infecté par serwab et win Fermé

Question

bonjour à tous!
je suis infecté par serwab et win me proposant de télécharger des antivirus bidons... je pense etre pas mal infecté car certaines choses changent à chaque démarrage.
Si quelqu'un pouvait me prendre sous son aile , ça serait le bienvenu.
Merci d'avance.

lucieros · Answer

Va dèja lire cela

virus que faire quand on est infecte

lucieros · Answer

En général il faut également faire ceci:

Il est important d’effectuer la manip dans sa totalité et dans l’ordre : 

Télécharge et colle les 3 rapports dans l’ordre 

A - ad-aware version 1.06 
(ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite 
voir demo 
http://pageperso.aol.fr/balltrap34/adwseflash.zip 

B - spybot version 1.4 
(ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite 
voir demo d utilisation 
http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm 

C - Ccleaner : ( nettoyeur de registre, cookies+temps+tempos+prefetch+historique+etc..) 
Télécharge ici : 
https://www.ccleaner.com/ccleaner/download 
Tutorial ici: 
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php 

D - Ewido (download)- gratuit même après 14 jours d’essai 
http://perso.wanadoo.fr/entraide-hijackthis/Ewido/ 
Copie/COLLE le rapport généré sur ce forum 
Pour certaines versions de Windows antérieures à XP, Ewido peut ne pas être compatible 
Dans ce cas, il te faudra utiliser a-squared free et demander une clef pour son usage gratuit 
https://www.emsisoft.com/fr/ 

E - Scan online avec BitDefender (fonctionne uniquement sous Internet Explorer en acceptant l’ activX) 
https://assiste.com/404_La_page_demandee_n_existe_pas.php 
http://www.bitdefender.fr/scan8/ie.html 
Copie/COLLE le rapport entier 

F - Hijackthis - Outil de diagnostic et réparation 
lire démo 
http://pageperso.aol.fr/balltrap34/Hijenr.gif 
http://pageperso.aol.fr/balltrap34/demohijack.htm 
Télécharge version française ici 
http://telechargement.zebulon.fr/160-patch-francais-pour-hijackthis-1991.html 
Copie/colle le rapport 

