Sujet Précédent Sujet Suivant

Virus msn...

Fermé
Nico - 30 juin 2008 à 10:32
 Nico - 2 juil. 2008 à 15:02
Bonjour,
Voila, je crois avoir attrapé un virus msn je ne sais pas où (sa devait arriver sans antivirus...) et il essaye de se transmettre à tout mes contacts en leur demandant de cliquer sur un lien... Alors si quelqu'un pourrait me conseiller un logiciel ou la démarche à suivre pour éliminer ce virus une bonne fois pour toute... merci beaucoup d'avance!!!
A voir également:

65 réponses

Précédent
Réponse 41 / 65
Nico
1 juil. 2008 à 18:36
Ah oui oups dsl :-$ (il est tellement long...) voila la suite


[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Partner\Dell\DellTagLog]
"DTagLog#0020"="Append DTAG : key = Software\\McAfee.com\\Agent\\Update ; valuename = AlertPingUrl ; value = http://fr.mcafee.com/apps/agent/fr/agent6/chkalert.asp?affid=105-94&dtag=6FZ2J2J"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Partner\Dell\DellTagLog]
"DTagLog#0022"="Append DTAG to : SECTION = CUSTDATA ; INI = C:\\DOCUME~1\\ALLUSE~1\\APPLIC~1\\McAfee.com\\Agent\\RegWiz\\RegApp\\mpf.ini"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Partner\Dell\DellTagLog]
"DTagLog#0024"="Append DTAG to : SECTION = CUSTDATA ; INI = C:\\DOCUME~1\\ALLUSE~1\\APPLIC~1\\McAfee.com\\Agent\\RegWiz\\RegApp\\msk.ini"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Partner\Dell\DellTagLog]
"DTagLog#0026"="Append DTAG to : SECTION = CUSTDATA ; INI = C:\\DOCUME~1\\ALLUSE~1\\APPLIC~1\\McAfee.com\\Agent\\RegWiz\\RegApp\\vso.ini"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall]
"Install Dir"="C:\\Program Files\\McAfee.com\\Personal Firewall"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall]
"PingUrl"="https://instruaccess.mcafee.com/apps/mpfplus/fr/mpfplus7/chkupd.asp?regwiz=file://c:\\program files\\mcafee.com\\agent\\mcregwiz.exe&affid=105-94&dtag=6FZ2J2J"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall]
"RenewalUrl"="http://fr.mcafee.com/apps/mpfplus/fr/mpfplus7/default.asp?targeturl=/apps/mpfplus/fr/mpfplus7/setexp.asp®wiz=file://c:\\program files\\mcafee.com\\agent\\mcregwiz.exe&systempopup=true&affid=105-94&dtag=6FZ2J2J"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall]
"CustSupportUrl"="https://home.mcafee.com/StaticGenericPage.aspx?page=cookienotsupported&url=%2froot%2fcampaign.aspx%3fcid%3d25335%26ctst%3d1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall]
"HomePageUrl"="https://home.mcafee.com/Default.aspx?affid=105-94&culture=fr-FR"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall]
"SourceDisk"="Source=fr.mcafee.com,affid=105-94,engine_version=MPFP,Build=7.0.152,Date=2008-07-01 09:51:04"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall]
"PerpetualUrl"="http://fr.mcafee.com/apps/mpfplus/fr/mpfplus7/default.asp?targeturl=/apps/mpfplus/fr/mpfplus7/setexp.asp&systempopup=true&affid=105-94"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Apps]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Assistant]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog031"="Executing C:\\PROGRA~1\\McAfee.com\\PERSON~1\\MpfTray.exe -shutdown "

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog035"="Backup mpf data file : C:\\PROGRA~1\\McAfee.com\\PERSON~1\\data\\pcfg.ent To C:\\DOCUME~1\\NICO~1.MON\\LOCALS~1\\Temp\\mpfdata\\pcfg.ent"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog036"="Backup mpf data file : C:\\PROGRA~1\\McAfee.com\\PERSON~1\\data\\rdns.idx To C:\\DOCUME~1\\NICO~1.MON\\LOCALS~1\\Temp\\mpfdata\\rdns.idx"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog037"="Backup mpf data file : C:\\PROGRA~1\\McAfee.com\\PERSON~1\\data\\hwid.idx To C:\\DOCUME~1\\NICO~1.MON\\LOCALS~1\\Temp\\mpfdata\\hwid.idx"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog038"="Backup mpf data file : C:\\PROGRA~1\\McAfee.com\\PERSON~1\\data\\banned.idx To C:\\DOCUME~1\\NICO~1.MON\\LOCALS~1\\Temp\\mpfdata\\banned.idx"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog039"="Backup mpf data file : C:\\PROGRA~1\\McAfee.com\\PERSON~1\\data\\golden.idx To C:\\DOCUME~1\\NICO~1.MON\\LOCALS~1\\Temp\\mpfdata\\golden.idx"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog040"="Backup mpf data file : C:\\PROGRA~1\\McAfee.com\\PERSON~1\\data\\sports.idx To C:\\DOCUME~1\\NICO~1.MON\\LOCALS~1\\Temp\\mpfdata\\sports.idx"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog041"="Backup mpf data file : C:\\PROGRA~1\\McAfee.com\\PERSON~1\\data\\sports.ent To C:\\DOCUME~1\\NICO~1.MON\\LOCALS~1\\Temp\\mpfdata\\sports.ent"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog042"="Backup mpf data file : C:\\PROGRA~1\\McAfee.com\\PERSON~1\\data\\winloc.idx To C:\\DOCUME~1\\NICO~1.MON\\LOCALS~1\\Temp\\mpfdata\\winloc.idx"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog043"="Backup mpf data file : C:\\PROGRA~1\\McAfee.com\\PERSON~1\\data\\certi.idx To C:\\DOCUME~1\\NICO~1.MON\\LOCALS~1\\Temp\\mpfdata\\certi.idx"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog044"="Backup mpf data file : C:\\PROGRA~1\\McAfee.com\\PERSON~1\\data\\options.idx To C:\\DOCUME~1\\NICO~1.MON\\LOCALS~1\\Temp\\mpfdata\\options.idx"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog045"="Backup mpf data file : C:\\PROGRA~1\\McAfee.com\\PERSON~1\\data\\log.edb To C:\\DOCUME~1\\NICO~1.MON\\LOCALS~1\\Temp\\mpfdata\\log.edb"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog046"="Backup mpf data file : C:\\PROGRA~1\\McAfee.com\\PERSON~1\\data\\log.idx To C:\\DOCUME~1\\NICO~1.MON\\LOCALS~1\\Temp\\mpfdata\\log.idx"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog047"="Backup mpf data file : C:\\PROGRA~1\\McAfee.com\\PERSON~1\\data\\IpRules.xdb To C:\\DOCUME~1\\NICO~1.MON\\LOCALS~1\\Temp\\mpfdata\\IpRules.xdb"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog048"="Backup mpf data file : C:\\PROGRA~1\\McAfee.com\\PERSON~1\\data\\TrafficHist.xdb To C:\\DOCUME~1\\NICO~1.MON\\LOCALS~1\\Temp\\mpfdata\\TrafficHist.xdb"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog049"="Backup mpf data file : C:\\PROGRA~1\\McAfee.com\\PERSON~1\\data\\RIR.idx To C:\\DOCUME~1\\NICO~1.MON\\LOCALS~1\\Temp\\mpfdata\\RIR.idx"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog059"="Copy file from C:\\Documents and Settings\\All Users\\Application Data\\McAfee.com Personal Firewall\\data\\sports.ent To C:\\Program Files\\McAfee.com\\Personal Firewall\\data"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog060"="Copy file from C:\\Documents and Settings\\All Users\\Application Data\\McAfee.com Personal Firewall\\data\\sports\\*.* To C:\\Program Files\\McAfee.com\\Personal Firewall\\data\\sports"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog067"="Restore from C:\\DOCUME~1\\NICO~1.MON\\LOCALS~1\\Temp\\mpfdata\\sports.ent To C:\\Documents and Settings\\All Users\\Application Data\\McAfee.com Personal Firewall\\data\\sports.ent"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog087"="UpdateSubscriptionInfo: Executing cmd = objSubInfo.WebSite = \"fr.mcafee.com\""

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog088"="UpdateSubscriptionInfo: Executing cmd = objSubInfo.SyncUrl = \"http://us.mcafee.com/apps/agent/submgr/appsync.asp\""

