Infection par virus w32.myzor.fk

drav Messages postés 43 Statut Membre -  
 drav -
bonjour

suite a l'infection par le virus myzor j'ai lancé HijackThis, ensuite lorsque je lance Smitfraudfix j'ai un message d'erreur " fichier process.exe abcent " merci de bien vouloir m'aider a bientôt.
Configuration: PC  H P média center 
windows XP

11 réponses

  1. Utilisateur anonyme
     
    Bonjour !

    Pourrais-tu donner davantage d'explications ?
    Ne serait que poster un log HJT !

    Process.exe ne semble pas obligatoire sur ton ordi : il y a donc autre chose qui bloque... (Cherche process.exe sur Google, tu comprendras !)

    Par principe, on ne lance pas Smitfraudfix comme cela : faut désinfecter à fond avant !!!

    Un p'tit coup de main, stp ? Merci !
    0
  2. ^^Marie^^ Messages postés 41884 Date d'inscription   Statut Membre Dernière intervention   3 280
     
    Salut,

    Faudrait procéder par ordre :

    Il est important d’effectuer la manip dans sa totalité et dans l’ordre :

    Télécharge et colle les 3 rapports dans l’ordre

    A - ad-aware version 1.06
    (ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
    voir demo
    http://pageperso.aol.fr/balltrap34/adwseflash.zip

    B - spybot version 1.4
    (ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
    voir demo d utilisation
    http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm

    C - Ccleaner : ( nettoyeur de registre, cookies+temps+tempos+prefetch+historique+etc..)
    Télécharge ici :
    https://www.ccleaner.com/ccleaner/download
    Tutorial ici:
    https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

    D – Ewido
    https://www.malekal.com/tutorial-et-guide-ewido-v4/
    Copie/colle le rapport

    E - Scan online avec BitDefender (fonctionne uniquement sous Internet Explorer en acceptant l’ activX)
    https://assiste.com/404_La_page_demandee_n_existe_pas.php
    http://www.bitdefender.fr/scan8/ie.html
    Copie/COLLE le rapport entier

    F - Hijackthis - Outil de diagnostic et réparation
    lire démo
    http://pageperso.aol.fr/balltrap34/Hijenr.gif
    http://pageperso.aol.fr/balltrap34/demohijack.htm
    Télécharge version française ici
    http://telechargement.zebulon.fr/160-patch-francais-pour-hijackthis-1991.html
    Copie/colle le rapport

    Bon courage

    A++

    D'autre part tu as déjà eu ce soucis, mais comment t'aider si tu ne réponds pas l'aide que l'on t'apporte???
    0
  3. drav
     
    Bonsoir

    Voici le rapport de Ewido

    ewido anti-spyware - Scan Report
    ---------------------------------------------------------

    + Created at: 22:41:58 29/07/2006

    + Scan result:

    HKLM\SOFTWARE\Classes\CLSID\{5753791b-f607-48ca-814e-91c14d081f9e} -> Adware.Generic : No action taken.
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5753791b-f607-48ca-814e-91c14d081f9e} -> Adware.Generic : No action taken.
    HKU\S-1-5-21-258014111-1084173056-3109972993-1007\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5753791B-F607-48CA-814E-91C14D081F9E} -> Adware.Generic : No action taken.
    C:\Documents and Settings\HP_Administrateur\Local Settings\Temporary Internet Files\Content.IE5\CTERK9EZ\popup[1].htm -> Hijacker.Agent.a : No action taken.
    C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\tmp2A.tmp -> Not-A-Virus.Hoax.Win32.Renos.dw : No action taken.
    C:\Documents and Settings\HP_Administrateur\Cookies\hp_administrateur@247realmedia[1].txt -> TrackingCookie.247realmedia : No action taken.
    C:\Documents and Settings\HP_Administrateur\Cookies\hp_administrateur@atbatterycompanyinc.112.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
    C:\Documents and Settings\HP_Administrateur\Cookies\hp_administrateur@sfr.122.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
    C:\Documents and Settings\HP_Administrateur\Cookies\hp_administrateur@bluestreak[1].txt -> TrackingCookie.Bluestreak : No action taken.
    C:\Documents and Settings\HP_Administrateur\Cookies\hp_administrateur@com[1].txt -> TrackingCookie.Com : No action taken.
    C:\Documents and Settings\HP_Administrateur\Cookies\hp_administrateur@ilead.itrack[2].txt -> TrackingCookie.Itrack : No action taken.
    C:\Documents and Settings\HP_Administrateur\Cookies\hp_administrateur@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : No action taken.
    C:\Documents and Settings\HP_Administrateur\Cookies\hp_administrateur@yadro[1].txt -> TrackingCookie.Yadro : No action taken.

