Spyware

Bonsoir,
Je viens à l'instant de m'attraper un spyware... Et j'ai activé le virus (sans le savoir évidement), c'est à dire que j'ai double cliqué dessus, donc l'ai activé. Tout de suite mon antivirus a sonné, et je l'ai aussitôt supprimé avec divers logiciels.
Est-ce que vous croyez que le spyware a eu le temps de prendre quoi que ce soit comme information sur mon ordi?

Merci d'avance de vos réponses.
Zegai

--
Nous avons résolu votre problème? -> Marquez votre sujet comme "résolu"!
Wikipedia et Google sont vos amis! Pensez-y!
Configuration: Windows Vista
Firefox 3.5.6

39 réponses

Résumé de la discussion

La discussion porte sur une suspicion de spyware après avoir cliqué involontairement sur un fichier et avoir vu l'alerte d'un antivirus, avec Windows Vista et Firefox 3.5.6 comme configuration. Des réponses estiment qu'aucune donnée personnelle n'a été susceptible d'être collectée en si peu de temps, tandis que d'autres recommandent des analyses antivirus complémentaires et l'examen des éléments suspects comme des exécutions ou liens. Plusieurs intervenants mentionnent des outils et une exécution potentielle d'un fichier nommé AD-R.exe, et certains rapportent des scans non concluants via Malwarebytes, Spybot et d'autres outils. En cas de doute persistant, des utilisateurs suggèrent de surveiller l'activité réseau et les processus en cours, et d'analyser les rapports de sécurité pour éviter toute fuite d'informations ultérieure.

Bobot (l’IA à votre service)
  1. Arf...
    Façon Spybot n'a rien détecté après, c'est bon, non?
    1. http://nsa11.casimages.com/img/2009/12/19/09121901182231283.jpg
      J'ai ceci, puis rien ne se passe lorsque je veux l'installer.
      1. Recherche avec Ad-Remover :
        Télécharge Ad-Remover ( de Cyrildu17 / C_XX ) sur ton bureau :
        = = = =>>> http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe <<<= = = =

        /!\ Déconnectes toi et fermes toutes applications en cours, désactive ton antivirus le temps de la manipulation/!\

        * Double clique sur le programme d’installation, et installe le dans son emplacement par défaut. (C:\Program files)
        * Clique droit sur l’icône Ad-remover située sur ton bureau puis sélectionne "Exécuter en tant qu’administrateur".
        * Réponds ‘Oui‘ au message d’alerte automatique.
        * Au menu principal choisi l’option ‘S‘ et tape ensuite [Entrée]
        * Poste le rapport qui apparaît à la fin.

        (Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)
        (CTRL+A Pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

        Note :

        "Process.exe", une composante de l’outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
        Il ne s’agit pas d’un virus, mais d’un utilitaire destiné à mettre fin à des processus.