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog091"="CreateShortCut: C:\\PROGRA~1\\McAfee.com\\PERSON~1\\mpfconsole.exe$$ Result: 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog094"="CreateAddRemoveKey: c:\\PROGRA~1\\mcafee.com\\shared\\mcappins.exe /v=3 /uninstall=1 /appid=mpf /interact=1 /script_proactive=0 /start=c:\\PROGRA~1\\mcafee.com\\agent\\uninst\\mpfrem.ui::uninstall.htm$$ Result: 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog095"="Create silent uninstall string under : HKLM\\SOFTWARE\\McAfee.com\\Agent\\Apps\\MPF - SilentUninstallString - c:\\PROGRA~1\\mcafee.com\\shared\\mcappins.exe /v=3 /uninstall=1 /appid=mpf /hide=1 /script_proactive=0 /start=c:\\PROGRA~1\\mcafee.com\\agent\\uninst\\mpfrem.ui::uninstall.htm$$ Result: 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog096"="Executing C:\\PROGRA~1\\McAfee.com\\PERSON~1\\MpfAgent.exe /RegServer $$ Result: 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog097"="Executing C:\\PROGRA~1\\McAfee.com\\PERSON~1\\MpfAgent.exe /AgentSetupPlus $$ Result: 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Installer]
"MpfLog098"="Executing C:\\PROGRA~1\\McAfee.com\\PERSON~1\\MpfService.exe -i $$ Result: 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Links]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Links]
"Help_Reinstall_URL"="https://home.mcafee.com/Default.aspx?affid=105-94&culture=fr-FR"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Links]
"Help_UI_Reinstall_URL"="https://home.mcafee.com/StaticGenericPage.aspx?page=cookienotsupported&url=%2f%3fctst%3d1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Links]
"Help_PrivacyPolicy_URL"="https://home.mcafee.com/StaticGenericPage.aspx?page=cookienotsupported&url=%2f%3fctst%3d1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Links]
"Help_UI_PrivacyPolicy_URL"="https://www.mcafee.com/fr-fr/consumer-support/policy/legal.html"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\PaneVisits]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Personal Firewall\Welcome]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\RegWiz]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\RegWiz\Installer]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\RegWiz\Installer]
"RegWizLog#001"="c:\\docume~1\\alluse~1\\applic~1\\mcafee.com\\agent\\regwiz\\regapp\\mpf.ini found for registration"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\RegWiz\Installer]
"RegWizLog#003"="c:\\docume~1\\alluse~1\\applic~1\\mcafee.com\\agent\\regwiz\\regapp\\msk.ini found for registration"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\RegWiz\Installer]
"RegWizLog#005"="c:\\docume~1\\alluse~1\\applic~1\\mcafee.com\\agent\\regwiz\\regapp\\vso.ini found for registration"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\RegWiz\Installer]
"RegWizLog#011"="ReadOemMapIniFile: sOEMINFORegKeyValue = HKLM\\Software\\McAfee.com\\OemInfo\\{901840F3-C00C-4f65-96BF-604A9FB0F2A2}"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\RegWiz\Installer]
"RegWizLog#012"="ReadOemMapIniFile: sOemCabpath = c:\\PROGRA~1\\mcafee.com\\agent\\OEMINFO\\fr\\105-93\\oeminfo.cab"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\RegWiz\Installer]
"RegWizLog#017"="c:\\docume~1\\alluse~1\\applic~1\\mcafee.com\\agent\\regwiz\\regapp\\mpf.ini found for registration"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\RegWiz\Installer]
"RegWizLog#019"="c:\\docume~1\\alluse~1\\applic~1\\mcafee.com\\agent\\regwiz\\regapp\\msk.ini found for registration"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\RegWiz\Installer]
"RegWizLog#021"="c:\\docume~1\\alluse~1\\applic~1\\mcafee.com\\agent\\regwiz\\regapp\\vso.ini found for registration"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\SharedModules]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\SharedModules\c:%progra~1%mcafee.com%shared%dunzip32.dll]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\SharedModules\c:%progra~1%mcafee.com%shared%mcappins.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\SharedModules\c:%progra~1%mcafee.com%shared%mcappins.inf]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\SharedModules\c:%progra~1%mcafee.com%shared%mcinsres.dll]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\SharedModules\c:%progra~1%mcafee.com%shared%mghtml.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\SharedModules\c:%progra~1%mcafee.com%shared%mghtml.inf]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\SpamKiller]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\SpamKiller]
"PingUrl"="http://fr.mcafee.com/apps/msk/fr/msk7/chkupd.asp?regwiz=file://c:\\program files\\mcafee.com\\agent\\mcregwiz.exe&affid=105-94&dtag=6FZ2J2J"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\SpamKiller]
"Install Dir"="C:\\Program Files\\McAfee\\SpamKiller"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\SpamKiller]
"SourceDisk"="Source=fr.mcafee.com,affid=105-94,Build=7015,Date=10/4/2005"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\SpamKiller]
"HomePageUrl"="https://home.mcafee.com/Default.aspx?affid=105-94&culture=fr-FR"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\SpamKiller]
"CustSupportUrl"="https://home.mcafee.com/StaticGenericPage.aspx?page=cookienotsupported&url=%2froot%2fcampaign.aspx%3fcid%3d25335%26ctst%3d1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\SpamKiller\Installer]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\SpamKiller\Links]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\SpamKiller\Links]
"Renewal_Url"="https://home.mcafee.com/StaticGenericPage.aspx?page=cookienotsupported&url=%2fSecure%2fProtected%2fLogin.aspx%3fErrCode%3dPLEASE_LOGIN%26culture%3dfr-FR%26ctst%3d1\\program files\\mcafee.com\\agent\\mcregwiz.exe&systempopup=true&affid=105-94&dtag=6FZ2J2J"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\SpamKiller\Settings]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\SpamKiller\Settings]
"ReportHost"="spamreport.mcafee.com"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Uninstall]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online]
"Install Dir"="C:\\Program Files\\McAfee.com\\VSO"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online]
"SourceDisk"="Source=fr.mcafee.com,affid=105-93,Build=10025,DatVer=4595,extra.dat=-1,EngineVer=4400,Date=10/3/2005"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online]
"VM_Url"="https://vil.mcafee.com/mast2.asp"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online]
"SP_url"="https://instruaccess.mcafee.com/apps/vso/fr/vso10/chkupd.asp?regwiz=file://c:\\progra~1\\mcafee.com\\agent\\mcregwiz.exe&affid=105-93&dtag=6FZ2J2J"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\AVERT]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\ActiveShield]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\ActiveShield]
"szLogFileName"="C:\\Documents and Settings\\All Users\\Application Data\\McAfee.com\\VSO\\OASLogs\\OAS.log"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Alerts]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Alerts\WormStopper]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Menu]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Menu\1029]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Menu\1030]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Menu\1031]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Menu\1033]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Menu\1279]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Menu\257]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Menu\258]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Menu\260]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Menu\264]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Menu\515]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Menu\521]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Menu\522]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\ods]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Options]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Options\AdvAShield]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Options\AdvBOF]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Options\AdvEmailScan]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Options\AdvFTScan]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Options\AdvScriptStopper]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Options\AdvWormStopper]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Options\AShield]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Options\Schedular]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Options\VMap]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\ShortCuts]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\ShortCuts\aruninstall]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\ShortCuts\dsscannow]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\ShortCuts\psashield]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\ShortCuts\psedisk]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\ShortCuts\psquarantine]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\ShortCuts\psscannow]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\ShortCuts\psuninstall]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\ShortCuts\psvso]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\Uninstall]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Customize\VirusInfo]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog011"="ConfigIsRequired: bOldComShortcutPresent (C:\\Documents and Settings\\All Users\\Bureau\\McAfee.com Scan for Viruses.lnk) = Faux"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog012"="ConfigIsRequired: (AlwaysDelete) C:\\Documents and Settings\\All Users\\Bureau\\McAfee.com Scan for Viruses.lnk $$ Result: 2"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog013"="ConfigIsRequired: bOldShortcutPresent (C:\\Documents and Settings\\All Users\\Bureau\\McAfee Analyse antivirus.lnk) = Faux"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog014"="ConfigIsRequired: (AlwaysDelete) C:\\Documents and Settings\\All Users\\Bureau\\McAfee Analyse antivirus.lnk $$ Result: 2"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog027"="UpdateRegConfig: RegConfig$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\RescueDisk$$http://download.mcafee.com/molbin/iss-loc/virusscan/fr/ediskimg/1474560/ediskimg.cab"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog028"="UpdateRegConfig: RegConfig$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online$$Source=fr.mcafee.com,affid=105-94,Build=10025,DatVer=4595,extra.dat=-1,EngineVer=4400,Date=10/3/2005"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog029"="UpdateRegConfig: RegConfig$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online$$https://vil.mcafee.com/mast2.asp"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog030"="UpdateRegConfig: RegConfig$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Links$$vso.chm"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog031"="UpdateRegConfig: RegConfig$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Links$$https://home.mcafee.com/Default.aspx?affid=105-94&culture=fr-FR"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog032"="UpdateRegConfig: RegConfig$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Links$$https://home.mcafee.com/StaticGenericPage.aspx?page=cookienotsupported&url=%2froot%2fcampaign.aspx%3fcid%3d25335%26ctst%3d1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog033"="UpdateRegConfig: RegConfig$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Links$$https://www.mcafee.com/enterprise/fr-fr/threat-center.html"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog034"="UpdateRegConfig: RegConfig$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Links$$http://mast.mcafee.com/default.asp?vso=true&affid=105-94"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog035"="UpdateRegConfig: RegConfig$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Links$$https://www.mcafee.com/enterprise/fr-fr/threat-center.html"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog036"="UpdateRegConfig: RegConfig$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Links$$https://home.mcafee.com/StaticGenericPage.aspx?page=cookienotsupported&url=%2froot%2fcampaign.aspx%3fcid%3d13047%26faq%3d453%26affid%3d105-94%26culture%3dfr-FR%26ctst%3d1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog037"="UpdateRegConfig: RegConfig$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Links$$https://www.mcafee.com/enterprise/fr-fr/threat-center.html"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog038"="UpdateRegConfig: RegConfig$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Links$$http://www.mcafeehelp.com"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog039"="UpdateRegConfig: RegConfig$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Links$$http://www.microsoft.com/windows95/downloads/contents/wuadmintools/s_wunetworkingtools/w95sockets2/default.asp?site=95"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog040"="UpdateRegConfig: RegConfig$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online$$dword:2"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog041"="UpdateRegConfig: RegConfig$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\AVERT$$dword:1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog042"="UpdateRegConfig: RegConfig$$HKLM\\Software\\McAfee.com\\VirusScan Online\\Customize\\ods$$dword:1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog043"="UpdateRegConfig: RegConfig$$HKLM\\Software\\McAfee.com\\VirusScan Online\\Customize\\ActiveShield$$dword:1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog044"="UpdateRegConfig: RegConfig$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Links$$http://fr.mcafee.com/apps/virusscan/10.0/testvs.asp?langid=fr"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog181"="Install: vsodat/extra/vscanbof. Source = C:\\dell\\JH006\\vs\\vso, Target = C:\\Program Files\\McAfee.com\\VSO\\Dat"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog192"="MoveOldPlatformData: Copying Quarantine files(C:\\Program Files\\McAfee.com\\VSO\\Quarantine,C:\\Documents and Settings\\All Users\\Application Data\\McAfee.com\\VSO\\Quarantine) = 2"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog194"="MoveOldPlatformData: Copying Data files (C:\\Program Files\\McAfee.com\\VSO\\Data,C:\\Documents and Settings\\All Users\\Application Data\\McAfee.com\\VSO\\Data) = 2"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog206"="UpdateSubscriptionInfo: Executing cmd = objSubInfo.WebSite = \"fr.mcafee.com\""

