Sujet Précédent Sujet Suivant

Attention virus!!!

Résolu/Fermé
breizh-222 Messages postés 111 Date d'inscription samedi 24 novembre 2007 Statut Membre Dernière intervention 4 décembre 2010 - 16 déc. 2008 à 20:27
 Super Platypus - 4 janv. 2009 à 13:48
Bonjour,
salut tout le monde, jai chopé un virus est ce que quelqu'un peut m'aider? avast detecte trojan-gen (que peut-il faire comme degats??)!!! et impossible de le supprimer.
voici une analyse hijackthis :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:17:06, on 16/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe
C:\Program Files\Fichiers communs\Logitech\G-series Software\LGDCore.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ASUS\PC Probe II\Probe2.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\ASUS WiFi-AP Solo\RtWLan.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\StartClock\StartClock.exe
C:\Program Files\ASUS\AASP\1.00.32\aaCenter.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\ControlMK\ControlMK.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.fr...
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\xRaidSetup.exe boot
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
O4 - HKLM\..\Run: [Ai Nap] "C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Fichiers communs\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Launch PC Probe II] "C:\Program Files\ASUS\PC Probe II\Probe2.exe" 1
O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [SuperCopier 2 (explorer file copy replacement)] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
O4 - Startup: StartClock.lnk = C:\Program Files\StartClock\StartClock.exe
O4 - Global Startup: ASUS WiFi-AP Solo.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - C:PROGRA~1MICROS~2Office12EXCEL.EXE...
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CS2\Services\Tcpip\..\{33A930C7-2CE0-47AE-9FCE-790C3AED0DB3}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS3\Services\Tcpip\..\{33A930C7-2CE0-47AE-9FCE-790C3AED0DB3}: NameServer = 208.67.222.222,208.67.220.220
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTServ.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

43 réponses

Précédent
Réponse 21 / 43
jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 040
16 déc. 2008 à 22:43
colle le rapport d'un scan en ligne
avec un des suivants:


Kaspersky en ligne
https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr

bitdefender en ligne :
http://www.bitdefender.fr/scan_fr/scan8/ie.html

Panda en ligne :
http://pandasoftware.fr
0
Réponse 22 / 43
breizh-222 Messages postés 111 Date d'inscription samedi 24 novembre 2007 Statut Membre Dernière intervention 4 décembre 2010 1
16 déc. 2008 à 22:44
désolé je n'y arrive pas parce que la version internet explorer ne veut pas se mettre a jour
0
Réponse 23 / 43
jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 040
16 déc. 2008 à 22:44
aucun des trois?
0
Réponse 24 / 43
breizh-222 Messages postés 111 Date d'inscription samedi 24 novembre 2007 Statut Membre Dernière intervention 4 décembre 2010 1
16 déc. 2008 à 22:50
si ça marche avec panda apres linstallation dun plugin, analyse a 50%
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 25 / 43
jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 040
16 déc. 2008 à 22:51
ok
0
Réponse 26 / 43
breizh-222 Messages postés 111 Date d'inscription samedi 24 novembre 2007 Statut Membre Dernière intervention 4 décembre 2010 1
16 déc. 2008 à 22:55
ca fait la mise a jours active scan 45%
0
Réponse 27 / 43
breizh-222 Messages postés 111 Date d'inscription samedi 24 novembre 2007 Statut Membre Dernière intervention 4 décembre 2010 1
16 déc. 2008 à 23:01
la ca recherche les virus! tien en attendant est-ce que tu sais si ca existe un cable dvi/hdmi? cest pr bancher ordi sur lcd...
0
Réponse 28 / 43
breizh-222 Messages postés 111 Date d'inscription samedi 24 novembre 2007 Statut Membre Dernière intervention 4 décembre 2010 1
16 déc. 2008 à 23:11
ca vient de trouver un fichier infecté et un fichier suspect! par contre lanalyse devrait prendre un peu plus dune heure! et demain je me lève à 4h30! je laisse le pc tourné cette nuit! tu sera dans le coin demain jlpjlp?
0
Réponse 29 / 43
jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 040
17 déc. 2008 à 09:17
un cable dvi/hdmi apparement oui en cherchant dans google par exemple:

https://www.son-video.com/rayon/accessoires/cables-video/cables-hdmi
0
Réponse 30 / 43
breizh-222 Messages postés 111 Date d'inscription samedi 24 novembre 2007 Statut Membre Dernière intervention 4 décembre 2010 1
17 déc. 2008 à 13:29
merci jlpjlp jai trouvé ça hier ils en vendent sur cdscount. au fait pr le scan en ligne jai un ptit probleme ça me détecte bien des fichier infecté mais ça ne me dit pas lesquel, en fait il demande de payer sur le site panda donc voila! tu n'aurais pas une autre solution???
0
Réponse 31 / 43
jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 040
17 déc. 2008 à 13:49
pas grave donne juste le rapport panda sans désinfecter et je le ferai!
0
Réponse 32 / 43
breizh-222 Messages postés 111 Date d'inscription samedi 24 novembre 2007 Statut Membre Dernière intervention 4 décembre 2010 1
17 déc. 2008 à 13:59
je relance le scan en fait hier il sest stopper a 18% puis m'a demander de payer pour supprimer le fichier infecté! en fait le problème cest quil a pas continuer son scan! on va voir ce que ca donne cette fois ;)
0
Réponse 33 / 43
breizh-222 Messages postés 111 Date d'inscription samedi 24 novembre 2007 Statut Membre Dernière intervention 4 décembre 2010 1
17 déc. 2008 à 14:02
jai refai un scan avec spyboth tal et voila le rapport :


--- Search result list ---
Hint of the Day: Click the bar at the right of this to see more information! ()


MediaPlex: Cookie traceur (Internet Explorer: breizh-222) (Cookie, nothing done)


MediaPlex: Cookie traceur (Internet Explorer: breizh-222) (Cookie, nothing done)


BlueStreak: Cookie traceur (Firefox: default) (Cookie, nothing done)


DoubleClick: Cookie traceur (Firefox: default) (Cookie, nothing done)


Tradedoubler: Cookie traceur (Firefox: default) (Cookie, nothing done)


Tradedoubler: Cookie traceur (Firefox: default) (Cookie, nothing done)


