcafee.com\agent\uninst\mskremui.dll::uninstall.htm"Assistant de désinstallation de McAfee  (McAfee Uninstall Utility)   uninstall cmd: C:\PROGRA~1\McAfee.com\Shared\mcappins.exe /v=3 /uninstall=1 /interact=1 /script_proactive=0 /start=c:\PROGRA~1\mcafee.com\agent\uninst\comrem.dll::uninstall.htmCD-LabelPrint  (MediaNavigation.CDLabelPrint)install location: C:\Program Files\Canon\CD-LabelPrint\   uninstall cmd: "C:\Program Files\Canon\CD-LabelPrint\Uninstal.exe" Canon.CDLabelPrint.Application  (Microsoft NetShow Player 2.0)  (MobileOptionPack)  (MPlayer2)  (MSI30-Beta1)  (MSI30-Beta2)  (MSI30-KB884016)  (MSI30-RC1)  (MSI30-RC2)  (MSI30a-KB884016)  (MSI31-Beta)  (MSI31-RC1)  (MsJavaVM)Nero 6 Demo  (Nero - Burning Rom!UninstallKey)   uninstall cmd: C:\Program Files\Ahead
ero\uninstall\UNNERO.exe /UNINSTALLNeroVision Express 2  (NeroVision!UninstallKey)   uninstall cmd: C:\WINDOWS\UNNeroVision.exe /UNINSTALL  (NetMeeting)Objective Tarot  (Objective Tarot)   uninstall cmd: "C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-Objective Tarot.dat  (OutlookExpress)  (PCHealth)   uninstall cmd: rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf  (RealJukebox 1.0)   uninstall cmd: C:\Program Files\Fichiers communs\Real\Update_OB1puninst.exe RealNetworks|RealPlayer|6.0RealPlayer  (RealPlayer 6.0)   uninstall cmd: C:\Program Files\Fichiers communs\Real\Update_OB1puninst.exe RealNetworks|RealPlayer|6.0  (SchedulingAgent)Shockwave  (Shockwave)   uninstall cmd: C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\INSTALL.LOGMacromedia Flash Player 8 8 (ShockwaveFlash)   uni