        1. Félicitations!: Aucun mouchard n'a été trouvé. (Status)

          --- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---

          2009-01-26 blindman.exe (1.0.0.8)
          2009-01-26 SDFiles.exe (1.6.1.7)
          2009-01-26 SDMain.exe (1.0.0.6)
          2009-01-26 SDShred.exe (1.0.2.5)
          2009-01-26 SDUpdate.exe (1.6.0.12)
          2009-01-26 SDWinSec.exe (1.0.0.12)
          2009-01-26 SpybotSD.exe (1.6.2.46)
          2009-03-05 TeaTimer.exe (1.6.6.32)
          2009-12-09 unins000.exe (51.49.0.0)
          2009-01-26 Update.exe (1.6.0.7)
          2009-11-04 advcheck.dll (1.6.5.20)
          2007-04-02 aports.dll (2.1.0.0)
          2008-06-14 DelZip179.dll (1.79.11.1)
          2009-01-26 SDHelper.dll (1.6.2.14)
          2008-06-19 sqlite3.dll
          2009-01-26 Tools.dll (2.1.6.10)
          2009-01-16 UninsSrv.dll (1.0.0.0)
          2009-10-08 Includes\Adware.sbi (*)
          2009-12-15 Includes\AdwareC.sbi (*)
          2009-01-22 Includes\Cookies.sbi (*)
          2009-11-03 Includes\Dialer.sbi (*)
          2009-12-15 Includes\DialerC.sbi (*)
          2009-01-22 Includes\HeavyDuty.sbi (*)
          2009-05-26 Includes\Hijackers.sbi (*)
          2009-12-15 Includes\HijackersC.sbi (*)
          2009-12-15 Includes\Keyloggers.sbi (*)
          2009-12-15 Includes\KeyloggersC.sbi (*)
          2004-11-29 Includes\LSP.sbi (*)
          2009-12-15 Includes\Malware.sbi (*)
          2009-12-15 Includes\MalwareC.sbi (*)
          2009-03-25 Includes\PUPS.sbi (*)
          2009-12-15 Includes\PUPSC.sbi (*)
          2009-01-22 Includes\Revision.sbi (*)
          2009-01-13 Includes\Security.sbi (*)
          2009-12-15 Includes\SecurityC.sbi (*)
          2008-06-03 Includes\Spybots.sbi (*)
          2008-06-03 Includes\SpybotsC.sbi (*)
          2009-11-03 Includes\Spyware.sbi (*)
          2009-12-15 Includes\SpywareC.sbi (*)
          2009-06-08 Includes\Tracks.uti
          2009-12-08 Includes\Trojans.sbi (*)
          2009-12-15 Includes\TrojansC.sbi (*)
          2008-03-04 Plugins\Chai.dll
          2008-03-05 Plugins\Fennel.dll
          2008-02-26 Plugins\Mate.dll
          2007-12-24 Plugins\TCPIPAddress.dll
          1. Supprime moi tous ça

            BlueStreak: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            MediaPlex: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            MediaPlex: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            DoubleClick: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            Tradedoubler: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            Tradedoubler: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            Tradedoubler: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            FastClick: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            FastClick: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            DoubleClick: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            Tradedoubler: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            Tradedoubler: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            MediaPlex: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            Adviva: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            Zedo: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            Zedo: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            Tradedoubler: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            BlueStreak: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            BlueStreak: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            BlueStreak: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            FastClick: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            FastClick: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            CasaleMedia: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            CasaleMedia: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            CasaleMedia: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            CasaleMedia: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            Statcounter: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            Statcounter: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            Statcounter: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            Tradedoubler: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

            1. Voici le rapport:

              --- Search result list ---
              BlueStreak: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              MediaPlex: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              MediaPlex: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              DoubleClick: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              Tradedoubler: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              Tradedoubler: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              Tradedoubler: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              FastClick: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              FastClick: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              DoubleClick: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              Tradedoubler: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              Tradedoubler: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              MediaPlex: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              Adviva: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              Zedo: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              Zedo: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              Tradedoubler: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              BlueStreak: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              BlueStreak: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              BlueStreak: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              FastClick: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              FastClick: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              CasaleMedia: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              CasaleMedia: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              CasaleMedia: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              CasaleMedia: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              Statcounter: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              Statcounter: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              Statcounter: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              Tradedoubler: Cookie traceur (Firefox: Admin (default)) (Cookie, nothing done)

