Infection Backdoor.Snusdoor

Résolu
Ambrer -  
Bonjour,

Je suis sous configuration windows xp familial (avec licence).

Ewido a détecté un virus Backdoor.snusdoor.
Le fichier contenant le virus a été mis en quarantaine par ewido (hodll.dll).

J'ai éffectué après cette découverte un scan avast qui n'a rien donné.

Je vous serais reconnaissant de bien vouloir m'indiquer la démarche à suivre pour me débarasser de ce virus svp ? Et rendre mon ordinateur "propre".

Je vous remercie

Ambrer

5 réponses

  1. Ambrer Auteur
    Pouvez-vous m'aider svp à nettoyer mon PC de ce virus ? Je suis incapable de m'en défaire !
    Voici un rapport hijackthis ainsi qu'un rapport Ewido juste après
    Merci de votre aide

    Logfile of HijackThis v1.99.1
    Scan saved at 22:19:38, on 13/09/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\WINDOWS\ALCWZRD.EXE
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\CyberLink\PowerCinema\PCMService.exe
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\Program Files\Microsoft IntelliPoint\ipoint.exe
    C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Scan\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com/fsc/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/fuji/defaults/su/*https://fr.yahoo.com/?p=us
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://fr.yahoo.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
    O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAShCut.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
    O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKCU\..\Run: [fsc-reminder.exe] C:\WINDOWS\reminder\fsc-reminder.exe 2453899 6
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP.cab
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
    O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
    O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
    O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe

    ---------------------------------------------------------
    ewido anti-spyware - Scan Report
    ---------------------------------------------------------

    + Created at: 22:04:54 13/09/2006

    + Scan result:

    C:\Program Files\CyberLink\PowerDVD\__delete_on_reboot__h_o_d_l_l_._d_l_l_ -> Backdoor.Snusdoor : Cleaned with backup (quarantined).
    C:\Documents and Settings\Dave\Cookies\dave@247realmedia[2].txt -> TrackingCookie.247realmedia : Cleaned.
    C:\Documents and Settings\Dave\Cookies\dave@weborama[1].txt -> TrackingCookie.Weborama : Cleaned.

    ::Report end
    0
    1. Utilisateur anonyme
      Salut,

      clic sur demarrer, rechercher, cherche et supprime ce fichier:

      fsc-reminder.exe

      **Si un fichier persiste lors de la suppression fais ceci:
      -Redemarres ton pc, dès l'allumage de celui-ci tapote la touche f8, à l'écran qui va apparaitre choisis "mode sans echec" attends un peu.. puis vas supprimer les fichiers/dossiers qui persistaient, vides ta corbeille et redemarres normalement

      Si tu as activé le pare-feu de Windows(SP2) désactive le puis installe celui ci pour que tu sois plus en sécurité

      Kerio: (pare-feu, qui reste gratuit après la periode d'essai!)
      Kerio Personal Firewall
      -tutorial: pour configurer et comprendre l'utilisation de Kerio
      https://kerio.probb.fr/

      Fait ce scan anti-virus en ligne avec Internet Explorer, accepte l'active X; la barre anti-popup du SP2 (en haut) va se mettre à clignoter, clic dessus et choisis "accepter l'active X" pour faire fonctionner le scan anti-virus.
      Une fois qu'il a terminé colle le rapport ici avec un nouveau rapport hijackthis

      https://www.bitdefender.com/toolbox/

      A++
      0
  2. Ambrer Auteur
    Bonsoir,

    En premier lieu merci de votre aide. Pour des gens ignorants de l 'informatique, ce coup de main est précieux... oh combien !

    Voici les rapports demandés

    Logfile of HijackThis v1.99.1
    Scan saved at 20:00:28, on 14/09/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
    C:\Program Files\ewido anti-spyware 4.0\guard.exe
    C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\WINDOWS\ALCWZRD.EXE
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\CyberLink\PowerCinema\PCMService.exe
    C:\Program Files\Microsoft IntelliPoint\ipoint.exe
    C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
    C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Scan\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/fuji/defaults/su/*https://fr.yahoo.com/?p=us
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://fr.yahoo.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
    O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAShCut.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
    O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKCU\..\Run: [fsc-reminder.exe] C:\WINDOWS\reminder\fsc-reminder.exe 2453899 6
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP.cab
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
    O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
    O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
    O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
    O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe

    BitDefender Online Scanner - Real Time Virus ReportBitDefender Online
    Scanner - Real Time Virus Report
    Generated at: Thu, Sep 14, 2006 - 19:59:30

    Scan Info
    Scanned Files349488
    Infected Files0

    Virus Detected
    No virus found.

    This summary of the scan process will be used by the BitDefender Antivirus
    Lab to create agregate statistics about virus activity around the world.

    Concernant Ewido, je n'arrive pas à me débarasser de ces deux cookies qui reviennent régulièrement... comment faire ?

    ---------------------------------------------------------
    ewido anti-spyware - Scan Report
    ---------------------------------------------------------

    + Created at: 20:27:18 14/09/2006

    + Scan result:

    C:\Documents and Settings\Dave\Cookies\dave@247realmedia[2].txt -> TrackingCookie.247realmedia : Cleaned.
    C:\Documents and Settings\Dave\Cookies\dave@weborama[1].txt -> TrackingCookie.Weborama : Cleaned.