    ::Report end

    Par contre je n'arrive pas à lancer Bitdefender il bloque au chargement. d'avance encore merci Ciao.
    0
  4. drav
     
    Aprés plusieur tentatives je suis enfin parvenu a lancer Bitdefender dont voici le rapport.

    BitDefender Online Scanner - Rapport virus en temps réel

    Généré à: Sun, Jul 30, 2006 - 11:59:47

    --------------------------------------------------------------------------------

    Info d'analyse

    Fichiers scannés
    771506

    Infectés Fichiers
    1

    Virus Détectés

    Exploit.ADODB.Stream2.Gen
    1

    --------------------------------------------------------------------------------

    Ce sommaire du processus d'analyse sera utilisé par les laboratoires Antivirus BitDefender pour créer des statistiques agréguées sur l'activité des virus dans le monde.
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. drav
     
    Bonjour

    Voici le rapport de Hijackthis

    Logfile of HijackThis v1.99.1
    Scan saved at 12:11:57, on 30/07/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\ehome\ehtray.exe
    C:\windows\system\hpsysdrv.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\ewido anti-spyware 4.0\ewido.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\PROMT5\INTEGRAL\pinmenu.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    c:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\WINDOWS\arservice.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\ewido anti-spyware 4.0\guard.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
    C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://portail.free.fr/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
    O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [PROMT Integrator] "C:\Program Files\PROMT5\INTEGRAL\PinStart.exe" /autorun
    O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - Global Startup: Barre d'état système d'ATI CATALYST.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
    O9 - Extra button: Traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT5\PROMTIE4\promtie5.htm
    O9 - Extra 'Tools' menuitem: Traduire - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT5\PROMTIE4\promtie5.htm
    O9 - Extra button: (no name) - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT5\PROMTIE4\options.htm
    O9 - Extra 'Tools' menuitem: Personnaliser les options de traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT5\PROMTIE4\options.htm
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
    O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: Traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT5\PROMTIE4\promtie5.htm (HKCU)
    O9 - Extra 'Tools' menuitem: Traduire - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT5\PROMTIE4\promtie5.htm (HKCU)
    O9 - Extra button: (no name) - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT5\PROMTIE4\options.htm (HKCU)
    O9 - Extra 'Tools' menuitem: Personnaliser les options de traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT5\PROMTIE4\options.htm (HKCU)
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O21 - SSODL: coursings - {f8d02387-789a-4c0f-a1d8-8a93f33ee4df} - (no file)
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
    O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
    O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
    O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

    Tout à l'air de fonctionner à merveille encore une fois merci à tous surtout à Marie c'est vraiment un site sympa 1000 mercis Ciao.
    0
  7. ^^Marie^^ Messages postés 41884 Date d'inscription   Statut Membre Dernière intervention   3 280
     
    Slt,

    On continue

    Fais ceci :
    Smitfraudfix

    1°/ - Télécharge le logiciel SmitfraudFix ((crée par S!Ri J)
    http://siri.urz.free.fr/Fix/SmitfraudFix.zip et décompresse le.

    - Ouvre le dossier "SmitfraudFix" qui sera apparu, double clic sur "Smitfraudfix.cmd", choisis l’option 1, un log va être généré…

    Tutorial imagée à lire :
    http://siri.urz.free.fr/Fix/SmitfraudFix.php

    Copie-COLLE ce dernier dans un message sur le forum.

