attention virus!!!Résolu/Fermé

Question

Bonjour,
salut tout le monde, jai chopé un virus est ce que quelqu'un peut m'aider? avast detecte trojan-gen (que peut-il faire comme degats??)!!! et impossible de le supprimer.
voici une analyse hijackthis :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:17:06, on 16/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe
C:\Program Files\Fichiers communs\Logitech\G-series Software\LGDCore.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ASUS\PC Probe II\Probe2.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\ASUS WiFi-AP Solo\RtWLan.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\StartClock\StartClock.exe
C:\Program Files\ASUS\AASP\1.00.32\aaCenter.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\ControlMK\ControlMK.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.fr...
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\xRaidSetup.exe boot
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
O4 - HKLM\..\Run: [Ai Nap] "C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Fichiers communs\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Launch PC Probe II] "C:\Program Files\ASUS\PC Probe II\Probe2.exe" 1
O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [SuperCopier 2 (explorer file copy replacement)] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
O4 - Startup: StartClock.lnk = C:\Program Files\StartClock\StartClock.exe
O4 - Global Startup: ASUS WiFi-AP Solo.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - C:PROGRA~1MICROS~2Office12EXCEL.EXE...
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CS2\Services\Tcpip\..\{33A930C7-2CE0-47AE-9FCE-790C3AED0DB3}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS3\Services\Tcpip\..\{33A930C7-2CE0-47AE-9FCE-790C3AED0DB3}: NameServer = 208.67.222.222,208.67.220.220
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTServ.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

jlpjlp · Answer

slt,


scan avec 
MalwareByte's Anti-Malware après mise a jour, en mode normal et vire ce qui est trouvé et colle le rapport

https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

breizh-222 · Answer

je lai fait tal avec spyboth, il ma trouver pa mal de truc mais sa reviens tout le temps, ensuite je lai fait avec malwerbyte's et il ma trouver un ptit truc que jai effacer! mais le bleme c que ca reviens apres redemarrage! le raport hijackthis sa donne koi??

jlpjlp · Answer

rien

fais ceci:



Télécharge ici :

http://images.malwareremoval.com/random/RSIT.exe

random's system information tool (RSIT) par andom/random et sauvegarde-le sur le Bureau.

Double-clique sur RSIT.exe afin de lancer RSIT.

Clique Continue à l'écran Disclaimer.

Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.

Poste le contenu de log.txt (<<qui sera affiché)
ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).

NB : Les rapports sont sauvegardés dans le dossier C:\rsit

breizh-222 · Answer

ok bouge pas!!

breizh-222 · Answer

Logfile of random's system information tool 1.04 (written by random/random)
Run by breizh-222 at 2008-12-16 20:44:20
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 29 GB (58%) free of 50 GB
Total RAM: 2047 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:44:21, on 16/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe
C:\Program Files\Fichiers communs\Logitech\G-series Software\LGDCore.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ASUS\PC Probe II\Probe2.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\ASUS WiFi-AP Solo\RtWLan.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\StartClock\StartClock.exe
C:\Program Files\ASUS\AASP\1.00.32\aaCenter.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\ControlMK\ControlMK.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\breizh-222\Bureau	élécharger firefox\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\breizh-222.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\xRaidSetup.exe boot
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
O4 - HKLM\..\Run: [Ai Nap] "C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Fichiers communs\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Launch PC Probe II] "C:\Program Files\ASUS\PC Probe II\Probe2.exe" 1
O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [SuperCopier 2 (explorer file copy replacement)] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
O4 - Startup: StartClock.lnk = C:\Program Files\StartClock\StartClock.exe
O4 - Global Startup: ASUS WiFi-AP Solo.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CS2\Services\Tcpip\..\{33A930C7-2CE0-47AE-9FCE-790C3AED0DB3}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS3\Services\Tcpip\..\{33A930C7-2CE0-47AE-9FCE-790C3AED0DB3}: NameServer = 208.67.222.222,208.67.220.220
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTServ.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

breizh-222 · Answer

info.txt logfile of random's system information tool 1.04 2008-12-16 20:44:23

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
AI Suite-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{310BC5E2-31AF-49BB-904D-E71EB93645DC}\setup.exe" -l0x40c 
ALUpdate-->"C:\Program Files\ESTsoft\ALUpdate\unins000.exe"
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
ASUS WiFi-AP Solo-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8B3F4499-32E6-470D-8586-E6C03420F889}\Setup.exe" -l0x9 REMOVE
ASUSUpdate-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{587178E7-B1DF-494E-9838-FA4DD36E873C}\setup.exe" -l0x40c 
ATI - Software Uninstall Utility-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Catalyst Control Center-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x0 
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI Parental Control & Encoder-->MsiExec.exe /I{36CDA33B-909B-4719-97D1-C4B99309BDC7}
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
AVIVO-->MsiExec.exe /X{5399ACAF-7B15-43D5-9233-4E797B184FD2}
Catalyst Control Center - Branding-->MsiExec.exe /I{FA3A247D-437A-455E-A88F-7EB6E5F9E799}
cbgeo-->C:\Program Files\cbgeo\uninstall.exe
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CDDRV_Installer-->MsiExec.exe /I{0C826C5B-B131-423A-A229-C71B3CACCD6A}
Code de la route-->"C:\Program Files\Code de la route\unins000.exe"
ControlMK 0.232-->C:\Program Files\ControlMK\uninst.exe
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
CULTIX 2.0-->c:\Program Files\cultix\Uninstal.exe
eMule-->"C:\Program Files\eMule\Uninstall.exe"
EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
ERUNT 1.1j-->"C:\Program Files\ERUNT\unins000.exe"
Guide routier France-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DC828A42-3901-4178-81AF-712A55AC5A65}\SETUP.exe" -l0x40c  -removeonly
High Definition Audio Driver Package - KB888111-->C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall  /qb+ REBOOTPROMPT=""
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
IncrediMail Xe-->C:\Program Files\IncrediMail\bin\ImSetup.exe /remove /addon:IncrediMail /log:IncMail.log
J2SE Development Kit 5.0 Update 11-->MsiExec.exe /I{32A3A4F4-B792-11D6-A78A-00B0D0150110}
J2SE Runtime Environment 5.0 Update 11-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
J2SE Runtime Environment 5.0 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150030}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
JMB36X Raid Configurer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}\setup.exe" -l0x40c  -removeonly
Karen's Directory Printer-->C:\Program Files\Karen's Power Tools\Directory Printer\uninst.exe
KhalInstallWrapper-->MsiExec.exe /I{3101CB58-3482-4D21-AF1A-7057FC935355}
K-Lite Mega Codec Pack 4.1.7-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
LimeWire PRO 4.12.3-->"E:	éléchargement\limewire\uninstall.exe"
Logitech G11 Keyboard Software 1.03-->MsiExec.exe /X{77A1C7DD-E4F6-4057-92FC-710219215987}
Logitech SetPoint-->C:\Program Files\InstallShield Installation Information\{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}\setup.exe -runfromtemp -l0x040c -removeonly
Malware Removal Tool-->"C:\Program Files\Malware Removal Tool\unins000.exe"
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Mass Effect-->C:\Program Files\Fichiers communs\BioWare\Uninstall Mass Effect.exe
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Micro Application - 9 Dictionnaires Utiles-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{802342C3-8E1C-4A8B-96C3-F98FD9B336D0}\setup.exe" -l0x40c  -uninst 
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{72AD53CC-CCC0-3757-8480-9EE176866A7C}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{0BD83598-C2EF-3343-847B-7D2E84599128}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
Mozilla Firefox (3.0.4)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
OpenOffice.org Installer 1.0-->MsiExec.exe /X{3A2AF807-9F9F-43C9-A24A-17B617238B74}
Pack Français de ERUNT-->C:\Program Files\ERUNT\Uninstal.exe
PC Probe II-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F7338FA3-DAB5-49B2-900D-0AFB5760C166}\setup.exe" -l0x40c 
Pegtop Deflexion-->C:\WINDOWS\system32\Deflexion.scr -uninstall "C:\Documents and Settings\All Users\Application Data\Pegtop\Deflexion\Installation.xml"
Real Alternative 1.7.5-->"C:\Program Files\Real Alternative\unins000.exe"
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c  -removeonly
SAMSUNG Mobile Modem Driver Set-->C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
Samsung Mobile phone USB driver Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
SAMSUNG Mobile USB Modem Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
Samsung PC Studio 3 USB Driver Installer-->"C:\Program Files\InstallShield Installation Information\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}\setup.exe" -runfromtemp -l0x040c -removeonly
Samsung PC Studio 3-->"C:\Program Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -runfromtemp -l0x040c -removeonly
Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
Security Update for 2007 Microsoft Office System (KB958439)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {6491B8AA-D11C-4648-A461-6234B31EB7E2}
Security Update for Microsoft Office Excel 2007 (KB958437)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {648FC016-2D6B-4A16-8D87-404533642F4B}
Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
Security Update for Microsoft Office Publisher 2007 (KB950114)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F9C3CDBA-1F00-4D4D-959D-75C9D3ACDD85}
Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
Security Update for Microsoft Office system 2007 (KB956828)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {885E081B-72BD-4E76-8E98-30B4BE468FAC}
Security Update for Microsoft Office Word 2007 (KB956358)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {4551666D-0FD6-4C69-8A81-1C6F2E64517C}
SoundMAX-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\Setup.exe" -l0x40c  -removeonly
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
StartClock 3.2-->"C:\Program Files\StartClock\unins000.exe"
SUPER © Version 2008.bld.32 (July 8, 2008)-->C:\PROGRA~1\ERIGHT~1\SUPER\Setup.exe /remove /q0
SUPERAntiSpyware Free Edition-->MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
SuperCopier2-->"C:\Program Files\SuperCopier2\SC2Uninst.exe"
Unlocker 1.8.7-->C:\Program Files\Unlocker\uninst.exe
Update for Microsoft Office Outlook 2007 (KB952142)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {4AD3A076-427C-491F-A5B7-7D1DE788A756}
Update for Office 2007 (KB946691)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
Update for Outlook 2007 Junk Email Filter (kb958619)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {79B301C1-DBC0-467C-AFDA-2A6CDAFA4302}
VLC media player 0.9.6-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Wallpaper-->C:\Program Files\Wallpaper\uninst.exe
Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinPatrol 2008-->C:\PROGRA~1\BILLPS~1\WINPAT~1\Setup.exe /remove /q0
XBCD 360 0.2.5-->C:\Program Files\XBCD 360\uninst.exe
Xbox 360 Controller for Windows-->"C:\WINDOWS\$NtUninstall_Xbox_360_CC_Driver$\spuninst\spuninst.exe"
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
ZoneAlarm-->C:\Program Files\Zone Labs\ZoneAlarm\zauninst.exe