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog207"="UpdateSubscriptionInfo: Executing cmd = objSubInfo.SyncUrl = \"http://us.mcafee.com/apps/agent/submgr/appsync.asp\""

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog212"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\Agent\\Apps\\VSO$$Version=10.0,Build=10025,Date=INSTALL_DATE,Source=fr.mcafee.com"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog213"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\Agent\\Apps\\VSO$$VSO"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog214"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\Agent\\Apps\\VSO$$Version=10.0 Build=10025 Source=fr.mcafee.com Date=INSTALL_DATE Lang=fr content_version=4595 engine_version=4400 affid=105-94"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog215"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\Agent\\Apps\\VSO$$dword:1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog216"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online$$DELETE_VALUE"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog217"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\Agent\\Apps\\VSO\\Custom\\$$DELETE_VALUE"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog218"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\Agent\\Apps\\VSO\\Custom\\$$DELETE_VALUE"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog219"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\Agent\\Apps\\VSO\\Custom\\$$DELETE_VALUE"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog220"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\Agent\\Apps\\VSO\\Custom\\$$DELETE_VALUE"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog221"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\Agent\\Apps\\VSO\\Custom\\$$DELETE_VALUE"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog222"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\Agent\\Apps\\VSO\\Custom\\$$DELETE_VALUE"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog223"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\Agent\\Apps\\VSO\\Custom\\$$DELETE_VALUE"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog224"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\Agent\\Apps\\VSO\\Custom\\$$DELETE_VALUE"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog225"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\Agent\\Apps\\VSO\\Custom\\$$DELETE_VALUE"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog226"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Uninstall$$0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog227"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\Agent\\Apps\\VSO$$DELETE_VALUE"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog228"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\Agent\\Apps\\VSO$$http://fr.mcafee.com/apps/agent/submgr/appinstru.asp"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog229"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\Agent\\Apps\\VSO\\Custom\\$$DELETE_VALUE"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog230"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\Agent\\Apps\\VSO\\Custom\\$$DELETE_VALUE"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog231"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\Agent\\Apps\\VSO\\Custom\\$$DELETE_VALUE"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog232"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\Agent\\Apps\\VSO\\Custom\\$$DELETE_VALUE"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog233"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Menu\\257$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog234"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Menu\\258$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog235"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Menu\\515$$dword:3"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog236"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Menu\\260$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog237"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Menu\\1029$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog238"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Menu\\1030$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog239"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Menu\\1031$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog240"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Menu\\264$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog241"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Menu\\1033$$dword:3"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog242"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Menu\\521$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog243"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Menu\\522$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog244"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Menu\\1279$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog245"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\ShortCuts\\psvso$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog246"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\ShortCuts\\psashield$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog247"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\ShortCuts\\psscannow$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog248"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\ShortCuts\\psedisk$$dword:3"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog249"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\ShortCuts\\psuninstall$$dword:3"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog250"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\ShortCuts\\dsscannow$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog251"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\ShortCuts\\aruninstall$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog252"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\VirusInfo$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog253"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AShield$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog254"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\VMap$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog255"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\VMap$$dword:1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog256"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\Schedular$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog257"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AShield$$dword:1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog258"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvAShield$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog259"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvAShield$$dword:1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog260"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvAShield$$dword:1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog261"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvAShield$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog262"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvAShield$$dword:1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog263"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvAShield$$dword:55"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog264"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvEmailScan$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog265"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvEmailScan$$dword:1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog266"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvEmailScan$$dword:6"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog267"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvWormStopper$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog268"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvWormStopper$$dword:1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog269"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvWormStopper$$dword:1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog270"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvWormStopper$$dword:1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog271"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvWormStopper$$dword:65576"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog272"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvWormStopper$$dword:73221"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog273"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvScriptStopper$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog274"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvScriptStopper$$dword:1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog275"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvScriptStopper$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog276"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvWormStopper$$dword:1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog277"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvFTScan$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog278"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvFTScan$$dword:1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog279"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvFTScan$$dword:1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog280"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Alerts\\WormStopper$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog281"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\Options\\AdvEmailScan$$dword:0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog282"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\AVERT$$dword:25"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog283"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\AVERT$$https://fr.mcafee.com/apps/vso/fr/vso10/AvertAuthUser.asp?affid=105-94"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog284"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\AVERT$$dword:1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog285"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\AVERT$$dword:1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog286"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\AVERT$$dword:540"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog287"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\AVERT$$virus_sample@sample.avertlabs.com"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog288"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\AVERT$$sample.avertlabs.com"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog289"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online$$VSO_INSTALL_PATH"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog290"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online$$DELETE_VALUE"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog291"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\Agent\\Regwiz$$https://app.mcafee.com/activationwizard/AbortActivation.aspx"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog292"="UpdateRegConfig: RegObfuscate$$HKLM\\SOFTWARE\\McAfee.com\\VirusScan Online\\Customize\\ShortCuts\\psquarantine$$dword:0'"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog321"="DoDefaultSettings: Created RunServices key for VSO: C:\\Program Files\\McAfee.com\\VSO\\mcvsshld.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog322"="DoDefaultSettings: Created RunOnce key for VSO: C:\\Program Files\\McAfee.com\\VSO\\oasclnt.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog323"="InstallService: c:\\PROGRA~1\\mcafee.com\\vso\\mcshield.exe$$ Result: 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog324"="CreateShortCut: c:\\PROGRA~1\\mcafee.com\\vso\\mcmnhdlr.exe$$ Result: 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog325"="CreateShortCut: c:\\PROGRA~1\\mcafee.com\\vso\\mcmnhdlr.exe $$ Result: 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog326"="CreateShortCut: c:\\PROGRA~1\\mcafee.com\\vso\\mcmnhdlr.exe $$ Result: 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog330"="RegSetValue: DisplayName = McAfee VirusScan$$ Result: 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Installer]
"VSOLog346"="NotifyMCAFAgent: ADF file = C:\\Program Files\\McAfee.com\\Agent\\App\\vso.adf is present!!"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Links]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Links]
"MAIN_URL"="https://home.mcafee.com/Default.aspx?affid=105-93&culture=fr-FR"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Links]
"CUSTSUPPORT_URL"="https://home.mcafee.com/StaticGenericPage.aspx?page=cookienotsupported&url=%2froot%2fcampaign.aspx%3fcid%3d25335%26ctst%3d1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Links]
"VIL"="https://www.mcafee.com/enterprise/fr-fr/threat-center.html"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Links]
"WVM"="http://mast.mcafee.com/default.asp?vso=true&affid=105-93"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Links]
"VirusInfo"="https://www.mcafee.com/enterprise/fr-fr/threat-center.html"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Links]
"Help_ReportVirus"="https://home.mcafee.com/StaticGenericPage.aspx?page=cookienotsupported&url=%2froot%2fcampaign.aspx%3fcid%3d13047%26faq%3d453%26affid%3d105-93%26culture%3dfr-FR%26ctst%3d1"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Links]
"Help_VIL"="https://www.mcafee.com/enterprise/fr-fr/threat-center.html"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Links]
"Help_MCAFTS"="http://www.mcafeehelp.com"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Links]
"test_vs"="http://fr.mcafee.com/apps/virusscan/10.0/testvs.asp?langid=fr"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Links]
"Renew_url"="https://home.mcafee.com/StaticGenericPage.aspx?page=cookienotsupported&url=%2fSecure%2fProtected%2fLogin.aspx%3fErrCode%3dPLEASE_LOGIN%26culture%3dfr-FR%26ctst%3d1\\progra~1\\mcafee.com\\agent\\mcregwiz.exe&systempopup=true&affid=105-93&dtag=6FZ2J2J"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\Agent\\mcagntps.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\\\McAfee.com\\Shared\\dunzip32.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"c:\\program files\\mcafee.com\\agent\\mcagent.exe"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"c:\\program files\\mcafee.com\\agent\\submgr\\6,0,0,16\\mcsubmgr.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"c:\\program files\\mcafee.com\\shared\\mghtml.exe"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"c:\\program files\\mcafee.com\\shared\\mcuicfg\\6,0,0,4\\mcuicfg.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\mcscan32.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\Dat\\4816\\\\scan.dat"="Not Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\Dat\\4816\\\\names.dat"="Not Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\Dat\\4816\\\\clean.dat"="Not Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\mytilus.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\res00\\mcshield.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\oasclnt.exe"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\vsoui.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\vscfgui.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\ashldres.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\vscfgw32.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\mcvsps.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\naiann.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\naiannps.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\mvsuicfg.dat"="Not Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\Agent\\app\\vso.adf"="Not Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"c:\\program files\\mcafee.com\\vso\\mcvsshld.exe"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"c:\\program files\\mcafee.com\\vso\\mcvsctl.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"c:\\program files\\mcafee.com\\vso\\vsoupd.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"c:\\program files\\mcafee.com\\vso\\mcmnhdlr.exe"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"c:\\program files\\mcafee.com\\vso\\mcvsmap.exe"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\mcshield.exe"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\ftl.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\naiavfin.exe"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\naievent.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\wormres.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\shlres.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\mcvsscrp.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\scrpres.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\vsolplg.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\vsolui.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\outscres.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\mcurial.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\patchw32.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\ftscnres.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\mcvsskt.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\emscnres.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\mcavtsub.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\VSO\\mcvsworm.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"C:\\Program Files\\McAfee.com\\Agent\\uninst\\vsoremui.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"c:\\program files\\mcafee.com\\vso\\edisk.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"c:\\program files\\mcafee.com\\shared\\mccomctl.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"c:\\progra~1\\mcafee.com\\vso\\mcvsshl.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"c:\\progra~1\\mcafee.com\\vso\\mcvsftsn.exe"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"c:\\progra~1\\mcafee.com\\vso\\mcvsescn.exe"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\McVsDiag\mcvsshld.exe]
"c:\\program files\\mcafee.com\\agent\\submgr\\6,0,0,3\\mcsubmgr.dll"="Found"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\property]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\property\notify]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\RescueDisk]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\RescueDisk]
"ImgUrl"="http://download.mcafee.com/molbin/iss-loc/virusscan/fr/ediskimg/1474560/ediskimg.cab"