    ENSUITE

    2°/ - Démarre en mode sans échec :

    Pour cela, tu tapotes la touche F8 dès le début de l’allumage du PC sans t’arrêter
    Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape ‘Entrée’ sur ton clavier.

    Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres, c’est normal !
    (Si F8 ne marche pas utilise la touche F5).

    3°/ - Relance le programme Smitfraud,
    Cette fois choisit l’option 2, répond OUI à tout ;
    Sauvegarde le rapport, redémarre en mode normal,
    Copie-COLLE le rapport sauvegardé sur le forum.

    Ewido ===> no action taken==> n'a pas fonctionné
    Refais le en lisant correctement le tuto

    Refais un Hitjakthis ensuite
    0
  8. drav
     
    Bonsoir

    Je n'arrive pas à lancer Smitfraudfix il me met un message " fichier process.exe absent " il me dit d'appuyer sur une touche pour continuer lorsque j'appui tout disparait. Par contre j'ai relancer Ewido dont voici le rapport. merci à tous à bientot pour votre aide Ciao.

    Windows Registry Editor Version 5.00

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pf]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pf\OpenWithList]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\OpenWithList]

    [HKEY_CLASSES_ROOT\Automap.Map.EU]
    @="Carte européenne Microsoft AutoRoute"

    [HKEY_CLASSES_ROOT\Automap.Map.EU\CLSID]
    @="{A49EEA01-9231-4C77-AA9E-2F89D72B4804}"

    [HKEY_CLASSES_ROOT\Automap.Map.EU\CurVer]
    @="Automap.Map.EU.12"

    [HKEY_CLASSES_ROOT\DSP.DSP]
    @="DSP Class"

    [HKEY_CLASSES_ROOT\DSP.DSP\CLSID]
    @="{9C123EA9-AEC9-4f75-BBC0-7565FA1398966}"

    [HKEY_CLASSES_ROOT\DSP.DSP\CurVer]
    @="DSP.DSP.1"

    [HKEY_CLASSES_ROOT\DSP.DSPDMOProp_Chorus.1]
    @="DSPDMOProp_Chorus Class"

    [HKEY_CLASSES_ROOT\DSP.DSPDMOProp_Chorus.1\CLSID]
    @="{6F63B172-5543-4593-91CE-EDBA65B9FACDB}"

    [HKEY_CLASSES_ROOT\CLSID\{54D9498B-CF93-414F-8984-8CE7FDE0D391}]
    @="CShellExecuteHookImpl Object"
    "AppID"=""

    [HKEY_CLASSES_ROOT\CLSID\{54D9498B-CF93-414F-8984-8CE7FDE0D391}\InprocServer32]
    @="C:\\Program Files\\ewido anti-malware\\shellhook.dll"
    "ThreadingModel"="apartment"

    [HKEY_CLASSES_ROOT\CLSID\{54D9498B-CF93-414F-8984-8CE7FDE0D391}\ProgID]
    @="shellhook.ShellExecuteHookImpl.1"

    [HKEY_CLASSES_ROOT\CLSID\{54D9498B-CF93-414F-8984-8CE7FDE0D391}\Programmable]

    [HKEY_CLASSES_ROOT\CLSID\{54D9498B-CF93-414F-8984-8CE7FDE0D391}\TypeLib]
    @="{F8209D9F-D73B-49D5-BD13-055CA660B815}"

    [HKEY_CLASSES_ROOT\CLSID\{54D9498B-CF93-414F-8984-8CE7FDE0D391}\VersionIndependentProgID]
    @="shellhook.ShellExecuteHookImpl"

    [HKEY_CLASSES_ROOT\CLSID\{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}]
    @="Ctest Object"
    "AppID"=""

    [HKEY_CLASSES_ROOT\CLSID\{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}\InprocServer32]
    @="C:\\Program Files\\ewido anti-malware\\context.dll"
    "ThreadingModel"="apartment"