Bon courage

kifran · Answer

Bonsoir et merci. ad-aware n'a rien trouvé. voilà spybot: --- Search result list --- CarpeDiem Vars: Profil RAS (Clé du registre, nothing done) HKEY_USERS\S-1-5-21-1844237615-813497703-682003330-1004\Software\Montorgueil Smitfraud-C.Toolbar888: Réglages utilisateur (Clé du registre, nothing done) HKEY_USERS\S-1-5-21-1844237615-813497703-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B64F4A7C-97C9-11DA-8BDE-F66BAD1E3F3A} Microsoft.WindowsSecurityCenter.AntiVirusDisableNotify: Réglages (Modification du registre, nothing done) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify!=dword:0 Microsoft.WindowsSecurityCenter.FirewallDisableNotify: Réglages (Modification du registre, nothing done) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify!=dword:0 Winsoftware: Cookie traceur (Internet Explorer: Franck) (Cookie, nothing done) Winsoftware.WinAntiVirusPro2006: Cookie traceur (Internet Explorer: Franck) (Cookie, nothing done) Winsoftware: Cookie traceur (Internet Explorer: Franck) (Cookie, nothing done) Winsoftware: Cookie traceur (Internet Explorer: Franck) (Cookie, nothing done) Winsoftware: Cookie traceur (Internet Explorer: Franck) (Cookie, nothing done) TagASaurus: Cookie traceur (Internet Explorer: Franck) (Cookie, nothing done) Winsoftware: Cookie traceur (Internet Explorer: Franck) (Cookie, nothing done) Winsoftware.WinAntiVirusPro2006: Cookie traceur (Internet Explorer: Franck) (Cookie, nothing done) Winsoftware.WinAntiVirusPro2006: Cookie traceur (Internet Explorer: Franck) (Cookie, nothing done) Winsoftware.WinAntiVirusPro2006: Cookie traceur (Internet Explorer: Franck) (Cookie, nothing done) --- Spybot - Search & Destroy version: 1.4 (build: 20050523) --- 2005-05-31 blindman.exe (1.0.0.1) 2005-05-31 SpybotSD.exe (1.4.0.3) 2005-05-31 TeaTimer.exe (1.4.0.2) 2006-11-20 unins000.exe (51.41.0.0) 2005-05-31 Update.exe (1.4.0.0) 2006-02-06 advcheck.dll (1.0.2.0) 2005-05-31 aports.dll (2.1.0.0) 2005-05-31 borlndmm.dll (7.0.4.453) 2005-05-31 delphimm.dll (7.0.4.453) 2005-05-31 SDHelper.dll (1.4.0.0) 2006-02-20 Tools.dll (2.0.0.2) 2005-05-31 UnzDll.dll (1.73.1.1) 2005-05-31 ZipDll.dll (1.73.2.0) 2006-11-17 Includes\Cookies.sbi (*) 2006-10-13 Includes\Dialer.sbi (*) 2006-11-17 Includes\DialerC.sbi (*) 2006-11-03 Includes\Hijackers.sbi (*) 2006-11-17 Includes\HijackersC.sbi (*) 2006-10-27 Includes\Keyloggers.sbi (*) 2006-11-17 Includes\KeyloggersC.sbi (*) 2006-10-13 Includes\Malware.sbi (*) 2006-11-17 Includes\MalwareC.sbi (*) 2006-10-20 Includes\PUPS.sbi (*) 2006-11-17 Includes\PUPSC.sbi (*) 2006-11-17 Includes\Revision.sbi (*) 2006-10-13 Includes\Security.sbi (*) 2006-11-17 Includes\SecurityC.sbi (*) 2006-10-13 Includes\Spybots.sbi (*) 2006-11-17 Includes\SpybotsC.sbi (*) 2005-02-17 Includes\Tracks.uti 2006-11-17 Includes\Trojans.sbi (*) 2006-11-17 Includes\TrojansC.sbi (*) --- System information --- Windows XP (Build: 2600) Service Pack 2 / Windows Media Player 10: Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565) / Windows Media Player 10: Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734) / Windows XP / SP3: Correctif Windows XP - KB873333 / Windows XP / SP3: Correctif Windows XP - KB873339 / Windows XP / SP3: Correctif Windows XP - KB885250 / Windows XP / SP3: Correctif Windows XP - KB885835 / Windows XP / SP3: Correctif Windows XP - KB885836 / Windows XP / SP3: Correctif Windows XP - KB886185 / Windows XP / SP3: Correctif Windows XP - KB887472 / Windows XP / SP3: Correctif Windows XP - KB887742 / Windows XP / SP3: Correctif Windows XP - KB888113 / Windows XP / SP3: Correctif Windows XP - KB888302 / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB890046) / Windows XP / SP3: Correctif Windows XP - KB890859 / Windows XP / SP3: Correctif Windows XP - KB891781 / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB893066) / Windows XP / SP3: Correctif Windows XP - KB893086 / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB893756) / Windows XP / SP3: Windows Installer 3.1 (KB893803) / Windows XP / SP3: Mise à jour pour Windows XP (KB894391) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896358) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896422) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896423) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896424) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896428) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896688) / Windows XP / SP3: Mise à jour pour Windows XP (KB896727) / Windows XP / SP3: Mise à jour pour Windows XP (KB898461) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899587) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899588) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899591) / Windows XP / SP3: Mise à jour pour Windows XP (KB900485) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB900725) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901017) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901214) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB902400) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB904706) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905414) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905749) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905915) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB908519) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB908531) / Windows XP / SP3: Mise à jour pour Windows XP (KB910437) / Windows XP / SP3: Mise à jour pour Windows XP (KB911280) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911562) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911567) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911927) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB912812) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB912919) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB913446) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB913580) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB914388) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB914389) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB916281) / Windows XP / SP3: Mise à jour pour Windows XP (KB916595) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917159) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917344) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917422) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917953) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB918439) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB918899) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB919007) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB920214) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB920670) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB920683) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB920685) / Windows XP / SP3: Mise à jour pour Windows XP (KB920872) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB921398) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB921883) / Windows XP / SP3: Mise à jour pour Windows XP (KB922582) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB922616) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB922819) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB923191) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB923414) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB924191) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB924496) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB925486) / Windows XP OOB / SP10: High Definition Audio Driver Package - KB835221 --- Startup entries list --- Located: HK_LM:Run, AGRSMMSG command: AGRSMMSG.exe file: C:\WINDOWS\AGRSMMSG.exe size: 88363 MD5: e7be65bf79906aebc698e077d53f6a1c Located: HK_LM:Run, Alcmtr command: ALCMTR.EXE file: Located: HK_LM:Run, ClientGW command: file: Located: HK_LM:Run, ControlCenter2.0 command: C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun file: Located: HK_LM:Run, eSnips command: "C:\Program Files\eSnips\ClientGW.exe" file: Located: HK_LM:Run, eSnips command: "C:\Program Files\eSnips\ClientGW.exe" file: Located: HK_LM:Run, F-Secure Manager command: "C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE" /splash file: C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE size: 122929 MD5: 2424cae40448bd06606576926346af52 Located: HK_LM:Run, F-Secure Startup Wizard command: "C:\Program Files\F-Secure Internet Security\FSGUI\FSSW.EXE" /reboot file: C:\Program Files\F-Secure Internet Security\FSGUI\FSSW.EXE size: 372736 MD5: cea1b02dec3e6e96e2e6f3af7cd9c60f Located: HK_LM:Run, F-Secure TNB command: "C:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW file: C:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe size: 700416 MD5: 9153905d790dc0adc7b992d0c948d247 Located: HK_LM:Run, IndexSearch command: C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe file: C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe size: 40960 MD5: 174cd4b3fe6ee70d72825f8dfdc5bf06 Located: HK_LM:Run, Microsoft Works Portfolio command: C:\Program Files\Microsoft Works\WksSb.exe /AllUsers file: Located: HK_LM:Run, Microsoft Works Update Detection command: C:\Program Files\Microsoft Works\WkDetect.exe file: C:\Program Files\Microsoft Works\WkDetect.exe size: 28739 MD5: d81eae9946d9d789beb048789e257c82 Located: HK_LM:Run, NeroFilterCheck command: C:\WINDOWS\system32\NeroCheck.exe file: C:\WINDOWS\system32\NeroCheck.exe size: 155648 MD5: 3e4c03cefad8de135263236b61a49c90 Located: HK_LM:Run, PaperPort PTD command: C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe file: C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe size: 57393 MD5: 950db6eda08a6c48d29189248f4d0c3f Located: HK_LM:Run, PDF Converter Registry Controller command: "C:\Program Files\ScanSoft\PDF Converter\RegistryController.exe" file: C:\Program Files\ScanSoft\PDF Converter\RegistryController.exe size: 102400 MD5: d445150f25914bb69ed3ce37921e40fb Located: HK_LM:Run, Raccourci vers la page des propriétés de High Definition Audio command: HDAudPropShortcut.exe file: C:\WINDOWS\system32\HDAudPropShortcut.exe size: 61952 MD5: 3e7a11c1c4ebd2c3c52197238df4e14b Located: HK_LM:Run, RealTray command: C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER file: Located: HK_LM:Run, SetDefPrt command: C:\Program Files\Brother\Brmfl04a\BrStDvPt.exe file: C:\Program Files\Brother\Brmfl04a\BrStDvPt.exe size: 49152 MD5: 129b277c10339efe2907834e9295d16d Located: HK_LM:Run, SoundMan command: SOUNDMAN.EXE file: Located: HK_LM:Run, SSBkgdUpdate command: "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot file: C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe size: 155648 MD5: 1c3ca3e7807f915933bb4e08e599ddab Located: HK_LM:Run, SunJavaUpdateSched command: "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe" file: C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe size: 49263 MD5: 409c45da1cfbc3fc19eec7cbfe9b2786 Located: HK_LM:Run, WorksFUD command: C:\Program Files\Microsoft Works\wkfud.exe file: C:\Program Files\Microsoft Works\wkfud.exe size: 24576 MD5: b095a0801bff93bf50a6d02fdc8e1834 Located: HK_CU:Run, BitTorrent command: "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized file: C:\Program Files\BitTorrent\bittorrent.exe size: 43520 MD5: 84c96ecea0fbbed6a1aa498c9b7685a0 Located: HK_CU:Run, Creative Detector command: "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R file: C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe size: 102400 MD5: c744293dfbe1a3347fec5dbfe3fd123e Located: HK_CU:Run, CTFMON.EXE command: C:\WINDOWS\system32\ctfmon.exe file: C:\WINDOWS\system32\ctfmon.exe size: 15360 MD5: 5584247b568c2e53934873f4b655fe6a Located: HK_CU:Run, MSMSGS command: "C:\Program Files\Messenger\msmsgs.exe" /background file: C:\Program Files\Messenger\msmsgs.exe size: 1694208 MD5: 74e6e96c6f0e2eca4edbb7f7a468f259 Located: HK_CU:Run, NBJ command: "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" file: C:\Program Files\Ahead\Nero BackItUp\NBJ.exe size: 1867776 MD5: e404817e211d73f3fa60fabd84a4c027 Located: HK_CU:Run, swg command: C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe file: C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe size: 163576 MD5: 1c813135848c379412a036841282a985 Located: HK_CU:Run, TVAgent WiFi command: C:\Program Files\Kit ADSL\Wizard\Agent_WiFi.exe file: Located: Démarrage (tous utilisateurs), F-Secure 2006.lnk command: C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe file: C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe size: 36903 MD5: 022a73cee907483b11710f699676cedd Located: Démarrage (tous utilisateurs), InterVideo WinCinema Manager.lnk command: C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe file: C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe size: 114688 MD5: 04d2c335677e7b1be55162c5445e155f Located: Démarrage (tous utilisateurs), Rappels du Calendrier Microsoft Works.lnk command: C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe file: C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe size: 24633 MD5: 39fdfd34f7b04290d1bc53e3d6ec7d83 Located: Démarrage (tous utilisateurs), Status Monitor.lnk command: C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe file: C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe size: 819200 MD5: 01b036128cd786b8b2644b624cc9e7cd Located: System.ini, AtiExtEvent command: Ati2evxx.dll file: Ati2evxx.dll Located: System.ini, crypt32chain command: crypt32.dll file: crypt32.dll Located: System.ini, cryptnet command: cryptnet.dll file: cryptnet.dll Located: System.ini, cscdll command: cscdll.dll file: cscdll.dll Located: System.ini, ScCertProp command: wlnotify.dll file: wlnotify.dll Located: System.ini, Schedule command: wlnotify.dll file: wlnotify.dll Located: System.ini, sclgntfy command: sclgntfy.dll file: sclgntfy.dll Located: System.ini, SensLogn command: WlNotify.dll file: WlNotify.dll Located: System.ini, termsrv command: wlnotify.dll file: wlnotify.dll Located: System.ini, WgaLogon command: WgaLogon.dll file: WgaLogon.dll Located: System.ini, wlballoon command: wlnotify.dll file: wlnotify.dll --- Browser helper object list --- {AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper) BHO name: CLSID name: Google Toolbar Helper description: Google toolbar classification: Open for discussion known filename: googletoolbar.dll