Tradedoubler: Cookie traceur (Firefox: default) (Cookie, nothing done)


Statcounter: Cookie traceur (Firefox: default) (Cookie, nothing done)


Adviva: Cookie traceur (Firefox: default) (Cookie, nothing done)



--- Spybot - Search & Destroy version: 1.6.0 (build: 20080707) ---

2008-07-07 blindman.exe (1.0.0.8)
2008-07-07 SDFiles.exe (1.6.0.4)
2008-07-07 SDMain.exe (1.0.0.6)
2008-07-07 SDShred.exe (1.0.2.3)
2008-07-07 SDUpdate.exe (1.6.0.8)
2008-07-07 SDWinSec.exe (1.0.0.12)
2008-07-07 SpybotSD.exe (1.6.0.30)
2008-09-16 TeaTimer.exe (1.6.3.25)
2008-09-04 unins000.exe (51.49.0.0)
2008-07-07 Update.exe (1.6.0.7)
2008-10-22 advcheck.dll (1.6.2.13)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2008-09-15 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2008-10-22 Tools.dll (2.1.6.8)
2008-11-04 Includes\Adware.sbi (*)
2008-12-09 Includes\AdwareC.sbi (*)
2008-06-03 Includes\Cookies.sbi (*)
2008-09-02 Includes\Dialer.sbi (*)
2008-09-09 Includes\DialerC.sbi (*)
2008-07-23 Includes\HeavyDuty.sbi (*)
2008-11-18 Includes\Hijackers.sbi (*)
2008-11-18 Includes\HijackersC.sbi (*)
2008-12-09 Includes\Keyloggers.sbi (*)
2008-12-09 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2008-11-18 Includes\Malware.sbi (*)
2008-12-09 Includes\MalwareC.sbi (*)
2008-11-03 Includes\PUPS.sbi (*)
2008-12-09 Includes\PUPSC.sbi (*)
2007-11-07 Includes\Revision.sbi (*)
2008-06-18 Includes\Security.sbi (*)
2008-12-09 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2008-12-10 Includes\Spyware.sbi (*)
2008-12-10 Includes\SpywareC.sbi (*)
2008-06-03 Includes\Tracks.uti
2008-11-04 Includes\Trojans.sbi (*)
2008-12-10 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll



--- System information ---
Windows XP (Build: 2600) Service Pack 3 (5.1.2600)
/ MSXML4SP2: Security update for MSXML4 SP2 (KB936181)
/ MSXML4SP2: Security update for MSXML4 SP2 (KB954430)
/ Windows / SP1: Microsoft Internationalized Domain Names Mitigation APIs
/ Windows / SP1: Microsoft National Language Support Downlevel APIs
/ Windows Media Format 11 SDK: Hotfix for Windows Media Format 11 SDK (KB929399)
/ Windows Media Player: Mise à jour de sécurité pour Lecteur Windows Media (KB952069)
/ Windows Media Player 11: Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)
/ Windows Media Player 11: Correctif pour Lecteur Windows Media 11 (KB939683)
/ Windows Media Player 11: Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)
/ Windows XP: Mise à jour de sécurité pour Windows XP (KB923689)
/ Windows XP: Mise à jour de sécurité pour Windows XP (KB941569)
/ Windows XP / SP10: Microsoft Compression Client Pack 1.0 for Windows XP
/ Windows XP / SP3: High Definition Audio Driver Package - KB888111
/ Windows XP / SP3: Windows XP Service Pack 3
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB938464)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB946648)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB950762)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB950974)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB951066)
/ Windows XP / SP4: Mise à jour pour Windows XP (KB951072-v2)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB951376-v2)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB951698)
/ Windows XP / SP4: Mise à jour pour Windows XP (KB951978)
/ Windows XP / SP4: Correctif pour Windows XP (KB952287)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB952954)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB953838)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB953839)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB954211)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB954459)
/ Windows XP / SP4: Hotfix for Windows XP (KB954550-v5)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB954600)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB955069)
/ Windows XP / SP4: Mise à jour pour Windows XP (KB955839)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956390)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956391)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956802)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956841)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB957095)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB957097)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB958215)
/ Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB958644)
/ XML Paper Specification Shared Components Pack 1.0: XML Paper Specification Shared Components Pack 1.0


--- Startup entries list ---
Located: HK_LM:Run, 36X Raid Configurer
command: C:\WINDOWS\system32\xRaidSetup.exe boot
file: C:\WINDOWS\system32\xRaidSetup.exe
size: 1953792
MD5: E251DD212E50BC9262D067296B2E5788

Located: HK_LM:Run, Adobe Reader Speed Launcher
command: "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
file: C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
size: 34672
MD5: 69B16C7B7746BA5C642FC05B3561FC73

Located: HK_LM:Run, Ai Nap
command: "C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe"
file: C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe
size: 1423360
MD5: EE3CE36574FD53E5D7713183838E3BE1

Located: HK_LM:Run, avast!
command: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
file: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
size: 81000
MD5: 55EBFBAB39BFAB5E62358C093F297641

Located: HK_LM:Run, EPSON Stylus C46 Series
command: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
file: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
size: 99840
MD5: 32B0CBB036AE701352881A4303B10A7A

Located: HK_LM:Run, JMB36X IDE Setup
command: C:\WINDOWS\RaidTool\xInsIDE.exe
file: C:\WINDOWS\RaidTool\xInsIDE.exe
size: 36864
MD5: DB4E2D9C09A5762CB2551222B5E443B2

Located: HK_LM:Run, Kernel and Hardware Abstraction Layer
command: KHALMNPR.EXE
file: C:\WINDOWS\KHALMNPR.EXE
size: 76304
MD5: E6A9F68D26A094FB78B98180A40A29FC

Located: HK_LM:Run, Launch LGDCore
command: "C:\Program Files\Fichiers communs\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
file: C:\Program Files\Fichiers communs\Logitech\G-series Software\LGDCore.exe
size: 1126400
MD5: 0AD5DF852C968892B3173716A71441A9

Located: HK_LM:Run, Launch PC Probe II
command: "C:\Program Files\ASUS\PC Probe II\Probe2.exe" 1
file: C:\Program Files\ASUS\PC Probe II\Probe2.exe
size: 2130432
MD5: 66E2BC18AA31B9FF3E5C57399B5CA8FF