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Tasks]

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com\Virusscan Online\Tasks\0]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Exchange\Client\Extensions]
"McAfee VirusScan Outlook Email Scanner"="4.0;c:\\progra~1\\mcafee.com\\vso\\vsolplg.dll;1;01000000000000;1100000;"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Exchange\Client\Extensions]
"McAfee SpamKiller"="4.0;C:\\PROGRA~1\\McAfee\\SPAMKI~1\\McMapi.dll;1;1;0010000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Exchange\Client\Extensions]
"McAfee SpamKiller Exchange Extension"="4.0;C:\\PROGRA~1\\McAfee\\SPAMKI~1\\mskolplg.dll;1;01000000000000;1100000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{39FD89BF-D3F1-45b6-BB56-3582CCF489E1}]
"MenuStatusBar"="McAfee Anti-Phishing Filter"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{39FD89BF-D3F1-45b6-BB56-3582CCF489E1}]
"MenuText"="McAf
0
Réponse 42 / 65
sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
1 juil. 2008 à 18:40
écoute ... avec le copier/ coller , par dela fin du rapport et remonte sur quelque ligne , car il me faut les 2 derniers chapitres pour le momment ... ^^
0
Réponse 43 / 65
Nico
1 juil. 2008 à 18:41
Et voici la fin normalement...:
dsl du retard et de la reponse en double j'ai un peu de mal à renvoyer la reponse...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{39FD89BF-D3F1-45b6-BB56-3582CCF489E1}]
"MenuText"="McAfee Anti-Phishing Filter"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MCAgentExe]
"command"="c:\\PROGRA~1\\mcafee.com\\agent\\mcagent.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MCUpdateExe]
"command"="C:\\PROGRA~1\\mcafee.com\\agent\\mcupdate.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MPFExe]
"command"="C:\\PROGRA~1\\McAfee.com\\PERSON~1\\MpfTray.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MSKDetectorExe]
"command"="C:\\PROGRA~1\\McAfee\\SPAMKI~1\\MSKDetct.exe /startup"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\OASClnt]
"command"="C:\\Program Files\\McAfee.com\\VSO\\oasclnt.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\VirusScan Online]
"command"="c:\\PROGRA~1\\mcafee.com\\vso\\mcvsshld.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\VSOCheckTask]
"command"="\"C:\\PROGRA~1\\McAfee.com\\VSO\\mcmnhdlr.exe\" /checktask"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\Program Files\\Dell\\McAfee\\"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D9E9B1B393A193D4FB08CD21DFED906C]
"B9E8892DF37CC224DAB46AE6EB521702"="C:\\Program Files\\Dell\\McAfee\\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MCUpdateExe"="C:\\PROGRA~1\\mcafee.com\\agent\\McUpdate.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MCAgentExe"="c:\\PROGRA~1\\mcafee.com\\agent\\mcagent.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MPFEXE"="C:\\PROGRA~1\\McAfee.com\\PERSON~1\\MpfTray.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSKAGENTEXE"="C:\\PROGRA~1\\McAfee\\SPAMKI~1\\MskAgent.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee Personal Firewall Plus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee Personal Firewall Plus]
"QuietDisplayName"="McAfee Personal Firewall Plus"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee Personal Firewall Plus]
"_DisplayName"="McAfee Personal Firewall Plus"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee Personal Firewall Plus]
"UninstallString"="c:\\PROGRA~1\\mcafee.com\\shared\\mcappins.exe /v=3 /uninstall=1 /appid=mpf /interact=1 /script_proactive=0 /start=c:\\PROGRA~1\\mcafee.com\\agent\\uninst\\mpfrem.ui::uninstall.htm"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee Personal Firewall Plus]
"DisplayIcon"="C:\\PROGRA~1\\McAfee.com\\PERSON~1\\MpfTray.exe,-0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mcafee SecurityCenter]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mcafee SecurityCenter]
"UninstallString"="c:\\PROGRA~1\\mcafee.com\\shared\\mcappins.exe /v=3 /uninstall=1 /appid=msc /interact=1 /script_proactive=0 /start=c:\\PROGRA~1\\mcafee.com\\agent\\uninst\\screm.ui::uninstall.htm"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mcafee SecurityCenter]
"DisplayIcon"="c:\\PROGRA~1\\mcafee.com\\agent\\mcagent.exe,-0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mcafee SecurityCenter]
"_DisplayName"="McAfee SecurityCenter"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mcafee SecurityCenter]
"QuietDisplayName"="McAfee SecurityCenter"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee SpamKiller]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee SpamKiller]
"_DisplayName"="McAfee SpamKiller"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee SpamKiller]
"QuietDisplayName"="McAfee SpamKiller"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee SpamKiller]
"UninstallString"="c:\\PROGRA~1\\mcafee.com\\shared\\mcappins.exe /v=3 /appid=MSK /uninstall=1 /interact=1 /script_proactive=0 /start=\"c:\\PROGRA~1\\mcafee.com\\agent\\uninst\\mskremui.dll::uninstall.htm\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee SpamKiller]
"DisplayIcon"="C:\\PROGRA~1\\McAfee\\SPAMKI~1\\MSKClnt.exe,-0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusScan Online]
"DisplayIcon"="c:\\PROGRA~1\\mcafee.com\\vso\\vscfgw32.dll,2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusScan Online]
"UninstallString"="c:\\PROGRA~1\\mcafee.com\\shared\\mcappins.exe /v=3 /uninstall=1 /appid=vso /interact=1 /script_proactive=0 /start=c:\\PROGRA~1\\mcafee.com\\agent\\uninst\\vsoremui.dll::uninstall.htm"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusScan Online]
"_DisplayName"="McAfee VirusScan"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusScan Online]
"QuietDisplayName"="McAfee VirusScan"