    ::Report end

    Remerciements

    0
    1. Utilisateur anonyme
      Bonsoir,

      ton rapport me semble propre, je vois plus rien de méchant, tu peux néanmoins relancer Hijackthis et cocher la case devant les lignes ci-dessous puis de cliquer en bas sur "fix checked" pour eviter que ton Pc ne charge des choses inutile au demarrage

      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKCU\..\Run: [fsc-reminder.exe] C:\WINDOWS\reminder\fsc-reminder.exe 2453899 6
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

      tout me semble ok et de ton côté ?

      A++
      0
    2. Ambrer Auteur
      Je te remercie grandement pour ton aide. C'est rassurant lorsque l'on est ignorant de l'informatique.

      Un dernier point concernant le rapport ewido qui ne peut pas éliminer ces deux cookies...

      comment puis-je les faire disparaitre ?

      Encore merci

      Ambrer
      0
  3. Utilisateur anonyme
    fais ça, s'ils resistent toujours fais un nettoyage avec Ccleaner en mode sans echec ;-)

    Fais ce nettoyage: (à faire réguliérement)

    ¤Telecharges et installes ceci:
    CCleaner:
    Ccleaner

    dans la colonne de gauche clic sur "erreurs" coches toutes les cases, puis cliques en bas sur "chercher des erreurs" une fois finit, cliques sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs.
    Les sauvegardes que tu aura faites tu pourra les supprimer si ton ordinateur n'a plus de problémes

    ¤Relance Ccleaner, vas dans l'onglet "nettoyeur" present sur la gauche, decoches la derniere case (Avancé si elle est cochée) puis clic sur "lancer le nettoyage"

    **Si un fichier persiste lors de la suppression fais ceci:
    -Redemarres ton pc, dès l'allumage de celui-ci tapote la touche f8, à l'écran qui va apparaitre choisis "mode sans echec" attends un peu.. puis vas supprimer les fichiers/dossiers qui persistaient, vides ta corbeille et redemarres normalement

    Voilà :-)
    0
    1. Ambrer Auteur
      Bonsoir,
      J'ai suivi vos instructions à la lettre et mon PC semble désormais tout heureux. Lui et moi vous remercions grandemment.

      Je me permets une dernière demande concernant ce rapport spybot et notamment les trois premières lignes qui ressortent dans l'analyse. Est ce normal ?

      Vu la taille du rapport, j'espère en tout cas que tout est normal

      --- Search result list ---
      Windows Security Center.AntiVirusDisableNotify: Réglages (Modification du registre, nothing done)
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify!=dword:0

      Windows Security Center.FirewallDisableNotify: Réglages (Modification du registre, nothing done)
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify!=dword:0

      Windows.Security.InternetExplorer: Réglages (Modification du registre, nothing done)
      HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\iexplore.exe!=W=1

      Windows.Security.InternetExplorer: Réglages (Modification du registre, nothing done)
      HKEY_USERS\S-1-5-21-631524769-1376018467-4077368008-1007\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\iexplore.exe!=W=1

      --- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

      2005-05-31 blindman.exe (1.0.0.1)
      2005-05-31 SpybotSD.exe (1.4.0.3)
      2005-05-31 TeaTimer.exe (1.4.0.2)
      2006-06-27 unins000.exe (51.41.0.0)
      2005-05-31 Update.exe (1.4.0.0)
      2006-02-06 advcheck.dll (1.0.2.0)
      2005-05-31 aports.dll (2.1.0.0)
      2005-05-31 borlndmm.dll (7.0.4.453)
      2005-05-31 delphimm.dll (7.0.4.453)
      2005-05-31 SDHelper.dll (1.4.0.0)
      2006-02-20 Tools.dll (2.0.0.2)
      2005-05-31 UnzDll.dll (1.73.1.1)
      2005-05-31 ZipDll.dll (1.73.2.0)
      2006-09-08 Includes\Cookies.sbi (*)
      2006-09-08 Includes\Dialer.sbi (*)
      2006-09-08 Includes\Hijackers.sbi (*)
      2006-09-08 Includes\Keyloggers.sbi (*)
      2006-09-08 Includes\Malware.sbi (*)
      2006-09-08 Includes\PUPS.sbi (*)
      2006-09-08 Includes\Revision.sbi (*)
      2006-09-08 Includes\Security.sbi (*)
      2006-09-08 Includes\Spybots.sbi (*)
      2005-02-17 Includes\Tracks.uti
      2006-09-08 Includes\Trojans.sbi (*)