googletoolbar*.dll
(* = number)
googletoolbar_en_*.**-big.dll
Googletoolbar_en_*.*.**-deleon.dll info link: http://www.google.com/intl/fr/toolbar/ie/index.html info source: TonyKlein Path: c:\program files\google\ Long name: GoogleToolbar1.dll Short name: GOOGLE~1.DLL Date (created): 25/10/2006 17:05:08 Date (last access): 20/11/2006 21:40:00 Date (last write): 17/10/2006 14:04:36 Filesize: 2153536 Attributes: readonly archive MD5: D7C951510ABB954204A798A21A510D98 CRC32: 5D8D9479 Version: 4.0.1020.3054 --- ActiveX list --- {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} (Java Runtime Environment 1.5.0) DPF name: Java Runtime Environment 1.5.0 CLSID name: Java Plug-in 1.5.0_09 Installer: Codebase: http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab Path: C:\Program Files\Java\jre1.5.0_09\bin\ Long name: NPJPI150_09.dll Short name: NPJPI1~1.DLL Date (created): 12/10/2006 03:10:58 Date (last access): 20/11/2006 21:40:00 Date (last write): 12/10/2006 03:25:44 Filesize: 69746 Attributes: archive MD5: A3CDEB59B6B8C2EA81B9ED2D3EF4C95E CRC32: 2A32A9A2 Version: 5.0.90.3 --- Process list --- PID: 0 ( 0) [System] PID: 400 ( 4) \SystemRoot\System32\smss.exe PID: 636 ( 400) \??\C:\WINDOWS\system32\csrss.exe PID: 660 ( 400) \??\C:\WINDOWS\system32\winlogon.exe PID: 708 ( 660) C:\WINDOWS\system32\services.exe size: 108544 MD5: 732E0B1ABAACE15D80EC19056B0A2AF9 PID: 720 ( 660) C:\WINDOWS\system32\lsass.exe size: 13312 MD5: 9F3744A5C6F49291A7A685040A013399 PID: 876 ( 708) C:\WINDOWS\system32\Ati2evxx.exe size: 425984 MD5: 0EF8098B30264082F64CA4431CA68BB8 PID: 892 ( 708) C:\WINDOWS\system32\svchost.exe size: 14336 MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA PID: 948 ( 708) C:\WINDOWS\system32\svchost.exe size: 14336 MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA PID: 1000 ( 708) C:\WINDOWS\System32\svchost.exe size: 14336 MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA PID: 1092 ( 708) C:\WINDOWS\system32\svchost.exe size: 14336 MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA PID: 1120 ( 708) C:\WINDOWS\system32\svchost.exe size: 14336 MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA PID: 1408 ( 708) C:\WINDOWS\system32\brsvc01a.exe size: 57344 MD5: D3FACB34FFF5DB91ADB70987838F8BA7 PID: 1432 ( 708) C:\WINDOWS\system32\spoolsv.exe size: 57856 MD5: DA81EC57ACD4CDC3D4C51CF3D409AF9F PID: 1444 (1408) C:\WINDOWS\system32\brss01a.exe size: 45056 MD5: 9E646CD378D4D0C996BAF9BCB18237C7 PID: 1604 ( 708) C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE size: 36903 MD5: 022A73CEE907483B11710F699676CEDD PID: 1640 ( 708) C:\WINDOWS\system32\Brmfrmps.exe size: 65536 MD5: BB192385661DAF7F3D48B586F6E1D166 PID: 1668 ( 708) C:\WINDOWS\system32\CTsvcCDA.exe size: 44032 MD5: 3C8B6609712F4FF78E521F6DCFC4032B PID: 1696 ( 708) C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe size: 36947 MD5: 237A88D8AF60024CB91CB5D7903B3CC9 PID: 1712 (1696) C:\Program Files\F-Secure Internet Security\Anti-Virus\FSGK32.EXE size: 290304 MD5: 8F78E6C547071B95D7D17F6D8B708926 PID: 1728 ( 708) C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe size: 270389 MD5: 27AB8AAAD1C638452C6E710B59537091 PID: 1764 ( 708) C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE size: 61490 MD5: B757DD21A612A82BD193775E37CD380C PID: 1804 (1712) C:\Program Files\F-Secure Internet Security\Anti-Virus\fssm32.exe size: 248320 MD5: 3B4D0D6DAC74BC6CEBCA11F88EBB6528 PID: 1840 (1764) C:\Program Files\F-Secure Internet Security\Common\FSMB32.EXE size: 180274 MD5: 8D3F20AB488CAE3ED987B1196AC2F36D PID: 1848 ( 708) C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE size: 322120 MD5: 11F714F85530A2BD134074DC30E99FCA PID: 2032 ( 708) C:\WINDOWS\system32\svchost.exe size: 14336 MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA PID: 156 ( 708) C:\WINDOWS\system32\wdfmgr.exe size: 38912 MD5: AB0A7CA90D9E3D6A193905DC1715DED0 PID: 508 (1764) C:\Program Files\F-Secure Internet Security\Common\FCH32.EXE size: 65585 MD5: CD12B1E63F9EB5075302973094AF573D PID: 1060 ( 708) C:\Program Files\F-Secure Internet Security\FSPC\fshttps\fshttps.exe size: 61498 MD5: 9A78182F3750E0258D466A37D7BBDD41 PID: 1316 ( 708) C:\WINDOWS\System32\alg.exe size: 44544 MD5: 2FE681D10C5FC343DBBC0610B8DD4D24 PID: 1464 (1764) C:\Program Files\F-Secure Internet Security\Common\FAMEH32.EXE size: 270387 MD5: EFF5C2751B5C8BEF9AF1263494F04DC8 PID: 1492 (1764) C:\Program Files\F-Secure Internet Security\Anti-Virus\fsqh.exe size: 32826 MD5: 69118DA5CACB250D06389287DDC1BF45 PID: 2132 (1764) C:\Program Files\F-Secure Internet Security\Anti-Virus\fsrw.exe size: 159792 MD5: EDB7030FAC4F95D85B4D021CC631E964 PID: 2136 (1764) C:\Program Files\F-Secure Internet Security\FSPC\fspc.exe size: 139319 MD5: 4BB3049CBD56C934A272D90C9FED5112 PID: 2148 ( 708) C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe size: 204863 MD5: EAF6DA252C1EC6893AF7E4896C641B9E PID: 2976 (1764) C:\Program Files\F-Secure Internet Security\Anti-Virus\fsav32.exe size: 179712 MD5: 4C42D37110E2888BD5A2997B5EA4B5B7 PID: 3684 ( 660) C:\WINDOWS\system32\Ati2evxx.exe size: 425984 MD5: 0EF8098B30264082F64CA4431CA68BB8 PID: 3772 (3736) C:\WINDOWS\Explorer.EXE size: 1036288 MD5: 4C33E5B9A6197B6ED215F6CFBA0A2DAA PID: 4044 (3772) C:\WINDOWS\AGRSMMSG.exe size: 88363 MD5: E7BE65BF79906AEBC698E077D53F6A1C PID: 1680 (3772) C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe size: 57393 MD5: 950DB6EDA08A6C48D29189248F4D0C3F PID: 1936 (3772) C:\Program Files\Brother\ControlCenter2\brctrcen.exe size: 851968 MD5: 7C280EBDF43724636289D50CF26F2AB0 PID: 1964 (3772) C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe size: 49263 MD5: 409C45DA1CFBC3FC19EEC7CBFE9B2786 PID: 1980 (3772) C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE size: 122929 MD5: 2424CAE40448BD06606576926346AF52 PID: 2324 (1980) C:\PROGRA~1\F-SECU~1\ANTI-S~1\fsaw.exe size: 86064 MD5: A38CCE2B6C770CC26755D790E0F59F10 PID: 2552 (3772) C:\WINDOWS\system32\ctfmon.exe size: 15360 MD5: 5584247B568C2E53934873F4B655FE6A PID: 2588 (3772) C:\Program Files\Messenger\msmsgs.exe size: 1694208 MD5: 74E6E96C6F0E2ECA4EDBB7F7A468F259 PID: 2700 (3772) C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe size: 163576 MD5: 1C813135848C379412A036841282A985 PID: 584 (3772) C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe size: 102400 MD5: C744293DFBE1A3347FEC5DBFE3FD123E PID: 2944 (1980) C:\Program Files\F-Secure Internet Security\FSGUI\fsguidll.exe size: 233537 MD5: 530BC7C4F1BD60B2D29D83CABA20152B PID: 768 (3772) C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe size: 36903 MD5: 022A73CEE907483B11710F699676CEDD PID: 3064 (3772) C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe size: 114688 MD5: 04D2C335677E7B1BE55162C5445E155F PID: 3144 (3772) C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe size: 24633 MD5: 39FDFD34F7B04290D1BC53E3D6EC7D83 PID: 3244 (3772) C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe size: 819200 MD5: 01B036128CD786B8B2644B624CC9E7CD PID: 3236 (3772) C:\Program Files\Internet Explorer\IEXPLORE.EXE size: 93184 MD5: 833E2B3F0E2484C0F2B804AE871B4381 PID: 5572 (1920) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe size: 4393096 MD5: 09CA174A605B480318731E691DC98539 PID: 4 ( 0) System --- Browser start & search pages list --- Spybot - Search & Destroy browser pages report, 20/11/2006 22:20:56 HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page C:\windows\system32\blank.htm HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page https://www.google.com/?gws_rd=ssl HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar http://www.google.com/toolbar/ie8/sidebar.html HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page https://www.google.fr/?gws_rd=ssl HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Default_Search_URL http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\SearchAssistant http://www.google.com/toolbar/ie8/sidebar.html HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\@ http://www.google.com/search?q=%s HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page C:\windows\system32\blank.htm HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL http://www.google.com/toolbar/ie8/sidebar.html HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant http://www.google.com/toolbar/ie8/sidebar.html HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm --- Winsock Layered Service Provider list --- Protocol 0: MSAFD Tcpip [TCP/IP] GUID: {75958F6D-F401-4552-9E6D-698AF8272683} Filename: winsflt.dll Protocol 1: MSAFD Tcpip [UDP/IP] GUID: {EAC161EC-84A6-43FE-8DC9-E6C3791AA55A} Filename: winsflt.dll Protocol 2: MSAFD Tcpip [RAW/IP] GUID: {4CFFA375-91FA-4B77-8841-A4F5FDE0D061} Filename: winsflt.dll Protocol 3: RSVP UDP Service Provider GUID: {F0E3CEC6-C65D-4657-982B-D77E5CC28FA3} Filename: winsflt.dll Protocol 4: RSVP TCP Service Provider GUID: {3E343828-FBD3-4C2A-BBA1-52BDCBCAB0A9} Filename: winsflt.dll Protocol 28: LAYERED_PROVIDER GUID: {5A81F161-AF30-A1CF-8927-00AA90359F1D} Filename: winsflt.dll --- Uninstall list --- 7-Zip 4.42 (7-Zip) uninstall cmd: "C:\Program Files\7-Zip\Uninstall.exe" Ad-Aware SE Personal 1.06 (Ad-Aware SE Personal) uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG publisher: Lavasoft help link: https://www.adaware.com/ (AddressBook) Adobe Acrobat 5.0 5.0 (Adobe Acrobat 5.0) version (major): 5 install location: C:\Program Files\Adobe\Acrobat 5.0 install source: C:\Documents and Settings\Franck\Local Settings\Temp\pft1~tmp\ uninstall cmd: C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll" publisher: Adobe Systems, Inc. help link: https://acrobat.adobe.com/us/en/acrobat.html Agere Systems PCI Soft Modem (Agere Systems Soft Modem) uninstall cmd: agrsmdel ATI Display Driver 8.081-041124a1-019934C-HP (ATI Display Driver) uninstall cmd: rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean Audacity 1.2.4 (Audacity_is1) install location: C:\Program Files\Audacity\ uninstall cmd: "C:\Program Files\Audacity\unins000.exe" help link: https://sourceforge.net/projects/audacity/ F-Secure Internet Security 2006 (BackWeb-4476822 Uninstaller) uninstall cmd: C:\PROGRA~1\F-SECU~1\Common\fsbwih.exe /uninstall BitTorrent 4.26.0 (BitTorrent) uninstall cmd: "C:\Program Files\BitTorrent\uninstall.exe" (Branding) (CADI) uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x40c /remove (Connection Manager) (Creative Audio CD Ripper (Unicode)) uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7550D6AA-CCF3-4FDA-87D6-C2C1B2E5358D}\setup.exe" -l0x40c /remove (Creative Lyrics Editor) uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1C41BAA3-559A-483A-89A5-149F27F90D38}\setup.exe" -l0x40c /remove (Creative MediaSource) uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{103BCDA0-E063-46AC-8028-64E78722ABA7}\setup.exe" -l0x40c /remove (Creative MediaSource CD-ROM Burner Plugin) uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{836612F0-1571-4C65-A4B7-58A39AA578EE}\setup.exe" -l0x40c /remove (Creative MediaSource Detector) uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0B095086-7205-4D48-90DF-DCD16613C6D4}\setup.exe" -l0x40c /remove (Creative MediaSource Player Skin Pack) uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2616B36E-38CE-4357-8AB5-8B3EE9B1C117}\setup.exe" -l0x40c /remove (Creative MuVo V100) (Creative MuVo V100 Media Explorer) uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4E9201AE-EACC-4010-B0E8-C61736512A13}\setup.exe" -l0x40c /remove (Creative SmartFill) uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{19822917-61F6-4221-B1D0-1C3B8A06BE60}\setup.exe" -l0x40c /remove (DirectAnimation) (DirectDrawEx) (DXM_Runtime) Cossacks - European Wars (EW : Cossacks) uninstall cmd: C:\WINDOWS\uncsetup.exe (F-Secure Anti-Spyware) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware" (F-Secure Anti-Spyware Scanner) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware Scanner" (F-Secure Anti-Virus) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus" (F-Secure Anti-Virus Client Security