[HKEY_LOCAL_MACHINE\SOFTWARE\NeoWorx\NeoTrace\MVTX_MPF]
"AppPath"="C:\\PROGRA~1\\McAfee.com\\PERSON~1\\MVTX.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\NeoWorx\NeoTrace\MVTX_MPF]
"Directory"="C:\\Program Files\\McAfee.com\\Personal Firewall"

[HKEY_LOCAL_MACHINE\SOFTWARE\NeoWorx\NeoTrace\MVTX_MPF]
"VerName"="Integrated McAfee Personal Firewall Visual Trace 3.2.5"

[HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\VirusScan Engine\4.0.xx]
"szInstallDir"="C:\\Program Files\\McAfee.com\\VSO"

[HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\VirusScan Engine\4.0.xx]
"DAT"="C:\\Program Files\\McAfee.com\\VSO\\Dat\\4816\\"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MCDETECT.EXE\0000]
"DeviceDesc"="McAfee WSC Integration"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MCSHIELD\0000]
"DeviceDesc"="McAfee.com McShield"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MCTSKSHD.EXE\0000]
"DeviceDesc"="McAfee Task Scheduler"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MCUPDMGR.EXE\0000]
"DeviceDesc"="McAfee SecurityCenter Update Manager"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MPFSERVICE\0000]
"DeviceDesc"="McAfee Personal Firewall Service"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MSKSERVICE\0000]
"DeviceDesc"="McAfee SpamKiller Server"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\McLogEvent]
"EventMessageFile"="C:\\Program Files\\McAfee.com\\VSO\\NAIEvent.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\McDetect.exe]
"DisplayName"="McAfee WSC Integration"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\McShield]
"DisplayName"="McAfee.com McShield"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\McTskshd.exe]
"DisplayName"="McAfee Task Scheduler"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mcupdmgr.exe]
"DisplayName"="McAfee SecurityCenter Update Manager"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MpfService]
"DisplayName"="McAfee Personal Firewall Service"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MpfService]
"FailureCommand"="\"C:\\PROGRA~1\\McAfee.com\\PERSON~1\\MpfService.exe\" /servicecrash /fail=%1%"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MskService]
"DisplayName"="McAfee SpamKiller Server"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_MCDETECT.EXE\0000]
"DeviceDesc"="McAfee WSC Integration"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_MCSHIELD\0000]
"DeviceDesc"="McAfee.com McShield"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_MCTSKSHD.EXE\0000]
"DeviceDesc"="McAfee Task Scheduler"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_MCUPDMGR.EXE\0000]
"DeviceDesc"="McAfee SecurityCenter Update Manager"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_MPFSERVICE\0000]
"DeviceDesc"="McAfee Personal Firewall Service"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_MSKSERVICE\0000]
"DeviceDesc"="McAfee SpamKiller Server"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Eventlog\Application\McLogEvent]
"EventMessageFile"="C:\\Program Files\\McAfee.com\\VSO\\NAIEvent.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\McDetect.exe]
"DisplayName"="McAfee WSC Integration"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\McShield]
"DisplayName"="McAfee.com McShield"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\McTskshd.exe]
"DisplayName"="McAfee Task Scheduler"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\mcupdmgr.exe]
"DisplayName"="McAfee SecurityCenter Update Manager"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\MpfService]
"DisplayName"="McAfee Personal Firewall Service"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\MpfService]
"FailureCommand"="\"C:\\PROGRA~1\\McAfee.com\\PERSON~1\\MpfService.exe\" /servicecrash /fail=%1%"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\MskService]
"DisplayName"="McAfee SpamKiller Server"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MCDETECT.EXE\0000]
"DeviceDesc"="McAfee WSC Integration"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MCSHIELD\0000]
"DeviceDesc"="McAfee.com McShield"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MCTSKSHD.EXE\0000]
"DeviceDesc"="McAfee Task Scheduler"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MCUPDMGR.EXE\0000]
"DeviceDesc"="McAfee SecurityCenter Update Manager"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MPFSERVICE\0000]
"DeviceDesc"="McAfee Personal Firewall Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSKSERVICE\0000]
"DeviceDesc"="McAfee SpamKiller Server"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\McLogEvent]
"EventMessageFile"="C:\\Program Files\\McAfee.com\\VSO\\NAIEvent.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\McDetect.exe]
"DisplayName"="McAfee WSC Integration"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\McShield]
"DisplayName"="McAfee.com McShield"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\McTskshd.exe]
"DisplayName"="McAfee Task Scheduler"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mcupdmgr.exe]
"DisplayName"="McAfee SecurityCenter Update Manager"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MpfService]
"DisplayName"="McAfee Personal Firewall Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MpfService]
"FailureCommand"="\"C:\\PROGRA~1\\McAfee.com\\PERSON~1\\MpfService.exe\" /servicecrash /fail=%1%"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MskService]
"DisplayName"="McAfee SpamKiller Server"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\McAfee.com]

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\McAfee.com\Personal Firewall]

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\McAfee.com\SpamKiller]

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\McAfee.com\SpamKiller\AntiPhish]

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\McAfee]

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Program Files\\McAfee.com\\Agent\\vsoinst.exe"="vsoinst"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Program Files\\McAfee.com\\Agent\\mcagent.exe"="McAfee SecurityCenter Agent"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"c:\\program files\\mcafee.com\\shared\\mghtml.exe"="McAfee Security HTML Dialog"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\PROGRA~1\\McAfee\\SPAMKI~1\\MSKSrvr.exe"="McAfee SpamKiller Server"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\PROGRA~1\\McAfee.com\\PERSON~1\\MpfService.exe"="McAfee Personal Firewall Service"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"c:\\program files\\mcafee.com\\vso\\mcvsshld.exe"="McAfee VirusScan ActiveShield Resource"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\PROGRA~1\\mcafee.com\\agent\\McUpdate.exe"="McAfee SecurityCenter Update Engine"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\PROGRA~1\\mcafee.com\\agent\\mcagent.exe"="McAfee SecurityCenter Agent"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\PROGRA~1\\McAfee.com\\PERSON~1\\MpfTray.exe"="McAfee Personal Firewall Tray Monitor"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Program Files\\McAfee.com\\Agent\\mcregwiz.exe"="McRegWiz Module"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\PROGRA~1\\mcafee\\SPAMKI~1\\mskagent.exe"="McAfee SpamKiller Agent Interface module"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\DOCUME~1\\NICO~1.MON\\LOCALS~1\\Temp\\200871115111_mcappins.exe"="McAfee Application Installer"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Program Files\\McAfee.com\\Personal Firewall\\MpfConsole.exe"="McAfee Personal Firewall Console"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Program Files\\McAfee.com\\Agent\\mcdeltag.exe"="McDelTag"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Program Files\\McAfee.com\\Agent\\McSchdlr.exe"="McAfee VirusScan Task Scheduler"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Program Files\\McAfee.com\\Shared\\mcappins.exe"="McAfee Application Installer"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Program Files\\McAfee.com\\Shared\\mcinfo.exe"="McAfee SecurityCenter Update Info"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Program Files\\McAfee.com\\VSO\\mcinsupd.exe"="McAfee VirusScan Daily Update Module"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Program Files\\McAfee.com\\VSO\\McVSEscn.exe"="McAfee VirusScan E-mail Scan Module"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Program Files\\McAfee.com\\VSO\\mcvsftsn.exe"="McAfee VirusScan Instant Messenger Scan Module"