Located: HK_LM:Run, SoundMAXPnP
command: C:\Program Files\Analog Devices\Core\smax4pnp.exe
file: C:\Program Files\Analog Devices\Core\smax4pnp.exe
size: 868352
MD5: 1983A11F702BDC5DB65B4B0F376FF6FD

Located: HK_LM:Run, StartCCC
command: "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
file: C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
size: 61440
MD5: E1E71D80D078C576801B6FE2A29FCF85

Located: HK_LM:Run, SunJavaUpdateSched
command: "C:\Program Files\Java\jre6\bin\jusched.exe"
file: C:\Program Files\Java\jre6\bin\jusched.exe
size: 136600
MD5: B98FFA8288EFAABC436C30D198608345

Located: HK_LM:Run, WinPatrol
command: C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
file: C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
size: 333120
MD5: D6CF53D042B26E9E055D5457F5E98F30

Located: HK_LM:Run, ZoneAlarm Client
command: "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
file: C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
size: 919016
MD5: 6B632BE30A0930421560A9A9C677ABD4

Located: HK_CU:Run, CTFMON.EXE
where: .DEFAULT...
command: C:\WINDOWS\system32\CTFMON.EXE
file: C:\WINDOWS\system32\CTFMON.EXE
size: 15360
MD5: 59DC5BB82E4C8E0B3EADCFDBC44BA6E4

Located: HK_CU:Run, IncrediMail
where: S-1-5-21-117609710-1645522239-839522115-1003...
command: C:\Program Files\IncrediMail\bin\IncMail.exe /c
file: C:\Program Files\IncrediMail\bin\IncMail.exe
size: 243072
MD5: 7AD7DAAA39AD39931E5947543084DDF3

Located: HK_CU:Run, msnmsgr
where: S-1-5-21-117609710-1645522239-839522115-1003...
command: "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
file: C:\Program Files\Windows Live\Messenger\msnmsgr.exe
size: 5724184
MD5: 97384875B6D03831B2D1820AB8952F67

Located: HK_CU:Run, SuperCopier 2 (explorer file copy replacement)
where: S-1-5-21-117609710-1645522239-839522115-1003...
command: C:\Program Files\SuperCopier2\SuperCopier2.exe
file: C:\Program Files\SuperCopier2\SuperCopier2.exe
size: 1052672
MD5: B8DA797CEA896C42F5BAD9E08E21AF9F

Located: HK_CU:Run, CTFMON.EXE
where: S-1-5-18...
command: C:\WINDOWS\system32\CTFMON.EXE
file: C:\WINDOWS\system32\CTFMON.EXE
size: 15360
MD5: 59DC5BB82E4C8E0B3EADCFDBC44BA6E4

Located: Démarrage (tous utilisateurs), ASUS WiFi-AP Solo.lnk
where: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage...
command: C:\Program Files\ASUS WiFi-AP Solo\RtWLan.exe
file: C:\Program Files\ASUS WiFi-AP Solo\RtWLan.exe
size: 987136
MD5: FC4715240C014A3268278AFBFF7AE70E

Located: Démarrage (tous utilisateurs), Logitech SetPoint.lnk
where: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage...
command: C:\Program Files\Logitech\SetPoint\SetPoint.exe
file: C:\Program Files\Logitech\SetPoint\SetPoint.exe
size: 805392
MD5: D0948BE9B3547B9669195D7F84FC09F7

Located: Démarrage (utilisateur), MSN Pictures Displayer.lnk
where: C:\Documents and Settings\breizh-222\Menu Démarrer\Programmes\Démarrage...
command: C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
file: C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: Démarrage (utilisateur), StartClock.lnk
where: C:\Documents and Settings\breizh-222\Menu Démarrer\Programmes\Démarrage...
command: C:\Program Files\StartClock\StartClock.exe
file: C:\Program Files\StartClock\StartClock.exe
size: 93696
MD5: 750BAED62B5CAA46322B9A9BDE67A8B1

Located: WinLogon, !SASWinLogon
command: C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
file: C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
size: 352256
MD5: D8EDAEEAF63BBF45ED9B7A3666641C2A

Located: WinLogon, AtiExtEvent
command: Ati2evxx.dll
file: Ati2evxx.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, crypt32chain
command: crypt32.dll
file: crypt32.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cryptnet
command: cryptnet.dll
file: cryptnet.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cscdll
command: cscdll.dll
file: cscdll.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, dimsntfy
command: %SystemRoot%\System32\dimsntfy.dll
file: %SystemRoot%\System32\dimsntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, LBTWlgn
command: c:\program files\fichiers communs\logitech\bluetooth\LBTWlgn.dll
file: c:\program files\fichiers communs\logitech\bluetooth\LBTWlgn.dll
size: 72208
MD5: 2ACBFEF9984F0FE9849DA857206CCECC

Located: WinLogon, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, Schedule
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, SensLogn
command: WlNotify.dll
file: WlNotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, termsrv
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, wlballoon
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!



--- Browser helper object list ---
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} (AcroIEHelperStub)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name: AcroIEHelperStub
CLSID name: Adobe PDF Link Helper
Path: C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\
Long name: AcroIEHelperShim.dll
Short name: ACROIE~2.DLL
Date (created): 11/06/2008 21:33:16
Date (last access): 17/12/2008 13:21:58
Date (last write): 11/06/2008 21:33:16
Filesize: 75128
Attributes: archive
MD5: E96C752BBA0E22330A43258FC800200E
CRC32: E5D72083
Version: 9.0.0.332

{7E853D72-626A-48EC-A868-BA8D5E23E045} ()
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name:

{9030D464-4C02-4ABF-8ECC-5164760863C6} (Programme d'aide de l'Assistant de connexion Windows Live)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Programme d'aide de l'Assistant de connexion Windows Live
Path: C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\
Long name: WindowsLiveLogin.dll
Short name: WINDOW~1.DLL
Date (created): 20/09/2007 09:30:18
Date (last access): 17/12/2008 13:21:58
Date (last write): 20/09/2007 09:30:18
Filesize: 328752
Attributes: archive
MD5: 59CF5BF6684AFCF906CADAD39B4214DE
CRC32: C363813C
Version: 4.200.520.1