Installer) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus Client Security Installer" (F-Secure DAAS) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure DAAS" (F-Secure Diagnostics) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Diagnostics" (F-Secure E-mail Scanning) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure E-mail Scanning" (F-Secure FWES) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure FWES" (F-Secure GUI) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure GUI" (F-Secure Help) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Help" (F-Secure Internet Shield) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Internet Shield" (F-Secure Management Agent) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Management Agent" (F-Secure Spam Control) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Spam Control" (F-Secure Spam Scanner) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Spam Scanner" (F-Secure TNB) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure TNB" (F-Secure Web Filter) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Web Filter" (Fontcore) HijackThis 1.99.1 1.99.1 (HijackThis) uninstall cmd: C:\DOCUME~1\Franck\LOCALS~1\Temp\Répertoire temporaire 3 pour hijackthis.zip\HijackThis.exe /uninstall publisher: Soeperman Enterprises Ltd. (ICW) (IE40) (IE4Data) (IE5BAKEX) (IEData) High Definition Audio Driver Package - KB835221 20040219.000000 (KB835221WXP) uninstall cmd: C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us Correctif Windows XP - KB873333 20050114.005213 (KB873333) uninstall cmd: C:\WINDOWS\$NtUninstallKB873333$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/873333/ms05-012-vulnerability-in-ole-and-com-could-allow-remote-code-executio Correctif Windows XP - KB873339 20041117.092459 (KB873339) uninstall cmd: C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/873339 (KB884016) Correctif Windows XP - KB885250 20050118.202711 (KB885250) uninstall cmd: C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/885250 Correctif Windows XP - KB885835 20041027.181713 (KB885835) uninstall cmd: C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/885835/ms04-044-vulnerabilities-in-windows-kernel-and-lsass-could-allow-eleva Correctif Windows XP - KB885836 20041028.173203 (KB885836) uninstall cmd: C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/885836/ms04-041-a-vulnerability-in-wordpad-could-allow-code-execution Correctif Windows XP - KB886185 20041021.090540 (KB886185) uninstall cmd: C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/886185 Correctif Windows XP - KB887472 20041014.162858 (KB887472) uninstall cmd: C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/887472 Correctif Windows XP - KB887742 20041103.095002 (KB887742) uninstall cmd: C:\WINDOWS\$NtUninstallKB887742$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/887742 Correctif Windows XP - KB888113 20041116.131036 (KB888113) uninstall cmd: C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/888113 Correctif Windows XP - KB888302 20041207.111426 (KB888302) uninstall cmd: C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/888302 Mise à jour de sécurité pour Windows XP (KB890046) 1 (KB890046) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/890046 Correctif Windows XP - KB890859 1 (KB890859) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/890859 Correctif Windows XP - KB891781 20050110.165439 (KB891781) uninstall cmd: C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/891781 Mise à jour de sécurité pour Windows XP (KB893066) 2 (KB893066) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/893066/ms05-019-vulnerabilities-in-tcp-ip-could-allow-remote-code-execution-a Correctif Windows XP - KB893086 1 (KB893086) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB893086$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/893086 Mise à jour de sécurité pour Windows XP (KB893756) 1 (KB893756) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/893756 (KB893803) Windows Installer 3.1 (KB893803) 3.1 (KB893803v2) uninstall cmd: "C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/893803/windows-installer-3-1-v2-3-1-4000-2435-is-available Mise à jour pour Windows XP (KB894391) 1 (KB894391) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/894391/ Mise à jour de sécurité pour Windows XP (KB896358) 1 (KB896358) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/896358/ms05-026-a-vulnerability-in-html-help-could-allow-remote-code-executio Mise à jour de sécurité pour Windows XP (KB896422) 1 (KB896422) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/896422/ms05-027-vulnerability-in-server-message-block-could-allow-remote-code Mise à jour de sécurité pour Windows XP (KB896423) 1 (KB896423) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/windows?ui=en-US&rs=en-001&ad=US Mise à jour de sécurité pour Windows XP (KB896424) 1 (KB896424) install date: 20051121 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/896424 Mise à jour de sécurité pour Windows XP (KB896428) 1 (KB896428) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/896428 Mise à jour de sécurité pour Windows XP (KB896688) 1 (KB896688) install date: 20051122 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896688$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/896688/ms05-052-cumulative-security-update-for-internet-explorer Mise à jour pour Windows XP (KB896727) 1 (KB896727) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896727$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/896727 Mise à jour pour Windows XP (KB898461) 1 (KB898461) install date: 20050927 uninstall cmd: "C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/898461/ Mise à jour de sécurité pour Windows XP (KB899587) 1 (KB899587) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/899587 Mise à jour de sécurité pour Windows XP (KB899588) 1 (KB899588) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB899588$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/899588 Mise à jour de sécurité pour Windows XP (KB899591) 1 (KB899591) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/899591 Mise à jour pour Windows XP (KB900485) 2 (KB900485) install date: 20060426 uninstall cmd: "C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/900485 Mise à jour de sécurité pour Windows XP (KB900725) 1 (KB900725) install date: 20051115 uninstall cmd: "C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/900725 Mise à jour de sécurité pour Windows XP (KB901017) 1 (KB901017) install date: 20051108 uninstall cmd: "C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/901017 Mise à jour de sécurité pour Windows XP (KB901214) 1 (KB901214) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/901214 Mise à jour de sécurité pour Windows XP (KB902400) 1 (KB902400) install date: 20051128 uninstall cmd: "C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/902400/ms05-051-vulnerabilities-in-ms-dtc-and-com-could-allow-remote-code-exe Mise à jour de sécurité pour Windows XP (KB904706) 1 (KB904706) install date: 20051109 uninstall cmd: "C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/904706 Mise à jour de sécurité pour Windows XP (KB905414) 1 (KB905414) install date: 20051102 uninstall cmd: "C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/905414 Mise à jour de sécurité pour Windows XP (KB905749) 1 (KB905749) install date: 20051108 uninstall cmd: "C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/905749 Mise à jour de sécurité pour Windows XP (KB905915) 1 (KB905915) install date: 20051214 uninstall cmd: "C:\WINDOWS\$NtUninstallKB905915$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/905915 Mise à jour de sécurité pour Windows XP (KB908519) 1 (KB908519) install date: 20060111 uninstall cmd: "C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/908519 Mise à jour de sécurité pour Windows XP (KB908531) 1 (KB908531) install date: 20060412 uninstall cmd: "C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/908531 Mise à jour pour Windows XP (KB910437) 1 (KB910437) install date: 20051214 uninstall cmd: "C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/910437 Mise à jour pour Windows XP (KB911280) 2 (KB911280) install date: 20060710 uninstall cmd: "C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/911280 Mise à jour de sécurité pour Windows XP (KB911562) 1 (KB911562) install date: 20060412 uninstall cmd: "C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/911562 Mise à jour de sécurité pour Lecteur Windows Media (KB911564) (KB911564) install date: 20060220 uninstall cmd: "C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/911564 Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565) (KB911565) install date: 20060417 publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/911565 Mise à jour de sécurité pour Windows XP (KB911567) 1 (KB911567) install date: 20060412 uninstall cmd: "C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/911567 Mise à jour de sécurité pour Windows XP (KB911927) 1 (KB911927) install date: 20060220 uninstall cmd: "C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/911927 Mise à jour de sécurité pour Windows XP (KB912812) 1 (KB912812) install date: 20060412 uninstall cmd: "C:\WINDOWS\$NtUninstallKB912812$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/912812/ms06-013-cumulative-security-update-for-internet-explorer Mise à jour de sécurité pour Windows XP (KB912919) 1 (KB912919) install date: 20060110 uninstall cmd: "C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/912919 Mise à jour de sécurité pour Windows XP (KB913446) 1 (KB913446) install date: 20060220 uninstall cmd: "C:\WINDOWS\$NtUninstallKB913446$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/913446 Mise à jour de sécurité pour Windows XP (KB913580) 1 (KB913580) install date: 20060510 uninstall cmd: "C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/913580 Mise à jour de sécurité pour Windows XP (KB914388) 1 (KB914388) install date: 20060719 uninstall cmd: "C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/914388 Mise à jour de sécurité pour Windows XP (KB914389) 1 (KB914389) install date: 20060710 uninstall cmd: "C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/914389 Mise à jour de sécurité pour Windows XP (KB916281) 1 (KB916281) install date: 20060710 uninstall cmd: "C:\WINDOWS\$NtUninstallKB916281$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/916281 Mise à jour pour Windows XP (KB916595) 1 (KB916595) install date: 20060719 uninstall cmd: "C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/916595 Mise à jour de sécurité pour Windows XP (KB917159) 1 (KB917159) install date: 20060719 uninstall cmd: "C:\WINDOWS\$NtUninstallKB917159$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/917159 Mise à jour de sécurité pour Windows XP (KB917344) 1 (KB917344) install date: 20060710 uninstall cmd: "C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/917344 Mise à jour de sécurité pour Windows XP (KB917422) 1 (KB917422) install date: 20060810 uninstall cmd: "C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/917422 Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734) (KB917734_WMP10) install date: 20060710 uninstall cmd: "C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/917734 Mise à jour de sécurité pour Windows XP (KB917953) 1 (KB917953) install date: 20060710 uninstall cmd: "C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/917953 Mise à jour de sécurité pour Windows XP (KB918439) 1 (KB918439) install date: 20060710 uninstall cmd: "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/918439 Mise à jour de sécurité pour Windows XP (KB918899) 1 (KB918899) install date: 20060810 uninstall cmd: "C:\WINDOWS\$NtUninstallKB918899$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/918899 Mise à jour de sécurité pour Windows XP (KB919007) 1 (KB919007) install date: 20060915 uninstall cmd: "C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/919007/ms06-052-vulnerability-in-pragmatic-general-multicast-pgm-could-result Mise à jour de sécurité pour Windows XP (KB920214) 1 (KB920214) install date: 20060810 uninstall cmd: "C:\WINDOWS\$NtUninstallKB920214$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/920214 Mise à jour de sécurité pour Windows XP (KB920670) 1 (KB920670) install date: 20060810 uninstall cmd: "C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/920670 Mise à jour de sécurité pour Windows XP (KB920683) 1 (KB920683) install date: 20060810 uninstall cmd: "C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/920683 Mise à jour de sécurité pour Windows XP (KB920685) 1 (KB920685) install date: 20060915 uninstall cmd: "C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/920685 Mise à jour pour Windows XP (KB920872) 1 (KB920872) install date: 20060915 uninstall cmd: "C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/920872 Mise à jour de sécurité pour Windows XP (KB921398) 1 (KB921398) install date: 20060810 uninstall cmd: "C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/921398 Mise à jour de sécurité pour Windows XP (KB921883) 1 (KB921883) install date: 20060810 uninstall cmd: "C:\WINDOWS\$NtUninstallKB921883$\spuninst\spunin