nbloquet · Answer

Re bonjour , comme en mode sans echec spybot arrive a eliminer magic control agent , j'ai lancé spybot en mode sans echec puis corrigé les problemes .Ensuite j'ai lancé hijackthis dont voici le rapport : ( sans magic qui apparaisse sur spybot) Logfile of HijackThis v1.99.1Scan saved at 15:31:58, on 23/06/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Documents and Settings\Propriétaire\Mes documents\Unzipped\hijackthis[1]\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9FR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\PROGRA~1\mcafee.com\mps\mcbrhlpr.dllO2 - BHO: McAfee Privacy Service Popup Blocker - {3EC8255F-E043-4cae-8B3B-B191550C2A22} - c:\program files\mcafee.com\mps\popupkiller.dllO2 - BHO: McAfee AntiPhishing Filter - {41D68ED8-4CFF-4115-88A6-6EBB8AF19000} - c:\PROGRA~1\mcafee\SPAMKI~1\mcapfbho.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dllO3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dllO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [eCarteBleue-LP-P1] "C:\Program Files\e-Carte Bleue\LA POSTE\CVD ADESIO\ECB.exe"  /dontopenmycardsO4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exeO4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exeO4 - HKLM\..\Run: [MPSExe] c:\PROGRA~1\mcafee.com\mps\mscifapp.exe /embeddingO4 - HKLM\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exeO4 - HKLM\..\Run: [MSKDetectorExe] C:\PROGRA~1\McAfee\SPAMKI~1\MskDetct.exe /startupO4 - HKLM\..\Run: [tomnfqzbpw] c:\windows\system32	omnfqzbpw.exe tomnfqzbpwO4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktaskO4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exeO4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exeO4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exeO4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /autoO4 - HKCU\..\Run: [MSKAGENTEXE] c:\PROGRA~1\mcafee\SPAMKI~1\mskagent.exeO4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exeO4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXEO8 - Extra context menu item: Easy-WebPrint Ajouter à la Liste à Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.htmlO8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.htmlO8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.htmlO8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.htmlO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO9 - Extra button: (no name) - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\PROGRA~1\mcafee\SPAMKI~1\mcapfbho.dllO9 - Extra 'Tools' menuitem: McAfee AntiPhishing Filter - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\PROGRA~1\mcafee\SPAMKI~1\mcapfbho.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dllO23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exeO23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\System32\DVDRAMSV.exeO23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exeO23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exeO23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exeO23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exeO23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exeO23 - Service: McAfee SpamKiller Server (MskService) - McAfee Inc. - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exePuis j'ai redemaré en mode normal , relancé spybot, magic control agent a reapparu .J'ai donc relancé hijackthis.Voici le nouveau rapport:J'espere pouvoir me debarrasser de cette c..... car j'en ai assez de ces fenetres qui s'ouvrent intempestivement ....Merci de votre aideLogfile of HijackThis v1.99.1Scan saved at 15:50:52, on 23/06/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\dllhost.exec:\program files\mcafee.com\agent\mcdetect.exec:\PROGRA~1\mcafee.com\vso\mcshield.exec:\PROGRA~1\mcafee.com\agent\mctskshd.exeC:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exeC:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\PROGRA~1\mcafee.com\agent\mcagent.exeC:\PROGRA~1\mcafee.com\mps\mscifapp.exeC:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exeC:\Program Files\McAfee.com\VSO\mcvsshld.exeC:\Program Files\McAfee.com\VSO\oasclnt.exeC:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exec:\progra~1\mcafee.com\vso\mcvsescn.exeC:\WINDOWS\System32\snmp.exeC:\WINDOWS\system32\RAMASST.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\WinZip\WZQKPICK.EXEC:\WINDOWS\system32\fxssvc.exeC:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exeC:\Documents and Settings\Propriétaire\Mes documents\Unzipped\hijackthis[1]\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9FR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\PROGRA~1\mcafee.com\mps\mcbrhlpr.dllO2 - BHO: McAfee Privacy Service Popup Blocker - {3EC8255F-E043-4cae-8B3B-B191550C2A22} - c:\program files\mcafee.com\mps\popupkiller.dllO2 - BHO: McAfee AntiPhishing Filter - {41D68ED8-4CFF-4115-88A6-6EBB8AF19000} - c:\PROGRA~1\mcafee\SPAMKI~1\mcapfbho.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dllO3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dllO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [eCarteBleue-LP-P1] "C:\Program Files\e-Carte Bleue\LA POSTE\CVD ADESIO\ECB.exe"  /dontopenmycardsO4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exeO4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exeO4 - HKLM\..\Run: [MPSExe] c:\PROGRA~1\mcafee.com\mps\mscifapp.exe /embeddingO4 - HKLM\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exeO4 - HKLM\..\Run: [MSKDetectorExe] C:\PROGRA~1\McAfee\SPAMKI~1\MskDetct.exe /startupO4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktaskO4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exeO4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exeO4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exeO4 - HKCU\..\Run: [MSKAGENTEXE] c:\PROGRA~1\mcafee\SPAMKI~1\mskagent.exeO4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exeO4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXEO8 - Extra context menu item: Easy-WebPrint Ajouter à la Liste à Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.htmlO8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.htmlO8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.htmlO8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.htmlO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO9 - Extra button: (no name) - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\PROGRA~1\mcafee\SPAMKI~1\mcapfbho.dllO9 - Extra 'Tools' menuitem: McAfee AntiPhishing Filter - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\PROGRA~1\mcafee\SPAMKI~1\mcapfbho.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dllO23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exeO23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\System32\DVDRAMSV.exeO23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exeO23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exeO23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exeO23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exeO23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exeO23 - Service: McAfee SpamKiller Server (MskService) - McAfee Inc. - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe

incognito02 · Answer

SalutIl y a quelque chose qui me plait pas dans un des rapports:HijackThis -> Open the misc tools sections -> open Uninstall manager -> clique sur "Save list" -> enregistre le fichier -> fais-en un copier/coller ici.A+