      --- System information ---
      Windows XP (Build: 2600) Service Pack 2
      / .NETFramework / 1.1: Microsoft .NET Framework 1.1 Hotfix (KB886903)
      / .NETFramework / 1.1: Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
      / Microsoft .NET Framework 2.0: This Security Update is for Microsoft .NET Framework 2.0. \n
      If you later install a more recent service pack, this Security Update will be uninstalled automatically. \n
      For more information, visit https://support.microsoft.com/en-us/help/917283/ms06-033-a-vulnerability-in-asp-net-could-allow-information-disclosure
      / Step By Step Interactive Training / SP2: Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)
      / Windows Media Player 10: Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)
      / Windows Media Player 10: Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)
      / Windows XP / SP3: Correctif Windows XP - KB873333
      / Windows XP / SP3: Correctif Windows XP - KB873339
      / Windows XP / SP3: Correctif Windows XP - KB883529
      / Windows XP / SP3: Correctif Windows XP - KB883667
      / Windows XP / SP3: Correctif Windows XP - KB884020
      / Windows XP / SP3: Correctif Windows XP - KB884575
      / Windows XP / SP3: Correctif Windows XP - KB884883
      / Windows XP / SP3: Correctif Windows XP - KB885222
      / Windows XP / SP3: Correctif Windows XP - KB885250
      / Windows XP / SP3: Correctif Windows XP - KB885523
      / Windows XP / SP3: Correctif Windows XP - KB885835
      / Windows XP / SP3: Correctif Windows XP - KB885836
      / Windows XP / SP3: Correctif Windows XP - KB885855
      / Windows XP / SP3: Correctif Windows XP - KB885884
      / Windows XP / SP3: Correctif Windows XP - KB885887
      / Windows XP / SP3: Correctif Windows XP - KB885894
      / Windows XP / SP3: Correctif Windows XP - KB886185
      / Windows XP / SP3: Correctif Windows XP - KB886677
      / Windows XP / SP3: Correctif Windows XP - KB886716
      / Windows XP / SP3: Correctif Windows XP - KB887742
      / Windows XP / SP3: Correctif Windows XP - KB887797
      / Windows XP / SP3: Correctif Windows XP - KB888113
      / Windows XP / SP3: Correctif Windows XP - KB888302
      / Windows XP / SP3: Correctif Windows XP - KB888402
      / Windows XP / SP3: Correctif Windows XP - KB889016
      / Windows XP / SP3: Correctif pour Windows XP (KB889527)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB890046)
      / Windows XP / SP3: Correctif Windows XP - KB890831
      / Windows XP / SP3: Correctif Windows XP - KB890859
      / Windows XP / SP3: Correctif Windows XP - KB891781
      / Windows XP / SP3: Correctif Windows XP - KB892627
      / Windows XP / SP3: Correctif Windows XP - KB893056
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB893066)
      / Windows XP / SP3: Correctif Windows XP - KB893086
      / Windows XP / SP3: Correctif pour Windows XP (KB893357)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB893756)
      / Windows XP / SP3: Windows Installer 3.1 (KB893803)
      / Windows XP / SP3: Mise à jour pour Windows XP (KB894391)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896358)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896422)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896423)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896424)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896428)
      / Windows XP / SP3: Correctif Windows XP - KB896626
      / Windows XP / SP3: Mise à jour pour Windows XP (KB896727)
      / Windows XP / SP3: Mise à jour pour Windows XP (KB897663)
      / Windows XP / SP3: Mise à jour pour Windows XP (KB898461)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899587)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899588)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899591)
      / Windows XP / SP3: Mise à jour pour Windows XP (KB900485)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB900725)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB900930)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901017)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901214)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB902400)
      / Windows XP / SP3: Correctif pour Windows XP (KB903234)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB904706)
      / Windows XP / SP3: Mise à jour pour Windows XP (KB904942)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905414)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905749)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB908519)
      / Windows XP / SP3: Mise à jour pour Windows XP (KB908531)
      / Windows XP / SP3: Mise à jour pour Windows XP (KB910437)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911280)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911562)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911567)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911927)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB912812)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB912919)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB913446)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB913580)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB914388)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB914389)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB916281)
      / Windows XP / SP3: Mise à jour pour Windows XP (KB916595)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917159)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917344)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917422)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917953)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB918439)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB918899)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB919007)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB920214)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB920670)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB920683)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB920685)
      / Windows XP / SP3: Mise à jour pour Windows XP (KB920872)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB921398)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB921883)
      / Windows XP / SP3: Mise à jour pour Windows XP (KB922582)
      / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB922616)

      --- Startup entries list ---
      Located: HK_LM:Run, AlcWzrd
      command: ALCWZRD.EXE
      file: C:\WINDOWS\ALCWZRD.EXE
      size: 2806784
      MD5: a95ef75cc3e2dcc05048e8135f589ed4

      Located: HK_LM:Run, ATIPTA
      command: "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
      file: C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      size: 344064
      MD5: 8824078bda1635639aae125d24b85383

      Located: HK_LM:Run, avast!
      command: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      file: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      size: 108160
      MD5: e4289180e929bf984bfecefa73322a6a

      Located: HK_LM:Run, IntelliPoint
      command: "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
      file: C:\Program Files\Microsoft IntelliPoint\ipoint.exe
      size: 461584
      MD5: 6f823b154ea55b4b7c2c79b51b9e9638

      Located: HK_LM:Run, NeroFilterCheck
      command: C:\WINDOWS\system32\NeroCheck.exe
      file: C:\WINDOWS\system32\NeroCheck.exe
      size: 155648
      MD5: 3e4c03cefad8de135263236b61a49c90

      Located: HK_LM:Run, PCMService
      command: "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
      file: C:\Program Files\CyberLink\PowerCinema\PCMService.exe
      size: 143360
      MD5: 0ae4cc13324a7bf9254d5c09502e8070

      Located: HK_LM:Run, Raccourci vers la page des propriétés de High Definition Audio
      command: HDAShCut.exe
      file: C:\WINDOWS\system32\HDAShCut.exe
      size: 61952
      MD5: 9c3b2302b60fb0efb13bc880a5e3e93e