======Security center information======

AV: avast! antivirus 4.8.1296 [VPS 081216-0]
FW: ZoneAlarm Firewall

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\Samsung\Samsung PC Studio 3\;C:\Program Files\Fichiers communs\GIS\Tools
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 11, GenuineIntel
"PROCESSOR_REVISION"=0f0b
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"tvdumpflags"=8

-----------------EOF-----------------

jlpjlp · Answer

télécharge combofix (par sUBs) ici : 

http://download.bleepingcomputer.com/sUBs/ComboFix.exe 

et enregistre le sur le bureau. 

sous le nom de antibagle. Fais le avant que le fichier ne soit enregistré sur le bureau] 

déconnecte toi d'internet et ferme toutes tes applications. 

désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware) 


double-clique sur combofix.exe et suis les instructions 

à la fin, il va produire un rapport C:\ComboFix.txt 

réactive ton parefeu, ton antivirus, la garde de ton antispyware 

copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse. 

Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi. 

Tu as un tutoriel complet ici : 

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

breizh-222 · Answer

merci de m'aider, reste dans le coin je reviens ;)

breizh-222 · Answer

ComboFix 08-12-15.08 - breizh-222 2008-12-16 21:05:52.1 - NTFSx86 Lancé depuis: c:\documents and settings\breizh-222\Bureau\antibagle.exe [COLOR=RED][B]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/B][/COLOR] . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Service_npf ((((((((((((((((((((((((((((( Fichiers créés du 2008-11-16 au 2008-12-16 )))))))))))))))))))))))))))))))))))) . 2008-12-16 20:44 . 2008-12-16 20:44 d-------- C: sit 2008-12-16 20:43 . 2008-12-16 20:43 d-------- c:\program files\Malware Removal Tool 2008-12-16 20:17 . 2008-12-16 20:17 d-------- c:\program files\Trend Micro 2008-12-14 13:30 . 2008-12-14 13:30 d-------- c:\program files\cultix 2008-12-07 20:32 . 2008-12-07 20:32 d-------- c:\documents and settings\breizh-222\Application Data\Pegtop 2008-12-07 20:31 . 2008-12-07 20:31 d-------- c:\documents and settings\All Users\Application Data\Pegtop 2008-12-07 20:31 . 2008-12-07 20:31 668,168 --a------ c:\windows\system32\Deflexion.scr 2008-12-07 20:27 . 2008-12-07 20:29 d-------- c:\program files\Drawing Hand 2008-12-07 20:27 . 2008-12-07 20:28 75 --a------ c:\windows\drawinghand.ini 2008-11-16 20:23 . 2008-11-16 20:27 d-------- c:\documents and settings\breizh-222\Application Data\vlc . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-12-16 20:09 2,453,536 --sha-w c:\windows\system32\drivers\fidbox.dat 2008-12-16 20:07 32,864 --sha-w c:\windows\system32\drivers\fidbox.idx 2008-12-16 18:00 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2008-12-16 15:22 --------- d-----w c:\documents and settings\breizh-222\Application Data\uTorrent 2008-12-16 10:54 --------- d-----w c:\documents and settings\breizh-222\Application Data\dvdcss 2008-12-13 13:21 --------- d-----w c:\program files\Malwarebytes' Anti-Malware 2008-12-10 17:07 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help 2008-12-08 20:00 --------- d-----w c:\program files\Unlocker 2008-12-06 17:49 --------- d-----w c:\documents and settings\breizh-222\Application Data\Winamp 2008-12-03 18:52 38,496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys 2008-12-03 18:52 15,504 ----a-w c:\windows\system32\drivers\mbam.sys 2008-11-24 11:39 --------- d-----w c:\program files\Spybot - Search & Destroy 2008-11-23 05:16 --------- d-----w c:\program files\eMule 2008-11-22 13:16 --------- d-----w c:\program files\Clock Tray Skins 2008-11-15 11:40 --------- d-----w c:\program files\MSN Pictures Displayer 2008-11-13 12:16 --------- d-----w c:\program files\MSXML 4.0 2008-11-02 15:35 --------- d-----w c:\documents and settings\breizh-222\Application Data\MSN Pictures Displayer 2008-10-28 21:27 --------- d-----w c:\documents and settings\breizh-222\Application Data\Media Player Classic 2008-10-28 21:26 --------- d-----w c:\program files\K-Lite Codec Pack 2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys 2008-10-20 16:26 --------- d-----w c:\program files\Zone Labs 2008-10-20 12:38 --------- d-----w c:\program files\Fichiers communs\BioWare 2006-06-23 06:48 32,768 ----a-r c:\windows\inf\UpdateUSB.exe 2006-05-03 09:06 163,328 --sh--r c:\windows\system32\flvDX.dll 2007-02-21 10:47 31,232 --sh--r c:\windows\system32\msfDX.dll 2008-03-16 12:30 216,064 --sh--r c:\windows\system32 bDX.dll . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184] "IncrediMail"="c:\program files\IncrediMail\bin\IncMail.exe" [2008-07-24 243072] "SuperCopier 2 (explorer file copy replacement)"="c:\program files\SuperCopier2\SuperCopier2.exe" [2006-07-07 1052672] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2006-12-18 868352] "JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864] "36X Raid Configurer"="c:\windows\system32\xRaidSetup.exe" [2007-03-21 1953792] "WinPatrol"="c:\program files\BillP Studios\WinPatrol\winpatrol.exe" [2008-07-04 333120] "Ai Nap"="c:\program files\ASUS\AI Suite\AiNap\AiNap.exe" [2007-04-09 1423360] "Launch LGDCore"="c:\program files\Fichiers communs\Logitech\G-series Software\LGDCore.exe" [2006-07-23 1126400] "avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-26 81000] "StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440] "Launch PC Probe II"="c:\program files\ASUS\PC Probe II\Probe2.exe" [2007-05-09 2130432] "EPSON Stylus C46 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE" [2004-01-13 99840] "ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-12-13 919016] "Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2008-02-29 c:\windows\KHALMNPR.Exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ ASUS WiFi-AP Solo.lnk - c:\program files\ASUS WiFi-AP Solo\RtWLan.exe [2008-09-04 987136] Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2008-09-04 805392] [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\!SASWinLogon] 2008-07-23 15:28 352256 c:\program files\SUPERAntiSpyware\SASWINLO.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\LBTWlgn] 2008-05-02 01:42 72208 c:\program files\Fichiers communs\Logitech\Bluetooth\LBTWLgn.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "vidc.I420"= i420vfw.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup] @="" [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "c:\Program Files\uTorrent\uTorrent.exe"= "c:\Program Files\IncrediMail\bin\ImApp.exe"= "c:\Program Files\IncrediMail\bin\IncMail.exe"= "c:\Program Files\IncrediMail\bin\ImpCnt.exe"= "c:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"= "%windir%\Network Diagnostic\xpnetdiag.exe"= "c:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "c:\Program Files\Windows Live\Messenger\livecall.exe"= "d:\jeux\mass effect\Binaries\MassEffect.exe"= "d:\jeux\mass effect\MassEffectLauncher.exe"= "c:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings] "AllowInboundEchoRequest"= 1 (0x1) R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-09-04 111184] R1 SASDIFSV;SASDIFSV;\??\c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2008-08-19 8944] R1 SASKUTIL;SASKUTIL;\??\c:\program files\SUPERAntiSpyware\SASKUTIL.sys [2008-08-19 55024] R2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2008-09-04 20560] S3 getPlus(R) Helper;getPlus(R) Helper;c:\program files\NOS\bin\getPlus_HelperSvc.exe [2008-09-04 33752] S3 RTLWUSB;Realtek RTL8187 Wireless 802.11g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8187.sys [2008-09-04 176128] S3 SASENUM;SASENUM;\??\c:\program files\SUPERAntiSpyware\SASENUM.SYS [2008-08-19 7408] S3 SjyPkt;SjyPkt;\??\c:\windows\System32\Drivers\SjyPkt.sys [2008-09-04 13532] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fa54e9db-7a83-11dd-bb39-0015af23429e}] \Shell\AutoRun\command - K:\LaunchU3.exe -a . . ------- Examen supplémentaire ------- . uStart Page = hxxp://www.google.fr/ IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 FF - ProfilePath - c:\documents and settings\breizh-222\Application Data\Mozilla\Firefox\Profiles\vtkk51vk.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.evene.fr/quiz/categorie.php?id_categorie=3 FF - plugin: c:\program files\Yahoo!\Common pyaxmpb.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-12-16 21:08:49 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\mchInjDrv] "ImagePath"="\??\c:\docume~1\BREIZH~1\LOCALS~1\Temp\mc21.tmp" . --------------------- DLLs chargées dans les processus actifs --------------------- - - - - - - - > 'winlogon.exe'(828) c:\program files\SUPERAntiSpyware\SASWINLO.dll c:\windows\system32\Ati2evxx.dll c:\program files\fichiers communs\logitech\bluetooth\LBTWlgn.dll c:\program files\fichiers communs\logitech\bluetooth\LBTServ.dll . ------------------------ Autres processus actifs ------------------------ . c:\windows\system32\ati2evxx.exe c:\windows\system32\ZoneLabs\vsmon.exe c:\windows\system32\ati2evxx.exe c:\program files\Alwil Software\Avast4\aswUpdSv.exe c:\program files\Alwil Software\Avast4\ashServ.exe c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe c:\program files\Alwil Software\Avast4\ashMaiSv.exe c:\program files\Alwil Software\Avast4\ashWebSv.exe c:\program files\StartClock\StartClock.exe c:\program files\ASUS\AASP\1.00.32\aaCenter.exe c:\program files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.exe c:\program files\IncrediMail\bin\ImApp.exe c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe . ************************************************************************** . Heure de fin: 2008-12-16 21:11:26 - La machine a redémarré [breizh-222] ComboFix-quarantined-files.txt 2008-12-16 20:11:23 Avant-CF: 30 264 098 816 octets libres Après-CF: 30,190,809,088 octets libres 170 --- E O F --- 2008-12-10 17:07:19

breizh-222 · Answer

au fait le logiciel que tu m'a demandé dinstaller voulait une connection internet jai mis non! pr le redemarrage ya winpatrol qui detecte alerte pr modification d'un fichier : fichier HOST
Emplacement : c:\windows\system32\drivers\etc\hosts

jlpjlp · Answer

télécharge OTMoveIt 
http://oldtimer.geekstogo.com/OTMoveIt3.exe (de Old_Timer) sur ton Bureau.