              --- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---

              2009-01-26 blindman.exe (1.0.0.8)
              2009-01-26 SDFiles.exe (1.6.1.7)
              2009-01-26 SDMain.exe (1.0.0.6)
              2009-01-26 SDShred.exe (1.0.2.5)
              2009-01-26 SDUpdate.exe (1.6.0.12)
              2009-01-26 SDWinSec.exe (1.0.0.12)
              2009-01-26 SpybotSD.exe (1.6.2.46)
              2009-03-05 TeaTimer.exe (1.6.6.32)
              2009-12-09 unins000.exe (51.49.0.0)
              2009-01-26 Update.exe (1.6.0.7)
              2009-11-04 advcheck.dll (1.6.5.20)
              2007-04-02 aports.dll (2.1.0.0)
              2008-06-14 DelZip179.dll (1.79.11.1)
              2009-01-26 SDHelper.dll (1.6.2.14)
              2008-06-19 sqlite3.dll
              2009-01-26 Tools.dll (2.1.6.10)
              2009-01-16 UninsSrv.dll (1.0.0.0)
              2009-10-08 Includes\Adware.sbi (*)
              2009-12-15 Includes\AdwareC.sbi (*)
              2009-01-22 Includes\Cookies.sbi (*)
              2009-11-03 Includes\Dialer.sbi (*)
              2009-12-15 Includes\DialerC.sbi (*)
              2009-01-22 Includes\HeavyDuty.sbi (*)
              2009-05-26 Includes\Hijackers.sbi (*)
              2009-12-15 Includes\HijackersC.sbi (*)
              2009-12-15 Includes\Keyloggers.sbi (*)
              2009-12-15 Includes\KeyloggersC.sbi (*)
              2004-11-29 Includes\LSP.sbi (*)
              2009-12-15 Includes\Malware.sbi (*)
              2009-12-15 Includes\MalwareC.sbi (*)
              2009-03-25 Includes\PUPS.sbi (*)
              2009-12-15 Includes\PUPSC.sbi (*)
              2009-01-22 Includes\Revision.sbi (*)
              2009-01-13 Includes\Security.sbi (*)
              2009-12-15 Includes\SecurityC.sbi (*)
              2008-06-03 Includes\Spybots.sbi (*)
              2008-06-03 Includes\SpybotsC.sbi (*)
              2009-11-03 Includes\Spyware.sbi (*)
              2009-12-15 Includes\SpywareC.sbi (*)
              2009-06-08 Includes\Tracks.uti
              2009-12-08 Includes\Trojans.sbi (*)
              2009-12-15 Includes\TrojansC.sbi (*)
              2008-03-04 Plugins\Chai.dll
              2008-03-05 Plugins\Fennel.dll
              2008-02-26 Plugins\Mate.dll
              2007-12-24 Plugins\TCPIPAddress.dll

              --- System information ---
              Windows Vista (Build: 6002) Service Pack 2 (6.0.6002)

              --- Startup entries list ---
              Located: HK_LM:Run, avgnt
              command: "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
              file: C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
              size: 209153
              MD5: 29680A793F690EEF4AAA68479D2A6DF8

              Located: HK_LM:Run, IntelliPoint
              command: "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
              file: C:\Program Files\Microsoft IntelliPoint\ipoint.exe
              size: 1468296
              MD5: 533F6171AF18E6C57E0E75860D39E951

              Located: HK_LM:Run, StartCCC
              command: "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
              file: C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
              size: 98304
              MD5: 494D1D57779360D2632328C3646DE5DB

              Located: Démarrage (désactivé), Outil de détection de support PMB (DISABLED)
              command: C:\PROGRA~1\Sony\SONYPI~1\PMBCore\SPUVOL~1.EXE /noballoononstart
              file: C:\PROGRA~1\Sony\SONYPI~1\PMBCore\SPUVOL~1.EXE
              size: 333088
              MD5: 8265CDE7DE5705FA64AA3F12FFCF9BBA

              --- Browser helper object list ---
              {0EEDB912-C5FA-486F-8334-57288578C627} (Shareaza Web Download Hook)
              location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
              BHO name:
              CLSID name: Shareaza Web Download Hook
              description: Shareaza
              classification: Open for discussion
              known filename: RazaWebHook.dll
              info link: http://www.shareaza.com/
              info source: TonyKlein
              Path: C:\Program Files\Shareaza\
              Long name: RazaWebHook32.dll
              Short name: RAZAWE~1.DLL
              Date (created): 16/12/2009 12:36:08
              Date (last access): 16/12/2009 12:36:08
              Date (last write): 1/12/2009 18:47:34
              Filesize: 81920
              Attributes: archive
              MD5: C0BF0780BB0E5CE258155C93EBADC285
              CRC32: 6A461305
              Version: 2.0.0.0

              {18DF081C-E8AD-4283-A596-FA578C2EBDC3} (AcroIEHelperStub)
              location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
              BHO name: AcroIEHelperStub
              CLSID name: Adobe PDF Link Helper
              Path: C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\
              Long name: AcroIEHelperShim.dll
              Short name: ACROIE~2.DLL
              Date (created): 27/02/2009 12:07:26
              Date (last access): 23/10/2009 21:09:18
              Date (last write): 27/02/2009 12:07:26
              Filesize: 75128
              Attributes: archive
              MD5: 5CF6190CD875DA6B35256FEE573E7908
              CRC32: 764BA81B
              Version: 9.1.0.163