{DBC80044-A445-435b-BC74-9C25C1C588A9} (Java(tm) Plug-In 2 SSV Helper)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Java(tm) Plug-In 2 SSV Helper
Path: C:\Program Files\Java\jre6\bin\
Long name: jp2ssv.dll
Short name:
Date (created): 16/12/2008 22:37:46
Date (last access): 17/12/2008 13:21:58
Date (last write): 16/12/2008 22:37:46
Filesize: 34816
Attributes: archive
MD5: 5D57FD3DF32DC69CEC3D1D54B4C43162
CRC32: D7C13FB2
Version: 6.0.110.3

{E7E6F031-17CE-4C07-BC86-EABFE594F69C} (JQSIEStartDetectorImpl)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name: JQSIEStartDetectorImpl
CLSID name: JQSIEStartDetectorImpl Class
Path: C:\Program Files\Java\jre6\lib\deploy\jqs\ie\
Long name: jqs_plugin.dll
Short name: JQS_PL~1.DLL
Date (created): 16/12/2008 22:37:46
Date (last access): 17/12/2008 13:21:58
Date (last write): 16/12/2008 22:37:46
Filesize: 73728
Attributes: archive
MD5: F68EDAFE003F2B3523C0742CD3B8D673
CRC32: 9C709350
Version: 6.0.110.3



--- ActiveX list ---
{8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_11
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
description: Sun Java
classification: Legitimate
known filename: %PROGRAM FILES%\JabaSoft\JRE\*\Bin\npjava131.dll
info link:
info source: Patrick M. Kolla
Path: C:\Program Files\Java\jre6\bin\
Long name: npjpi160_11.dll
Short name: NPJPI1~1.DLL
Date (created): 16/12/2008 22:37:46
Date (last access): 17/12/2008 13:55:14
Date (last write): 16/12/2008 22:37:46
Filesize: 132504
Attributes: archive
MD5: D400116F6776ACB6EDB6B1F5EEB9F92D
CRC32: CECB5751
Version: 6.0.110.3

{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_07
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
Path: C:\Program Files\Java\jre1.6.0_07\bin\
Long name: npjpi160_07.dll

{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_11
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
Path: C:\Program Files\Java\jre6\bin\
Long name: npjpi160_11.dll
Short name: NPJPI1~1.DLL
Date (created): 16/12/2008 22:37:46
Date (last access): 17/12/2008 13:55:14
Date (last write): 16/12/2008 22:37:46
Filesize: 132504
Attributes: archive
MD5: D400116F6776ACB6EDB6B1F5EEB9F92D
CRC32: CECB5751
Version: 6.0.110.3

{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_11
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
description:
classification: Legitimate
known filename: npjpi150_06.dll
info link:
info source: Safer Networking Ltd.
Path: C:\Program Files\Java\jre6\bin\
Long name: npjpi160_11.dll
Short name: NPJPI1~1.DLL
Date (created): 16/12/2008 22:37:46
Date (last access): 17/12/2008 13:55:14
Date (last write): 16/12/2008 22:37:46
Filesize: 132504
Attributes: archive
MD5: D400116F6776ACB6EDB6B1F5EEB9F92D
CRC32: CECB5751
Version: 6.0.110.3

{D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object)
DPF name:
CLSID name: Shockwave Flash Object
Installer: C:\WINDOWS\Downloaded Program Files\swflash.inf
Codebase: http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
description: Macromedia Shockwave Flash Player
classification: Legitimate
known filename:
info link:
info source: Patrick M. Kolla
Path: C:\WINDOWS\system32\Macromed\Flash\
Long name: Flash9f.ocx
Short name:
Date (created): 25/03/2008 03:32:42
Date (last access): 17/12/2008 13:51:28
Date (last write): 25/03/2008 03:32:42
Filesize: 2991488
Attributes: readonly archive
MD5: 48FDF435B8595604E54125B321924510
CRC32: 12335E29
Version: 9.0.124.0