double-clique sur OTMoveIt.exe pour le lancer. 
copie la liste qui se trouve en citation ci-dessous, 
et colle-la dans le cadre de gauche de OTMoveIt :Paste instruction for items to be moved. 
(attention bien mettre :files)


:services
mchInjDrv
:reg
[-HKEY_LOCAL_MACHINE\System\ControlSet001\Services\mchInjDrv]
"ImagePath"="\??\c:\docume~1\BREIZH~1\LOCALS~1\Temp\mc21.tmp" 
:files
c:\docume~1\BREIZH~1\LOCALS~1\Temp\mc21.tmp




clique sur MoveIt! pour lancer la suppression. 
le résultat apparaitra dans le cadre "Results". 
clique sur Exit pour fermer. 
poste le rapport situé dans C:\_OTMoveIt\MovedFiles. 

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes. 

______________________




Telecharge UsbFix sur ton bureau 
http://sd-1.archive-host.com/membres/up/116615172019703188/UsbFix.exe

--> Lance l installation avec les parametres par default 

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir 

--> Double clic sur le raccourci UsbFix sur ton bureau 

--> Le pc va redémarer 

-->Apres redémarrage post le rapport UsbFix.txt 

Note : le rapport UsbFix.txt est sauvegardé a la racine du disque 
Note : Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides

^^Marie^^ · Answer

Salut jlpjlp,

DOUBLON

)))

breizh-222 · Answer

merci de ta clairvoyance marie! je fais ce que tu m'as dit jlpjlp encore une fois merci de m'aider (ps : ça avance a rien sur clubic ;))

breizh-222 · Answer

========== SERVICES/DRIVERS ==========
Unable to stop service mchInjDrv .
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\System\ControlSet001\Services\mchInjDrv­\ not found.
HKEY_LOCAL_MACHINE\System\ControlSet001\Services\mchInjDrv­\"ImagePath"|"\??\c:\docume~1\BREIZH~1\LOCALS~1\Temp\mc21.tmp" /E : value set successfully!
========== FILES ==========
File/Folder c:\docume~1\BREIZH~1\LOCALS~1\Temp\mc21.tmp not found.
 
OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 12162008_214524

jai pas eu besoin de redemarrer

breizh-222 · Answer

jlpjlp j'ai un probleme avec le dernier truc que tu ma demander! la jai brancher dd externe multimedia jai installé usbfix et ca me demande de mettre un cd, je met un cdr puis tjrs le meme message. jai egalement le programme serveur lsa shell (export version) application isass.exe qui veut s'ouvrir! je dois faire quoi??

breizh-222 · Answer

jlpjlp t la?

jlpjlp · Answer

tu continue meme si erreur et tu fais usbfix

breizh-222 · Answer

voila jai trouver comment faire javai mis un cd vierge... -------------- UsbFix V2.413.4 --------------- * User : breizh-222 - BREIZH-1D3DD73A * Outils mis a jours le 11/12/2008 par Chiquitine29 et Chimay8 * Recherche effectuée à 21:55:24 le 16/12/2008 * Windows Xp - Internet Explorer 6.0.2900.5512 --------------- [ Processus actifs ] ---------------- C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\userinit.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\DOCUME~1\BREIZH~1\LOCALS~1\Temp\1.tmp\b2e.exe C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe C:\WINDOWS\System32\alg.exe C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe C:\Program Files\Fichiers communs\Logitech\G-series Software\LGDCore.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\ASUS\PC Probe II\Probe2.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\IncrediMail\bin\IncMail.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files\SuperCopier2\SuperCopier2.exe C:\Program Files\ASUS WiFi-AP Solo\RtWLan.exe C:\Program Files\Logitech\SetPoint\SetPoint.exe C:\WINDOWS\system32\imapi.exe C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE C:\Program Files\ASUS\AASP\1.00.32\aaCenter.exe C:\Program Files\IncrediMail\bin\IMApp.exe --------------- [ Informations lecteurs ] ---------------- C: - Lecteur fixe D: - Lecteur fixe E: - Lecteur fixe M: - Lecteur fixe --------------- [ Lecteur C ] ---------------- C: - Lecteur fixe +- Listing des fichiers présents : [04/09/2008 13:26][--a------] C:\AUTOEXEC.BAT [04/08/2004 03:38][-rahs----] C:\NTDETECT.COM [04/09/2008 13:13][---hs----] C:\boot.ini [16/12/2008 21:11][--a------] C:\ComboFix.txt [16/12/2008 21:11][--a------] C:\UsbFix.txt [04/09/2008 13:26][--a------] C:\CONFIG.SYS [04/09/2008 13:26][--a------] C:\IO.SYS [04/09/2008 13:26][--a------] C:\MSDOS.SYS [04/09/2008 13:26][--a------] C:\pagefile.sys --------------- [ Lecteur D ] ---------------- D: - Lecteur fixe +- Listing des fichiers présents : [26/08/2008 20:38][--a------] D:\mbam-log-08-26-2008 (21-38-03).txt --------------- [ Lecteur E ] ---------------- E: - Lecteur fixe +- Listing des fichiers présents : [19/09/2008 09:42][--ahs----] E:\pagefile.sys --------------- [ Lecteur M ] ---------------- M: - Lecteur fixe +- Listing des fichiers présents : --------------- [ Registre / Startup ] ---------------- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "Userinit"="C:\WINDOWS\system32\userinit.exe," [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion un] msnmsgr="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background IncrediMail=C:\Program Files\IncrediMail\bin\IncMail.exe /c SuperCopier 2 (explorer file copy replacement)=C:\Program Files\SuperCopier2\SuperCopier2.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion un] SoundMAXPnP=C:\Program Files\Analog Devices\Core\smax4pnp.exe JMB36X IDE Setup=C:\WINDOWS\RaidTool\xInsIDE.exe 36X Raid Configurer=C:\WINDOWS\system32\xRaidSetup.exe boot WinPatrol=C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot Ai Nap="C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe" Kernel and Hardware Abstraction Layer=KHALMNPR.EXE Launch LGDCore="C:\Program Files\Fichiers communs\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE avast!=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe StartCCC="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun Launch PC Probe II="C:\Program Files\ASUS\PC Probe II\Probe2.exe" 1 EPSON Stylus C46 Series=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46" ZoneAlarm Client="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un\OptionalComponents= = HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un\OptionalComponents\IMAIL= Installed=1 = HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un\OptionalComponents\MAPI= NoChange=1 Installed=1 = HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un\OptionalComponents\MSFS= Installed=1 = --------------- [ Registre / Mountpoint2 ] ---------------- Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fa54e9db-7a83-11dd-bb39-0015af23429e}\Shell\AutoRun\command --------------- [ Nettoyage des disques ] ---------------- --------------- [ Resumé ] ---------------- -> /!\ Le resultat doit etre interprété par un spécialiste /!\ [04/09/2008 13:26][--a------] C:\AUTOEXEC.BAT [04/08/2004 03:38][-rahs----] C:\NTDETECT.COM [04/09/2008 13:13][---hs----] C:\boot.ini [26/07/2006 20:09][-r-------] I:\Setup.exe [10/05/2006 12:01][-r-------] I:\Autorun.inf --------------- ! Fin du rapport ! ----------------

jlpjlp · Answer

mettre a jour internet explorer
https://www.01net.com/telecharger/windows/Internet/navigateur/fiches/33081.html

mettre à jour adobe reader
https://acrobat.adobe.com/fr/fr/acrobat/pdf-reader.html


mettre a jour java:
Télécharge JavaRa.zip de Paul 'Prm753' McLain et Fred de Vries. 
Décompresse le fichier sur ton bureau (clique droit > Extraire tout.) 
Double-clique sur le répertoire JavaRa obtenu. 
Puis double-clique sur le fichier JavaRa.exe (le .exe peut ne pas s'afficher) 
Clique sur Search For Updates. 
Sélectionne Update Using jucheck.exe puis clique sur Search. 
Autorise le processus à se connecter s'il te le demande, clique sur Install et suis les instructions d'installation. Cela prendra quelques minutes. 
Quand l'installation est terminée, revient à l'écran de JavaRa et clique sur Remove Older Versions. 
Clique sur Oui pour confirmer. L'outil va travailler, clique ensuite sur Ok, puis une deuxième fois sur Ok. 
Un rapport va s'ouvrir, copie-colle le dans ta prochaine réponse. 
Note : le rapport se trouve aussi à la racine de la partition système, en général C:\ sous le nom JavaRa.log 
(c:\JavaRa.log) 
Ferme l'application. 

si cela ne fonctionne pas 

https://www.java.com/fr/download/windows_manual.jsp?locale=fr&host=www.java.com:80 

tu peux désinstaller les vieilles versions. 