[HKEY_USERS\S-1-5-21-3584926684-1609661118-3468831341-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Program Files\\McAfee.com\\Personal Firewall\\MpfService.exe"="McAfee Personal Firewall Service"

*******************
[Fichier]
*******************

c:\Documents and Settings\All Users\Application Data\McAfee
c:\Documents and Settings\All Users\Application Data\McAfee.com
c:\Documents and Settings\All Users\Application Data\McAfee.com Personal Firewall
c:\Documents and Settings\All Users\Menu D‚marrer\Programmes\McAfee
c:\Documents and Settings\LocalService\Application Data\McAfee.com Personal Firewall
c:\Documents and Settings\Nico.MON-ORDI\Application Data\McAfee.com Personal Firewall
c:\Program Files\Dell\McAfee
c:\Program Files\McAfee
c:\Program Files\McAfee.com


*********************
[Même date]
*********************

[01/07/2008 ] ---> C:\hiberfil.sys
[01/07/2008 ] ---> C:\WINDOWS\0.log
[01/07/2008 ] ---> C:\WINDOWS\ntbtlog.txt
[01/07/2008 ] ---> C:\WINDOWS\setupapi.log
[01/07/2008 ] ---> C:\WINDOWS\system32\mcinsctl.dll
[R‚pertoire ] --- REP ---> C:\Program Files\Files



Outil Aide Diagnostic By !aur3n7 Version 1.1
----------------------------------
§§§§§ Fin Rapport §§§§§
----------------------------------
0
Réponse 44 / 65
Nico
1 juil. 2008 à 18:42
Voila je pense que c'est ce qu'il faut ^^
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 45 / 65
sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
1 juil. 2008 à 19:14
Très bien =)

Télécharges OTMoveIt (de Old_Timer) sur ton Bureau.
http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe

Impératif : Démarrer en mode sans echec :
Comment aller en Mode sans échec
1) Redémarres ton ordi
2) Tapotes la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip"
3) Tu verras un écran avec options de démarrage apparaître
4) Choisis la première option : Sans Échec, et valide avec "Entrée"
5) Choisis ton compte habituel, et non Administrateur (si besoin ... )
(attention : pas de connexion possible en mode sans échec , donc copies ou imprimes bien la manipe pour éviter les erreur ...)

fermes toute tes applications en cours .

clic double sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,

C:\Documents and Settings\All Users\Application Data\McAfee
C:\Documents and Settings\All Users\Application Data\McAfee.com
C:\Documents and Settings\All Users\Application Data\McAfee.com Personal Firewall
C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\McAfee
C:\Documents and Settings\LocalService\Application Data\McAfee.com Personal Firewall
C:\Documents and Settings\Nico.MON-ORDI\Application Data\McAfee.com Personal Firewall
C:\Program Files\Dell\McAfee
C:\Program Files\McAfee
C:\Program Files\McAfee.com

et colles-la dans le cadre de gauche de OTMoveIt2 :
Paste standard List of Files/Folders to be moved.

cliques sur MoveIt! pour lancer la suppression.
le résultat apparaîtra dans le cadre Results.

cliques sur Exit pour fermer.

--->postes le rapport situé dans " C:\OTMoveIt\MovedFiles."

il te sera peut-être demandé de redémarrer le pc pour achever la suppression.
si c'est le cas acceptes par "Yes".
0
Réponse 46 / 65
Nico
1 juil. 2008 à 19:26
Opération effectué! rapport:

C:\Documents and Settings\All Users\Application Data\McAfee\SpamKiller\Users\2\Front\1 moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\SpamKiller\Users\2\Front moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\SpamKiller\Users\2\Back\1 moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\SpamKiller\Users\2\Back moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\SpamKiller\Users\2 moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\SpamKiller\Users\1 moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\SpamKiller\Users moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\SpamKiller\Updates moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\SpamKiller\Templates moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\SpamKiller\Sounds moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\SpamKiller\Logs moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\SpamKiller\Backup moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee\SpamKiller moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee.com\VSO\Quarantine moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee.com\VSO\ODSLog moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee.com\VSO\OASLogs moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee.com\VSO\Data moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee.com\VSO moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee.com\download moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee.com\Agent\update moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee.com\Agent\RegWiz\RegApp moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee.com\Agent\RegWiz moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee.com\Agent\News moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee.com\Agent\Logs\TaskScheduler moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee.com\Agent\Logs moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee.com\Agent\Cache moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee.com\Agent moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee.com moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee.com Personal Firewall\data\sports moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee.com Personal Firewall\data moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee.com Personal Firewall\Archive moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee.com Personal Firewall\appicons moved successfully.
C:\Documents and Settings\All Users\Application Data\McAfee.com Personal Firewall moved successfully.
File/Folder C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\McAfee not found.
C:\Documents and Settings\LocalService\Application Data\McAfee.com Personal Firewall moved successfully.
C:\Documents and Settings\Nico.MON-ORDI\Application Data\McAfee.com Personal Firewall moved successfully.
C:\Program Files\Dell\McAfee moved successfully.
C:\Program Files\McAfee\SpamKiller moved successfully.
C:\Program Files\McAfee moved successfully.
C:\Program Files\McAfee.com\VSO\Res00 moved successfully.
C:\Program Files\McAfee.com\VSO\Dat\4816 moved successfully.
C:\Program Files\McAfee.com\VSO\Dat moved successfully.
C:\Program Files\McAfee.com\VSO moved successfully.
C:\Program Files\McAfee.com\Shared\mcuicfg\6,0,0,4 moved successfully.
C:\Program Files\McAfee.com\Shared\mcuicfg moved successfully.
C:\Program Files\McAfee.com\Shared moved successfully.
C:\Program Files\McAfee.com\Personal Firewall\help moved successfully.
C:\Program Files\McAfee.com\Personal Firewall\data\sports moved successfully.
C:\Program Files\McAfee.com\Personal Firewall\data\mvtx\maps moved successfully.
C:\Program Files\McAfee.com\Personal Firewall\data\mvtx moved successfully.
C:\Program Files\McAfee.com\Personal Firewall\data moved successfully.
C:\Program Files\McAfee.com\Personal Firewall moved successfully.
C:\Program Files\McAfee.com\Microsoft CAPICOM 2.1.0.2\License moved successfully.
C:\Program Files\McAfee.com\Microsoft CAPICOM 2.1.0.2\Lib\X86 moved successfully.
C:\Program Files\McAfee.com\Microsoft CAPICOM 2.1.0.2\Lib moved successfully.
C:\Program Files\McAfee.com\Microsoft CAPICOM 2.1.0.2 moved successfully.
C:\Program Files\McAfee.com\Agent\Uninst moved successfully.
C:\Program Files\McAfee.com\Agent\submgr\6,0,0,3 moved successfully.
C:\Program Files\McAfee.com\Agent\submgr\6,0,0,16 moved successfully.
C:\Program Files\McAfee.com\Agent\submgr moved successfully.
C:\Program Files\McAfee.com\Agent\oeminfo\fr-ca\105-99 moved successfully.
C:\Program Files\McAfee.com\Agent\oeminfo\fr-ca\105-98 moved successfully.
C:\Program Files\McAfee.com\Agent\oeminfo\fr-ca\105-102 moved successfully.
C:\Program Files\McAfee.com\Agent\oeminfo\fr-ca\105-101 moved successfully.
C:\Program Files\McAfee.com\Agent\oeminfo\fr-ca\105-100 moved successfully.
C:\Program Files\McAfee.com\Agent\oeminfo\fr-ca moved successfully.
C:\Program Files\McAfee.com\Agent\oeminfo\fr\105-97 moved successfully.
C:\Program Files\McAfee.com\Agent\oeminfo\fr\105-96 moved successfully.
C:\Program Files\McAfee.com\Agent\oeminfo\fr\105-95 moved successfully.
C:\Program Files\McAfee.com\Agent\oeminfo\fr\105-94 moved successfully.
C:\Program Files\McAfee.com\Agent\oeminfo\fr\105-93 moved successfully.
C:\Program Files\McAfee.com\Agent\oeminfo\fr moved successfully.
C:\Program Files\McAfee.com\Agent\oeminfo moved successfully.
C:\Program Files\McAfee.com\Agent\Custom_Uninstall moved successfully.
C:\Program Files\McAfee.com\Agent\app moved successfully.
C:\Program Files\McAfee.com\Agent moved successfully.
C:\Program Files\McAfee.com moved successfully.

OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 07012008_192111
0
Réponse 47 / 65
sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
1 juil. 2008 à 19:35
ok ...

---> maitenant un gros coup de CCleaner ( registre compris ! )


Puis ensuite, refais ce-ci pour voir ce qui reste :

Double clique sur l'icone OAD pour le lancer

- nom du fichier à rechercher --->tape ou fais un copier coller de : McAfee
- Type de recherche : sélectionne l'option 6 puis valide ["entrée"]

OAD va maintenant rechercher le fichier. Laisse le travailler jusqu'à ce qu'il en ait terminé.
Le rapport de recherche s'affichera automatiquement à l’écran dès qu'il aura terminé.

Note : suivant la taille des disques durs cette recherche peut prendre plusieurs minutes. Sois patient ...

- Sauvegardes ce rapport sur ton Bureau et fais un copier / coller de celui-c dans ton prochain post.
0
Réponse 48 / 65
Nico
1 juil. 2008 à 19:40
Et voici le rapport:

01/07/2008 ---- 19:39:13,40

----------------------------------
§§§§§§ [McAfee] §§§§§§
----------------------------------
[X] Registre

-------------- [ ] rapide
-- Fichier --- [ ] disque systeme
------------- [X] complete


********************
[Registre]
********************

Aucune entrée détectée

*******************
[Fichier]
*******************

c:\_OTMoveIt\MovedFiles\07012008_192111\Documents and Settings\All Users\Application Data\McAfee
c:\_OTMoveIt\MovedFiles\07012008_192111\Documents and Settings\All Users\Application Data\McAfee.com
c:\_OTMoveIt\MovedFiles\07012008_192111\Documents and Settings\All Users\Application Data\McAfee.com Personal Firewall
c:\_OTMoveIt\MovedFiles\07012008_192111\Documents and Settings\LocalService\Application Data\McAfee.com Personal Firewall
c:\_OTMoveIt\MovedFiles\07012008_192111\Documents and Settings\Nico.MON-ORDI\Application Data\McAfee.com Personal Firewall
c:\_OTMoveIt\MovedFiles\07012008_192111\Program Files\Dell\McAfee
c:\_OTMoveIt\MovedFiles\07012008_192111\Program Files\McAfee
c:\_OTMoveIt\MovedFiles\07012008_192111\Program Files\McAfee.com
c:\Documents and Settings\All Users\Menu D‚marrer\Programmes\McAfee


*********************
[Même date]
*********************

[01/07/2008 ] ---> C:\hiberfil.sys
[01/07/2008 ] ---> C:\resultat.txt
[01/07/2008 ] ---> C:\WINDOWS\system32\mcinsctl.dll
[R‚pertoire ] --- REP ---> C:\Program Files\Files



Outil Aide Diagnostic By !aur3n7 Version 1.1
----------------------------------
§§§§§ Fin Rapport §§§§§
----------------------------------
0
Réponse 49 / 65
sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
1 juil. 2008 à 19:45
Bien ! ... maintenant refais un scan hijackthis et postes moi le nouveau rapport obtenu ...
0
Réponse 50 / 65
Nico
1 juil. 2008 à 19:49
Voila!:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:48:54, on 01/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logishrd\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Dell Network Assistant\hnm_svc.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O2 - BHO: (no name) - {41D68ED8-4CFF-4115-88A6-6EBB8AF19000} - (no file)
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: McAfee Anti-Phishing Filter - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Advanced Networking Service (hnmsvc) - SingleClick Systems - C:\Program Files\Dell Network Assistant\hnm_svc.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logishrd\lvmvfm\LVPrcSrv.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - Unknown owner - c:\program files\mcafee.com\agent\mcdetect.exe (file missing)
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe (file missing)
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - Unknown owner - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe (file missing)
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - Unknown owner - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe (file missing)
O23 - Service: McAfee Personal Firewall Service (MpfService) - Unknown owner - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe (file missing)
O23 - Service: McAfee SpamKiller Server (MskService) - Unknown owner - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe (file missing)
0
Réponse 51 / 65
sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
1 juil. 2008 à 20:02
1- Fermes toutes tes applications et déconnectes toi .

Relances Hijackthis mais click sur " Do a scan only "
Tu vois donc apparaitre le résultat du scan : une multitudes de lignes ,chacunes précédées d'un carré vide .
Tu vas cliquer sur les carrés des lignes suivantes :

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O2 - BHO: (no name) - {41D68ED8-4CFF-4115-88A6-6EBB8AF19000} - (no file)
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O23 - Service: McAfee WSC Integration (McDetect.exe) - Unknown owner - c:\program files\mcafee.com\agent\mcdetect.exe (file missing)
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe (file missing)
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - Unknown owner - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe (file missing)
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - Unknown owner - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe (file missing)
O23 - Service: McAfee Personal Firewall Service (MpfService) - Unknown owner - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe (file missing)
O23 - Service: McAfee SpamKiller Server (MskService) - Unknown owner - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe (file missing)

Tu cliques en bas sur le bouton FIX CHECKED et valides .

2- refait un coup de CCleaner ( registre compris )

Ton nouvel antivirus gratuis , le meilleur du momment :

3- Télécharges AntiVir ici :
https://www.pcastuces.com/logitheque/antivir.htm
ou
https://www.avira.com/

Anti-virus gratuit ( en anglais )
Aide AntiVir : https://www.malekal.com/avira-free-security-antivirus-gratuit/

Installes le et mets le à jour (fais ce-ci très régulièrement ) .

Si jamais tu as un problème avec la mise à jour , regardes ici :
http://www.commentcamarche.net/faq/sujet 8622 mise a jour d antivir impossible


Fais ce réglage :

***************************************
Une fois AntiVir ouvert click sur configuration et coches la case "expert mode" .
*Puis click sur configuration en haut a droite; dans la nouvelle fenetre à gauche ->scanner -> coches "scan all files" et en dessous ->scanner priority = High
*coches : allow stopping the scanner, comme cela tu peux faire une pause pendant le scan si tu le desir.
*puis sur la droite, coches les cases suivantes :
scan boot sectors of selected drives
scan master boot sectors
scan memory
search for rootkit before scan
et décoches :
ignore off line files
*toujours a gauche -> scan -> deploie -> heuristique -> macrovirus heuristic = coché et en dessous -> win32 heuristic la case cochée et high detection level aussi ...

---> cliques sur "OK" pour valider le réglage ...
****************************************

Puit refais un hijack pour voir si tout est Ok et attends la suite ...
0
Réponse 52 / 65
Nico
1 juil. 2008 à 20:22
Ok j'ai tout fait comme indiqué et voila le rapport Hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:19:53, on 01/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logishrd\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Dell Network Assistant\hnm_svc.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O9 - Extra button: (no name) - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: McAfee Anti-Phishing Filter - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Advanced Networking Service (hnmsvc) - SingleClick Systems - C:\Program Files\Dell Network Assistant\hnm_svc.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logishrd\lvmvfm\LVPrcSrv.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - Unknown owner - c:\program files\mcafee.com\agent\mcdetect.exe (file missing)
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe (file missing)
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - Unknown owner - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe (file missing)
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - Unknown owner - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe (file missing)
O23 - Service: McAfee Personal Firewall Service (MpfService) - Unknown owner - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe (file missing)
O23 - Service: McAfee SpamKiller Server (MskService) - Unknown owner - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe (file missing)
0
Réponse 53 / 65
sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
1 juil. 2008 à 20:48
ok tu as oublier quelques ligne non ?

1- Fermes toutes tes applications et déconnectes toi .