kifran · Answer

Je recommence car le message d'avant est incomplet: ad-aware n'a rien trouvé , voilà spybot: --- Search result list --- CarpeDiem Vars: Profil RAS (Clé du registre, nothing done) HKEY_USERS\S-1-5-21-1844237615-813497703-682003330-1004\Software\Montorgueil Smitfraud-C.Toolbar888: Réglages utilisateur (Clé du registre, nothing done) HKEY_USERS\S-1-5-21-1844237615-813497703-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B64F4A7C-97C9-11DA-8BDE-F66BAD1E3F3A} Microsoft.WindowsSecurityCenter.AntiVirusDisableNotify: Réglages (Modification du registre, nothing done) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify!=dword:0 Microsoft.WindowsSecurityCenter.FirewallDisableNotify: Réglages (Modification du registre, nothing done) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify!=dword:0 Winsoftware: Cookie traceur (Internet Explorer: Franck) (Cookie, nothing done) Winsoftware.WinAntiVirusPro2006: Cookie traceur (Internet Explorer: Franck) (Cookie, nothing done) Winsoftware: Cookie traceur (Internet Explorer: Franck) (Cookie, nothing done) Winsoftware: Cookie traceur (Internet Explorer: Franck) (Cookie, nothing done) Winsoftware: Cookie traceur (Internet Explorer: Franck) (Cookie, nothing done) TagASaurus: Cookie traceur (Internet Explorer: Franck) (Cookie, nothing done) Winsoftware: Cookie traceur (Internet Explorer: Franck) (Cookie, nothing done) Winsoftware.WinAntiVirusPro2006: Cookie traceur (Internet Explorer: Franck) (Cookie, nothing done) Winsoftware.WinAntiVirusPro2006: Cookie traceur (Internet Explorer: Franck) (Cookie, nothing done) Winsoftware.WinAntiVirusPro2006: Cookie traceur (Internet Explorer: Franck) (Cookie, nothing done) --- Spybot - Search & Destroy version: 1.4 (build: 20050523) --- 2005-05-31 blindman.exe (1.0.0.1) 2005-05-31 SpybotSD.exe (1.4.0.3) 2005-05-31 TeaTimer.exe (1.4.0.2) 2006-11-20 unins000.exe (51.41.0.0) 2005-05-31 Update.exe (1.4.0.0) 2006-02-06 advcheck.dll (1.0.2.0) 2005-05-31 aports.dll (2.1.0.0) 2005-05-31 borlndmm.dll (7.0.4.453) 2005-05-31 delphimm.dll (7.0.4.453) 2005-05-31 SDHelper.dll (1.4.0.0) 2006-02-20 Tools.dll (2.0.0.2) 2005-05-31 UnzDll.dll (1.73.1.1) 2005-05-31 ZipDll.dll (1.73.2.0) 2006-11-17 Includes\Cookies.sbi (*) 2006-10-13 Includes\Dialer.sbi (*) 2006-11-17 Includes\DialerC.sbi (*) 2006-11-03 Includes\Hijackers.sbi (*) 2006-11-17 Includes\HijackersC.sbi (*) 2006-10-27 Includes\Keyloggers.sbi (*) 2006-11-17 Includes\KeyloggersC.sbi (*) 2006-10-13 Includes\Malware.sbi (*) 2006-11-17 Includes\MalwareC.sbi (*) 2006-10-20 Includes\PUPS.sbi (*) 2006-11-17 Includes\PUPSC.sbi (*) 2006-11-17 Includes\Revision.sbi (*) 2006-10-13 Includes\Security.sbi (*) 2006-11-17 Includes\SecurityC.sbi (*) 2006-10-13 Includes\Spybots.sbi (*) 2006-11-17 Includes\SpybotsC.sbi (*) 2005-02-17 Includes\Tracks.uti 2006-11-17 Includes\Trojans.sbi (*) 2006-11-17 Includes\TrojansC.sbi (*) --- System information --- Windows XP (Build: 2600) Service Pack 2 / Windows Media Player 10: Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565) / Windows Media Player 10: Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734) / Windows XP / SP3: Correctif Windows XP - KB873333 / Windows XP / SP3: Correctif Windows XP - KB873339 / Windows XP / SP3: Correctif Windows XP - KB885250 / Windows XP / SP3: Correctif Windows XP - KB885835 / Windows XP / SP3: Correctif Windows XP - KB885836 / Windows XP / SP3: Correctif Windows XP - KB886185 / Windows XP / SP3: Correctif Windows XP - KB887472 / Windows XP / SP3: Correctif Windows XP - KB887742 / Windows XP / SP3: Correctif Windows XP - KB888113 / Windows XP / SP3: Correctif Windows XP - KB888302 / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB890046) / Windows XP / SP3: Correctif Windows XP - KB890859 / Windows XP / SP3: Correctif Windows XP - KB891781 / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB893066) / Windows XP / SP3: Correctif Windows XP - KB893086 / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB893756) / Windows XP / SP3: Windows Installer 3.1 (KB893803) / Windows XP / SP3: Mise à jour pour Windows XP (KB894391) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896358) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896422) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896423) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896424) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896428) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896688) / Windows XP / SP3: Mise à jour pour Windows XP (KB896727) / Windows XP / SP3: Mise à jour pour Windows XP (KB898461) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899587) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899588) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899591) / Windows XP / SP3: Mise à jour pour Windows XP (KB900485) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB900725) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901017) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901214) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB902400) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB904706) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905414) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905749) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905915) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB908519) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB908531) / Windows XP / SP3: Mise à jour pour Windows XP (KB910437) / Windows XP / SP3: Mise à jour pour Windows XP (KB911280) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911562) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911567) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911927) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB912812) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB912919) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB913446) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB913580) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB914388) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB914389) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB916281) / Windows XP / SP3: Mise à jour pour Windows XP (KB916595) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917159) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917344) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917422) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917953) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB918439) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB918899) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB919007) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB920214) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB920670) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB920683) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB920685) / Windows XP / SP3: Mise à jour pour Windows XP (KB920872) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB921398) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB921883) / Windows XP / SP3: Mise à jour pour Windows XP (KB922582) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB922616) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB922819) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB923191) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB923414) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB924191) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB924496) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB925486) / Windows XP OOB / SP10: High Definition Audio Driver Package - KB835221 --- Startup entries list --- Located: HK_LM:Run, AGRSMMSG command: AGRSMMSG.exe file: C:\WINDOWS\AGRSMMSG.exe size: 88363 MD5: e7be65bf79906aebc698e077d53f6a1c Located: HK_LM:Run, Alcmtr command: ALCMTR.EXE file: Located: HK_LM:Run, ClientGW command: file: Located: HK_LM:Run, ControlCenter2.0 command: C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun file: Located: HK_LM:Run, eSnips command: "C:\Program Files\eSnips\ClientGW.exe" file: Located: HK_LM:Run, eSnips command: "C:\Program Files\eSnips\ClientGW.exe" file: Located: HK_LM:Run, F-Secure Manager command: "C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE" /splash file: C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE size: 122929 MD5: 2424cae40448bd06606576926346af52 Located: HK_LM:Run, F-Secure Startup Wizard command: "C:\Program Files\F-Secure Internet Security\FSGUI\FSSW.EXE" /reboot file: C:\Program Files\F-Secure Internet Security\FSGUI\FSSW.EXE size: 372736 MD5: cea1b02dec3e6e96e2e6f3af7cd9c60f Located: HK_LM:Run, F-Secure TNB command: "C:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW file: C:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe size: 700416 MD5: 9153905d790dc0adc7b992d0c948d247 Located: HK_LM:Run, IndexSearch command: C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe file: C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe size: 40960 MD5: 174cd4b3fe6ee70d72825f8dfdc5bf06 Located: HK_LM:Run, Microsoft Works Portfolio command: C:\Program Files\Microsoft Works\WksSb.exe /AllUsers file: Located: HK_LM:Run, Microsoft Works Update Detection command: C:\Program Files\Microsoft Works\WkDetect.exe file: C:\Program Files\Microsoft Works\WkDetect.exe size: 28739 MD5: d81eae9946d9d789beb048789e257c82 Located: HK_LM:Run, NeroFilterCheck command: C:\WINDOWS\system32\NeroCheck.exe file: C:\WINDOWS\system32\NeroCheck.exe size: 155648 MD5: 3e4c03cefad8de135263236b61a49c90 Located: HK_LM:Run, PaperPort PTD command: C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe file: C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe size: 57393 MD5: 950db6eda08a6c48d29189248f4d0c3f Located: HK_LM:Run, PDF Converter Registry Controller command: "C:\Program Files\ScanSoft\PDF Converter\RegistryController.exe" file: C:\Program Files\ScanSoft\PDF Converter\RegistryController.exe size: 102400 MD5: d445150f25914bb69ed3ce37921e40fb Located: HK_LM:Run, Raccourci vers la page des propriétés de High Definition Audio command: HDAudPropShortcut.exe file: C:\WINDOWS\system32\HDAudPropShortcut.exe size: 61952 MD5: 3e7a11c1c4ebd2c3c52197238df4e14b Located: HK_LM:Run, RealTray command: C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER file: Located: HK_LM:Run, SetDefPrt command: C:\Program Files\Brother\Brmfl04a\BrStDvPt.exe file: C:\Program Files\Brother\Brmfl04a\BrStDvPt.exe size: 49152 MD5: 129b277c10339efe2907834e9295d16d Located: HK_LM:Run, SoundMan command: SOUNDMAN.EXE file: Located: HK_LM:Run, SSBkgdUpdate command: "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot file: C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe size: 155648 MD5: 1c3ca3e7807f915933bb4e08e599ddab Located: HK_LM:Run, SunJavaUpdateSched command: "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe" file: C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe size: 49263 MD5: 409c45da1cfbc3fc19eec7cbfe9b2786 Located: HK_LM:Run, WorksFUD command: C:\Program Files\Microsoft Works\wkfud.exe file: C:\Program Files\Microsoft Works\wkfud.exe size: 24576 MD5: b095a0801bff93bf50a6d02fdc8e1834 Located: HK_CU:Run, BitTorrent command: "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized file: C:\Program Files\BitTorrent\bittorrent.exe size: 43520 MD5: 84c96ecea0fbbed6a1aa498c9b7685a0 Located: HK_CU:Run, Creative Detector command: "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R file: C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe size: 102400 MD5: c744293dfbe1a3347fec5dbfe3fd123e Located: HK_CU:Run, CTFMON.EXE command: C:\WINDOWS\system32\ctfmon.exe file: C:\WINDOWS\system32\ctfmon.exe size: 15360 MD5: 5584247b568c2e53934873f4b655fe6a Located: HK_CU:Run, MSMSGS command: "C:\Program Files\Messenger\msmsgs.exe" /background file: C:\Program Files\Messenger\msmsgs.exe size: 1694208 MD5: 74e6e96c6f0e2eca4edbb7f7a468f259 Located: HK_CU:Run, NBJ command: "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" file: C:\Program Files\Ahead\Nero BackItUp\NBJ.exe size: 1867776 MD5: e404817e211d73f3fa60fabd84a4c027 Located: HK_CU:Run, swg command: C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe file: C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe size: 163576 MD5: 1c813135848c379412a036841282a985 Located: HK_CU:Run, TVAgent WiFi command: C:\Program Files\Kit ADSL\Wizard\Agent_WiFi.exe file: Located: Démarrage (tous utilisateurs), F-Secure 2006.lnk command: C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe file: C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe size: 36903 MD5: 022a73cee907483b11710f699676cedd Located: Démarrage (tous utilisateurs), InterVideo WinCinema Manager.lnk command: C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe file: C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe size: 114688 MD5: 04d2c335677e7b1be55162c5445e155f Located: Démarrage (tous utilisateurs), Rappels du Calendrier Microsoft Works.lnk command: C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe file: C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe size: 24633 MD5: 39fdfd34f7b04290d1bc53e3d6ec7d83 Located: Démarrage (tous utilisateurs), Status Monitor.lnk command: C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe file: C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe size: 819200 MD5: 01b036128cd786b8b2644b624cc9e7cd Located: System.ini, AtiExtEvent command: Ati2evxx.dll file: Ati2evxx.dll Located: System.ini, crypt32chain command: crypt32.dll file: crypt32.dll Located: System.ini, cryptnet command: cryptnet.dll file: cryptnet.dll Located: System.ini, cscdll command: cscdll.dll file: cscdll.dll Located: System.ini, ScCertProp command: wlnotify.dll file: wlnotify.dll Located: System.ini, Schedule command: wlnotify.dll file: wlnotify.dll Located: System.ini, sclgntfy command: sclgntfy.dll file: sclgntfy.dll Located: System.ini, SensLogn command: WlNotify.dll file: WlNotify.dll Located: System.ini, termsrv command: wlnotify.dll file: wlnotify.dll Located: System.ini, WgaLogon command: WgaLogon.dll file: WgaLogon.dll Located: System.ini, wlballoon command: wlnotify.dll file: wlnotify.dll --- Browser helper object list --- {AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper) BHO name: CLSID name: Google Toolbar Helper description: Google toolbar classification: Open for discussion known filename: googletoolbar.dll