________________________




 colle le rapport d'un scan en ligne 
avec un des suivants: 


Kaspersky en ligne
https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr

bitdefender en ligne : 
http://www.bitdefender.fr/scan_fr/scan8/ie.html 

Panda en ligne : 
http://pandasoftware.fr

breizh-222 · Answer

JavaRa 1.12 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Tue Dec 16 22:38:23 2008

Found and removed: C:\Program Files\Java\jre1.5.0_03

Found and removed: C:\Program Files\Java\jre1.5.0_11

Found and removed: C:\Program Files\Java\jre1.6.0_07

Found and removed: Software\JavaSoft\Java2D\1.5.0_03

Found and removed: Software\JavaSoft\Java2D\1.5.0_11

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510003

Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D511001

Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510003

Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D511001

Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510003

Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D511001

Found and removed: SOFTWARE\Classes\JavaPlugin.150_03

Found and removed: SOFTWARE\Classes\JavaPlugin.150_11

Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalled.1.5.0.0

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_03

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_11

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_03

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_11

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510003

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D511001

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510003

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D511001

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150030}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150110}

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.5.0_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.5.0_11

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Java\jre1.5.0_03\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Java\jre1.5.0_11\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Java\jre1.6.0_07\bin\

------------------------------------

Finished reporting.

jlpjlp · Answer

colle le rapport d'un scan en ligne
avec un des suivants:


Kaspersky en ligne
https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr

bitdefender en ligne :
http://www.bitdefender.fr/scan_fr/scan8/ie.html

Panda en ligne :
http://pandasoftware.fr

breizh-222 · Answer

désolé je n'y arrive pas parce que la version internet explorer ne veut pas se mettre a jour

jlpjlp · Answer

aucun des trois?

breizh-222 · Answer

si ça marche avec panda apres linstallation dun plugin, analyse a 50%

jlpjlp · Answer

ok

breizh-222 · Answer

ca fait la mise a jours active scan 45%

breizh-222 · Answer

la ca recherche les virus! tien en attendant est-ce que tu sais si ca existe un cable dvi/hdmi? cest pr bancher ordi sur lcd...

breizh-222 · Answer

ca vient de trouver un fichier infecté et un fichier suspect! par contre lanalyse devrait prendre un peu plus dune heure! et demain je me lève à 4h30! je laisse le pc tourné cette nuit! tu sera dans le coin demain jlpjlp?

jlpjlp · Answer

un cable dvi/hdmi apparement oui en cherchant dans google par exemple:

https://www.son-video.com/rayon/accessoires/cables-video/cables-hdmi

breizh-222 · Answer

merci jlpjlp jai trouvé ça hier ils en vendent sur cdscount. au fait pr le scan en ligne jai un ptit probleme ça me détecte bien des fichier infecté mais ça ne me dit pas lesquel, en fait il demande de payer sur le site panda donc voila! tu n'aurais pas une autre solution???

jlpjlp · Answer

pas grave donne juste le rapport panda sans désinfecter et je le ferai!

breizh-222 · Answer

je relance le scan en fait hier il sest stopper a 18% puis m'a demander de payer pour supprimer le fichier infecté! en fait le problème cest quil a pas continuer son scan! on va voir ce que ca donne cette fois ;)

breizh-222 · Answer

jai refai un scan avec spyboth tal et voila le rapport : 


--- Search result list ---
Hint of the Day: Click the bar at the right of this to see more information! ()
  

MediaPlex: Cookie traceur (Internet Explorer: breizh-222) (Cookie, nothing done)
  

MediaPlex: Cookie traceur (Internet Explorer: breizh-222) (Cookie, nothing done)
  

BlueStreak: Cookie traceur (Firefox: default) (Cookie, nothing done)
  

DoubleClick: Cookie traceur (Firefox: default) (Cookie, nothing done)
  

Tradedoubler: Cookie traceur (Firefox: default) (Cookie, nothing done)
  

Tradedoubler: Cookie traceur (Firefox: default) (Cookie, nothing done)
  

Tradedoubler: Cookie traceur (Firefox: default) (Cookie, nothing done)
  

Statcounter: Cookie traceur (Firefox: default) (Cookie, nothing done)
  

Adviva: Cookie traceur (Firefox: default) (Cookie, nothing done)
  


--- Spybot - Search & Destroy version: 1.6.0  (build: 20080707) ---

2008-07-07 blindman.exe (1.0.0.8)
2008-07-07 SDFiles.exe (1.6.0.4)
2008-07-07 SDMain.exe (1.0.0.6)
2008-07-07 SDShred.exe (1.0.2.3)
2008-07-07 SDUpdate.exe (1.6.0.8)
2008-07-07 SDWinSec.exe (1.0.0.12)
2008-07-07 SpybotSD.exe (1.6.0.30)
2008-09-16 TeaTimer.exe (1.6.3.25)
2008-09-04 unins000.exe (51.49.0.0)
2008-07-07 Update.exe (1.6.0.7)
2008-10-22 advcheck.dll (1.6.2.13)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2008-09-15 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2008-10-22 Tools.dll (2.1.6.8)
2008-11-04 Includes\Adware.sbi (*)
2008-12-09 Includes\AdwareC.sbi (*)
2008-06-03 Includes\Cookies.sbi (*)
2008-09-02 Includes\Dialer.sbi (*)
2008-09-09 Includes\DialerC.sbi (*)
2008-07-23 Includes\HeavyDuty.sbi (*)
2008-11-18 Includes\Hijackers.sbi (*)
2008-11-18 Includes\HijackersC.sbi (*)
2008-12-09 Includes\Keyloggers.sbi (*)
2008-12-09 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2008-11-18 Includes\Malware.sbi (*)
2008-12-09 Includes\MalwareC.sbi (*)
2008-11-03 Includes\PUPS.sbi (*)
2008-12-09 Includes\PUPSC.sbi (*)
2007-11-07 Includes\Revision.sbi (*)
2008-06-18 Includes\Security.sbi (*)
2008-12-09 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2008-12-10 Includes\Spyware.sbi (*)
2008-12-10 Includes\SpywareC.sbi (*)
2008-06-03 Includes\Tracks.uti
2008-11-04 Includes\Trojans.sbi (*)
2008-12-10 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll



--- System information ---
Windows XP (Build: 2600) Service Pack 3 (5.1.2600)
 / MSXML4SP2: Security update for MSXML4 SP2 (KB936181)
 / MSXML4SP2: Security update for MSXML4 SP2 (KB954430)
 / Windows / SP1: Microsoft Internationalized Domain Names Mitigation APIs
 / Windows / SP1: Microsoft National Language Support Downlevel APIs
 / Windows Media Format 11 SDK: Hotfix for Windows Media Format 11 SDK (KB929399)
 / Windows Media Player: Mise à jour de sécurité pour Lecteur Windows Media (KB952069)
 / Windows Media Player 11: Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)
 / Windows Media Player 11: Correctif pour Lecteur Windows Media 11 (KB939683)
 / Windows Media Player 11: Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)
 / Windows XP: Mise à jour de sécurité pour Windows XP (KB923689)
 / Windows XP: Mise à jour de sécurité pour Windows XP (KB941569)
 / Windows XP / SP10: Microsoft Compression Client Pack 1.0 for Windows XP
 / Windows XP / SP3: High Definition Audio Driver Package - KB888111
 / Windows XP / SP3: Windows XP Service Pack 3
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB938464)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB946648)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB950762)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB950974)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB951066)
 / Windows XP / SP4: Mise à jour pour Windows XP (KB951072-v2)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB951376-v2)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB951698)
 / Windows XP / SP4: Mise à jour pour Windows XP (KB951978)
 / Windows XP / SP4: Correctif pour Windows XP (KB952287)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB952954)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB953838)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB953839)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB954211)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB954459)
 / Windows XP / SP4: Hotfix for Windows XP (KB954550-v5)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB954600)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB955069)
 / Windows XP / SP4: Mise à jour pour Windows XP (KB955839)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956390)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956391)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956802)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956841)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB957095)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB957097)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB958215)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB958644)
 / XML Paper Specification Shared Components Pack 1.0: XML Paper Specification Shared Components Pack 1.0


--- Startup entries list ---
Located: HK_LM:Run, 36X Raid Configurer
command: C:\WINDOWS\system32\xRaidSetup.exe boot
   file: C:\WINDOWS\system32\xRaidSetup.exe
   size: 1953792
    MD5: E251DD212E50BC9262D067296B2E5788

Located: HK_LM:Run, Adobe Reader Speed Launcher
command: "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
   file: C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
   size: 34672
    MD5: 69B16C7B7746BA5C642FC05B3561FC73

Located: HK_LM:Run, Ai Nap
command: "C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe"
   file: C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe
   size: 1423360
    MD5: EE3CE36574FD53E5D7713183838E3BE1

Located: HK_LM:Run, avast!
command: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
   file: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
   size: 81000
    MD5: 55EBFBAB39BFAB5E62358C093F297641

Located: HK_LM:Run, EPSON Stylus C46 Series
command: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
   file: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
   size: 99840
    MD5: 32B0CBB036AE701352881A4303B10A7A

Located: HK_LM:Run, JMB36X IDE Setup
command: C:\WINDOWS\RaidTool\xInsIDE.exe
   file: C:\WINDOWS\RaidTool\xInsIDE.exe
   size: 36864
    MD5: DB4E2D9C09A5762CB2551222B5E443B2

Located: HK_LM:Run, Kernel and Hardware Abstraction Layer
command: KHALMNPR.EXE
   file: C:\WINDOWS\KHALMNPR.EXE
   size: 76304
    MD5: E6A9F68D26A094FB78B98180A40A29FC

Located: HK_LM:Run, Launch LGDCore
command: "C:\Program Files\Fichiers communs\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
   file: C:\Program Files\Fichiers communs\Logitech\G-series Software\LGDCore.exe
   size: 1126400
    MD5: 0AD5DF852C968892B3173716A71441A9

Located: HK_LM:Run, Launch PC Probe II
command: "C:\Program Files\ASUS\PC Probe II\Probe2.exe" 1
   file: C:\Program Files\ASUS\PC Probe II\Probe2.exe
   size: 2130432
    MD5: 66E2BC18AA31B9FF3E5C57399B5CA8FF

Located: HK_LM:Run, SoundMAXPnP
command: C:\Program Files\Analog Devices\Core\smax4pnp.exe
   file: C:\Program Files\Analog Devices\Core\smax4pnp.exe
   size: 868352
    MD5: 1983A11F702BDC5DB65B4B0F376FF6FD