      Located: HK_LM:Run, RemoteControl
      command: "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
      file: C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
      size: 45056
      MD5: 65384dfd2be8feafa4efc6bc8d419354

      Located: HK_LM:Run, SunJavaUpdateSched
      command: C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
      file: C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
      size: 36975
      MD5: 892eb04bc0b1a542a97197d3fa31268f

      Located: System.ini, AtiExtEvent
      command: Ati2evxx.dll
      file: Ati2evxx.dll

      Located: System.ini, crypt32chain
      command: crypt32.dll
      file: crypt32.dll

      Located: System.ini, cryptnet
      command: cryptnet.dll
      file: cryptnet.dll

      Located: System.ini, cscdll
      command: cscdll.dll
      file: cscdll.dll

      Located: System.ini, ScCertProp
      command: wlnotify.dll
      file: wlnotify.dll

      Located: System.ini, Schedule
      command: wlnotify.dll
      file: wlnotify.dll

      Located: System.ini, sclgntfy
      command: sclgntfy.dll
      file: sclgntfy.dll

      Located: System.ini, SensLogn
      command: WlNotify.dll
      file: WlNotify.dll

      Located: System.ini, termsrv
      command: wlnotify.dll
      file: wlnotify.dll

      Located: System.ini, WgaLogon
      command: WgaLogon.dll
      file: WgaLogon.dll

      Located: System.ini, wlballoon
      command: wlnotify.dll
      file: wlnotify.dll

      --- Browser helper object list ---

      --- ActiveX list ---
      {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class)
      DPF name:
      CLSID name: AdSignerLCContrl Class
      Installer: C:\WINDOWS\Downloaded Program Files\AdSignerADP.inf
      Codebase: https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP.cab
      Path: C:\WINDOWS\Downloaded Program Files\
      Long name: AdSignerADP.dll
      Short name: ADSIGN~1.DLL
      Date (created): 18/04/2006 16:04:58
      Date (last access): 14/09/2006 22:32:54
      Date (last write): 18/04/2006 16:04:58
      Filesize: 159040
      Attributes: archive
      MD5: 4570DE56BDD604B1972500446C662EEE
      CRC32: A3B9AF8B
      Version: 1.2.7.1

      --- Process list ---
      PID: 0 ( 0) [System]
      PID: 412 ( 4) \SystemRoot\System32\smss.exe
      PID: 544 ( 412) \??\C:\WINDOWS\system32\csrss.exe
      PID: 572 ( 412) \??\C:\WINDOWS\system32\winlogon.exe
      PID: 616 ( 572) C:\WINDOWS\system32\services.exe
      size: 108544
      MD5: 732E0B1ABAACE15D80EC19056B0A2AF9
      PID: 628 ( 572) C:\WINDOWS\system32\lsass.exe
      size: 13312
      MD5: 9F3744A5C6F49291A7A685040A013399
      PID: 784 ( 616) C:\WINDOWS\system32\Ati2evxx.exe
      size: 380928
      MD5: ABC57A6F6070BAF9786C318F59F29F0B
      PID: 800 ( 616) C:\WINDOWS\system32\svchost.exe
      size: 14336
      MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
      PID: 860 ( 616) C:\WINDOWS\system32\svchost.exe
      size: 14336
      MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
      PID: 900 ( 616) C:\WINDOWS\System32\svchost.exe
      size: 14336
      MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
      PID: 988 ( 616) C:\WINDOWS\system32\svchost.exe
      size: 14336
      MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
      PID: 1020 ( 616) C:\WINDOWS\system32\svchost.exe
      size: 14336
      MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
      PID: 1248 ( 616) C:\WINDOWS\system32\spoolsv.exe
      size: 57856
      MD5: DA81EC57ACD4CDC3D4C51CF3D409AF9F
      PID: 1372 ( 616) C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      size: 59008
      MD5: DC995DA2D258C0590C3AE07EC68BFEE6
      PID: 1416 ( 616) C:\Program Files\Alwil Software\Avast4\ashServ.exe
      size: 108160
      MD5: FB28CDCC7C383FCD7D773424E25F356A
      PID: 1468 ( 572) C:\WINDOWS\system32\Ati2evxx.exe
      size: 380928
      MD5: ABC57A6F6070BAF9786C318F59F29F0B
      PID: 1572 ( 616) C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
      size: 266338
      MD5: 4847DABA785D2B8F668CCAEAE26DA9D9
      PID: 1604 (1500) C:\WINDOWS\Explorer.EXE
      size: 1036288
      MD5: 0BEE3B07ACE3303EE57698808E1D2DE3
      PID: 1656 ( 616) C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
      size: 1081344
      MD5: 17CF439F02170CB7F4FA1B416B03EC8B
      PID: 1720 ( 616) C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
      size: 1205784
      MD5: 9EF600C64435CCFDEA01C991289E76EC
      PID: 1948 ( 616) C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
      size: 322120
      MD5: 11F714F85530A2BD134074DC30E99FCA
      PID: 128 ( 616) C:\WINDOWS\system32\wdfmgr.exe
      size: 38912
      MD5: AB0A7CA90D9E3D6A193905DC1715DED0
      PID: 1128 (1604) C:\WINDOWS\ALCWZRD.EXE
      size: 2806784
      MD5: A95EF75CC3E2DCC05048E8135F589ED4
      PID: 1204 (1604) C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      size: 344064
      MD5: 8824078BDA1635639AAE125D24B85383
      PID: 1384 (1604) C:\Program Files\CyberLink\PowerCinema\PCMService.exe
      size: 143360
      MD5: 0AE4CC13324A7BF9254D5C09502E8070
      PID: 1380 (1604) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
      size: 461584
      MD5: 6F823B154EA55B4B7C2C79B51B9E9638
      PID: 1540 (1604) C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
      size: 36975
      MD5: 892EB04BC0B1A542A97197D3FA31268F
      PID: 1888 (1604) C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      size: 108160
      MD5: E4289180E929BF984BFECEFA73322A6A
      PID: 2180 (1720) C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
      size: 1955352
      MD5: B91383C52C1F3442E06E84276CB9EAAF
      PID: 3104 ( 616) C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      size: 251520
      MD5: 3FED324A48F1E55C331D3EAB76EA7CC1
      PID: 3280 ( 616) C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      size: 370304
      MD5: 7D1AE2588DCFC5D07E6EBCAA25192DB1
      PID: 3464 ( 616) C:\WINDOWS\System32\alg.exe
      size: 44544
      MD5: 2FE681D10C5FC343DBBC0610B8DD4D24
      PID: 3748 ( 616) C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
      size: 114784
      MD5: 60BE219D98808988FE3651907248D03D
      PID: 3844 (1720) C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
      size: 1955352
      MD5: B91383C52C1F3442E06E84276CB9EAAF
      PID: 452 (2844) C:\WINDOWS\ALCFDRTM.EXE
      size: 81920
      MD5: AEE7D5E8151EBF06A5EE7587BCB941EA
      PID: 508 (1604) C:\Program Files\GUILD WARS\Gw.exe
      size: 5001216
      MD5: 9D0C540C339CE1682847D51D08733EF5
      PID: 3708 (1604) C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe
      size: 1436160
      MD5: 1C6BE6EB18C61AF42CC113C062E48094
      PID: 3532 (1604) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
      size: 4393096
      MD5: 09CA174A605B480318731E691DC98539
      PID: 4 ( 0) System