--- Process list ---
PID: 0 ( 0) [System]
PID: 692 ( 4) \SystemRoot\System32\smss.exe
size: 50688
PID: 944 ( 692) \??\C:\WINDOWS\system32\csrss.exe
size: 6144
PID: 980 ( 692) \??\C:\WINDOWS\system32\winlogon.exe
size: 512000
PID: 1028 ( 980) C:\WINDOWS\system32\services.exe
size: 109056
MD5: 54CB50058851D95E56EC70D09F70857F
PID: 1040 ( 980) C:\WINDOWS\system32\lsass.exe
size: 13312
MD5: 91E6024D6D4DCDECDB36C43ECF9BBECB
PID: 1192 (1028) C:\WINDOWS\system32\Ati2evxx.exe
size: 561152
MD5: 3C94E4E7983EFF03E7E128325891EA80
PID: 1212 (1028) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1272 (1028) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1324 (1028) C:\WINDOWS\System32\svchost.exe
size: 14336
MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1464 (1028) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1492 (1028) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1504 (1028) C:\WINDOWS\system32\ZoneLabs\vsmon.exe
size: 75304
MD5: 4BB7862806BEA6BF50D618C5D593ED54
PID: 1544 ( 980) C:\WINDOWS\system32\Ati2evxx.exe
size: 561152
MD5: 3C94E4E7983EFF03E7E128325891EA80
PID: 1920 (1028) C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
size: 18752
MD5: 118F964817982E771B8953DF2E99E3AB
PID: 1980 (1028) C:\Program Files\Alwil Software\Avast4\ashServ.exe
size: 155160
MD5: E1D075B489A5E6E294E968501184C5F6
PID: 340 (1028) C:\WINDOWS\system32\spoolsv.exe
size: 57856
MD5: 460E4CE148BD07218DA0B6A3D31885A9
PID: 712 (1028) C:\Program Files\Java\jre6\bin\jqs.exe
size: 152984
MD5: 32192B4EBE8720ED8D49A455C962CB91
PID: 1472 (1028) C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
size: 254040
MD5: 2D697C9C4FBDA956E4BE318C334CD95E
PID: 1568 (1028) C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
size: 352920
MD5: B9FD2B7A954A45963C3BF932DB10A633
PID: 1000 (1028) C:\WINDOWS\System32\alg.exe
size: 44544
MD5: 5E9A6658A2A69AE7EB195113B7A2E7A9
PID: 2444 (1028) C:\WINDOWS\system32\wbem\wmiapsrv.exe
size: 126464
MD5: 4E8E8A58F56B25D0795F484E5EB7F898
PID: 2900 (2832) C:\WINDOWS\Explorer.EXE
size: 1037824
MD5: F2317622D29F9FF0F88AEECD5F60F0DD
PID: 3496 (2900) C:\Program Files\Analog Devices\Core\smax4pnp.exe
size: 868352
MD5: 1983A11F702BDC5DB65B4B0F376FF6FD
PID: 3524 (2900) C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
size: 333120
MD5: D6CF53D042B26E9E055D5457F5E98F30
PID: 3564 (2900) C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe
size: 1423360
MD5: EE3CE36574FD53E5D7713183838E3BE1
PID: 3584 (2900) C:\Program Files\Fichiers communs\Logitech\G-series Software\LGDCore.exe
size: 1126400
MD5: 0AD5DF852C968892B3173716A71441A9
PID: 3596 (2900) C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
size: 81000
MD5: 55EBFBAB39BFAB5E62358C093F297641
PID: 3632 (2900) C:\Program Files\ASUS\PC Probe II\Probe2.exe
size: 2130432
MD5: 66E2BC18AA31B9FF3E5C57399B5CA8FF
PID: 3644 (3612) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
size: 49152
MD5: E681281D9BFC9D45D3B72532717E5880
PID: 3652 (2900) C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
size: 99840
MD5: 32B0CBB036AE701352881A4303B10A7A
PID: 3660 (2900) C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
size: 919016
MD5: 6B632BE30A0930421560A9A9C677ABD4
PID: 3696 (2900) C:\Program Files\Java\jre6\bin\jusched.exe
size: 136600
MD5: B98FFA8288EFAABC436C30D198608345
PID: 3784 (2900) C:\Program Files\SuperCopier2\SuperCopier2.exe
size: 1052672
MD5: B8DA797CEA896C42F5BAD9E08E21AF9F
PID: 3828 (2900) C:\Program Files\ASUS WiFi-AP Solo\RtWLan.exe
size: 987136
MD5: FC4715240C014A3268278AFBFF7AE70E
PID: 3940 (2900) C:\Program Files\Logitech\SetPoint\SetPoint.exe
size: 805392
MD5: D0948BE9B3547B9669195D7F84FC09F7
PID: 484 (2900) C:\Program Files\StartClock\StartClock.exe
size: 93696
MD5: 750BAED62B5CAA46322B9A9BDE67A8B1
PID: 2780 (3940) C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
size: 76304
MD5: 19E0D28FE38F55CA4C63F77D3657959A
PID: 1584 (1028) C:\WINDOWS\System32\svchost.exe
size: 14336
MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 3532 (1212) C:\Program Files\IncrediMail\bin\IMApp.exe
size: 189824
MD5: B019A29934FFE34F44D5D43E76676DA4
PID: 3000 (3632) C:\Program Files\ASUS\AASP\1.00.32\aaCenter.exe
size: 603648
MD5: 9B8FEBDB9D6D2A19A985C45F9FD7D83D
PID: 4008 (3644) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
size: 49152
MD5: 25CA1677AAA3CDC99CD4FCF940886F3C
PID: 3868 (1028) C:\Program Files\Windows Live\Messenger\usnsvc.exe
size: 98328
MD5: 9D19B042A4FD5C02195071EA2FE0C821
PID: 1828 (2900) C:\Program Files\Mozilla Firefox\firefox.exe
size: 307712
MD5: BAC6F7DE724D7F30EBD78648C86B4617
PID: 3040 (3948) C:\Program Files\Micro Application\9 Dictionnaires Utiles\MediaDICO9Ut.EXE
size: 281600
MD5: 82B7D15914C96BE28308CBF925B02CFE
PID: 2284 (3948) C:\Program Files\Micro Application\9 Dictionnaires Utiles\Rac9Ut.EXE
size: 213078
MD5: 096F79108A21E6E99EBF6DB5B2E9AA88
PID: 2496 (2900) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
size: 4891472
MD5: 3B1B5D09D3C9C4CD39D4DB06ED7A0855
PID: 3964 (2900) C:\Program Files\ControlMK\ControlMK.exe
size: 185344
MD5: BBCAE258D8C37A855735148B1E9131DB
PID: 4 ( 0) System


--- Browser start & search pages list ---
Spybot - Search & Destroy browser pages report, 17/12/2008 13:59:20

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
C:\WINDOWS\system32\blank.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
https://www.google.fr/?gws_rd=ssl
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\First Home Page
http://www.microsoft.com/isapi/redir.dll?Prd=ie&Pver=5.0&Ar=ie5update&O1=b1
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
%SystemRoot%\system32\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
https://www.msn.com/fr-fr
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
https://www.msn.com/fr-fr/?ocid=iehp
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant
https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm


--- Winsock Layered Service Provider list ---


--- Uninstall list ---
Panda ActiveScan 2.0 01.02.03.0000 (ActiveScan 2.0)
estimated size: 4000
install location: C:\Program Files\Panda Security\ActiveScan 2.0
uninstall cmd: C:\Program Files\Panda Security\ActiveScan 2.0\as2uninst.exe
publisher: Panda Security
help link: https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan

(AddressBook)

Adobe Flash Player ActiveX 9.0.124.0 (Adobe Flash Player ActiveX)
uninstall cmd: C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
publisher: Adobe Systems Incorporated
help link: https://helpx.adobe.com/flash-player.html

Adobe Flash Player Plugin 9.0.124.0 (Adobe Flash Player Plugin)
uninstall cmd: C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
publisher: Adobe Systems Incorporated

ATI - Software Uninstall Utility 6.14.10.1022 (All ATI Software)
install location: C:\Program Files\ATI Technologies\UninstallAll
uninstall cmd: C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe

ALUpdate (ALUpdate_is1)
install location: C:\Program Files\ESTsoft\ALUpdate\
uninstall cmd: "C:\Program Files\ESTsoft\ALUpdate\unins000.exe"
publisher: ESTsoft Corp.