nbloquet · Answer

Le voila Ad-Aware SE PersonalAdobe Acrobat 5.0Adobe Photoshop Elements 2.0Adobe Reader 6.0.1 - FrançaisArcSoft VideoImpression 2a-squared Free 1.6.5Assistant de désinstallation de McAfeeATI - Utilitaire de désinstallation du logicielATI Control PanelATI Display DriverBazooka Spyware ScannerCanon Camera Window for ZoomBrowser EXCanon i965Canon RAW Image Task for ZoomBrowser EXCanon RemoteCapture Task for ZoomBrowser EXCanon Utilities Easy-PhotoPrintCanon Utilities Easy-PhotoPrint PlusCanon Utilities ZoomBrowser EXCanoScan Toolbox 4.1CCleaner (remove only)CD-LabelPrintCleanUp!Codeur Windows Media Série 9Codeur Windows Media Série 9Correctif Windows XP - KB873339Correctif Windows XP - KB885250Correctif Windows XP - KB885835Correctif Windows XP - KB885836Correctif Windows XP - KB886185Correctif Windows XP - KB888113Correctif Windows XP - KB888302Correctif Windows XP - KB890859Correctif Windows XP - KB891781Diagnostic Sésam VitaleDiMAGE Master LiteEasy-WebPrinte-Carte Bleue Adésio La Banque Postalee-Carte Bleue Adésio La PosteeMuleFirebird SQL Server - MAGIX Edition (F)Google EarthHijackThis 1.99.1Hollywood FX 5.5 Additional EffectsHollywood FX Pack 26 - Extra FXInstallation de Microsoft Works Suite 2001J2SE Runtime Environment 5.0 Update 2J2SE Runtime Environment 5.0 Update 4J2SE Runtime Environment 5.0 Update 6Java 2 Runtime Environment, SE v1.4.2_05Java 2 Runtime Environment, SE v1.4.2_06K-Lite Codec Pack 2.33 FullLanguage Pack for Ad-aware 6Language pack for Ad-Aware SELecteur Windows Media 10LeechFTP LiveboxLudiclub.comMacro complémentaire Microsoft Word pour Works SuiteMacromedia Flash Player 8MAGIX Music Manager 2006 (F)MAGIX Photo Clinic 4.5 (F)MAGIX Photo Manager 2006 (F)MAGIX Photos sur CD & DVD 3.0MAGIX Photos sur CD & DVD 5.0 deluxe (F)Manual CanoScan LiDE 80Microsoft Data Access Components KB870669Microsoft Office PowerPoint Viewer 2003Microsoft Publisher 2000Microsoft Word 2000 SR-1Mise à jour de sécurité pour Lecteur Windows Media (KB911564)Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)Mise à jour de sécurité pour Windows XP (KB890046)Mise à jour de sécurité pour Windows XP (KB893066)Mise à jour de sécurité pour Windows XP (KB893756)Mise à jour de sécurité pour Windows XP (KB896358)Mise à jour de sécurité pour Windows XP (KB896422)Mise à jour de sécurité pour Windows XP (KB896423)Mise à jour de sécurité pour Windows XP (KB896424)Mise à jour de sécurité pour Windows XP (KB896428)Mise à jour de sécurité pour Windows XP (KB896688)Mise à jour de sécurité pour Windows XP (KB899587)Mise à jour de sécurité pour Windows XP (KB899588)Mise à jour de sécurité pour Windows XP (KB899591)Mise à jour de sécurité pour Windows XP (KB900725)Mise à jour de sécurité pour Windows XP (KB901017)Mise à jour de sécurité pour Windows XP (KB901214)Mise à jour de sécurité pour Windows XP (KB902400)Mise à jour de sécurité pour Windows XP (KB905414)Mise à jour de sécurité pour Windows XP (KB905749)Mise à jour de sécurité pour Windows XP (KB905915)Mise à jour de sécurité pour Windows XP (KB908519)Mise à jour de sécurité pour Windows XP (KB908531)Mise à jour de sécurité pour Windows XP (KB911280)Mise à jour de sécurité pour Windows XP (KB911562)Mise à jour de sécurité pour Windows XP (KB911567)Mise à jour de sécurité pour Windows XP (KB911927)Mise à jour de sécurité pour Windows XP (KB912812)Mise à jour de sécurité pour Windows XP (KB912919)Mise à jour de sécurité pour Windows XP (KB913446)Mise à jour de sécurité pour Windows XP (KB913580)Mise à jour de sécurité pour Windows XP (KB914389)Mise à jour de sécurité pour Windows XP (KB916281)Mise à jour de sécurité pour Windows XP (KB917344)Mise à jour de sécurité pour Windows XP (KB917953)Mise à jour de sécurité pour Windows XP (KB918439)Mise à jour pour Windows XP (KB900485)Mise à jour pour Windows XP (KB910437)MSN Messenger 7.0Nero 6 DemoNeroVision Express 2Objective TarotOmniPage SEPanda ActiveScanPilote du DVD-RAMPinnacle Hollywood FX for StudioPower IEv3Presto! PageManager 6.03QuickTimeRealPlayerSERIE+4000ShockwaveSmartFTP 1.0.982 FR (remove only)SmartSound Quicktracks PluginSoftV92 Data Fax ModemSony Ericsson PC SuiteSpybot - Search & Destroy 1.4Studio 9Studio 9 Content CD/DVDThunderSite 2Visionneuse Journal Windows MicrosoftWebTarot 1.18Windows Media Format RuntimeWindows XP Service Pack 2WinZip