googletoolbar*.dll
(* = number)
googletoolbar_en_*.**-big.dll
Googletoolbar_en_*.*.**-deleon.dll info link: http://www.google.com/intl/fr/toolbar/ie/index.html info source: TonyKlein Path: c:\program files\google\ Long name: GoogleToolbar1.dll Short name: GOOGLE~1.DLL Date (created): 25/10/2006 17:05:08 Date (last access): 20/11/2006 21:40:00 Date (last write): 17/10/2006 14:04:36 Filesize: 2153536 Attributes: readonly archive MD5: D7C951510ABB954204A798A21A510D98 CRC32: 5D8D9479 Version: 4.0.1020.3054 --- ActiveX list --- {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} (Java Runtime Environment 1.5.0) DPF name: Java Runtime Environment 1.5.0 CLSID name: Java Plug-in 1.5.0_09 Installer: Codebase: http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab Path: C:\Program Files\Java\jre1.5.0_09\bin\ Long name: NPJPI150_09.dll Short name: NPJPI1~1.DLL Date (created): 12/10/2006 03:10:58 Date (last access): 20/11/2006 21:40:00 Date (last write): 12/10/2006 03:25:44 Filesize: 69746 Attributes: archive MD5: A3CDEB59B6B8C2EA81B9ED2D3EF4C95E CRC32: 2A32A9A2 Version: 5.0.90.3 --- Process list --- PID: 0 ( 0) [System] PID: 400 ( 4) \SystemRoot\System32\smss.exe PID: 636 ( 400) \??\C:\WINDOWS\system32\csrss.exe PID: 660 ( 400) \??\C:\WINDOWS\system32\winlogon.exe PID: 708 ( 660) C:\WINDOWS\system32\services.exe size: 108544 MD5: 732E0B1ABAACE15D80EC19056B0A2AF9 PID: 720 ( 660) C:\WINDOWS\system32\lsass.exe size: 13312 MD5: 9F3744A5C6F49291A7A685040A013399 PID: 876 ( 708) C:\WINDOWS\system32\Ati2evxx.exe size: 425984 MD5: 0EF8098B30264082F64CA4431CA68BB8 PID: 892 ( 708) C:\WINDOWS\system32\svchost.exe size: 14336 MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA PID: 948 ( 708) C:\WINDOWS\system32\svchost.exe size: 14336 MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA PID: 1000 ( 708) C:\WINDOWS\System32\svchost.exe size: 14336 MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA PID: 1092 ( 708) C:\WINDOWS\system32\svchost.exe size: 14336 MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA PID: 1120 ( 708) C:\WINDOWS\system32\svchost.exe size: 14336 MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA PID: 1408 ( 708) C:\WINDOWS\system32\brsvc01a.exe size: 57344 MD5: D3FACB34FFF5DB91ADB70987838F8BA7 PID: 1432 ( 708) C:\WINDOWS\system32\spoolsv.exe size: 57856 MD5: DA81EC57ACD4CDC3D4C51CF3D409AF9F PID: 1444 (1408) C:\WINDOWS\system32\brss01a.exe size: 45056 MD5: 9E646CD378D4D0C996BAF9BCB18237C7 PID: 1604 ( 708) C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE size: 36903 MD5: 022A73CEE907483B11710F699676CEDD PID: 1640 ( 708) C:\WINDOWS\system32\Brmfrmps.exe size: 65536 MD5: BB192385661DAF7F3D48B586F6E1D166 PID: 1668 ( 708) C:\WINDOWS\system32\CTsvcCDA.exe size: 44032 MD5: 3C8B6609712F4FF78E521F6DCFC4032B PID: 1696 ( 708) C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe size: 36947 MD5: 237A88D8AF60024CB91CB5D7903B3CC9 PID: 1712 (1696) C:\Program Files\F-Secure Internet Security\Anti-Virus\FSGK32.EXE size: 290304 MD5: 8F78E6C547071B95D7D17F6D8B708926 PID: 1728 ( 708) C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe size: 270389 MD5: 27AB8AAAD1C638452C6E710B59537091 PID: 1764 ( 708) C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE size: 61490 MD5: B757DD21A612A82BD193775E37CD380C PID: 1804 (1712) C:\Program Files\F-Secure Internet Security\Anti-Virus\fssm32.exe size: 248320 MD5: 3B4D0D6DAC74BC6CEBCA11F88EBB6528 PID: 1840 (1764) C:\Program Files\F-Secure Internet Security\Common\FSMB32.EXE size: 180274 MD5: 8D3F20AB488CAE3ED987B1196AC2F36D PID: 1848 ( 708) C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE size: 322120 MD5: 11F714F85530A2BD134074DC30E99FCA PID: 2032 ( 708) C:\WINDOWS\system32\svchost.exe size: 14336 MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA PID: 156 ( 708) C:\WINDOWS\system32\wdfmgr.exe size: 38912 MD5: AB0A7CA90D9E3D6A193905DC1715DED0 PID: 508 (1764) C:\Program Files\F-Secure Internet Security\Common\FCH32.EXE size: 65585 MD5: CD12B1E63F9EB5075302973094AF573D PID: 1060 ( 708) C:\Program Files\F-Secure Internet Security\FSPC\fshttps\fshttps.exe size: 61498 MD5: 9A78182F3750E0258D466A37D7BBDD41 PID: 1316 ( 708) C:\WINDOWS\System32\alg.exe size: 44544 MD5: 2FE681D10C5FC343DBBC0610B8DD4D24 PID: 1464 (1764) C:\Program Files\F-Secure Internet Security\Common\FAMEH32.EXE size: 270387 MD5: EFF5C2751B5C8BEF9AF1263494F04DC8 PID: 1492 (1764) C:\Program Files\F-Secure Internet Security\Anti-Virus\fsqh.exe size: 32826 MD5: 69118DA5CACB250D06389287DDC1BF45 PID: 2132 (1764) C:\Program Files\F-Secure Internet Security\Anti-Virus\fsrw.exe size: 159792 MD5: EDB7030FAC4F95D85B4D021CC631E964 PID: 2136 (1764) C:\Program Files\F-Secure Internet Security\FSPC\fspc.exe size: 139319 MD5: 4BB3049CBD56C934A272D90C9FED5112 PID: 2148 ( 708) C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe size: 204863 MD5: EAF6DA252C1EC6893AF7E4896C641B9E PID: 2976 (1764) C:\Program Files\F-Secure Internet Security\Anti-Virus\fsav32.exe size: 179712 MD5: 4C42D37110E2888BD5A2997B5EA4B5B7 PID: 3684 ( 660) C:\WINDOWS\system32\Ati2evxx.exe size: 425984 MD5: 0EF8098B30264082F64CA4431CA68BB8 PID: 3772 (3736) C:\WINDOWS\Explorer.EXE size: 1036288 MD5: 4C33E5B9A6197B6ED215F6CFBA0A2DAA PID: 4044 (3772) C:\WINDOWS\AGRSMMSG.exe size: 88363 MD5: E7BE65BF79906AEBC698E077D53F6A1C PID: 1680 (3772) C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe size: 57393 MD5: 950DB6EDA08A6C48D29189248F4D0C3F PID: 1936 (3772) C:\Program Files\Brother\ControlCenter2\brctrcen.exe size: 851968 MD5: 7C280EBDF43724636289D50CF26F2AB0 PID: 1964 (3772) C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe size: 49263 MD5: 409C45DA1CFBC3FC19EEC7CBFE9B2786 PID: 1980 (3772) C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE size: 122929 MD5: 2424CAE40448BD06606576926346AF52 PID: 2324 (1980) C:\PROGRA~1\F-SECU~1\ANTI-S~1\fsaw.exe size: 86064 MD5: A38CCE2B6C770CC26755D790E0F59F10 PID: 2552 (3772) C:\WINDOWS\system32\ctfmon.exe size: 15360 MD5: 5584247B568C2E53934873F4B655FE6A PID: 2588 (3772) C:\Program Files\Messenger\msmsgs.exe size: 1694208 MD5: 74E6E96C6F0E2ECA4EDBB7F7A468F259 PID: 2700 (3772) C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe size: 163576 MD5: 1C813135848C379412A036841282A985 PID: 584 (3772) C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe size: 102400 MD5: C744293DFBE1A3347FEC5DBFE3FD123E PID: 2944 (1980) C:\Program Files\F-Secure Internet Security\FSGUI\fsguidll.exe size: 233537 MD5: 530BC7C4F1BD60B2D29D83CABA20152B PID: 768 (3772) C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe size: 36903 MD5: 022A73CEE907483B11710F699676CEDD PID: 3064 (3772) C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe size: 114688 MD5: 04D2C335677E7B1BE55162C5445E155F PID: 3144 (3772) C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe size: 24633 MD5: 39FDFD34F7B04290D1BC53E3D6EC7D83 PID: 3244 (3772) C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe size: 819200 MD5: 01B036128CD786B8B2644B624CC9E7CD PID: 3236 (3772) C:\Program Files\Internet Explorer\IEXPLORE.EXE size: 93184 MD5: 833E2B3F0E2484C0F2B804AE871B4381 PID: 5572 (1920) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe size: 4393096 MD5: 09CA174A605B480318731E691DC98539 PID: 4 ( 0) System --- Browser start & search pages list --- Spybot - Search & Destroy browser pages report, 20/11/2006 22:20:56 HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page C:\windows\system32\blank.htm HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page https://www.google.com/?gws_rd=ssl HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar http://www.google.com/toolbar/ie8/sidebar.html HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page https://www.google.fr/?gws_rd=ssl HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Default_Search_URL http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\SearchAssistant http://www.google.com/toolbar/ie8/sidebar.html HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\@ http://www.google.com/search?q=%s HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page C:\windows\system32\blank.htm HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL http://www.google.com/toolbar/ie8/sidebar.html HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant http://www.google.com/toolbar/ie8/sidebar.html HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm --- Winsock Layered Service Provider list --- Protocol 0: MSAFD Tcpip [TCP/IP] GUID: {75958F6D-F401-4552-9E6D-698AF8272683} Filename: winsflt.dll Protocol 1: MSAFD Tcpip [UDP/IP] GUID: {EAC161EC-84A6-43FE-8DC9-E6C3791AA55A} Filename: winsflt.dll Protocol 2: MSAFD Tcpip [RAW/IP] GUID: {4CFFA375-91FA-4B77-8841-A4F5FDE0D061} Filename: winsflt.dll Protocol 3: RSVP UDP Service Provider GUID: {F0E3CEC6-C65D-4657-982B-D77E5CC28FA3} Filename: winsflt.dll Protocol 4: RSVP TCP Service Provider GUID: {3E343828-FBD3-4C2A-BBA1-52BDCBCAB0A9} Filename: winsflt.dll Protocol 28: LAYERED_PROVIDER GUID: {5A81F161-AF30-A1CF-8927-00AA90359F1D} Filename: winsflt.dll --- Uninstall list --- 7-Zip 4.42 (7-Zip) uninstall cmd: "C:\Program Files\7-Zip\Uninstall.exe" Ad-Aware SE Personal 1.06 (Ad-Aware SE Personal) uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG publisher: Lavasoft help link: https://www.adaware.com/ (AddressBook) Adobe Acrobat 5.0 5.0 (Adobe Acrobat 5.0) version (major): 5 install location: C:\Program Files\Adobe\Acrobat 5.0 install source: C:\Documents and Settings\Franck\Local Settings\Temp\pft1~tmp\ uninstall cmd: C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll" publisher: Adobe Systems, Inc. help link: https://acrobat.adobe.com/us/en/acrobat.html Agere Systems PCI Soft Modem (Agere Systems Soft Modem) uninstall cmd: agrsmdel ATI Display Driver 8.081-041124a1-019934C-HP (ATI Display Driver) uninstall cmd: rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean Audacity 1.2.4 (Audacity_is1) install location: C:\Program Files\Audacity\ uninstall cmd: "C:\Program Files\Audacity\unins000.exe" help link: https://sourceforge.net/projects/audacity/ F-Secure Internet Security 2006 (BackWeb-4476822 Uninstaller) uninstall cmd: C:\PROGRA~1\F-SECU~1\Common\fsbwih.exe /uninstall BitTorrent 4.26.0 (BitTorrent) uninstall cmd: "C:\Program Files\BitTorrent\uninstall.exe" (Branding) (CADI) uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x40c /remove (Connection Manager) (Creative Audio CD Ripper (Unicode)) uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7550D6AA-CCF3-4FDA-87D6-C2C1B2E5358D}\setup.exe" -l0x40c /remove (Creative Lyrics Editor) uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1C41BAA3-559A-483A-89A5-149F27F90D38}\setup.exe" -l0x40c /remove (Creative MediaSource) uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{103BCDA0-E063-46AC-8028-64E78722ABA7}\setup.exe" -l0x40c /remove (Creative MediaSource CD-ROM Burner Plugin) uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{836612F0-1571-4C65-A4B7-58A39AA578EE}\setup.exe" -l0x40c /remove (Creative MediaSource Detector) uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0B095086-7205-4D48-90DF-DCD16613C6D4}\setup.exe" -l0x40c /remove (Creative MediaSource Player Skin Pack) uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2616B36E-38CE-4357-8AB5-8B3EE9B1C117}\setup.exe" -l0x40c /remove (Creative MuVo V100) (Creative MuVo V100 Media Explorer) uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4E9201AE-EACC-4010-B0E8-C61736512A13}\setup.exe" -l0x40c /remove (Creative SmartFill) uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{19822917-61F6-4221-B1D0-1C3B8A06BE60}\setup.exe" -l0x40c /remove (DirectAnimation) (DirectDrawEx) (DXM_Runtime) Cossacks - European Wars (EW : Cossacks) uninstall cmd: C:\WINDOWS\uncsetup.exe (F-Secure Anti-Spyware) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware" (F-Secure Anti-Spyware Scanner) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware Scanner" (F-Secure Anti-Virus) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus" (F-Secure Anti-Virus Client Security Installer) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus Client Security Installer" (F-Secure DAAS) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure DAAS" (F-Secure Diagnostics) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Diagnostics" (F-Secure E-mail Scanning) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure E-mail Scanning" (F-Secure FWES) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure FWES" (F-Secure GUI) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure GUI" (F-Secure Help) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Help" (F-Secure Internet Shield) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Internet Shield" (F-Secure Management Agent) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Management Agent" (F-Secure Spam Control) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Spam Control" (F-Secure Spam Scanner) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Spam Scanner" (F-Secure TNB) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure TNB" (F-Secure Web Filter) uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Web Filter" (Fontcore) HijackThis 1.99.1 1.99.1 (HijackThis) uninstall cmd: C:\DOCUME~1\Franck\LOCALS~1\Temp\Répertoire temporaire 3 pour hijackthis.zip\HijackThis.exe /uninstall publisher: Soeperman Enterprises Ltd. (ICW) (IE40) (IE4Data) (IE5BAKEX) (IEData) High Definition Audio Driver Package - KB835221 20040219.000000 (KB835221WXP) uninstall cmd: C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us Correctif Windows XP - KB873333 20050114.005213 (KB873333) uninstall cmd: C:\WINDOWS\$NtUninstallKB873333$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/873333/ms05-012-vulnerability-in-ole-and-com-could-allow-remote-code-executio Correctif Windows XP - KB873339 20041117.092459 (KB873339) uninstall cmd: C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/873339 (KB884016) Correctif Windows XP - KB885250 20050118.202711 (KB885250) uninstall cmd: C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/885250 Correctif Windows XP - KB885835 20041027.181713 (KB885835) uninstall cmd: C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/885835/ms04-044-vulnerabilities-in-windows-kernel-and-lsass-could-allow-eleva Correctif Windows XP - KB885836 20041028.173203 (KB885836) uninstall cmd: C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/885836/ms04-041-a-vulnerability-in-wordpad-could-allow-code-execution Correctif Windows XP - KB886185 20041021.090540 (KB886185) uninstall cmd: C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/886185 Correctif Windows XP - KB887472 20041014.162858 (KB887472) uninstall cmd: C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/887472 Correctif Windows XP - KB887742 20041103.095002 (KB887742) uninstall cmd: C:\WINDOWS\$NtUninstallKB887742$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/887742 Correctif Windows XP - KB888113 20041116.131036 (KB888113) uninstall cmd: C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/888113 Correctif Windows XP - KB888302 20041207.111426 (KB888302) uninstall cmd: C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/888302 Mise à jour de sécurité pour Windows XP (KB890046) 1 (KB890046) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/890046 Correctif Windows XP - KB890859 1 (KB890859) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/890859 Correctif Windows XP - KB891781 20050110.165439 (KB891781) uninstall cmd: C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/891781 Mise à jour de sécurité pour Windows XP (KB893066) 2 (KB893066) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/893066/ms05-019-vulnerabilities-in-tcp-ip-could-allow-remote-code-execution-a Correctif Windows XP - KB893086 1 (KB893086) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB893086$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/893086 Mise à jour de sécurité pour Windows XP (KB893756) 1 (KB893756) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/893756 (KB893803) Windows Installer 3.1 (KB893803) 3.1 (KB893803v2) uninstall cmd: "C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/893803/windows-installer-3-1-v2-3-1-4000-2435-is-available Mise à jour pour Windows XP (KB894391) 1 (KB894391) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/894391/ Mise à jour de sécurité pour Windows XP (KB896358) 1 (KB896358) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/896358/ms05-026-a-vulnerability-in-html-help-could-allow-remote-code-executio Mise à jour de sécurité pour Windows XP (KB896422) 1 (KB896422) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/896422/ms05-027-vulnerability-in-server-message-block-could-allow-remote-code Mise à jour de sécurité pour Windows XP (KB896423) 1 (KB896423) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/windows?ui=en-US&rs=en-001&ad=US Mise à jour de sécurité pour Windows XP (KB896424) 1 (KB896424) install date: 20051121 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/896424 Mise à jour de sécurité pour Windows XP (KB896428) 1 (KB896428) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/896428 Mise à jour de sécurité pour Windows XP (KB896688) 1 (KB896688) install date: 20051122 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896688$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/896688/ms05-052-cumulative-security-update-for-internet-explorer Mise à jour pour Windows XP (KB896727) 1 (KB896727) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896727$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/896727 Mise à jour pour Windows XP (KB898461) 1 (KB898461) install date: 20050927 uninstall cmd: "C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/898461/ Mise à jour de sécurité pour Windows XP (KB899587) 1 (KB899587) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/899587 Mise à jour de sécurité pour Windows XP (KB899588) 1 (KB899588) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB899588$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/899588 Mise à jour de sécurité pour Windows XP (KB899591) 1 (KB899591) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/899591 Mise à jour pour Windows XP (KB900485) 2 (KB900485) install date: 20060426 uninstall cmd: "C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/900485 Mise à jour de sécurité pour Windows XP (KB900725) 1 (KB900725) install date: 20051115 uninstall cmd: "C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/900725 Mise à jour de sécurité pour Windows XP (KB901017) 1 (KB901017) install date: 20051108 uninstall cmd: "C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/901017 Mise à jour de sécurité pour Windows XP (KB901214) 1 (KB901214) install date: 20050928 uninstall cmd: "C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/901214 Mise à jour de sécurité pour Windows XP (KB902400) 1 (KB902400) install date: 20051128 uninstall cmd: "C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/902400/ms05-051-vulnerabilities-in-ms-dtc-and-com-could-allow-remote-code-exe Mise à jour de sécurité pour Windows XP (KB904706) 1 (KB904706) install date: 20051109 uninstall cmd: "C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/904706 Mise à jour de sécurité pour Windows XP (KB905414) 1 (KB905414) install date: 20051102 uninstall cmd: "C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/905414 Mise à jour de sécurité pour Windows XP (KB905749) 1 (KB905749) install date: 20051108 uninstall cmd: "C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/905749 Mise à jour de sécurité pour Windows XP (KB905915) 1 (KB905915) install date: 20051214 uninstall cmd: "C:\WINDOWS\$NtUninstallKB905915$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/905915 Mise à jour de sécurité pour Windows XP (KB908519) 1 (KB908519) install date: 20060111 uninstall cmd: "C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/908519 Mise à jour de sécurité pour Windows XP (KB908531) 1 (KB908531) install date: 20060412 uninstall cmd: "C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/908531 Mise à jour pour Windows XP (KB910437) 1 (KB910437) install date: 20051214 uninstall cmd: "C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/910437 Mise à jour pour Windows XP (KB911280) 2 (KB911280) install date: 20060710 uninstall cmd: "C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/911280 Mise à jour de sécurité pour Windows XP (KB911562) 1 (KB911562) install date: 20060412 uninstall cmd: "C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/911562 Mise à jour de sécurité pour Lecteur Windows Media (KB911564) (KB911564) install date: 20060220 uninstall cmd: "C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/911564 Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565) (KB911565) install date: 20060417 publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/911565 Mise à jour de sécurité pour Windows XP (KB911567) 1 (KB911567) install date: 20060412 uninstall cmd: "C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/911567 Mise à jour de sécurité pour Windows XP (KB911927) 1 (KB911927) install date: 20060220 uninstall cmd: "C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/911927 Mise à jour de sécurité pour Windows XP (KB912812) 1 (KB912812) install date: 20060412 uninstall cmd: "C:\WINDOWS\$NtUninstallKB912812$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/912812/ms06-013-cumulative-security-update-for-internet-explorer Mise à jour de sécurité pour Windows XP (KB912919) 1 (KB912919) install date: 20060110 uninstall cmd: "C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/912919 Mise à jour de sécurité pour Windows XP (KB913446) 1 (KB913446) install date: 20060220 uninstall cmd: "C:\WINDOWS\$NtUninstallKB913446$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/913446 Mise à jour de sécurité pour Windows XP (KB913580) 1 (KB913580) install date: 20060510 uninstall cmd: "C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/913580 Mise à jour de sécurité pour Windows XP (KB914388) 1 (KB914388) install date: 20060719 uninstall cmd: "C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/914388 Mise à jour de sécurité pour Windows XP (KB914389) 1 (KB914389) install date: 20060710 uninstall cmd: "C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/914389 Mise à jour de sécurité pour Windows XP (KB916281) 1 (KB916281) install date: 20060710 uninstall cmd: "C:\WINDOWS\$NtUninstallKB916281$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/916281 Mise à jour pour Windows XP (KB916595) 1 (KB916595) install date: 20060719 uninstall cmd: "C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/916595 Mise à jour de sécurité pour Windows XP (KB917159) 1 (KB917159) install date: 20060719 uninstall cmd: "C:\WINDOWS\$NtUninstallKB917159$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/917159 Mise à jour de sécurité pour Windows XP (KB917344) 1 (KB917344) install date: 20060710 uninstall cmd: "C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/917344 Mise à jour de sécurité pour Windows XP (KB917422) 1 (KB917422) install date: 20060810 uninstall cmd: "C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/917422 Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734) (KB917734_WMP10) install date: 20060710 uninstall cmd: "C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/917734 Mise à jour de sécurité pour Windows XP (KB917953) 1 (KB917953) install date: 20060710 uninstall cmd: "C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/917953 Mise à jour de sécurité pour Windows XP (KB918439) 1 (KB918439) install date: 20060710 uninstall cmd: "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/918439 Mise à jour de sécurité pour Windows XP (KB918899) 1 (KB918899) install date: 20060810 uninstall cmd: "C:\WINDOWS\$NtUninstallKB918899$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/918899 Mise à jour de sécurité pour Windows XP (KB919007) 1 (KB919007) install date: 20060915 uninstall cmd: "C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/919007/ms06-052-vulnerability-in-pragmatic-general-multicast-pgm-could-result Mise à jour de sécurité pour Windows XP (KB920214) 1 (KB920214) install date: 20060810 uninstall cmd: "C:\WINDOWS\$NtUninstallKB920214$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/920214 Mise à jour de sécurité pour Windows XP (KB920670) 1 (KB920670) install date: 20060810 uninstall cmd: "C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/920670 Mise à jour de sécurité pour Windows XP (KB920683) 1 (KB920683) install date: 20060810 uninstall cmd: "C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/920683 Mise à jour de sécurité pour Windows XP (KB920685) 1 (KB920685) install date: 20060915 uninstall cmd: "C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/920685 Mise à jour pour Windows XP (KB920872) 1 (KB920872) install date: 20060915 uninstall cmd: "C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/920872 Mise à jour de sécurité pour Windows XP (KB921398) 1 (KB921398) install date: 20060810 uninstall cmd: "C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: https://support.microsoft.com/en-us/help/921398 Mise à jour de sécurité pour Windows XP (KB921883) 1 (KB921883) install date: 20060810 uninstall cmd: "C:\WIND