Located: HK_LM:Run, StartCCC
command: "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
   file: C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
   size: 61440
    MD5: E1E71D80D078C576801B6FE2A29FCF85

Located: HK_LM:Run, SunJavaUpdateSched
command: "C:\Program Files\Java\jre6\bin\jusched.exe"
   file: C:\Program Files\Java\jre6\bin\jusched.exe
   size: 136600
    MD5: B98FFA8288EFAABC436C30D198608345

Located: HK_LM:Run, WinPatrol
command: C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
   file: C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
   size: 333120
    MD5: D6CF53D042B26E9E055D5457F5E98F30

Located: HK_LM:Run, ZoneAlarm Client
command: "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
   file: C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
   size: 919016
    MD5: 6B632BE30A0930421560A9A9C677ABD4

Located: HK_CU:Run, CTFMON.EXE
  where: .DEFAULT...
command: C:\WINDOWS\system32\CTFMON.EXE
   file: C:\WINDOWS\system32\CTFMON.EXE
   size: 15360
    MD5: 59DC5BB82E4C8E0B3EADCFDBC44BA6E4

Located: HK_CU:Run, IncrediMail
  where: S-1-5-21-117609710-1645522239-839522115-1003...
command: C:\Program Files\IncrediMail\bin\IncMail.exe /c
   file: C:\Program Files\IncrediMail\bin\IncMail.exe
   size: 243072
    MD5: 7AD7DAAA39AD39931E5947543084DDF3

Located: HK_CU:Run, msnmsgr
  where: S-1-5-21-117609710-1645522239-839522115-1003...
command: "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
   file: C:\Program Files\Windows Live\Messenger\msnmsgr.exe
   size: 5724184
    MD5: 97384875B6D03831B2D1820AB8952F67

Located: HK_CU:Run, SuperCopier 2 (explorer file copy replacement)
  where: S-1-5-21-117609710-1645522239-839522115-1003...
command: C:\Program Files\SuperCopier2\SuperCopier2.exe
   file: C:\Program Files\SuperCopier2\SuperCopier2.exe
   size: 1052672
    MD5: B8DA797CEA896C42F5BAD9E08E21AF9F

Located: HK_CU:Run, CTFMON.EXE
  where: S-1-5-18...
command: C:\WINDOWS\system32\CTFMON.EXE
   file: C:\WINDOWS\system32\CTFMON.EXE
   size: 15360
    MD5: 59DC5BB82E4C8E0B3EADCFDBC44BA6E4

Located: Démarrage (tous utilisateurs), ASUS WiFi-AP Solo.lnk
  where: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage...
command: C:\Program Files\ASUS WiFi-AP Solo\RtWLan.exe
   file: C:\Program Files\ASUS WiFi-AP Solo\RtWLan.exe
   size: 987136
    MD5: FC4715240C014A3268278AFBFF7AE70E

Located: Démarrage (tous utilisateurs), Logitech SetPoint.lnk
  where: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage...
command: C:\Program Files\Logitech\SetPoint\SetPoint.exe
   file: C:\Program Files\Logitech\SetPoint\SetPoint.exe
   size: 805392
    MD5: D0948BE9B3547B9669195D7F84FC09F7

Located: Démarrage (utilisateur), MSN Pictures Displayer.lnk
  where: C:\Documents and Settings\breizh-222\Menu Démarrer\Programmes\Démarrage...
command: C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
   file: C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: Démarrage (utilisateur), StartClock.lnk
  where: C:\Documents and Settings\breizh-222\Menu Démarrer\Programmes\Démarrage...
command: C:\Program Files\StartClock\StartClock.exe
   file: C:\Program Files\StartClock\StartClock.exe
   size: 93696
    MD5: 750BAED62B5CAA46322B9A9BDE67A8B1

Located: WinLogon, !SASWinLogon
command: C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
   file: C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
   size: 352256
    MD5: D8EDAEEAF63BBF45ED9B7A3666641C2A

Located: WinLogon, AtiExtEvent
command: Ati2evxx.dll
   file: Ati2evxx.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: WinLogon, crypt32chain
command: crypt32.dll
   file: crypt32.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: WinLogon, cryptnet
command: cryptnet.dll
   file: cryptnet.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: WinLogon, cscdll
command: cscdll.dll
   file: cscdll.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: WinLogon, dimsntfy
command: %SystemRoot%\System32\dimsntfy.dll
   file: %SystemRoot%\System32\dimsntfy.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: WinLogon, LBTWlgn
command: c:\program files\fichiers communs\logitech\bluetooth\LBTWlgn.dll
   file: c:\program files\fichiers communs\logitech\bluetooth\LBTWlgn.dll
   size: 72208
    MD5: 2ACBFEF9984F0FE9849DA857206CCECC

Located: WinLogon, ScCertProp
command: wlnotify.dll
   file: wlnotify.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: WinLogon, Schedule
command: wlnotify.dll
   file: wlnotify.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: WinLogon, sclgntfy
command: sclgntfy.dll
   file: sclgntfy.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: WinLogon, SensLogn
command: WlNotify.dll
   file: WlNotify.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: WinLogon, termsrv
command: wlnotify.dll
   file: wlnotify.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: WinLogon, wlballoon
command: wlnotify.dll
   file: wlnotify.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!



--- Browser helper object list ---
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} (AcroIEHelperStub)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name: AcroIEHelperStub
        CLSID name: Adobe PDF Link Helper
              Path: C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\
         Long name: AcroIEHelperShim.dll
        Short name:       ACROIE~2.DLL
    Date (created): 11/06/2008 21:33:16
Date (last access): 17/12/2008 13:21:58
 Date (last write): 11/06/2008 21:33:16
          Filesize:              75128
        Attributes:           archive 
               MD5: E96C752BBA0E22330A43258FC800200E
             CRC32:           E5D72083
           Version:          9.0.0.332

{7E853D72-626A-48EC-A868-BA8D5E23E045} ()
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name: 
        CLSID name: 

{9030D464-4C02-4ABF-8ECC-5164760863C6} (Programme d'aide de l'Assistant de connexion Windows Live)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name: 
        CLSID name: Programme d'aide de l'Assistant de connexion Windows Live
              Path: C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\
         Long name: WindowsLiveLogin.dll
        Short name:       WINDOW~1.DLL
    Date (created): 20/09/2007 09:30:18
Date (last access): 17/12/2008 13:21:58
 Date (last write): 20/09/2007 09:30:18
          Filesize:             328752
        Attributes:           archive 
               MD5: 59CF5BF6684AFCF906CADAD39B4214DE
             CRC32:           C363813C
           Version:        4.200.520.1

{DBC80044-A445-435b-BC74-9C25C1C588A9} (Java(tm) Plug-In 2 SSV Helper)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name: 
        CLSID name: Java(tm) Plug-In 2 SSV Helper
              Path: C:\Program Files\Java\jre6\bin\
         Long name:         jp2ssv.dll
        Short name:                   
    Date (created): 16/12/2008 22:37:46
Date (last access): 17/12/2008 13:21:58
 Date (last write): 16/12/2008 22:37:46
          Filesize:              34816
        Attributes:           archive 
               MD5: 5D57FD3DF32DC69CEC3D1D54B4C43162
             CRC32:           D7C13FB2
           Version:          6.0.110.3

{E7E6F031-17CE-4C07-BC86-EABFE594F69C} (JQSIEStartDetectorImpl)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name: JQSIEStartDetectorImpl
        CLSID name: JQSIEStartDetectorImpl Class
              Path: C:\Program Files\Java\jre6\lib\deploy\jqs\ie\
         Long name:     jqs_plugin.dll
        Short name:       JQS_PL~1.DLL
    Date (created): 16/12/2008 22:37:46
Date (last access): 17/12/2008 13:21:58
 Date (last write): 16/12/2008 22:37:46
          Filesize:              73728
        Attributes:           archive 
               MD5: F68EDAFE003F2B3523C0742CD3B8D673
             CRC32:           9C709350
           Version:          6.0.110.3



--- ActiveX list ---
{8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0)
          DPF name: Java Runtime Environment 1.6.0
        CLSID name: Java Plug-in 1.6.0_11
         Installer: 
          Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
       description: Sun Java
    classification: Legitimate
    known filename: %PROGRAM FILES%\JabaSoft\JRE\*\Bin
pjava131.dll
         info link: 
       info source: Patrick M. Kolla
              Path: C:\Program Files\Java\jre6\bin\
         Long name:    npjpi160_11.dll
        Short name:       NPJPI1~1.DLL
    Date (created): 16/12/2008 22:37:46
Date (last access): 17/12/2008 13:55:14
 Date (last write): 16/12/2008 22:37:46
          Filesize:             132504
        Attributes:           archive 
               MD5: D400116F6776ACB6EDB6B1F5EEB9F92D
             CRC32:           CECB5751
           Version:          6.0.110.3

{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
          DPF name: Java Runtime Environment 1.6.0
        CLSID name: Java Plug-in 1.6.0_07
         Installer: 
          Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
              Path: C:\Program Files\Java\jre1.6.0_07\bin\
         Long name:    npjpi160_07.dll

{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
          DPF name: Java Runtime Environment 1.6.0
        CLSID name: Java Plug-in 1.6.0_11
         Installer: 
          Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
              Path: C:\Program Files\Java\jre6\bin\
         Long name:    npjpi160_11.dll
        Short name:       NPJPI1~1.DLL
    Date (created): 16/12/2008 22:37:46
Date (last access): 17/12/2008 13:55:14
 Date (last write): 16/12/2008 22:37:46
          Filesize:             132504
        Attributes:           archive 
               MD5: D400116F6776ACB6EDB6B1F5EEB9F92D
             CRC32:           CECB5751
           Version:          6.0.110.3