ATI Display Driver 8.512-080703a-066900C-ATI (ATI Display Driver)
uninstall cmd: rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean

avast! Antivirus 4.8 (avast!)
version (major): 4
version (minor): 8
install location: C:\PROGRA~1\ALWILS~1\Avast4
install source: C:\PROGRA~1\ALWILS~1\Avast4\setup
uninstall cmd: C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
publisher: Alwil Software
help link: https://www.avast.com/fr-fr/index

(Branding)

cbgeo (cbgeo)
uninstall cmd: C:\Program Files\cbgeo\uninstall.exe

CCleaner (remove only) (CCleaner)
uninstall cmd: "C:\Program Files\CCleaner\uninst.exe"

Code de la route (Code de la route_is1)
install location: C:\Program Files\Code de la route\
uninstall cmd: "C:\Program Files\Code de la route\unins000.exe"
publisher: Anuman Interactive
help link: http://www.anuman-interactive.com

(Connection Manager)

ControlMK 0.232 0.232 (ControlMK)
uninstall cmd: C:\Program Files\ControlMK\uninst.exe
publisher: Redcl0ud

CULTIX 2.0 (CULTIX 2.0)
uninstall cmd: c:\Program Files\cultix\Uninstal.exe

(DirectAnimation)

(DirectDrawEx)

(Drawing Hand Screen Saver)

(DXM_Runtime)

eMule (eMule)
uninstall cmd: "C:\Program Files\eMule\Uninstall.exe"

EPSON Logiciel imprimante (EPSON Printer and Utilities)
uninstall cmd: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R

ERUNT 1.1j (ERUNT_is1)
install location: C:\Program Files\ERUNT\
uninstall cmd: "C:\Program Files\ERUNT\unins000.exe"
publisher: Lars Hederer
help link: http://www.larshederer.homepage.t-online.de/erunt

(Fontcore)

HijackThis 2.0.2 2.0.2 (HijackThis)
uninstall cmd: "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
publisher: TrendMicro

(ICW)

Microsoft Internationalized Domain Names Mitigation APIs (IDNMitigationAPIs)
install date: 20080906
uninstall cmd: "C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
publisher: Microsoft Corporation

(IE40)

(IE4Data)

(IE5BAKEX)

(IEData)

IncrediMail Xe 5.8.5.3718 (IncrediMail)
uninstall cmd: C:\Program Files\IncrediMail\bin\ImSetup.exe /remove /addon:IncrediMail /log:IncMail.log
publisher: IncrediMail Ltd.
help link: http://help.incredimail.com/english/help/index.html

Karen's Directory Printer 5.3.0.0 (Karen's Directory Printer)
uninstall cmd: C:\Program Files\Karen's Power Tools\Directory Printer\uninst.exe
publisher: Karen Kenworthy

(KB884016)

(KB884267)

(KB885353)

(KB886612)

(KB887078)

(KB887626)

High Definition Audio Driver Package - KB888111 20040219.000000 (KB888111WXPSP2)
uninstall cmd: C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us

(KB888656)

(KB889858)

(KB891122)

(KB892313)

(KB893240)

(KB893241)

(KB893803)

(KB895181)

(KB895316)

(KB895572)

(KB897586)

(KB898549)

(KB900399)

(KB902344)

(KB907658)

(KB911565)

(KB911854)

Mise à jour de sécurité pour Windows XP (KB923689) (KB923689)
install date: 20080904
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/923689

Mise à jour de sécurité pour Windows XP (KB923789) (KB923789)
uninstall cmd: C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/923789/ms06-069-vulnerabilities-in-macromedia-flash-player-from-adobe-could-a

Hotfix for Windows Media Format 11 SDK (KB929399) (KB929399)
install date: 20080905
uninstall cmd: "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/929399

Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782) (KB936782_WMP11)
install date: 20080905
uninstall cmd: "C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/936782/ms07-047-vulnerability-in-windows-media-player-could-allow-remote-code

Mise à jour de sécurité pour Windows XP (KB938464) 1 (KB938464)
install date: 20080910
uninstall cmd: "C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/938464/ms08-052-description-of-the-security-update-for-gdi-for-all-editions-o

Correctif pour Lecteur Windows Media 11 (KB939683) (KB939683)
install date: 20080905
uninstall cmd: "C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/939683

Mise à jour de sécurité pour Windows XP (KB941569) (KB941569)
install date: 20080904
uninstall cmd: "C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/941569/ms07-068-vulnerability-in-windows-media-file-format-could-allow-remote

Mise à jour de sécurité pour Windows XP (KB946648) 1 (KB946648)
install date: 20080907
uninstall cmd: "C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/946648

Mise à jour de sécurité pour Windows XP (KB950762) 1 (KB950762)
install date: 20080907
uninstall cmd: "C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/950762/ms08-036-vulnerabilities-in-pragmatic-general-multicast-pgm-could-allo

Mise à jour de sécurité pour Windows XP (KB950974) 1 (KB950974)
install date: 20080907
uninstall cmd: "C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/950974/ms08-049-vulnerability-in-event-system-could-allow-remote-code-executi

Mise à jour de sécurité pour Windows XP (KB951066) 1 (KB951066)
install date: 20080907
uninstall cmd: "C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/951066

Mise à jour pour Windows XP (KB951072-v2) 2 (KB951072-v2)
install date: 20080904
uninstall cmd: "C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/951072/

Mise à jour de sécurité pour Windows XP (KB951376-v2) 2 (KB951376-v2)
install date: 20080907
uninstall cmd: "C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/951376/ms08-030-vulnerability-in-bluetooth-stack-could-allow-remote-code-exec

Mise à jour de sécurité pour Windows XP (KB951698) 1 (KB951698)
install date: 20080907
uninstall cmd: "C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/951698

Mise à jour pour Windows XP (KB951978) 1 (KB951978)
install date: 20080907
uninstall cmd: "C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/951978

Mise à jour de sécurité pour Lecteur Windows Media (KB952069) (KB952069_WM9)
install date: 20081210
uninstall cmd: "C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/952069/ms08-076-description-of-the-security-update-for-windows-media-format-r

Correctif pour Windows XP (KB952287) 1 (KB952287)
install date: 20080907
uninstall cmd: "C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/952287

Mise à jour de sécurité pour Windows XP (KB952954) 1 (KB952954)
install date: 20080907
uninstall cmd: "C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/952954/ms08-046-vulnerabilities-in-microsoft-windows-image-color-management-c

Mise à jour de sécurité pour Windows XP (KB953838) 1 (KB953838)
install date: 20080907
uninstall cmd: "C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/953838