      --- Browser start & search pages list ---
      Spybot - Search & Destroy browser pages report, 14/09/2006 22:44:22

      HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
      C:\WINDOWS\system32\blank.htm
      HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
      http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
      https://fr.yahoo.com/
      HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\@
      http://red.clientapps.yahoo.com/customize/fuji/defaults/su/*https://fr.yahoo.com/?p=us
      HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
      %SystemRoot%\system32\blank.htm
      HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
      http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
      https://fr.yahoo.com/
      HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
      https://fr.yahoo.com/
      HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
      http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant
      https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
      HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
      https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm

      --- Winsock Layered Service Provider list ---

      --- Uninstall list ---
      Ad-Aware SE Personal 1.06 (Ad-Aware SE Personal)
      uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
      publisher: Lavasoft
      help link: https://www.adaware.com/

      (AddressBook)

      ATI Display Driver 8.162-050803a2-026484C-Fujitsu Siemens Computers (ATI Display Driver)
      uninstall cmd: rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean

      avast! Antivirus 4.7 (avast!)
      version (major): 4
      version (minor): 7
      install location: C:\PROGRA~1\ALWILS~1\Avast4
      install source: C:\PROGRA~1\ALWILS~1\Avast4\setup
      uninstall cmd: rundll32 C:\PROGRA~1\ALWILS~1\Avast4\Setup\setiface.dll,RunSetup
      publisher: Alwil Software
      help link: https://www.avast.com/fr-fr/index

      (Branding)

      CCleaner (remove only) (CCleaner)
      uninstall cmd: "C:\Program Files\CCleaner\uninst.exe"

      (Connection Manager)

      (DirectAnimation)

      (DirectDrawEx)

      (DXM_Runtime)

      ewido anti-spyware 4.0 (ewidoantispyware4)
      install location: C:\Program Files\ewido anti-spyware 4.0
      uninstall cmd: C:\Program Files\ewido anti-spyware 4.0\Uninstall.exe
      publisher: ewido networks
      help link: https://www.avg.com/en-us/free-antivirus-download

      (Fontcore)

      GUILD WARS (Guild Wars)
      uninstall cmd: "C:\Program Files\GUILD WARS\Gw.exe" -uninstall

      (ICW)

      (IE40)

      (IE4Data)

      (IE5BAKEX)

      (IEData)

      Correctif Windows XP - KB873333 20050114.005213 (KB873333)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB873333$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/873333/ms05-012-vulnerability-in-ole-and-com-could-allow-remote-code-executio

      Correctif Windows XP - KB873339 20041117.092459 (KB873339)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/873339

      Correctif Windows XP - KB883529 20040825.095422 (KB883529)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB883529$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/883529

      Correctif Windows XP - KB883667 20040812.104354 (KB883667)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB883667$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/883667

      (KB884016)

      Correctif Windows XP - KB884020 20040813.164454 (KB884020)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB884020$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/884020

      Correctif Windows XP - KB884575 20040827.145237 (KB884575)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB884575$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/884575

      Correctif Windows XP - KB884883 8 (KB884883)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB884883$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/884883

      Correctif Windows XP - KB885222 20041104.145618 (KB885222)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB885222$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/885222