Relances Hijackthis mais click sur " Do a scan only "
Tu vois donc apparaitre le résultat du scan : une multitudes de lignes ,chacunes précédées d'un carré vide .
Tu vas cliquer sur les carrés des lignes suivantes :

O9 - Extra button: (no name) - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: McAfee Anti-Phishing Filter - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - C:\WINDOWS\system32\shdocvw.dll
O23 - Service: McAfee WSC Integration (McDetect.exe) - Unknown owner - c:\program files\mcafee.com\agent\mcdetect.exe (file missing)
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe (file missing)
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - Unknown owner - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe (file missing)
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - Unknown owner - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe (file missing)
O23 - Service: McAfee Personal Firewall Service (MpfService) - Unknown owner - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe (file missing)
O23 - Service: McAfee SpamKiller Server (MskService) - Unknown owner - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe (file missing)

Tu cliques en bas sur le bouton FIX CHECKED et valides .

2- refais un coup de CCleaner ( registre compris )

3- impératif : redémarres en mode sans échec

lances un scan complet de ton PC avec AntiVir ; mets tout ce qu'il peut trouver en "quarantaine " ....

Redémarres ton PC une fois finis et postes moi le rapport obtenu pour analyse ....
0
Réponse 54 / 65
Nico
1 juil. 2008 à 21:59
Un scan complet! voila le rapport:

Avira AntiVir Personal
Report file date: mardi 1 juillet 2008 20:53

Scanning for 1371745 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Boot mode: Save mode
Username: Nico
Computer name: MON-ORDI

Version information:
BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00
AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:56
AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:37
LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:23
LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:40
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 18:12:58
ANTIVIR2.VDF : 7.0.5.20 142336 Bytes 30/06/2008 18:13:02
ANTIVIR3.VDF : 7.0.5.30 47616 Bytes 01/07/2008 18:13:03
Engineversion : 8.1.0.59
AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21
AESCRIPT.DLL : 8.1.0.44 278907 Bytes 01/07/2008 18:13:42
AESCN.DLL : 8.1.0.22 119157 Bytes 01/07/2008 18:13:40
AERDL.DLL : 8.1.0.20 418165 Bytes 01/07/2008 18:13:39
AEPACK.DLL : 8.1.1.6 364918 Bytes 01/07/2008 18:13:35
AEOFFICE.DLL : 8.1.0.20 192891 Bytes 01/07/2008 18:13:32
AEHEUR.DLL : 8.1.0.32 1274231 Bytes 01/07/2008 18:13:30
AEHELP.DLL : 8.1.0.15 115063 Bytes 01/07/2008 18:13:15
AEGEN.DLL : 8.1.0.29 307573 Bytes 01/07/2008 18:13:13
AEEMU.DLL : 8.1.0.6 430451 Bytes 01/07/2008 18:13:09
AECORE.DLL : 8.1.0.31 168310 Bytes 01/07/2008 18:13:06
AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:53
AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:50
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:47
AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:49
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:31
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:39
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:25
RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:11

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: on
Scan all files...................: All files
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: high

Start of the scan: mardi 1 juillet 2008 20:53

Starting search for hidden objects.
The driver could not be initialized.

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
11 processes with 11 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
[WARNING] Le périphérique n'est pas prêt.
Master boot sector HD2
[INFO] No virus was found!
[WARNING] Le périphérique n'est pas prêt.
Master boot sector HD3
[INFO] No virus was found!
[WARNING] Le périphérique n'est pas prêt.
Master boot sector HD4
[INFO] No virus was found!
[WARNING] Le périphérique n'est pas prêt.
Master boot sector HD5
[INFO] No virus was found!
[WARNING] Le périphérique n'est pas prêt.

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '19' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
Begin scan in 'D:\' <Sauvegarder>


End of the scan: mardi 1 juillet 2008 21:54
Used time: 1:00:30 min

The scan has been done completely.

8676 Scanning directories
785871 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
785871 Files not concerned
3626 Archives were scanned
6 Warnings
0 Notes
0
Réponse 55 / 65
sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
1 juil. 2008 à 22:06
impeccable ... rapport vierge ^^

Il faut maintenant s'occuper du reste :

Tout d'abors l'anti-spyware :

-Télécharges Spybot search and destroy (version complète et gratuite) :
https://www.safer-networking.org/?page=download

Installes le , mets le à jour et lance "la vaccination"--->vaccines tant que le compteur "Non protégé" n'arrive pas à 0.

Aide pour utilisation Spybot ici (merci Balltrap ;) ) : http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm

Lances une "recherche" :
une fois le scan terminé, vérifies que tout ce qu'il a trouvé (surtout ce qui est en rouge) soit valider puis fait "corriger les prb" .
PS : dans certains cas, il te sera demander de planifier la suite des "corrections" au redémarrage du PC , acceptes .

dis moi ce que cela à donner pour le scan et postes moi un nouveau rapport hijackthis pour contrpoler ...
0
Réponse 56 / 65
Nico
1 juil. 2008 à 22:42
Et bien pour le scan il m'a trouvé 2 éléments: Double Click et PWS.LD PinchlE et je les ai "corrigés" comme demandés.

Voila le rapport Hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:41:57, on 01/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logishrd\lvmvfm\LVPrcSrv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Dell Network Assistant\hnm_svc.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Advanced Networking Service (hnmsvc) - SingleClick Systems - C:\Program Files\Dell Network Assistant\hnm_svc.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logishrd\lvmvfm\LVPrcSrv.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - Unknown owner - c:\program files\mcafee.com\agent\mcdetect.exe (file missing)
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe (file missing)
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - Unknown owner - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe (file missing)
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - Unknown owner - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe (file missing)
O23 - Service: McAfee Personal Firewall Service (MpfService) - Unknown owner - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe (file missing)
O23 - Service: McAfee SpamKiller Server (MskService) - Unknown owner - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe (file missing)
0
Réponse 57 / 65
sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
1 juil. 2008 à 22:54
Y a un petit hic ... ( avec des reste de McAfee ...)

vas dans "démarrage"/commande "Executer" : tu tapes " msconfig "et valides ...

Dans cette nouvelle fenêtre , tu vas sur l'onglet " sevices " :
décoches les cases devant les services de McAfee correspondant à ces .exe :
McAfee WSC Integration (McDetect.exe)
McAfee.com McShield (McShield.exe)
McAfee Task Scheduler (McTskshd.exe)
McAfee SecurityCenter Update Manager (mcupdmgr.exe)
McAfee Personal Firewall Service (MpfService)
McAfee SpamKiller Server (MskService)

--> puis valides la modif et laisse toi guider ...

Une fois fait , postes un nouvelle hijack pour vérifier ....
0
Réponse 58 / 65
Nico
1 juil. 2008 à 23:01
Voila c'est fait + le rapport:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:59:36, on 01/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logishrd\lvmvfm\LVPrcSrv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Dell Network Assistant\hnm_svc.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Advanced Networking Service (hnmsvc) - SingleClick Systems - C:\Program Files\Dell Network Assistant\hnm_svc.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logishrd\lvmvfm\LVPrcSrv.exe
0
Réponse 59 / 65
sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
1 juil. 2008 à 23:10
Au poil ^^

dernière étape pour tes défences , le par-feu !

je te conseil de télécharger celui-ci :
Armor (Gratuit biensûr ^^ ) .
Télécharges le set-up ici : http://www.commentcamarche.net/telecharger/telecharger 34055356 online armor personal firewall

! Attention ! : avant toute instalation , désactiver le pare-feu de windows ! ( via paneau de config./pare-feu ) .

Tuto pour Armor : https://www.malekal.com/tutorial-online-armor-free/


---> une fois ce-ci installer et tout , fais moi un dernier rapport hijackthis pour contrôler ... puis on finalisera le tout ;)
0
sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
1 juil. 2008 à 23:17
Ps : si tu veut que "msconfig" ne se mette plus en route à chaque démarrage , sur la première fenêtre qui apparait à l'arrivée du bureau, coche la petite case et valide ... ^^
0
Réponse 60 / 65
Nico
1 juil. 2008 à 23:19
Ok merci beaucoup du conseil j'ai telechargé Armor, le rapport Hijackthis est a suivre...
0

Discussions similaires

Est ce que le site tlauncher est dangereux ?
caribou -
bazfile -

1 réponse
Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
symboles et écritures pour nick msn
Pando -
roro -

20 réponses
4 virus en raison d’un porno ????
valou -
Bello040420 -

9 réponses
Peut on retrouver des conversations MSN?
Moi51 -
benzar -

36 réponses