              {5C255C8A-E604-49b4-9D64-90988571CECB} ()
              location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
              BHO name:
              CLSID name:

              {9030D464-4C02-4ABF-8ECC-5164760863C6} (Programme d'aide de l'Assistant de connexion Windows Live)
              location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
              BHO name:
              CLSID name: Programme d'aide de l'Assistant de connexion Windows Live
              Path: C:\Program Files\Common Files\Microsoft Shared\Windows Live\
              Long name: WindowsLiveLogin.dll
              Short name: WINDOW~1.DLL
              Date (created): 22/01/2009 14:41:30
              Date (last access): 18/07/2009 15:17:56
              Date (last write): 22/01/2009 14:41:30
              Filesize: 408448
              Attributes: archive
              MD5: B7899C3E21B299D7A3C0DA96CAE340BD
              CRC32: 288935F8
              Version: 5.0.818.5

              {DBC80044-A445-435b-BC74-9C25C1C588A9} (Java(tm) Plug-In 2 SSV Helper)
              location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
              BHO name:
              CLSID name: Java(tm) Plug-In 2 SSV Helper
              Path: C:\Program Files\Java\jre6\bin\
              Long name: jp2ssv.dll
              Short name:
              Date (created): 18/07/2009 17:10:14
              Date (last access): 31/07/2073 14:24:08
              Date (last write): 31/07/2009 14:23:14
              Filesize: 41760
              Attributes: archive
              MD5: 7AF9D3B7B88AF81D2F87AA846DC2EE70
              CRC32: 00DFC49A
              Version: 6.0.160.1

              --- ActiveX list ---
              {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class)
              DPF name:
              CLSID name: Checkers Class
              Installer:
              Codebase: http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
              Path: C:\Windows\Downloaded Program Files\
              Long name: msgrchkr.dll
              Short name:
              Date (created): 28/02/2007 13:21:04
              Date (last access): 28/02/2007 13:21:04
              Date (last write): 28/02/2007 13:21:04
              Filesize: 131472
              Attributes: archive
              MD5: 1E5CFDF9AEBDD84305A4C8154277A269
              CRC32: 73C871D0
              Version: 9.5.7087.1

              {4A85DBE0-BFB2-4119-8401-186A7C6EB653} ()
              DPF name:
              CLSID name:
              Installer:
              Codebase: http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/mjss/MJSS.cab109791.cab
              Path: C:\Windows\Downloaded Program Files\
              Long name: MJSS.ocx
              Short name:
              Date (created): 8/07/2009 18:54:34
              Date (last access): 8/07/2009 18:54:34
              Date (last write): 8/07/2009 18:54:34
              Filesize: 534352
              Attributes: archive
              MD5: A5EC4DD82F1647260D78C67042FD6FBA
              CRC32: 97251445
              Version: 9.10.9791.1

              {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class)
              DPF name:
              CLSID name: UnoCtrl Class
              Installer: C:\Windows\Downloaded Program Files\GAME_UNO1.INF
              Codebase: http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab
              description:
              classification: Legitimate
              known filename: unomsnger.dll
              info link:
              info source: Safer Networking Ltd.
              Path: C:\Windows\Downloaded Program Files\
              Long name: GAME_UNO1.dll
              Short name: GAME_U~1.DLL
              Date (created): 28/09/2007 4:41:28
              Date (last access): 28/09/2007 4:41:28
              Date (last write): 28/09/2007 4:41:28
              Filesize: 381960
              Attributes: archive
              MD5: 80F4A456633F78A26A3C6B16E64EFEC5
              CRC32: 7DFC41A5
              Version: 1.0.1201.1