Mise à jour de sécurité pour Windows XP (KB953839) 1 (KB953839)
install date: 20080904
uninstall cmd: "C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/953839

Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154) (KB954154_WM11)
install date: 20080910
uninstall cmd: "C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/954154/ms08-054-vulnerability-in-windows-media-player-could-allow-remote-code

Mise à jour de sécurité pour Windows XP (KB954211) 1 (KB954211)
install date: 20081015
uninstall cmd: "C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/954211/ms08-061-vulnerabilities-in-windows-kernel-could-allow-elevation-of-pr

Mise à jour de sécurité pour Windows XP (KB954459) 1 (KB954459)
install date: 20081113
uninstall cmd: "C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/954459/ms08-069-description-of-the-security-update-for-xml-core-services-6-0

Hotfix for Windows XP (KB954550-v5) 5 (KB954550-v5)
install date: 20080905
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/954550

Mise à jour de sécurité pour Windows XP (KB954600) 1 (KB954600)
install date: 20081210
uninstall cmd: "C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/954600

Mise à jour de sécurité pour Windows XP (KB955069) 1 (KB955069)
install date: 20081113
uninstall cmd: "C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/955069

Mise à jour pour Windows XP (KB955839) 1 (KB955839)
install date: 20081210
uninstall cmd: "C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/955839

Mise à jour de sécurité pour Windows XP (KB956390) 1 (KB956390)
install date: 20081015
uninstall cmd: "C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/956390

Mise à jour de sécurité pour Windows XP (KB956391) 1 (KB956391)
install date: 20081015
uninstall cmd: "C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/956391/

Mise à jour de sécurité pour Windows XP (KB956802) 1 (KB956802)
install date: 20081210
uninstall cmd: "C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/956802

Mise à jour de sécurité pour Windows XP (KB956841) 1 (KB956841)
install date: 20081015
uninstall cmd: "C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/956841

Mise à jour de sécurité pour Windows XP (KB957095) 1 (KB957095)
install date: 20081015
uninstall cmd: "C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/957095

Mise à jour de sécurité pour Windows XP (KB957097) 1 (KB957097)
install date: 20081113
uninstall cmd: "C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/957097/ms08-068-vulnerability-in-smb-could-allow-remote-code-execution

Mise à jour de sécurité pour Windows XP (KB958215) 1 (KB958215)
install date: 20081210
uninstall cmd: "C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/958215

Mise à jour de sécurité pour Windows XP (KB958644) 1 (KB958644)
install date: 20081024
uninstall cmd: "C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/958644/ms08-067-vulnerability-in-server-service-could-allow-remote-code-execu

K-Lite Mega Codec Pack 4.1.7 4.1.7 (KLiteCodecPack_is1)
install date: 20081028
install location: C:\Program Files\K-Lite Codec Pack\
uninstall cmd: "C:\Program Files\K-Lite Codec Pack\unins000.exe"

LimeWire PRO 4.12.3 4.12.3 (LimeWire)
uninstall cmd: "E:\téléchargement\limewire\uninstall.exe"
publisher: Lime Wire, LLC
help link: http://www.limewire.com/support

Malware Removal Tool (Malware Removal Tool_is1)
install location: C:\Program Files\Malware Removal Tool\
uninstall cmd: "C:\Program Files\Malware Removal Tool\unins000.exe"
help link: http://www.users.muohio.edu/pestroja/spyware/

Messenger Plus! Live 4.70 (build 334) (Messenger Plus! Live)
install location: C:\Program Files\Messenger Plus! Live
uninstall cmd: "C:\Program Files\Messenger Plus! Live\Uninstall.exe"
publisher: Patchou

Module linguistique Microsoft .NET Framework 3.5 SP1- fra (Microsoft .NET Framework 3.5 Language Pack SP1 - fra)
install location: C:\WINDOWS\Microsoft.NET\Framework\v3.5\
uninstall cmd: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
publisher: Microsoft Corporation
help link: https://www.microsoft.com/fr-fr/

Microsoft .NET Framework 3.5 SP1 (Microsoft .NET Framework 3.5 SP1)
install location: C:\WINDOWS\Microsoft.NET\Framework\v3.5\
uninstall cmd: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
publisher: Microsoft Corporation
help link: https://www.microsoft.com/fr-fr/

(MobileOptionPack)

Mozilla Firefox (3.0.4) 3.0.4 (fr) (Mozilla Firefox (3.0.4))
install location: C:\Program Files\Mozilla Firefox
uninstall cmd: C:\Program Files\Mozilla Firefox\uninstall\helper.exe
publisher: Mozilla
comments: Mozilla Firefox

(MPlayer2)

Microsoft Compression Client Pack 1.0 for Windows XP 1 (MSCompPackV1)
install date: 20080904
uninstall cmd: "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://www.microsoft.com/fr-fr/?ref=go

(MSI30-Beta1)

(MSI30-Beta2)

(MSI30-KB884016)

(MSI30-RC1)

(MSI30-RC2)

(MSI30a-KB884016)

(MSI31-Beta)

(MSI31-RC1)

(NetMeeting)

Microsoft National Language Support Downlevel APIs (NLSDownlevelMapping)
install date: 20080906
uninstall cmd: "C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
publisher: Microsoft Corporation

(OutlookExpress)

Pack Français de ERUNT (Pack Français de ERUNT)
uninstall cmd: C:\Program Files\ERUNT\Uninstal.exe

(PCHealth)
uninstall cmd: rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

Pegtop Deflexion (Pegtop Deflexion)
uninstall cmd: C:\WINDOWS\system32\Deflexion.scr -uninstall "C:\Documents and Settings\All Users\Application Data\Pegtop\Deflexion\Installation.xml"
publisher: Pegtop Software

Microsoft Office Professional Plus 2007 12.0.6215.1000 (PROPLUS)
install location: C:\Program Files\Microsoft Office
uninstall cmd: "C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
publisher: Microsoft Corporation

Real Alternative 1.7.5 1.7.5 (RealAlt_is1)
install date: 20080904
install location: C:\Program Files\Real Alternative\
uninstall cmd: "C:\Program Files\Real Alternative\unins000.exe"

SAMSUNG Mobile Modem Driver Set (SAMSUNG Mobile Modem)
uninstall cmd: C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe

Samsung Mobile phone USB driver Software (Samsung Mobile phone USB driver)
uninstall cmd: C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe

SAMSUNG Mobile USB Modem Software (SAMSUNG Mobile USB Modem)
uninstall cmd: C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe

SAMSUNG Mobile USB Modem 1.0 Software (SAMSUNG Mobile USB Modem 1.0)
uninstall cmd: C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe

(SchedulingAgent)

9.0.124.0 (ShockwaveFlash)

StartClock 3.2 (StartClock_is1)
install date: 20080904
install location: C:\Program Files\StartClock\
uninstall cmd: "C:\Program Files\StartClock\unins000.exe"
publisher: Grégory HARGOUS
help link: http://www.GregLand.Net

SUPER © Version 2008.bld.32 (July 8, 2008) Version 2008.bld.32 (July 8, 2008) (SUPER ©)
install date: 2008-09-04 20:58:04
install location: C:\Program Files\eRightSoft\SUPER
install source: D:\Mes Documents\Programmes\changer format video
uninstall cmd: C:\PROGRA~1\ERIGHT~1\SUPER\Setup.exe /remove /q0
publisher: eRightSoft
contact: support@eRightSoft.com
help link: https://www.erightsoft.com/home.html

SuperCopier2 (SuperCopier2)
uninstall cmd: "C:\Program Files\SuperCopier2\SC2Uninst.exe"

Unlocker 1.8.7 1.8.7 (Unlocker)
uninstall cmd: C:\Program Files\Unlocker\uninst.exe
publisher: Cedrick Collomb

UsbFix (UsbFix)
uninstall cmd: C:\Program Files\UsbFix\Uninstal.exe

VLC media player 0.9.6 0.9.6 (VLC media player)
uninstall cmd: C:\Program Files\VideoLAN\VLC\uninstall.exe
publisher: VideoLAN Team

Wallpaper 5.0.3 (Wallpaper)
uninstall cmd: C:\Program Files\Wallpaper\uninst.exe
publisher: Silver76

(Wdf01000)

(Wdf01001)

Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 (Wdf01005)
install date: 20080904
uninstall cmd: "C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
publisher: Microsoft Corporation

Windows Imaging Component 3.0.0.0 (WIC)
install date: 20080905
uninstall cmd: "C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
publisher: Microsoft Corporation

Winamp 5.541 (Winamp)
uninstall cmd: "C:\Program Files\Winamp\UninstWA.exe"
publisher: Nullsoft, Inc
help link: http://forums.winamp.com

Windows Media Format 11 runtime (Windows Media Format Runtime)
uninstall cmd: "C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
help link: https://support.microsoft.com/en-us

Lecteur Windows Media 11 (Windows Media Player)
uninstall cmd: "C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall

Windows XP Service Pack 3 20080413.144513 (Windows XP Service)
install date: 20080907
uninstall cmd: "C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/936929

(Windows XP Service Pack)

WinPatrol 2008 15.5.2008.0 (WinPatrol)
version (major): 15
version (minor): 5
install date: 2008-09-04 15:42:06
install location: C:\Program Files\BillP Studios\WinPatrol
install source: L:\logiciels\winpatrol
uninstall cmd: C:\PROGRA~1\BILLPS~1\WINPAT~1\Setup.exe /remove /q0
publisher: BillP Studios
contact: support@winpatrol.com
help link: https://www.winpatrol.com/

Archiveur WinRAR (WinRAR archiver)
uninstall cmd: C:\Program Files\WinRAR\uninstall.exe

(WMCSetup)

Windows Media Format 11 runtime (WMFDist11)
install date: 20080904
uninstall cmd: "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http:

Windows Media Player 11 (wmp11)
install date: 20080904
uninstall cmd: "C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http:

Microsoft User-Mode Driver Framework Feature Pack 1.0 (Wudf01000)
install date: 20080904
uninstall cmd: "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
comments: Build Number 5716

XBCD 360 0.2.5 0.2.5 (XBCD 360)
uninstall cmd: C:\Program Files\XBCD 360\uninst.exe
0
Réponse 34 / 43
breizh-222 Messages postés 111 Date d'inscription samedi 24 novembre 2007 Statut Membre Dernière intervention 4 décembre 2010 1
20 déc. 2008 à 12:04
ya quelqu'un!!!????
0
Réponse 35 / 43
jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 040
20 déc. 2008 à 12:47
le scan en linge?
0
Réponse 36 / 43
DTJB Messages postés 822 Date d'inscription samedi 16 août 2008 Statut Membre Dernière intervention 5 novembre 2021 69
20 déc. 2008 à 12:49
Ca me semble louche ça :

C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe


on devrai le renommer super arnaque ^^
0
Réponse 37 / 43
jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 040
20 déc. 2008 à 12:52
mais non
il est très bon!!!!



https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/44141.html
0
Réponse 38 / 43
breizh-222 Messages postés 111 Date d'inscription samedi 24 novembre 2007 Statut Membre Dernière intervention 4 décembre 2010 1
20 déc. 2008 à 12:54
slt! ben le scan en ligne je voudrai bien te le passer ya pas de problème!jessaie sur panda il se bloque a chaque fois à 18% sur "Elément en cours: C:\System Volume Informat...anagerRemoteDatabase" jai pourtant désactiver lav au cas ou mais rien ny fait! ya pas une autre solution?? à part formater...
0
Réponse 39 / 43
jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 040
20 déc. 2008 à 12:55
télécharge bitdefender free et colle un scan avec:

https://www.01net.com/telecharger/windows/Securite/antivirus-antitrojan/fiches/29063.html
0
Réponse 40 / 43
breizh-222 Messages postés 111 Date d'inscription samedi 24 novembre 2007 Statut Membre Dernière intervention 4 décembre 2010 1
20 déc. 2008 à 13:10
ok jlpjlp je fais la mise a jrs puis janalyse je te redis ça tout de suite ;)
0

Discussions similaires

Est ce que le site tlauncher est dangereux ?
caribou -
bazfile -

1 réponse
Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
Comment faire ce symbole dans Word ?
weezy -
Mytå -

6 réponses
4 virus en raison d’un porno ????
valou -
Bello040420 -

9 réponses
sigle attention
nath -
ducdosteflem -

2 réponses