    [HKEY_CLASSES_ROOT\CLSID\{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}\ProgID]
    @="Context.test.1"

    [HKEY_CLASSES_ROOT\CLSID\{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}\Programmable]

    [HKEY_CLASSES_ROOT\CLSID\{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}\TypeLib]
    @="{60ACE49B-F247-4E12-B740-EF8DB1941D0F}"

    [HKEY_CLASSES_ROOT\CLSID\{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}\VersionIndependentProgID]
    @="Context.test"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\MasterCook.exe]
    "Path"="C:\\SIERRA\\MASTER~1"
    @="C:\\SIERRA\\MASTER~1\\MasterCook.exe"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\HTML Help]
    "msjro.chm"="C:\\Program Files\\Fichiers communs\\System\\Ado\\"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\HTML Help]
    "dao360.chm"="C:\\Program Files\\Fichiers communs\\Microsoft Shared\\DAO\\"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\HTML Help]
    "jetsql40.chm"="C:\\Program Files\\Microsoft Office\\Office\\1036\\"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\HTML Help]
    "jetdef40.chm"="C:\\Program Files\\Microsoft Office\\Office\\1036\\"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB873339]
    "DisplayName"="Correctif Windows XP - KB873339"
    "UninstallString"="C:\\WINDOWS\\$NtUninstallKB873339$\\spuninst\\spuninst.exe"
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/873339"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="20041117.092459"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB883667]
    "DisplayName"="Correctif Windows XP - KB883667"
    "UninstallString"="C:\\WINDOWS\\$NtUninstallKB883667$\\spuninst\\spuninst.exe"
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/883667"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="20040812.104354"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB885250]
    "DisplayName"="Correctif Windows XP - KB885250"
    "UninstallString"="C:\\WINDOWS\\$NtUninstallKB885250$\\spuninst\\spuninst.exe"
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/885250"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="20050118.202711"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB885835]
    "DisplayName"="Correctif Windows XP - KB885835"
    "UninstallString"="C:\\WINDOWS\\$NtUninstallKB885835$\\spuninst\\spuninst.exe"
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/885835/ms04-044-vulnerabilities-in-windows-kernel-and-lsass-could-allow-eleva"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="20041027.181713"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB885836]
    "DisplayName"="Correctif Windows XP - KB885836"
    "UninstallString"="C:\\WINDOWS\\$NtUninstallKB885836$\\spuninst\\spuninst.exe"
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/885836/ms04-041-a-vulnerability-in-wordpad-could-allow-code-execution"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="20041028.173203"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB885884]
    "DisplayName"="Correctif Windows XP - KB885884"
    "UninstallString"="C:\\WINDOWS\\$NtUninstallKB885884$\\spuninst\\spuninst.exe"
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/885884"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="20040924.025457"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB886185]
    "DisplayName"="Correctif Windows XP - KB886185"
    "UninstallString"="C:\\WINDOWS\\$NtUninstallKB886185$\\spuninst\\spuninst.exe"
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/886185"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="20041021.090540"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB887472]
    "DisplayName"="Correctif Windows XP - KB887472"
    "UninstallString"="C:\\WINDOWS\\$NtUninstallKB887472$\\spuninst\\spuninst.exe"
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/887472"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="20041014.162858"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB887742]
    "DisplayName"="Correctif Windows XP - KB887742"
    "UninstallString"="C:\\WINDOWS\\$NtUninstallKB887742$\\spuninst\\spuninst.exe"
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/887742"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="20041103.095002"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB887998]
    "DisplayName"="Microsoft .NET Framework 1.0 Hotfix (KB887998)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB887998$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "InstallDate"="20060316"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB888111WXPSP2]
    "DisplayName"="High Definition Audio - KB888111"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB888111WXPSP2$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="20040219.000000"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB888113]
    "DisplayName"="Correctif Windows XP - KB888113"
    "UninstallString"="C:\\WINDOWS\\$NtUninstallKB888113$\\spuninst\\spuninst.exe"
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/888113"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="20041116.131036"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB888302]
    "DisplayName"="Correctif Windows XP - KB888302"
    "UninstallString"="C:\\WINDOWS\\$NtUninstallKB888302$\\spuninst\\spuninst.exe"
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/888302"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="20041207.111426"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB888795]
    "DisplayName"="Correctif pour Windows XP (KB888795)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB888795$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/888795"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="3"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Hotfix"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB888795"
    "InstallDate"="20050102"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB890046]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB890046)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB890046$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/890046"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB890046"
    "InstallDate"="20060316"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB890175]
    "DisplayName"="Correctif Windows XP - KB890175"
    "UninstallString"="C:\\WINDOWS\\$NtUninstallKB890175$\\spuninst\\spuninst.exe"
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/890175/ms05-001-vulnerability-in-html-help-could-allow-code-execution"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="20041201.233338"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB890859]
    "DisplayName"="Correctif Windows XP - KB890859"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB890859$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/890859"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB890859"
    "InstallDate"="20060316"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB891781]
    "DisplayName"="Correctif Windows XP - KB891781"
    "UninstallString"="C:\\WINDOWS\\$NtUninstallKB891781$\\spuninst\\spuninst.exe"
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/891781"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="20050110.165439"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB892050]
    "DisplayName"="Correctif Windows XP - KB892050"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB892050$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/892050"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="3"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Hotfix"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB892050"