              {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0)
              DPF name: Java Runtime Environment 1.6.0
              CLSID name: Java Plug-in 1.6.0_16
              Installer:
              Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
              description: Sun Java
              classification: Legitimate
              known filename: %PROGRAM FILES%\JabaSoft\JRE\*\Bin\npjava131.dll
              info link:
              info source: Patrick M. Kolla
              Path: C:\Program Files\Java\jre6\bin\
              Long name: jp2iexp.dll
              Short name:
              Date (created): 18/07/2009 17:10:12
              Date (last access): 31/07/2073 14:24:08
              Date (last write): 31/07/2009 14:23:14
              Filesize: 100128
              Attributes: archive
              MD5: 0B1A31837FE109DF73B3CD009F0BA485
              CRC32: AC1F5B32
              Version: 6.0.160.1

              {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class)
              DPF name:
              CLSID name: MessengerStatsClient Class
              Installer:
              Codebase: http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
              description:
              classification: Legitimate
              known filename: MessengerStatsPAClient.dll
              info link:
              info source: Safer Networking Ltd.
              Path: C:\Windows\Downloaded Program Files\
              Long name: MessengerStatsPAClient.dll
              Short name: MESSEN~1.DLL
              Date (created): 22/02/2007 22:41:12
              Date (last access): 22/02/2007 22:41:12
              Date (last write): 22/02/2007 22:41:12
              Filesize: 304544
              Attributes: archive
              MD5: 8945CCA5FC4F25168E8B6F401EFAF51F
              CRC32: 0F12FD23
              Version: 9.5.6907.1

              {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
              DPF name: Java Runtime Environment 1.6.0
              CLSID name: Java Plug-in 1.6.0_16
              Installer:
              Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
              Path: C:\Program Files\Java\jre6\bin\
              Long name: jp2iexp.dll
              Short name:
              Date (created): 18/07/2009 17:10:12
              Date (last access): 31/07/2073 14:24:08
              Date (last write): 31/07/2009 14:23:14
              Filesize: 100128
              Attributes: archive
              MD5: 0B1A31837FE109DF73B3CD009F0BA485
              CRC32: AC1F5B32
              Version: 6.0.160.1

              {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
              DPF name: Java Runtime Environment 1.6.0
              CLSID name: Java Plug-in 1.6.0_16
              Installer:
              Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
              description:
              classification: Legitimate
              known filename: npjpi150_06.dll
              info link:
              info source: Safer Networking Ltd.
              Path: C:\Program Files\Java\jre6\bin\
              Long name: npjpi160_16.dll
              Short name: NPJPI1~1.DLL
              Date (created): 31/07/2009 12:02:40
              Date (last access): 31/07/2073 14:24:22
              Date (last write): 31/07/2009 14:23:12
              Filesize: 136992
              Attributes: archive
              MD5: EF5C38E082CA41D7588621F3DFA09A64
              CRC32: D4B4406B
              Version: 6.0.160.1

              {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class)
              DPF name:
              CLSID name: Minesweeper Flags Class
              Installer:
              Codebase: http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
              description:
              classification: Legitimate
              known filename: MineSweeper.dll
              info link:
              info source: Safer Networking Ltd.
              Path: C:\Windows\Downloaded Program Files\
              Long name: MineSweeper.dll
              Short name: MINESW~1.DLL
              Date (created): 28/02/2007 14:21:04
              Date (last access): 28/02/2007 14:21:04
              Date (last write): 28/02/2007 14:21:04
              Filesize: 130472
              Attributes: archive
              MD5: E661E91B5929632665683222D509D271
              CRC32: 63A9B975
              Version: 9.5.6986.1