{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
          DPF name: Java Runtime Environment 1.6.0
        CLSID name: Java Plug-in 1.6.0_11
         Installer: 
          Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
       description: 
    classification: Legitimate
    known filename: npjpi150_06.dll
         info link: 
       info source: Safer Networking Ltd.
              Path: C:\Program Files\Java\jre6\bin\
         Long name:    npjpi160_11.dll
        Short name:       NPJPI1~1.DLL
    Date (created): 16/12/2008 22:37:46
Date (last access): 17/12/2008 13:55:14
 Date (last write): 16/12/2008 22:37:46
          Filesize:             132504
        Attributes:           archive 
               MD5: D400116F6776ACB6EDB6B1F5EEB9F92D
             CRC32:           CECB5751
           Version:          6.0.110.3

{D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object)
          DPF name: 
        CLSID name: Shockwave Flash Object
         Installer: C:\WINDOWS\Downloaded Program Files\swflash.inf
          Codebase: http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
       description: Macromedia Shockwave Flash Player
    classification: Legitimate
    known filename: 
         info link: 
       info source: Patrick M. Kolla
              Path: C:\WINDOWS\system32\Macromed\Flash\
         Long name:        Flash9f.ocx
        Short name:                   
    Date (created): 25/03/2008 03:32:42
Date (last access): 17/12/2008 13:51:28
 Date (last write): 25/03/2008 03:32:42
          Filesize:            2991488
        Attributes:  readonly archive 
               MD5: 48FDF435B8595604E54125B321924510
             CRC32:           12335E29
           Version:          9.0.124.0



--- Process list ---
PID:    0 (   0) [System]
PID:  692 (   4) \SystemRoot\System32\smss.exe
 size: 50688
PID:  944 ( 692) \??\C:\WINDOWS\system32\csrss.exe
 size: 6144
PID:  980 ( 692) \??\C:\WINDOWS\system32\winlogon.exe
 size: 512000
PID: 1028 ( 980) C:\WINDOWS\system32\services.exe
 size: 109056
  MD5: 54CB50058851D95E56EC70D09F70857F
PID: 1040 ( 980) C:\WINDOWS\system32\lsass.exe
 size: 13312
  MD5: 91E6024D6D4DCDECDB36C43ECF9BBECB
PID: 1192 (1028) C:\WINDOWS\system32\Ati2evxx.exe
 size: 561152
  MD5: 3C94E4E7983EFF03E7E128325891EA80
PID: 1212 (1028) C:\WINDOWS\system32\svchost.exe
 size: 14336
  MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1272 (1028) C:\WINDOWS\system32\svchost.exe
 size: 14336
  MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1324 (1028) C:\WINDOWS\System32\svchost.exe
 size: 14336
  MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1464 (1028) C:\WINDOWS\system32\svchost.exe
 size: 14336
  MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1492 (1028) C:\WINDOWS\system32\svchost.exe
 size: 14336
  MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1504 (1028) C:\WINDOWS\system32\ZoneLabs\vsmon.exe
 size: 75304
  MD5: 4BB7862806BEA6BF50D618C5D593ED54
PID: 1544 ( 980) C:\WINDOWS\system32\Ati2evxx.exe
 size: 561152
  MD5: 3C94E4E7983EFF03E7E128325891EA80
PID: 1920 (1028) C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
 size: 18752
  MD5: 118F964817982E771B8953DF2E99E3AB
PID: 1980 (1028) C:\Program Files\Alwil Software\Avast4\ashServ.exe
 size: 155160
  MD5: E1D075B489A5E6E294E968501184C5F6
PID:  340 (1028) C:\WINDOWS\system32\spoolsv.exe
 size: 57856
  MD5: 460E4CE148BD07218DA0B6A3D31885A9
PID:  712 (1028) C:\Program Files\Java\jre6\bin\jqs.exe
 size: 152984
  MD5: 32192B4EBE8720ED8D49A455C962CB91
PID: 1472 (1028) C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
 size: 254040
  MD5: 2D697C9C4FBDA956E4BE318C334CD95E
PID: 1568 (1028) C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
 size: 352920
  MD5: B9FD2B7A954A45963C3BF932DB10A633
PID: 1000 (1028) C:\WINDOWS\System32\alg.exe
 size: 44544
  MD5: 5E9A6658A2A69AE7EB195113B7A2E7A9
PID: 2444 (1028) C:\WINDOWS\system32\wbem\wmiapsrv.exe
 size: 126464
  MD5: 4E8E8A58F56B25D0795F484E5EB7F898
PID: 2900 (2832) C:\WINDOWS\Explorer.EXE
 size: 1037824
  MD5: F2317622D29F9FF0F88AEECD5F60F0DD
PID: 3496 (2900) C:\Program Files\Analog Devices\Core\smax4pnp.exe
 size: 868352
  MD5: 1983A11F702BDC5DB65B4B0F376FF6FD
PID: 3524 (2900) C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
 size: 333120
  MD5: D6CF53D042B26E9E055D5457F5E98F30
PID: 3564 (2900) C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe
 size: 1423360
  MD5: EE3CE36574FD53E5D7713183838E3BE1
PID: 3584 (2900) C:\Program Files\Fichiers communs\Logitech\G-series Software\LGDCore.exe
 size: 1126400
  MD5: 0AD5DF852C968892B3173716A71441A9
PID: 3596 (2900) C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
 size: 81000
  MD5: 55EBFBAB39BFAB5E62358C093F297641
PID: 3632 (2900) C:\Program Files\ASUS\PC Probe II\Probe2.exe
 size: 2130432
  MD5: 66E2BC18AA31B9FF3E5C57399B5CA8FF
PID: 3644 (3612) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
 size: 49152
  MD5: E681281D9BFC9D45D3B72532717E5880
PID: 3652 (2900) C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
 size: 99840
  MD5: 32B0CBB036AE701352881A4303B10A7A
PID: 3660 (2900) C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
 size: 919016
  MD5: 6B632BE30A0930421560A9A9C677ABD4
PID: 3696 (2900) C:\Program Files\Java\jre6\bin\jusched.exe
 size: 136600
  MD5: B98FFA8288EFAABC436C30D198608345
PID: 3784 (2900) C:\Program Files\SuperCopier2\SuperCopier2.exe
 size: 1052672
  MD5: B8DA797CEA896C42F5BAD9E08E21AF9F
PID: 3828 (2900) C:\Program Files\ASUS WiFi-AP Solo\RtWLan.exe
 size: 987136
  MD5: FC4715240C014A3268278AFBFF7AE70E
PID: 3940 (2900) C:\Program Files\Logitech\SetPoint\SetPoint.exe
 size: 805392
  MD5: D0948BE9B3547B9669195D7F84FC09F7
PID:  484 (2900) C:\Program Files\StartClock\StartClock.exe
 size: 93696
  MD5: 750BAED62B5CAA46322B9A9BDE67A8B1
PID: 2780 (3940) C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
 size: 76304
  MD5: 19E0D28FE38F55CA4C63F77D3657959A
PID: 1584 (1028) C:\WINDOWS\System32\svchost.exe
 size: 14336
  MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 3532 (1212) C:\Program Files\IncrediMail\bin\IMApp.exe
 size: 189824
  MD5: B019A29934FFE34F44D5D43E76676DA4
PID: 3000 (3632) C:\Program Files\ASUS\AASP\1.00.32\aaCenter.exe
 size: 603648
  MD5: 9B8FEBDB9D6D2A19A985C45F9FD7D83D
PID: 4008 (3644) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
 size: 49152
  MD5: 25CA1677AAA3CDC99CD4FCF940886F3C
PID: 3868 (1028) C:\Program Files\Windows Live\Messenger\usnsvc.exe
 size: 98328
  MD5: 9D19B042A4FD5C02195071EA2FE0C821
PID: 1828 (2900) C:\Program Files\Mozilla Firefox\firefox.exe
 size: 307712
  MD5: BAC6F7DE724D7F30EBD78648C86B4617
PID: 3040 (3948) C:\Program Files\Micro Application\9 Dictionnaires Utiles\MediaDICO9Ut.EXE
 size: 281600
  MD5: 82B7D15914C96BE28308CBF925B02CFE
PID: 2284 (3948) C:\Program Files\Micro Application\9 Dictionnaires Utiles\Rac9Ut.EXE
 size: 213078
  MD5: 096F79108A21E6E99EBF6DB5B2E9AA88
PID: 2496 (2900) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
 size: 4891472
  MD5: 3B1B5D09D3C9C4CD39D4DB06ED7A0855
PID: 3964 (2900) C:\Program Files\ControlMK\ControlMK.exe
 size: 185344
  MD5: BBCAE258D8C37A855735148B1E9131DB
PID:    4 (   0) System


--- Browser start & search pages list ---
Spybot - Search & Destroy browser pages report, 17/12/2008 13:59:20

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
  C:\WINDOWS\system32\blank.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
  http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
  https://www.google.fr/?gws_rd=ssl
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\First Home Page
  http://www.microsoft.com/isapi/redir.dll?Prd=ie&Pver=5.0&Ar=ie5update&O1=b1
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
  %SystemRoot%\system32\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
  https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
  https://www.msn.com/fr-fr
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
  https://www.msn.com/fr-fr/?ocid=iehp
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
  https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant
  https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
  https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm


--- Winsock Layered Service Provider list ---


--- Uninstall list ---
Panda ActiveScan 2.0 01.02.03.0000 (ActiveScan 2.0)
  estimated size: 4000
install location: C:\Program Files\Panda Security\ActiveScan 2.0
   uninstall cmd: C:\Program Files\Panda Security\ActiveScan 2.0\as2uninst.exe
       publisher: Panda Security
       help link: https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan

  (AddressBook)

Adobe Flash Player ActiveX 9.0.124.0 (Adobe Flash Player ActiveX)
   uninstall cmd: C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
       publisher: Adobe Systems Incorporated
       help link: https://helpx.adobe.com/flash-player.html

Adobe Flash Player Plugin 9.0.124.0 (Adobe Flash Player Plugin)
   uninstall cmd: C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
       publisher: Adobe Systems Incorporated

ATI - Software Uninstall Utility 6.14.10.1022 (All ATI Software)
install location: C:\Program Files\ATI Technologies\UninstallAll
   uninstall cmd: C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe

ALUpdate  (ALUpdate_is1)
install location: C:\Program Files\ESTsoft\ALUpdate\
   uninstall cmd: "C:\Program Files\ESTsoft\ALUpdate\unins000.exe"
       publisher: ESTsoft Corp.