    "InstallDate"="20050102"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB893066]
    "DisplayName"="Correctif Windows XP - KB893066"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB893066$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/893066/ms05-019-vulnerabilities-in-tcp-ip-could-allow-remote-code-execution-a"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB893066"
    "InstallDate"="20050102"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB893756]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB893756)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB893756$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/893756"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB893756"
    "InstallDate"="20060316"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB896358]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB896358)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB896358$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/896358/ms05-026-a-vulnerability-in-html-help-could-allow-remote-code-executio"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB896358"
    "InstallDate"="20050102"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB896422]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB896422)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB896422$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/896422/ms05-027-vulnerability-in-server-message-block-could-allow-remote-code"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB896422"
    "InstallDate"="20050102"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB896423]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB896423)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB896423$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/windows?ui=en-US&rs=en-001&ad=US"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB896423"
    "InstallDate"="20060315"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB896424]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB896424)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB896424$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/896424"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB896424"
    "InstallDate"="20060316"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB896428]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB896428)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB896428$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/896428"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB896428"
    "InstallDate"="20060316"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB896688]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB896688)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB896688$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/896688/ms05-052-cumulative-security-update-for-internet-explorer"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB896688"
    "InstallDate"="20050102"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB898458]
    "DisplayName"="Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB898458$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/898458"
    "DisplayVersion"="20050502.101010"
    "ParentKeyName"="Microsoft Learning"
    "ParentDisplayName"="Microsoft Learning - Software Updates"
    "InstallDate"="20060316"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB898461]
    "DisplayName"="Mise à jour pour Windows XP (KB898461)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB898461$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/898461/"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB898461"
    "InstallDate"="20060315"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB899587]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB899587)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB899587$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/899587"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB899587"
    "InstallDate"="20060316"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB899589]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB899589)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB899589$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/899589"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB899589"
    "InstallDate"="20060316"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB899591]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB899591)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB899591$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/899591"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB899591"
    "InstallDate"="20060316"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB900325]
    "DisplayName"="Correctif n° 2 pour Windows XP Édition Media Center 2005"
    "UninstallString"="C:\\WINDOWS\\$NtUninstallKB900325$\\spuninst\\spuninst.exe"
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/900325"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "Installed"=dword:00000001
    "ParentDisplayName"="Windows XP Édition Media Center 2005"
    "ParentKeyName"="Windows XP Édition Media Center 2005"
    "DisplayIcon"="C:\\WINDOWS\\ehome\\ehshell.exe"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB900485]
    "DisplayName"="Mise à jour pour Windows XP (KB900485)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB900485$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "InstallDate"="20060428"
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/900485"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="2"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB900485"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB900725]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB900725)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB900725$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/900725"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB900725"
    "InstallDate"="20060316"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB901017]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB901017)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB901017$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/901017"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB901017"
    "InstallDate"="20060316"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB901214]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB901214)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB901214$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/901214"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB901214"
    "InstallDate"="20050102"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB902400]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB902400)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB902400$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/902400/ms05-051-vulnerabilities-in-ms-dtc-and-com-could-allow-remote-code-exe"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB902400"
    "InstallDate"="20050102"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB902841]
    "DisplayName"="Correctif pour Windows XP (KB902841)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB902841$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/902841"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Hotfix"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB902841"
    "InstallDate"="20050102"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB904706]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB904706)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB904706$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "InstallDate"="20060316"