              --- Process list ---
              PID: 2408 (1088) C:\Windows\system32\Dwm.exe
              size: 81920
              MD5: 01DD1004181FD46ECDC3628228EB269D
              PID: 2492 (2364) C:\Windows\Explorer.EXE
              size: 2926592
              MD5: D07D4C3038F3578FFCE1C0237F2A1253
              PID: 2548 (1140) C:\Windows\system32\taskeng.exe
              size: 169984
              MD5: E5BBFC283D6F5D69B41E464676361020
              PID: 2968 (2492) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
              size: 1468296
              MD5: 533F6171AF18E6C57E0E75860D39E951
              PID: 2976 (2492) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
              size: 209153
              MD5: 29680A793F690EEF4AAA68479D2A6DF8
              PID: 3192 ( 848) C:\Windows\System32\mobsync.exe
              size: 95744
              MD5: 9B89B3BB79EA1ACF041F40A7B6FC5827
              PID: 3260 (2956) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
              size: 65536
              MD5: E7704CBF568815C1CAA6E513387BD3F2
              PID: 3604 (2492) C:\Program Files\Windows Media Player\wmpnscfg.exe
              size: 202240
              MD5: 35937EAD711207544E219C2A19A78A7D
              PID: 3856 (3260) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
              size: 65536
              MD5: 74EF310FAC89341CE2897B7F2C4A7B0F
              PID: 1172 (2492) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
              size: 3883856
              MD5: 18B4B12358EFCF68D76812058A26181F
              PID: 3732 ( 848) C:\Program Files\Windows Live\Contacts\wlcomm.exe
              size: 27512
              MD5: 654480EA67078C7B4C6C8BA871B07D5D
              PID: 1528 (2492) C:\Program Files\Mozilla Firefox\firefox.exe
              size: 908248
              MD5: 5CDA7A97056E559D2872B462F1FF46AF
              PID: 3748 (2492) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
              size: 5365592
              MD5: 0477C2F9171599CA5BC3307FDFBA8D89
              PID: 2684 (2976) C:\program files\avira\antivir desktop\avcenter.exe
              size: 470785
              MD5: FB080B91571E915D1FDF0D8CF6736FA2
              PID: 0 ( 0) [System Process]
              PID: 4 ( 0) System
              PID: 392 ( 4) smss.exe
              size: 64000
              PID: 532 ( 520) csrss.exe
              size: 6144
              PID: 596 ( 520) wininit.exe
              size: 96768
              PID: 604 ( 588) csrss.exe
              size: 6144
              PID: 644 ( 596) services.exe
              size: 279552
              PID: 656 ( 596) lsass.exe
              size: 9728
              PID: 664 ( 596) lsm.exe
              size: 229888
              PID: 776 ( 588) winlogon.exe
              size: 314368
              PID: 848 ( 644) svchost.exe
              size: 21504
              PID: 928 ( 644) svchost.exe
              size: 21504
              PID: 968 ( 644) atiesrxx.exe
              size: 172032
              PID: 1048 ( 644) svchost.exe
              size: 21504
              PID: 1088 ( 644) svchost.exe
              size: 21504
              PID: 1140 ( 644) svchost.exe
              size: 21504
              PID: 1212 (1048) audiodg.exe
              size: 88576
              PID: 1240 ( 644) svchost.exe
              size: 21504
              PID: 1260 ( 644) SLsvc.exe
              size: 3408896
              PID: 1292 ( 644) svchost.exe
              size: 21504
              PID: 1412 ( 644) svchost.exe
              size: 21504
              PID: 1456 ( 968) atieclxx.exe
              size: 356352
              PID: 1688 ( 644) spoolsv.exe
              size: 127488
              PID: 1716 ( 644) sched.exe
              PID: 1728 ( 644) svchost.exe
              size: 21504
              PID: 1956 ( 644) avguard.exe
              PID: 2008 ( 644) LSSrvc.exe
              PID: 412 ( 644) IoctlSvc.exe
              size: 81920
              PID: 540 ( 644) svchost.exe
              size: 21504
              PID: 748 ( 644) svchost.exe
              size: 21504
              PID: 1436 ( 644) svchost.exe
              size: 21504
              PID: 1900 ( 644) SearchIndexer.exe
              size: 441344
              PID: 1796 ( 644) SDWinSec.exe
              MD5: 794D4B48DFB6E999537C7C3947863463
              PID: 2160 (1088) WUDFHost.exe
              size: 142336
              PID: 2248 (1140) taskeng.exe
              size: 169984
              PID: 3648 ( 644) wmpnetwk.exe
              PID: 1220 (1900) SearchProtocolHost.exe
              size: 185344
              PID: 3520 ( 848) C:\Windows\system32\DllHost.exe
              size: 7168
              MD5: BE01E566D1F569AAB32D0335613E1EEA
              PID: 2912 (1900) SearchFilterHost.exe
              size: 87552