incognito02 · Answer

Curieux il n apprait pas...Demarrer < rechercherDans ton disque dur, recherche ceci tomnfqzbpwCopie/colle le resultat trouvéa+

nbloquet · Answer

Re  , je me suis fais la même remarque en comparant les log ( j'y connait pas grand chose mais bon ).J'ai donc recherché ce fichier sur mon disque dur mais il n'y est  pas. Ce qui m'etonne c'est qu'il n'apparait que sur le log fait en mode sans echec apres avoir eliminé magic control agent.

green day · Answer

Salut je crois qu'il a un faible pour toi :)Regis : sinon j'ai trouvé une solution sur le forum qui pourrait peut être marcher ...++

nbloquet · Answer

Bonjour , alors que puis je faire maintenant?Est ce je peux isoler ce fichier "tomnfqzbpw".N' y a t'il pas un risque et pensez vous que cela resoudrait peut etre mon probleme.

incognito02 · Answer

SalutS'il est la, c'est qu il y a une raison lolC'est possible oui.Bha va s y green day, te gene pas, propose, moi aussi j en ai des solutions mais je te regarde ;-)A+

nbloquet · Answer

Ce fichier apparait dans les recherches seulement en mode sans echec.Ne serait ce pas tout simplement un fichier caché de windows?

green day · Answer

Salut en plus cette soluce, elle est à toi :)télécharge ceci Registry Search Toolhttp://www.billsway.com/vbspage/decompresse le et tape ou colleMagic Control Agentet copie colle le resultat dans le bloc note et donne le nouston aide est toujours la bienvenue ;-)@+

nbloquet · Answer

Je crois avoir trouvé .Certes avec votre aide et a force de recherche.Si j'affiche les dossiers cachés et si je demasque les fichiers protégé , Blacklight me detecte ces fameux fichiers " tomnqzbpw" .Je pense qu'il est la le probleme.Dites moi si je me trompe? Je fais d'autre verif

nbloquet · Answer

Je crois avoir trouvé .Certes avec votre aide et a force de recherche.Si j'affiche les dossiers cachés et si je demasque les fichiers protégé , Blacklight me detecte ces fameux fichiers " tomnqzbpw" .Je pense qu'il est la le probleme.Dites moi si je me trompe? Je fais d'autre verif

nbloquet · Answer

Ca donne rien Registry Search Tool . Faut dire que j'ai recaché les dossiers.a+

nbloquet · Answer

Bonsoir , rapport de blacklight ( apres avoir bidouillé dans l'affichage de l'option des dossiers)06/24/06 19:16:53 [Info]: BlackLight Engine 1.0.41 initialized06/24/06 19:16:53 [Info]: OS: 5.1 build 2600 (Service Pack 2)06/24/06 19:16:53 [Note]: 7019 406/24/06 19:16:53 [Note]: 7005 006/24/06 19:16:56 [Note]: 7006 006/24/06 19:16:56 [Note]: 7011 198806/24/06 19:16:56 [Note]: 7026 006/24/06 19:16:56 [Note]: 7026 006/24/06 19:16:56 [Note]: 7024 306/24/06 19:16:56 [Info]: Hidden process: C:\windows\system32	omnfqzbpw.exe06/24/06 19:16:56 [Note]: FSRAW library version 1.7.101806/24/06 19:20:02 [Info]: Hidden file: c:\WINDOWS\system32	omnfqzbpw_nav.dat06/24/06 19:20:02 [Note]: 10002 106/24/06 19:20:03 [Info]: Hidden file: c:\WINDOWS\system32	omnfqzbpw.dat06/24/06 19:20:03 [Note]: 10002 106/24/06 19:20:03 [Info]: Hidden file: C:\windows\system32	omnfqzbpw.exe06/24/06 19:20:03 [Note]: 10002 106/24/06 19:20:15 [Info]: Hidden file: c:\WINDOWS\Prefetch\TOMNFQZBPW.EXE-0DF7B264.pf06/24/06 19:20:15 [Note]: 10002 106/24/06 19:21:23 [Note]: 7007 0