      Correctif Windows XP - KB885250 20050118.202711 (KB885250)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/885250

      Correctif Windows XP - KB885523 20040923.190702 (KB885523)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB885523$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/885523

      Correctif Windows XP - KB885835 20041027.181713 (KB885835)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/885835/ms04-044-vulnerabilities-in-windows-kernel-and-lsass-could-allow-eleva

      Correctif Windows XP - KB885836 20041028.173203 (KB885836)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/885836/ms04-041-a-vulnerability-in-wordpad-could-allow-code-execution

      Correctif Windows XP - KB885855 20040930.104104 (KB885855)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB885855$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/885855

      Correctif Windows XP - KB885884 20040924.025457 (KB885884)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB885884$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/885884

      Correctif Windows XP - KB885887 20041117.101147 (KB885887)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB885887$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/885887

      Correctif Windows XP - KB885894 20040923.185333 (KB885894)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB885894$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/885894

      Correctif Windows XP - KB886185 20041021.090540 (KB886185)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/886185

      Correctif Windows XP - KB886677 20041015.135028 (KB886677)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB886677$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/886677

      Correctif Windows XP - KB886716 2 (KB886716)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB886716$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/886716

      Correctif Windows XP - KB887742 20041103.095002 (KB887742)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB887742$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/887742

      Correctif Windows XP - KB887797 20041018.133824 (KB887797)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB887797$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/887797

      High Definition Audio - KB888111 20040219.000000 (KB888111WXPSP2)
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us

      Correctif Windows XP - KB888113 20041116.131036 (KB888113)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/888113

      Correctif Windows XP - KB888302 20041207.111426 (KB888302)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/888302

      Correctif Windows XP - KB888402 20041117.151732 (KB888402)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB888402$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/888402

      Windows Media Player 10 Hotfix - KB888656 (KB888656)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB888656$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/888656

      Correctif Windows XP - KB889016 20041112.120732 (KB889016)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB889016$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/889016

      Correctif pour Windows XP (KB889527) 3 (KB889527)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB889527$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/889527

      Mise à jour de sécurité pour Windows XP (KB890046) 1 (KB890046)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/890046

      Correctif Windows XP - KB890831 20041206.145031 (KB890831)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB890831$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/890831

      Correctif Windows XP - KB890859 1 (KB890859)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/890859

      Windows Media Format SDK Hotfix - KB891122 (KB891122)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB891122$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/891122

      Correctif Windows XP - KB891781 20050110.165439 (KB891781)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/891781

      Correctif Windows XP - KB892627 20050201.181426 (KB892627)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB892627$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/892627

      Correctif Windows XP - KB893056 20050126.164313 (KB893056)
      uninstall cmd: C:\WINDOWS\$NtUninstallKB893056$\spuninst\spuninst.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/893056

      Mise à jour de sécurité pour Windows XP (KB893066) 2 (KB893066)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/893066/ms05-019-vulnerabilities-in-tcp-ip-could-allow-remote-code-execution-a

      Correctif Windows XP - KB893086 1 (KB893086)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB893086$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/893086

      Correctif pour Windows XP (KB893357) 2 (KB893357)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB893357$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/893357

      Mise à jour de sécurité pour Windows XP (KB893756) 1 (KB893756)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/893756

      3.1 (KB893803)
      help link: https://support.microsoft.com/en-us/help/893803/windows-installer-3-1-v2-3-1-4000-2435-is-available

      Windows Installer 3.1 (KB893803) (KB893803v2)
      uninstall cmd: "C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/893803/windows-installer-3-1-v2-3-1-4000-2435-is-available

      Mise à jour pour Windows XP (KB894391) 1 (KB894391)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/894391/

      Mise à jour de sécurité pour Windows XP (KB896358) 1 (KB896358)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/896358/ms05-026-a-vulnerability-in-html-help-could-allow-remote-code-executio

      Mise à jour de sécurité pour Windows XP (KB896422) 1 (KB896422)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/896422/ms05-027-vulnerability-in-server-message-block-could-allow-remote-code

      Mise à jour de sécurité pour Windows XP (KB896423) 1 (KB896423)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/windows?ui=en-US&rs=en-001&ad=US

      Mise à jour de sécurité pour Windows XP (KB896424) 1 (KB896424)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/896424

      Mise à jour de sécurité pour Windows XP (KB896428) 1 (KB896428)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/896428

      Correctif Windows XP - KB896626 2 (KB896626)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB896626$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/896626

      Mise à jour pour Windows XP (KB896727) 1 (KB896727)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB896727$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/896727

      Mise à jour pour Windows XP (KB897663) 1 (KB897663)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB897663$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/897663/

      Mise à jour de sécurité pour Step by Step Interactive Training (KB898458) 20050502.101010 (KB898458)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/898458

      Mise à jour pour Windows XP (KB898461) 1 (KB898461)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/898461/

      Mise à jour de sécurité pour Windows XP (KB899587) 1 (KB899587)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/899587

      Mise à jour de sécurité pour Windows XP (KB899588) 1 (KB899588)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB899588$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/899588

      Mise à jour de sécurité pour Windows XP (KB899591) 1 (KB899591)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/899591

      Mise à jour pour Windows XP (KB900485) 2 (KB900485)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/900485

      Mise à jour de sécurité pour Windows XP (KB900725) 1 (KB900725)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/900725