kifran · Answer

Bitdefender n'a rien trouvé, voilà hijack this:

Logfile of HijackThis v1.99.1
Scan saved at 23:37:16, on 20/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
C:\WINDOWS\system32\Brmfrmps.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure Internet Security\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE
C:\Program Files\F-Secure Internet Security\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure Internet Security\Common\FSMB32.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\F-Secure Internet Security\Common\FCH32.EXE
C:\Program Files\F-Secure Internet Security\Common\FAMEH32.EXE
C:\Program Files\F-Secure Internet Security\Anti-Virus\fsqh.exe
C:\Program Files\F-Secure Internet Security\Anti-Virus\fsrw.exe
C:\Program Files\F-Secure Internet Security\FSPC\fspc.exe
C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe
C:\Program Files\F-Secure Internet Security\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Brother\ControlCenter2\brctrcen.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE
C:\PROGRA~1\F-SECU~1\ANTI-S~1\fsaw.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\F-Secure Internet Security\FSGUI\fsguidll.exe
C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\DOCUME~1\Franck\LOCALS~1\Temp\Répertoire temporaire 1 pour hijackthis.zip\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: SYSTRAN Standard 5.0  - {F84A4CD0-C330-4FC4-80EF-A407E4990E47} - C:\Program Files\SYSTRAN\5.0\Standard\IEPlugIn.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [PDF Converter Registry Controller] "C:\Program Files\ScanSoft\PDF Converter\RegistryController.exe"
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl04a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\F-Secure Internet Security\FSGUI\FSSW.EXE" /reboot
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - Global Startup: F-Secure 2006.lnk = C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?
O4 - Global Startup: Status Monitor.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O8 - Extra context menu item: &Bloquer cette fenêtre publicitaire - C:\Program Files\F-Secure Internet Security\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir le fichier PDF dans Word - res://C:\Program Files\ScanSoft\PDF Converter\IEShellExt.dll /300
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Filtre Web - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Filtre Web - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\Anti-Spyware\ieshield.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {94EB57FE-2720-496C-B33F-D9353C6E23F7} (F-Secure Online Scanner 2.1) - https://www.f-secure.com/en/home/support
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: F-Secure 2006 (BackWeb Plug-in - 4476822) - F-Secure Internet Security 2005 - C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Unknown owner - C:\WINDOWS\system32\Brmfrmps.exe" -service (file missing)
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FSPC\fshttps\fshttps.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE

lucieros · Answer

j'ai retiré le message, pas le bon endroit, excusez moi

Infecté par serwab et win

6 réponses

Discussions similaires