incognito02 · Answer

SalutDis moi, dans ajout suppression de programme, ceci apparait il?tomnfqzbpwA+

nbloquet · Answer

Non tomnfqzbpw n'a jamais apparu en mode normal.En fait je me suis mis en mode sans echec , j'ai viré les 4 fichiers  tomnfqzbpw puis j'ai lancé spybot , supprimé magic control agent.Je suis revenu en mode normal j'ai rescanné avec spybot et il n'y avait plus rien.Mon probleme est j'espere resolu.J'ai le même pbl sur un autre ordi mais j'ai bien peur que ce ne soit pas le même fichier.Je vous tient au courant.Ce qui je ne comprends pas c'est que blacklight ne puisse pas le supprimer.Je vous remercie beaucoup de votre aide , je pense que j'ai contribué a la resolution du probleme.En tout cas merci beaucoup car j'ai appris beaucoup de choses.

nbloquet · Answer

Rapport blacklight du deuxieme ordi : ( c'est bien ce que je pensais)06/24/06 21:33:57 [Info]: BlackLight Engine 1.0.41 initialized06/24/06 21:33:57 [Info]: OS: 5.1 build 2600 (Service Pack 2)06/24/06 21:33:57 [Note]: 7019 406/24/06 21:33:57 [Note]: 7005 006/24/06 21:34:01 [Note]: 7006 006/24/06 21:34:01 [Note]: 7011 188006/24/06 21:34:01 [Note]: 7026 006/24/06 21:34:01 [Note]: 7026 006/24/06 21:34:01 [Note]: 7024 306/24/06 21:34:01 [Info]: Hidden process: C:\windows\system32\uebhjak.exe06/24/06 21:34:01 [Note]: FSRAW library version 1.7.101806/24/06 21:34:09 [Info]: Hidden file: C:\windows\system32\uebhjak.exe06/24/06 21:34:09 [Info]: Hidden file: c:\WINDOWS\SYSTEM32\UEBHJAK.DAT06/24/06 21:34:10 [Info]: Hidden file: c:\WINDOWS\SYSTEM32\UEBHJA~1.DAT06/24/06 21:34:13 [Info]: Hidden file: c:\WINDOWS\SYSTEM32\MSCLOC~1.DLL06/24/06 21:34:14 [Info]: Hidden file: c:\WINDOWS\SYSTEM32\MSPLOC~1.DLL06/24/06 21:34:27 [Info]: Hidden file: c:\WINDOWS\Prefetch\UEBHJA~1.PF06/24/06 21:42:12 [Note]: 7007 0