      Mise à jour de sécurité pour Windows XP (KB900930) 1 (KB900930)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB900930$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/900930

      Mise à jour de sécurité pour Windows XP (KB901017) 1 (KB901017)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/901017

      Mise à jour de sécurité pour Windows XP (KB901214) 1 (KB901214)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/901214

      Hotfix for Windows Media Format SDK (KB902344) (KB902344)
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB902344$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/902344

      Mise à jour de sécurité pour Windows XP (KB902400) 1 (KB902400)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/902400/ms05-051-vulnerabilities-in-ms-dtc-and-com-could-allow-remote-code-exe

      Correctif pour Windows XP (KB903234) 1 (KB903234)
      install date: 20051206
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB903234$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/903234

      Mise à jour de sécurité pour Windows XP (KB904706) 2 (KB904706)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/904706

      Mise à jour pour Windows XP (KB904942) 2 (KB904942)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/904942/authentication-fails-when-you-use-outlook-or-outlook-express-to-try-to

      Mise à jour de sécurité pour Windows XP (KB905414) 1 (KB905414)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/905414

      Mise à jour de sécurité pour Windows XP (KB905749) 1 (KB905749)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/905749

      Mise à jour de sécurité pour Windows XP (KB908519) 1 (KB908519)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/908519

      Mise à jour pour Windows XP (KB908531) 2 (KB908531)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/908531

      Package de base Microsoft de service de chiffrement pour cartes à puce (KB909520)
      uninstall cmd: "C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation

      Mise à jour pour Windows XP (KB910437) 1 (KB910437)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/910437

      Mise à jour de sécurité pour Windows XP (KB911280) 1 (KB911280)
      install date: 20060615
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/911280

      Mise à jour de sécurité pour Windows XP (KB911562) 1 (KB911562)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/911562

      Mise à jour de sécurité pour Lecteur Windows Media (KB911564) (KB911564)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/911564

      Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565) (KB911565)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/911565

      Mise à jour de sécurité pour Windows XP (KB911567) 1 (KB911567)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/911567

      Mise à jour de sécurité pour Windows XP (KB911927) 1 (KB911927)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/911927

      Mise à jour de sécurité pour Windows XP (KB912812) 1 (KB912812)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB912812$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/912812/ms06-013-cumulative-security-update-for-internet-explorer

      Mise à jour de sécurité pour Windows XP (KB912919) 1 (KB912919)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/912919

      Mise à jour de sécurité pour Windows XP (KB913446) 1 (KB913446)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB913446$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/913446

      Mise à jour de sécurité pour Windows XP (KB913580) 1 (KB913580)
      install date: 20060612
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/913580

      Mise à jour de sécurité pour Windows XP (KB914388) 1 (KB914388)
      install date: 20060712
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/914388

      Mise à jour de sécurité pour Windows XP (KB914389) 1 (KB914389)
      install date: 20060615
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/914389

      Mise à jour de sécurité pour Windows XP (KB916281) 1 (KB916281)
      install date: 20060615
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB916281$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/916281

      Mise à jour pour Windows XP (KB916595) 1 (KB916595)
      install date: 20060712
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/916595

      Mise à jour de sécurité pour Windows XP (KB917159) 1 (KB917159)
      install date: 20060712
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB917159$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/917159

      Security Update pour Microsoft .NET Framework 2.0 (KB917283) 1 (KB917283.T1_1ToU93_1)
      uninstall cmd: C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {967B098A-042D-4367-BAC9-8BC11684174F} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/917283/ms06-033-a-vulnerability-in-asp-net-could-allow-information-disclosure

      Mise à jour de sécurité pour Windows XP (KB917344) 1 (KB917344)
      install date: 20060615
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/917344

      Mise à jour de sécurité pour Windows XP (KB917422) 1 (KB917422)
      install date: 20060809
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/917422

      Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734) (KB917734_WMP10)
      install date: 20060615
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/917734

      Mise à jour de sécurité pour Windows XP (KB917953) 1 (KB917953)
      install date: 20060615
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/917953

      Mise à jour de sécurité pour Windows XP (KB918439) 1 (KB918439)
      install date: 20060615
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/918439

      Mise à jour de sécurité pour Windows XP (KB918899) 1 (KB918899)
      install date: 20060809
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB918899$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/918899

      Mise à jour de sécurité pour Windows XP (KB919007) 1 (KB919007)
      install date: 20060914
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/919007/ms06-052-vulnerability-in-pragmatic-general-multicast-pgm-could-result

      Mise à jour de sécurité pour Windows XP (KB920214) 1 (KB920214)
      install date: 20060809
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB920214$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/920214

      Mise à jour de sécurité pour Windows XP (KB920670) 1 (KB920670)
      install date: 20060809
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/920670

      Mise à jour de sécurité pour Windows XP (KB920683) 1 (KB920683)
      install date: 20060809
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/920683

      Mise à jour de sécurité pour Windows XP (KB920685) 1 (KB920685)
      install date: 20060914
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/920685

      Mise à jour pour Windows XP (KB920872) 1 (KB920872)
      install date: 20060914
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/920872

      Mise à jour de sécurité pour Windows XP (KB921398) 1 (KB921398)
      install date: 20060809
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/921398