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/904706"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="2"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB904706"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB905414]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB905414)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB905414$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/905414"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB905414"
    "InstallDate"="20060316"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB905749]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB905749)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB905749$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/905749"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB905749"
    "InstallDate"="20060316"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB905915]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB905915)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB905915$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "InstallDate"="20060316"
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/905915"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB905915"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB908250]
    "DisplayName"="Windows XP Media Center Edition 2005 KB908250"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB908250$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/908250"
    "Installed"=dword:00000001
    "ParentDisplayName"="Windows XP Media Center Edition 2005"
    "ParentKeyName"="Windows XP Media Center Edition 2005"
    "DisplayIcon"="C:\\WINDOWS\\ehome\\ehshell.exe"
    "InstallDate"="20050102"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB908519]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB908519)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB908519$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "InstallDate"="20060316"
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/908519"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB908519"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB908531]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB908531)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB908531$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "InstallDate"="20060413"
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/908531"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB908531"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB910393]
    "DisplayName"="Mise à jour pour Lecteur Windows Media 10 (KB910393)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB910393$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "InstallDate"="20060316"
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/910393"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayIcon"=hex(2):22,00,25,00,50,00,72,00,6f,00,67,00,72,00,61,00,6d,00,46,\
    00,69,00,6c,00,65,00,73,00,25,00,5c,00,77,00,69,00,6e,00,64,00,6f,00,77,00,\
    73,00,20,00,6d,00,65,00,64,00,69,00,61,00,20,00,70,00,6c,00,61,00,79,00,65,\
    00,72,00,5c,00,77,00,6d,00,70,00,6c,00,61,00,79,00,65,00,72,00,2e,00,65,00,\
    78,00,65,00,22,00,00,00
    "ParentKeyName"="OperatingSystem"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB910437]
    "DisplayName"="Mise à jour pour Windows XP (KB910437)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB910437$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "InstallDate"="20060316"
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/910437"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB910437"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB911562]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB911562)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB911562$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "InstallDate"="20060413"
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/911562"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB911562"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB911565]
    "DisplayName"="Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB911565$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "InstallDate"="20060316"
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/911565"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayIcon"=hex(2):22,00,25,00,50,00,72,00,6f,00,67,00,72,00,61,00,6d,00,46,\
    00,69,00,6c,00,65,00,73,00,25,00,5c,00,77,00,69,00,6e,00,64,00,6f,00,77,00,\
    73,00,20,00,6d,00,65,00,64,00,69,00,61,00,20,00,70,00,6c,00,61,00,79,00,65,\
    00,72,00,5c,00,77,00,6d,00,70,00,6c,00,61,00,79,00,65,00,72,00,2e,00,65,00,\
    78,00,65,00,22,00,00,00
    "ParentKeyName"="OperatingSystem"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB911567]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB911567)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB911567$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "InstallDate"="20060413"
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/911567"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB911567"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB911927]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB911927)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB911927$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "InstallDate"="20060316"
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/911927"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB911927"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB912812]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB912812)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB912812$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "InstallDate"="20060413"
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/912812/ms06-013-cumulative-security-update-for-internet-explorer"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB912812"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB912919]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB912919)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB912919$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "InstallDate"="20060316"
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/912919"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB912919"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB913446]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB913446)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB913446$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "InstallDate"="20060316"
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/913446"
    "URLInfoAbout"="https://support.microsoft.com/en-us"
    "DisplayVersion"="1"
    "ParentKeyName"="OperatingSystem"
    "ParentDisplayName"="Windows XP - Mises à jour logicielles"
    "ReleaseType"="Security Update"
    "RegistryLocation"="HKLM\\SOFTWARE\\Microsoft\\Updates\\Windows XP\\SP3\\KB913446"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB913580]
    "DisplayName"="Mise à jour de sécurité pour Windows XP (KB913580)"
    "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB913580$\\spuninst\\spuninst.exe\""
    "TSAware"=dword:00000001
    "NoModify"=dword:00000001
    "InstallDate"="20060514"
    "Publisher"="Microsoft Corporation"
    "NoRepair"=dword:00000001
    "HelpLink"="https://support.microsoft.com/en-us/help/913580"
    "URLInfoAbout"="
    0
  9. ^^Marie^^ Messages postés 41884 Date d'inscription   Statut Membre Dernière intervention   3 280
     