incognito02 · Answer

SalutOui c est pareil, y a moyen d avoir un hijcak this de ce pc?a+

nbloquet · Answer

Oui c pareil sauf 2 lignes:06/24/06 21:34:13 [Info]: Hidden file: c:\WINDOWS\SYSTEM32\MSCLOC~1.DLL 06/24/06 21:34:14 [Info]: Hidden file: c:\WINDOWS\SYSTEM32\MSPLOC~1.DLL Voici le rapport hijack :Logfile of HijackThis v1.99.1Scan saved at 22:18:41, on 24/06/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exeC:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeC:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exeC:\Program Files\Norton Internet Security\Norton AntiVirus
avapsvc.exeC:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exeC:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exeC:\Program Files\MessengerPlus! 3\MsgPlus.exeC:\Program Files\Java\jre1.5.0_06\bin\jusched.exeC:\Program Files\Fichiers communs\Symantec Shared\ccApp.exeC:\WINDOWS\system32\ctfmon.exeC:\PROGRA~1\MSNMES~1\msnmsgr.exec:\progra~1\intern~1\iexplore.exeC:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exeC:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Messenger\msmsgs.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\CCleaner\ccleaner.exeC:\Documents and Settings\parents\Bureau\HijackThis.exeC:\WINDOWS\system32\dwwin.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.118712.fr/sortir.htmlR0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.orange.fr/portailR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - URLSearchHook: (no name) -  - (no file)O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {17329814-3901-8D72-1174-FC87EE8A0963} - (no file)O2 - BHO: (no name) - {4CF16DB2-A4DF-892A-474D-E7612A5F91AF} - C:\DOCUME~1\parents\APPLIC~1\DupeDeaf\Online Seek.exeO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dllO2 - BHO: Reactivator - {AC2E8306-D24E-4082-8669-7781499F4E03} - C:\PROGRA~1\EVERYT~1.1\everycom.dllO2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dllO3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dllO3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dllO3 - Toolbar: Every Toolbar - {A20A76AD-7A29-4756-87FE-70C334CB40C0} - C:\PROGRA~1\EVERYT~1.1\everycom.dllO4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exeO4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exeO4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /ConsumerO4 - HKLM\..\Run: [flagupdalepart] C:\Documents and Settings\All Users\Application Data\Platform first flag up\Nurb delete.exeO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStartO4 - HKCU\..\Run: [deadpoll] C:\DOCUME~1\parents\APPLIC~1\STOREB~1\EggsDoes.exeO4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\MSNMES~1\msnmsgr.exe" /backgroundO4 - Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exeO4 - Global Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ?O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cabO16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/infoO16 - DPF: {6AA85413-165C-4200-8154-71166077B22E} - http://scripts.dlv4.com/binaries/IA/sysiasvc32_FR_XP.cabO16 - DPF: {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} - http://static.zangocash.com/cab/Zango/ie/bridge-c6.cab?38b83d5e23cd4e4804d8a69d75...O16 - DPF: {9EB4F647-FE4A-42F9-9F5C-B8FB28DD02F9} - http://scripts.dlv4.com/binaries/IA/sysia32svc_FR_XP.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cabO16 - DPF: {C80B7FF6-CE60-4079-935E-520C045C30A6} - http://www.mailskinner.com/binaries/msaxsetup.cabO16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://support.norton.com/sp/en/us/home/current/infoO16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cabO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exeO23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exeO23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exeO23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus
avapsvc.exeO23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exeO23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeO23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe

incognito02 · Answer

Salut,suis ceci:http://perso.wanadoo.fr/entraide-hijackthis/MessengerPlus3/index.htmlA+

nbloquet · Answer

En ce qui concerne Magic control Agent le probleme est resolu.J'ai fais comme au premier ordinateur infecté : en mode sans echec,j'ai supprimé les fichiers, puis j'ai lancé spybot et corrigé les problemes.Visiblement il change de nom de fichier a chaque fois (tomnfqzbpw,UEBHJA ......).Par contre j'ai visiblement d'autres problemes que je n'arrive pas a enlever sur cet ordinateur.Maintenant je vais me coucher , je reviendrai sur le forum demain pour les autres problemes .J'espere que tu te rappelleras de mon nom.Encore merci pour tout, bonne nuit , à bientôt.

incognito02 · Answer

SalutTu as suivi la page que je t ai donne?Il faut supprimer cette infection dans un premier temps, apres on verra.Oui je te retrouverais ;-)a+

nbloquet · Answer

Bonjour et pardon d'une reponse aussi tardive.Effectivement apres avoir suivi la page donnée , plus rien.Merci à incognito02 et à green day pour leur aide precieuse.

incognito02 · Answer

de rien,a++

green day · Answer

pas d'quoi ! ;-)

green day · Answer

Salut crée ton propre poste stp et fais ceci : Télécharge ceci :Lien :  http://www.infos-du-net.com/telecharger/HijackThis.html Démo : http://pageperso.aol.fr/balltrap34/demohijack.htm  Choisir l'option "do a scan and a logfile", et faire un copier/coller du rapport ainsi générer sur le forum.++

jojojojo · Answer

Moi je viens d'utiliser Navilog 
http://il.mafioso.pagesperso-orange.fr/
et depuis plus rien. Ca semble bien marcher
a+

Magic control agent recalcitrant

51 réponses

Discussions similaires

Newsletters