      Mise à jour de sécurité pour Windows XP (KB921883) 1 (KB921883)
      install date: 20060808
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB921883$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/921883/ms06-040-vulnerability-in-server-service-could-allow-remote-code-execu

      Mise à jour pour Windows XP (KB922582) 1 (KB922582)
      install date: 20060914
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/922582/error-message-when-you-try-to-update-a-microsoft-windows-based-compute

      Mise à jour de sécurité pour Windows XP (KB922616) 1 (KB922616)
      install date: 20060809
      uninstall cmd: "C:\WINDOWS\$NtUninstallKB922616$\spuninst\spuninst.exe"
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/922616

      Language pack for Ad-Aware SE (Language pack for Ad-Aware SE)
      uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\INSTALL.LOG
      publisher: Lavasoft
      help link: http://www.lavasoft.de

      Microsoft .NET Framework 1.1 Hotfix (KB886903) (M886903)
      uninstall cmd: "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M886903\M886903Uninstall.msp"

      Microsoft .NET Framework 1.1 (Microsoft .NET Framework 1.1 (1033))
      uninstall cmd: msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
      readme: file://C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\RepairRedist.htm

      Microsoft .NET Framework 2.0 (Microsoft .NET Framework 2.0)
      install location: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\
      uninstall cmd: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/ph/8291

      Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA (Microsoft .NET Framework 2.0 Language Pack - FRA)
      install location: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\
      uninstall cmd: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/ph/8291

      (Microsoft Interactive Training)
      uninstall cmd: C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu

      (MobileOptionPack)

      (MPlayer2)

      (MSI30-Beta1)

      (MSI30-Beta2)

      (MSI30-KB884016)

      (MSI30-RC1)

      (MSI30-RC2)

      (MSI30a-KB884016)

      (MSI31-Beta)

      (MSI31-RC1)

      (MSMSGS)

      Nero OEM (Nero - Burning Rom!UninstallKey)
      uninstall cmd: C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL

      Nero BurnRights (Nero BurnRights!UninstallKey)
      uninstall cmd: C:\WINDOWS\UNNeroBurnRights.exe /UNINSTALL

      Nero Digital (NeroVision!UninstallKey)
      uninstall cmd: C:\WINDOWS\UNNeroVision.exe /UNINSTALL

      (NetMeeting)

      NeroVision Express Content (NVEContent!UninstallKey)
      uninstall cmd: C:\WINDOWS\UNNVEContent.exe /UNINSTALL

      (OutlookExpress)

      (PCHealth)
      uninstall cmd: rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

      (SchedulingAgent)

      Macromedia Flash Player 8 8 (ShockwaveFlash)
      uninstall cmd: C:\WINDOWS\system32\Macromed\Flash\UninstFl.exe
      publisher: Macromedia
      help link: https://helpx.adobe.com/flash-player.html

      Fujitsu Siemens Computers WLAN 802.11b/g D1705/D1706 (SiS163u)
      uninstall cmd: C:\WINDOWS\system32\unwlsdrv.exe SiS163u

      Spybot - Search & Destroy 1.4 1.4 (Spybot - Search & Destroy_is1)
      install location: C:\Program Files\Spybot - Search & Destroy\
      uninstall cmd: "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
      publisher: Safer Networking Limited

      ASTROPC Pro (ST6UNST #1)
      uninstall cmd: C:\WINDOWS\st6unst.exe -n "C:\Program Files\Aureas7\ST6UNST.LOG"

      TeamSpeak 2 RC2 2.0.32.60 (Teamspeak 2 RC2_is1)
      uninstall cmd: "C:\Program Files\Teamspeak2_RC2\unins000.exe"
      publisher: Dominating Bytes Design
      help link: http://www.teamspeak.org

      Windows Genuine Advantage Validation Tool (KB892130) 1.5.0530.0 (WGA)
      install date: 20060612
      publisher: Microsoft Corporation
      help link: https://www.microsoft.com/en-us/howtotell/default.aspx

      Windows Genuine Advantage Notifications (KB905474) 1.5.0540.0 (WgaNotify)
      install date: 20060612
      publisher: Microsoft Corporation
      help link: https://support.microsoft.com/en-us/help/905474

      Windows Media Format Runtime (Windows Media Format Runtime)
      uninstall cmd: "C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll

      Lecteur Windows Media 10 (Windows Media Player)
      uninstall cmd: "C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall

      Windows Media Connect (WMCSetup)
      uninstall cmd: "C:\WI
      0
      1. Utilisateur anonyme
        Salut,
        c'est ok !

        tu peux corriger les erreurs qu'il t'a trouvé
        S'il te retrouve "Windows Security Center.FirewallDisableNotify" c'est parce que tu as désactivé le pare-feu Windows pour mettre Kerio, donc il devrait te le retrouver à chaque fois je pense :-)

        Pas de soucis tu peux toujours tout corriger ce qu'il te trouve ;-)

        Si tu as des questions n'hésite pas!

        Bonne fin de soirée à toi
        0
    3. Ambrer Auteur
      Plus de questions ! ^^

      Encore un grand merci pour votre aide

      Ambrer
      0

      Discussions similaires

      infection
      céline0034

      12 réponses
      Infection
      toast3r

      44 réponses
      problème infection ?
      emma

      76 réponses
      Infection FileRepMetagen
      Fab8769

      9 réponses
      Infection Luckystarting
      @ssomw@r

      20 réponses