    Slt,

    Tu peux refaire un HT -- STP
    Merci

    F - Hijackthis - Outil de diagnostic et réparation
    lire démo
    http://pageperso.aol.fr/balltrap34/Hijenr.gif
    http://pageperso.aol.fr/balltrap34/demohijack.htm
    Télécharge version française ici
    http://telechargement.zebulon.fr/160-patch-francais-pour-hijackthis-1991.html
    Copie/colle le rapport

    Bon courage

    A++
    0
  10. drav
     
    Bonsoir

    voici le rapport de H T merci pour votre aide a + Ciao.

    Logfile of HijackThis v1.99.1
    Scan saved at 19:55:45, on 07/08/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\arservice.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
    C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\ehome\ehtray.exe
    C:\WINDOWS\ARPWRMSG.EXE
    C:\windows\system\hpsysdrv.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\PROMT5\INTEGRAL\pinmenu.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    c:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\eMule\emule.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://portail.free.fr/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
    O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [PROMT Integrator] "C:\Program Files\PROMT5\INTEGRAL\PinStart.exe" /autorun
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - Global Startup: Barre d'état système d'ATI CATALYST.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
    O9 - Extra button: Traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT5\PROMTIE4\promtie5.htm
    O9 - Extra 'Tools' menuitem: Traduire - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT5\PROMTIE4\promtie5.htm
    O9 - Extra button: (no name) - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT5\PROMTIE4\options.htm
    O9 - Extra 'Tools' menuitem: Personnaliser les options de traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT5\PROMTIE4\options.htm
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
    O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: Traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT5\PROMTIE4\promtie5.htm (HKCU)
    O9 - Extra 'Tools' menuitem: Traduire - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT5\PROMTIE4\promtie5.htm (HKCU)
    O9 - Extra button: (no name) - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT5\PROMTIE4\options.htm (HKCU)
    O9 - Extra 'Tools' menuitem: Personnaliser les options de traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT5\PROMTIE4\options.htm (HKCU)
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O21 - SSODL: coursings - {f8d02387-789a-4c0f-a1d8-8a93f33ee4df} - C:\WINDOWS\system32\yephk.dll (file missing)
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
    O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
    O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    0
  11. ^^Marie^^ Messages postés 41884 Date d'inscription   Statut Membre Dernière intervention   3 280
     
    Salut,

    Fais gaffe avec LaMule........................lol

    Bonjour,

    Méthode à suivre dans l'ordre...
    ----------------------------------------------------------------------------
    Télécharger ces logiciels (sauf si tu les as)
    A utiliser plus tard

    A - ad-aware version 1.06
    (ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
    voir demo
    http://pageperso.aol.fr/balltrap34/adwseflash.zip

    B - spybot version 1.4
    (ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
    voir demo d utilisation
    http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm

    C - Ccleaner : ( nettoyeur de registre, cookies+temps+tempos+prefetch+historique+etc..)
    Télécharge ici :
    https://www.ccleaner.com/ccleaner/download
    Tutorial ici:
    https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

    D - Ewido
    https://www.malekal.com/tutorial-et-guide-ewido-v4/
    ----------------------------------------------------------------------------
    ¤Affiche tous les fichiers et dossiers :
    Clique sur démarrer/panneau de configuration/outil/option des dossiers/affichage

    Coche « afficher les fichiers et dossiers cachés »

    Décoche la case "Masquer les fichiers protégés du système d'exploitation (recommandé)"

    Décoche « masquer les extensions dont le type est connu »
    Puis fais «Ok» pour valider les changements.

    Et appliquer !
    =================================
    Relance HijackThis, choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked"

    O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE

    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
    O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe

    O4 - HKLM\..\Run: [PROMT Integrator] "C:\Program Files\PROMT5\INTEGRAL\PinStart.exe" /autorun

    O9 - Extra button: Traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT5\PROMTIE4\promtie5.htm
    O9 - Extra 'Tools' menuitem: Traduire - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT5\PROMTIE4\promtie5.htm
    O9 - Extra button: (no name) - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT5\PROMTIE4\options.htm
    O9 - Extra 'Tools' menuitem: Personnaliser les options de traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT5\PROMTIE4\options.htm
    O9 - Extra button: Traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT5\PROMTIE4\promtie5.htm (HKCU)
    O9 - Extra 'Tools' menuitem: Traduire - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT5\PROMTIE4\promtie5.htm (HKCU)
    O9 - Extra button: (no name) - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT5\PROMTIE4\options.htm (HKCU)
    O9 - Extra 'Tools' menuitem: Personnaliser les options de traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT5\PROMTIE4\options.htm (HKCU)

    ============ ============================
    ¤Démarre en mode sans échec :
    Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter
    Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
    Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
    (Si F8 ne marche pas utilise la touche F5).

    C:\Program Files\PROMT5 (supprimes le dossier)

    ----------------------------------------------------------------------------
    ¤Vide tes fichiers temps et temporary internet file:

    Maintenant tu lances
    A/ Ad-Aware supprime quarantaine
    B/ Spybot Supprime quarantaine
    C/ Ccleaner Ewido Copier/coller le rapport
    D/
    ----------------------------------------------------------------------------
    ¤ Vide ta Corbeille.
    ----------------------------------------------------------------------------
    ¤ Redémarre en mode normal, relance Hijackthis et copie/colle un nouveau rapport sur le forum.

    Tiens nous au courant

    A+

    0
  12. drav
     
    Bonjour

    j'ai suivi la marche à suivre voici le rapport de ewido
    ---------------------------------------------------------
    ewido anti-spyware - Scan Report
    ---------------------------------------------------------

    + Created at: 10:40:31 09/08/2006

    + Scan result:

    Nothing found.

    ::Report end

    le rapport de Hijackthis

    Logfile of HijackThis v1.99.1
    Scan saved at 10:45:04, on 09/08/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\ehome\ehtray.exe
    C:\windows\system\hpsysdrv.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    c:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\WINDOWS\arservice.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\ewido anti-spyware 4.0\guard.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
    C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://portail.free.fr/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - Global Startup: Barre d'état système d'ATI CATALYST.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
    O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O21 - SSODL: coursings - {f8d02387-789a-4c0f-a1d8-8a93f33ee4df} - (no file)
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
    O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
    O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

    Par contre lorsque je demarre j'ai un message

    Windows pas de disque

    Il n'y a pas de disque dans le lecteur. Inserer un disque dans le lecteur
    pour arriver à supprimer ce message je suis obligé de cliquer plusieur fois sur annuler ensuite j'ai fait un redemarrage toujours le meme message.
    P S ce genre de message je l'ai depuis le début de mon problème d'attaque virale.

    merci de m'aider pour y remédier
    A+
    0