              --- Browser start & search pages list ---
              Spybot - Search & Destroy browser pages report, 19/12/2009 0:45:01

              HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
              C:\Windows\system32\blank.htm
              HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
              https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
              https://www.msn.com/fr-fr/?ocid=iehp
              HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
              C:\Windows\System32\blank.htm
              HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
              https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
              https://www.msn.com/fr-fr/?ocid=iehp
              HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
              https://www.msn.com/fr-fr/?ocid=iehp
              HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
              https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

              --- Winsock Layered Service Provider list ---
              Namespace Provider 1: Fournisseur Shim d'affectation de noms de messagerie
              GUID: {964ACBA2-B2BC-40EB-8C6A-A6DB40161CAE}
              Filename:

              Namespace Provider 2: Fournisseur d'espace de noms du nuage PNRP
              GUID: {03FE89CE-766D-4976-B9C1-BB9BC42C7B4D}
              Filename:

              Namespace Provider 3: Fournisseur d'espace de noms du nom PNRP
              GUID: {03FE89CD-766D-4976-B9C1-BB9BC42C7B4D}
              Filename:

              --- Uninstall list ---

              --- System Services ---
              Service (registry key): .NET CLR Data
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Control Set: CurrentControlSet
              Start: 0
              Type: 0
              Error Control: 0

              Service (registry key): .NET CLR Networking
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Control Set: CurrentControlSet
              Start: 0
              Type: 0
              Error Control: 0

              Service (registry key): .NET Data Provider for Oracle
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Control Set: CurrentControlSet
              Start: 0
              Type: 0
              Error Control: 0

              Service (registry key): .NET Data Provider for SqlServer
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Control Set: CurrentControlSet
              Start: 0
              Type: 0
              Error Control: 0

              Service (registry key): .NETFramework
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Control Set: CurrentControlSet
              Start: 0
              Type: 0
              Error Control: 0

              Service (registry key): 3xHybrid
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: 3xHybrid service
              Description: Philips SAA713x BDA Capture Driver
              Image path: system32\DRIVERS\3xHybrid.sys
              Image size: 670592
              Image MD5: F2882B93BB527A71D3527A3761085E2D
              Control Set: CurrentControlSet
              Start: 3
              Type: 1
              Error Control: 0

              Service (registry key): 61883
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Pilote d'unité 61883
              Image path: system32\DRIVERS\61883.sys
              Image size: 45696
              Image MD5: 585E64BB6DFBC0A2F1F0B554DED012DF
              Control Set: CurrentControlSet
              Start: 3
              Type: 1
              Error Control: 1

              Service (registry key): ACPI
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Pilote ACPI Microsoft
              Image path: system32\drivers\acpi.sys
              Image size: 265688
              Image MD5: 82B296AE1892FE3DBEE00C9CF92F8AC7
              Control Set: CurrentControlSet
              Start: 0
              Type: 1
              Error Control: 3

              Service (registry key): adp94xx
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Image path: \SystemRoot\system32\drivers\adp94xx.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 4
              Type: 1
              Error Control: 1

              Service (registry key): adpahci
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Image path: \SystemRoot\system32\drivers\adpahci.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 4
              Type: 1
              Error Control: 1

              Service (registry key): adpu160m
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Image path: \SystemRoot\system32\drivers\adpu160m.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 4
              Type: 1
              Error Control: 1

              Service (registry key): adpu320
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Image path: \SystemRoot\system32\drivers\adpu320.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 4
              Type: 1
              Error Control: 1

              Service (registry key): adsi
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Control Set: CurrentControlSet
              Start: 0
              Type: 0
              Error Control: 0

              Service (registry key): AeLookupSvc
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @%SystemRoot%\system32\aelupsvc.dll,-1
              Description: @%SystemRoot%\system32\aelupsvc.dll,-2
              Object name: localSystem
              Image path: %systemroot%\system32\svchost.exe -k netsvcs
              Image size: 21504
              Image MD5: 3794B461C45882E06856F282EEF025AF
              Control Set: CurrentControlSet
              Start: 2
              Type: 32
              Error Control: 1