ATI Display Driver 8.512-080703a-066900C-ATI (ATI Display Driver)
   uninstall cmd: rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean

avast! Antivirus 4.8 (avast!)
 version (major): 4
 version (minor): 8
install location: C:\PROGRA~1\ALWILS~1\Avast4
  install source: C:\PROGRA~1\ALWILS~1\Avast4\setup
   uninstall cmd: C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
       publisher: Alwil Software
       help link: https://www.avast.com/fr-fr/index

  (Branding)

cbgeo  (cbgeo)
   uninstall cmd: C:\Program Files\cbgeo\uninstall.exe

CCleaner (remove only)  (CCleaner)
   uninstall cmd: "C:\Program Files\CCleaner\uninst.exe"

Code de la route  (Code de la route_is1)
install location: C:\Program Files\Code de la route\
   uninstall cmd: "C:\Program Files\Code de la route\unins000.exe"
       publisher: Anuman Interactive
       help link: http://www.anuman-interactive.com

  (Connection Manager)

ControlMK 0.232 0.232 (ControlMK)
   uninstall cmd: C:\Program Files\ControlMK\uninst.exe
       publisher: Redcl0ud

CULTIX 2.0  (CULTIX 2.0)
   uninstall cmd: c:\Program Files\cultix\Uninstal.exe

  (DirectAnimation)

  (DirectDrawEx)

  (Drawing Hand Screen Saver)

  (DXM_Runtime)

eMule  (eMule)
   uninstall cmd: "C:\Program Files\eMule\Uninstall.exe"

EPSON Logiciel imprimante  (EPSON Printer and Utilities)
   uninstall cmd: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R

ERUNT 1.1j  (ERUNT_is1)
install location: C:\Program Files\ERUNT\
   uninstall cmd: "C:\Program Files\ERUNT\unins000.exe"
       publisher: Lars Hederer
       help link: http://www.larshederer.homepage.t-online.de/erunt

  (Fontcore)

HijackThis 2.0.2 2.0.2 (HijackThis)
   uninstall cmd: "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
       publisher: TrendMicro

  (ICW)

Microsoft Internationalized Domain Names Mitigation APIs  (IDNMitigationAPIs)
    install date: 20080906
   uninstall cmd: "C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation

  (IE40)

  (IE4Data)

  (IE5BAKEX)

  (IEData)

IncrediMail Xe  5.8.5.3718 (IncrediMail)
   uninstall cmd: C:\Program Files\IncrediMail\bin\ImSetup.exe /remove /addon:IncrediMail /log:IncMail.log
       publisher: IncrediMail Ltd.
       help link: http://help.incredimail.com/english/help/index.html

Karen's Directory Printer 5.3.0.0 (Karen's Directory Printer)
   uninstall cmd: C:\Program Files\Karen's Power Tools\Directory Printer\uninst.exe
       publisher: Karen Kenworthy

  (KB884016)

  (KB884267)

  (KB885353)

  (KB886612)

  (KB887078)

  (KB887626)

High Definition Audio Driver Package - KB888111 20040219.000000 (KB888111WXPSP2)
   uninstall cmd: C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us

  (KB888656)

  (KB889858)

  (KB891122)

  (KB892313)

  (KB893240)

  (KB893241)

  (KB893803)

  (KB895181)

  (KB895316)

  (KB895572)

  (KB897586)

  (KB898549)

  (KB900399)

  (KB902344)

  (KB907658)

  (KB911565)

  (KB911854)

Mise à jour de sécurité pour Windows XP (KB923689)  (KB923689)
    install date: 20080904
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/923689

Mise à jour de sécurité pour Windows XP (KB923789)  (KB923789)
   uninstall cmd: C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/923789/ms06-069-vulnerabilities-in-macromedia-flash-player-from-adobe-could-a

Hotfix for Windows Media Format 11 SDK (KB929399)  (KB929399)
    install date: 20080905
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/929399

Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)  (KB936782_WMP11)
    install date: 20080905
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/936782/ms07-047-vulnerability-in-windows-media-player-could-allow-remote-code

Mise à jour de sécurité pour Windows XP (KB938464) 1 (KB938464)
    install date: 20080910
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/938464/ms08-052-description-of-the-security-update-for-gdi-for-all-editions-o

Correctif pour Lecteur Windows Media 11 (KB939683)  (KB939683)
    install date: 20080905
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/939683

Mise à jour de sécurité pour Windows XP (KB941569)  (KB941569)
    install date: 20080904
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/941569/ms07-068-vulnerability-in-windows-media-file-format-could-allow-remote

Mise à jour de sécurité pour Windows XP (KB946648) 1 (KB946648)
    install date: 20080907
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/946648

Mise à jour de sécurité pour Windows XP (KB950762) 1 (KB950762)
    install date: 20080907
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/950762/ms08-036-vulnerabilities-in-pragmatic-general-multicast-pgm-could-allo

Mise à jour de sécurité pour Windows XP (KB950974) 1 (KB950974)
    install date: 20080907
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/950974/ms08-049-vulnerability-in-event-system-could-allow-remote-code-executi

Mise à jour de sécurité pour Windows XP (KB951066) 1 (KB951066)
    install date: 20080907
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/951066

Mise à jour pour Windows XP (KB951072-v2) 2 (KB951072-v2)
    install date: 20080904
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/951072/

Mise à jour de sécurité pour Windows XP (KB951376-v2) 2 (KB951376-v2)
    install date: 20080907
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/951376/ms08-030-vulnerability-in-bluetooth-stack-could-allow-remote-code-exec

Mise à jour de sécurité pour Windows XP (KB951698) 1 (KB951698)
    install date: 20080907
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/951698

Mise à jour pour Windows XP (KB951978) 1 (KB951978)
    install date: 20080907
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/951978

Mise à jour de sécurité pour Lecteur Windows Media (KB952069)  (KB952069_WM9)
    install date: 20081210
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/952069/ms08-076-description-of-the-security-update-for-windows-media-format-r

Correctif pour Windows XP (KB952287) 1 (KB952287)
    install date: 20080907
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/952287

Mise à jour de sécurité pour Windows XP (KB952954) 1 (KB952954)
    install date: 20080907
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/952954/ms08-046-vulnerabilities-in-microsoft-windows-image-color-management-c

Mise à jour de sécurité pour Windows XP (KB953838) 1 (KB953838)
    install date: 20080907
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/953838

Mise à jour de sécurité pour Windows XP (KB953839) 1 (KB953839)
    install date: 20080904
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/953839

Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)  (KB954154_WM11)
    install date: 20080910
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/954154/ms08-054-vulnerability-in-windows-media-player-could-allow-remote-code

Mise à jour de sécurité pour Windows XP (KB954211) 1 (KB954211)
    install date: 20081015
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/954211/ms08-061-vulnerabilities-in-windows-kernel-could-allow-elevation-of-pr

Mise à jour de sécurité pour Windows XP (KB954459) 1 (KB954459)
    install date: 20081113
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/954459/ms08-069-description-of-the-security-update-for-xml-core-services-6-0

Hotfix for Windows XP (KB954550-v5) 5 (KB954550-v5)
    install date: 20080905
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/954550

Mise à jour de sécurité pour Windows XP (KB954600) 1 (KB954600)
    install date: 20081210
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/954600

Mise à jour de sécurité pour Windows XP (KB955069) 1 (KB955069)
    install date: 20081113
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/955069

Mise à jour pour Windows XP (KB955839) 1 (KB955839)
    install date: 20081210
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/955839

Mise à jour de sécurité pour Windows XP (KB956390) 1 (KB956390)
    install date: 20081015
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/956390

Mise à jour de sécurité pour Windows XP (KB956391) 1 (KB956391)
    install date: 20081015
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/956391/

Mise à jour de sécurité pour Windows XP (KB956802) 1 (KB956802)
    install date: 20081210
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/956802

Mise à jour de sécurité pour Windows XP (KB956841) 1 (KB956841)
    install date: 20081015
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/956841

Mise à jour de sécurité pour Windows XP (KB957095) 1 (KB957095)
    install date: 20081015
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/957095

Mise à jour de sécurité pour Windows XP (KB957097) 1 (KB957097)
    install date: 20081113
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/957097/ms08-068-vulnerability-in-smb-could-allow-remote-code-execution

Mise à jour de sécurité pour Windows XP (KB958215) 1 (KB958215)
    install date: 20081210
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/958215

Mise à jour de sécurité pour Windows XP (KB958644) 1 (KB958644)
    install date: 20081024
   uninstall cmd: "C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/958644/ms08-067-vulnerability-in-server-service-could-allow-remote-code-execu

K-Lite Mega Codec Pack 4.1.7 4.1.7 (KLiteCodecPack_is1)
    install date: 20081028
install location: C:\Program Files\K-Lite Codec Pack\
   uninstall cmd: "C:\Program Files\K-Lite Codec Pack\unins000.exe"

LimeWire PRO 4.12.3 4.12.3 (LimeWire)
   uninstall cmd: "E:	éléchargement\limewire\uninstall.exe"
       publisher: Lime Wire, LLC
       help link: http://www.limewire.com/support

Malware Removal Tool  (Malware Removal Tool_is1)
install location: C:\Program Files\Malware Removal Tool\
   uninstall cmd: "C:\Program Files\Malware Removal Tool\unins000.exe"
       help link: http://www.users.muohio.edu/pestroja/spyware/

Messenger Plus! Live 4.70 (build 334) (Messenger Plus! Live)
install location: C:\Program Files\Messenger Plus! Live
   uninstall cmd: "C:\Program Files\Messenger Plus! Live\Uninstall.exe"
       publisher: Patchou

Module linguistique Microsoft .NET Framework 3.5 SP1- fra  (Microsoft .NET Framework 3.5 Language Pack SP1 - fra)
install location: C:\WINDOWS\Microsoft.NET\Framework\v3.5\
   uninstall cmd: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
       publisher: Microsoft Corporation
       help link: https://www.microsoft.com/fr-fr/

Microsoft .NET Framework 3.5 SP1  (Microsoft .NET Framework 3.5 SP1)
install location: C:\WINDOWS\Microsoft.NET\Framework\v3.5\
   uninstall cmd: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
       publisher: Microsoft Corporation
       help link: https://www.microsoft.com/fr-fr/

  (MobileOptionPack)

Mozilla Firefox (3.0.4) 3.0.4 (fr) (Mozilla Firefox (3.0.4))
install location: C:\Program Files\Mozilla Firefox
   uninstall cmd: C:\Program Files\Mozilla Firefox\uninstall\helper.exe
       publisher: Mozilla
        comments: Mozilla Firefox

  (MPlayer2)

Microsoft Compression Client Pack 1.0 for Windows XP 1 (MSCompPackV1)
    install date: 20080904
   uninstall cmd: "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://www.microsoft.com/fr-fr/?ref=go

  (MSI30-Beta1)

  (MSI30-Beta2)

  (MSI30-KB884016)

  (MSI30-RC1)

  (MSI30-RC2)

  (MSI30a-KB884016)

  (MSI31-Beta)

  (MSI31-RC1)

  (NetMeeting)

Microsoft National Language Support Downlevel APIs  (NLSDownlevelMapping)
    install date: 20080906
   uninstall cmd: "C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation

  (OutlookExpress)

Pack Français de ERUNT  (Pack Français de ERUNT)
   uninstall cmd: C:\Program Files\ERUNT\Uninstal.exe

  (PCHealth)
   uninstall cmd: rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

Pegtop Deflexion  (Pegtop Deflexion)
   uninstall cmd: C:\WINDOWS\system32\Deflexion.scr -uninstall "C:\Documents and Settings\All Users\Application Data\Pegtop\Deflexion\Installation.xml"
       publisher: Pegtop Software

Microsoft Office Professional Plus 2007 12.0.6215.1000 (PROPLUS)
install location: C:\Program Files\Microsoft Office
   uninstall cmd: "C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
       publisher: Microsoft Corporation

Real Alternative 1.7.5 1.7.5 (RealAlt_is1)
    install date: 20080904
install location: C:\Program Files\Real Alternative\
   uninstall cmd: "C:\Program Files\Real Alternative\unins000.exe"

SAMSUNG Mobile Modem Driver Set  (SAMSUNG Mobile Modem)
   uninstall cmd: C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe

Samsung Mobile phone USB driver Software  (Samsung Mobile phone USB driver)
   uninstall cmd: C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe

SAMSUNG Mobile USB Modem Software  (SAMSUNG Mobile USB Modem)
   uninstall cmd: C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe

SAMSUNG Mobile USB Modem 1.0 Software  (SAMSUNG Mobile USB Modem 1.0)
   uninstall cmd: C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe

  (SchedulingAgent)

 9.0.124.0 (ShockwaveFlash)

StartClock 3.2  (StartClock_is1)
    install date: 20080904
install location: C:\Program Files\StartClock\
   uninstall cmd: "C:\Program Files\StartClock\unins000.exe"
       publisher: Grégory HARGOUS
       help link: http://www.GregLand.Net

SUPER © Version 2008.bld.32 (July 8, 2008) Version 2008.bld.32 (July 8, 2008) (SUPER ©)
    install date: 2008-09-04 20:58:04
install location: C:\Program Files\eRightSoft\SUPER
  install source: D:\Mes Documents\Programmes\changer format video
   uninstall cmd: C:\PROGRA~1\ERIGHT~1\SUPER\Setup.exe /remove /q0
       publisher: eRightSoft
         contact: support@eRightSoft.com
       help link: https://www.erightsoft.com/home.html

SuperCopier2  (SuperCopier2)
   uninstall cmd: "C:\Program Files\SuperCopier2\SC2Uninst.exe"

Unlocker 1.8.7 1.8.7 (Unlocker)
   uninstall cmd: C:\Program Files\Unlocker\uninst.exe
       publisher: Cedrick Collomb

UsbFix  (UsbFix)
   uninstall cmd: C:\Program Files\UsbFix\Uninstal.exe

VLC media player 0.9.6 0.9.6 (VLC media player)
   uninstall cmd: C:\Program Files\VideoLAN\VLC\uninstall.exe
       publisher: VideoLAN Team

Wallpaper 5.0.3 (Wallpaper)
   uninstall cmd: C:\Program Files\Wallpaper\uninst.exe
       publisher: Silver76

  (Wdf01000)

  (Wdf01001)

Microsoft Kernel-Mode Driver Framework Feature Pack 1.5  (Wdf01005)
    install date: 20080904
   uninstall cmd: "C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation

Windows Imaging Component 3.0.0.0 (WIC)
    install date: 20080905
   uninstall cmd: "C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation

Winamp 5.541  (Winamp)
   uninstall cmd: "C:\Program Files\Winamp\UninstWA.exe"
       publisher: Nullsoft, Inc
       help link: http://forums.winamp.com

Windows Media Format 11 runtime  (Windows Media Format Runtime)
   uninstall cmd: "C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
       help link: https://support.microsoft.com/en-us

Lecteur Windows Media 11  (Windows Media Player)
   uninstall cmd: "C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall

Windows XP Service Pack 3 20080413.144513 (Windows XP Service)
    install date: 20080907
   uninstall cmd: "C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/936929

  (Windows XP Service Pack)

WinPatrol 2008 15.5.2008.0 (WinPatrol)
 version (major): 15
 version (minor): 5
    install date: 2008-09-04 15:42:06
install location: C:\Program Files\BillP Studios\WinPatrol
  install source: L:\logiciels\winpatrol
   uninstall cmd: C:\PROGRA~1\BILLPS~1\WINPAT~1\Setup.exe /remove /q0
       publisher: BillP Studios
         contact: support@winpatrol.com
       help link: https://www.winpatrol.com/

Archiveur WinRAR  (WinRAR archiver)
   uninstall cmd: C:\Program Files\WinRAR\uninstall.exe

  (WMCSetup)

Windows Media Format 11 runtime  (WMFDist11)
    install date: 20080904
   uninstall cmd: "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: http:

Windows Media Player 11  (wmp11)
    install date: 20080904
   uninstall cmd: "C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: http:

Microsoft User-Mode Driver Framework Feature Pack 1.0  (Wudf01000)
    install date: 20080904
   uninstall cmd: "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
        comments: Build Number 5716

XBCD 360 0.2.5 0.2.5 (XBCD 360)
   uninstall cmd: C:\Program Files\XBCD 360\uninst.exe

breizh-222 · Answer

ya quelqu'un!!!????

jlpjlp · Answer

le scan en linge?

DTJB · Answer

Ca me semble louche ça :

C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe 


on devrai le renommer super arnaque ^^

jlpjlp · Answer

mais non
 il est très bon!!!!



https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/44141.html

breizh-222 · Answer

slt! ben le scan en ligne je voudrai bien te le passer ya pas de problème!jessaie sur panda il se bloque a chaque fois à 18% sur "Elément en cours: C:\System Volume Informat...anagerRemoteDatabase" jai pourtant désactiver lav au cas ou mais rien ny fait! ya pas une autre solution?? à part formater...

jlpjlp · Answer

télécharge bitdefender free et colle un scan avec:

https://www.01net.com/telecharger/windows/Securite/antivirus-antitrojan/fiches/29063.html

breizh-222 · Answer

ok jlpjlp je fais la mise a jrs puis janalyse je te redis ça tout de suite ;)

breizh-222 · Answer

le test ne me détecte rien! je présume que cest bon signe?

//-----------------------------------------------------------------
//
//	Produit BitDefender Free Edition v10
//	Produit 10.2
//
//	Créé le: 	20/12/2008	13:41:39
//
//-----------------------------------------------------------------


Statistiques

Chemin cible: 	C:\
		D:\
		E:\
		M:\
Dossiers	: 8944
Fichiers	: 172786
Processus Mémoire analysés	: 0
Archives	: 220 
Fichiers enpaquetés 	: 4709
Virus trouvés	: 0
Fichiers infectés 	: 0
Processus Mémoire infectés	: 0
Fichiers suspects 	: 0
Alertes	: 0
Fichiers désinfectés 	: 0
Fichiers effacés	: 0
Fichiers déplacés	: 0
Erreurs I/O 	: 44
Temps d'analyse 	:=00:28:25
Fichiers/seconde 	:101

Statistiques Spywares

Registres analysés		: 0
Registres infectés 		: 0
Cookies analysés			: 0
Cookies infectés		: 0
Fichiers spyware infectés			: 0
Menaces Spyware détectées	: 0


Définitions virus	: 2369498
Plugins d'analyse	: 17
Plugins archives	: 45
Plug-ins décompression	: 7
Plug-ins messagerie	: 6
Plug-ins système	: 5

Options d'analyse

Détection
[X] Analyser le secteur de boot
[X] Processus mémoire
[ ] Analyser les archives
[X] Analyser les fichiers enpaquetés
[X] Analyser la messagerie

Masque fichiers
[ ] Programmes
[X] Tous les fichiers
[ ] Extensions définies par l'utilisateur: 
[ ] Exclure les extensions: ;

Action

Objets infectés
[ ] Ignorer
[X] Désinfecter
[ ] Effacer
[ ] Mettre en quarantaine
[ ] Demander l'action

Seconde action
[ ] Ignorer
[ ] Effacer
[X] Mettre en quarantaine
[ ] Demander l'action

Options d'analyse
[X] Activer les alertes
[ ] Activer l'heuristique
[ ] Afficher tous les fichiers dans le journal
[X] Fichier journal: C:\Documents and Settings\All Users\Application Data\Bitdefender\Desktop\Profiles\Logs\full_scan\1229776899.log

Options d'analyse Spyware

[X] Analyse contre les risques non-viraux
[ ] Ecarter de l'analyse les dialers et les applications
[X] Clés de registres
[X] Cookies

breizh-222 · Answer

jlpjlp? comment ca se fait que sur le test en ligne avant quil se bloque à 18% il ttrouve 4fichiers infecté et la bitdefender trouve nada?

jlpjlp · Answer

panda avait trouvé quoi?

encore des soucis?

Attention virus!!!

43 réponses

Discussions similaires

Newsletters