              Service (registry key): AFD
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Ancilliary Function Driver for Winsock
              Description: Ancilliary Function Driver for Winsock
              Image path: \SystemRoot\system32\drivers\afd.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 1
              Type: 1
              Error Control: 1

              Service (registry key): aic78xx
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Image path: \SystemRoot\system32\drivers\djsvs.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 4
              Type: 1
              Error Control: 1

              Service (registry key): ALG
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @%SystemRoot%\system32\Alg.exe,-112
              Description: @%SystemRoot%\system32\Alg.exe,-113
              Object name: NT AUTHORITY\LocalService
              Image path: %SystemRoot%\System32\alg.exe
              Image size: 59392
              Image MD5: A1545B731579895D8CC44FC0481C1192
              Control Set: CurrentControlSet
              Start: 3
              Type: 16
              Error Control: 1

              Service (registry key): aliide
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Image path: \SystemRoot\system32\drivers\aliide.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 4
              Type: 1
              Error Control: 3

              Service (registry key): AMD External Events Utility
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Object name: LocalSystem
              Image path: %SystemRoot%\system32\atiesrxx.exe
              Image size: 172032
              Image MD5: 09EDD12A8768304C0B797862A218114D
              Control Set: CurrentControlSet
              Start: 2
              Type: 16
              Error Control: 1

              Service (registry key): amdagp
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: AMD AGP Bus Filter Driver
              Image path: \SystemRoot\system32\drivers\amdagp.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 3
              Type: 1
              Error Control: 1

              Service (registry key): amdide
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Image path: \SystemRoot\system32\drivers\amdide.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 4
              Type: 1
              Error Control: 3

              Service (registry key): AmdK7
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: AMD K7 Processor Driver
              Image path: \SystemRoot\system32\drivers\amdk7.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 4
              Type: 1
              Error Control: 1

              Service (registry key): AmdK8
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Pilote de processeur AMD K8
              Image path: system32\DRIVERS\amdk8.sys
              Image size: 44032
              Image MD5: 93AE7F7DD54AB986A6F1A1B37BE7442D
              Control Set: CurrentControlSet
              Start: 3
              Type: 1
              Error Control: 1

              Service (registry key): AntiVirSchedulerService
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Avira AntiVir Planificateur
              Description: Service de commande des tâches de contrôle et mises à jour Avira AntiVir Personal - Free Antivirus.
              Object name: LocalSystem
              Image path: "C:\Program Files\Avira\AntiVir Desktop\sched.exe"
              Image size: 108289
              Image MD5: 9015BC03F62940527EC92D45EE89E46F
              Control Set: CurrentControlSet
              Start: 2
              Type: 16
              Error Control: 1

              Service (registry key): AntiVirService
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Avira AntiVir Guard
              Description: Offre une protection permanente contre les virus et les logiciels malveillants grâce au moteur de recherche AntiVir.
              Object name: LocalSystem
              Image path: "C:\Program Files\Avira\AntiVir Desktop\avguard.exe"
              Image size: 185089
              Image MD5: B8720A787C1223492E6F319465E996CE
              Control Set: CurrentControlSet
              Start: 2
              Type: 16
              Error Control: 1

              Service (registry key): Appinfo
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @%systemroot%\system32\appinfo.dll,-100
              Description: @%systemroot%\system32\appinfo.dll,-101
              Object name: LocalSystem
              Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
              Image size: 21504
              Image MD5: 3794B461C45882E06856F282EEF025AF
              Control Set: CurrentControlSet
              Start: 3
              Type: 32
              Error Control: 1
              Depends On services: RpcSs,ProfSvc

              Service (registry key): arc
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Image path: \SystemRoot\system32\drivers\arc.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 4
              Type: 1
              Error Control: 1

              Service (registry key): arcsas
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Image path: \SystemRoot\system32\drivers\arcsas.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 4
              Type: 1
              Error Control: 1

              Service (registry key): AsyncMac
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Pilote de média asynchrone RAS
              Description: Pilote de média asynchrone RAS
              Image path: system32\DRIVERS\asyncmac.sys
              Image size: 17408
              Image MD5: 53B202ABEE6455406254444303E87BE1
              Control Set: CurrentControlSet
              Start: 3
              Type: 1
              Error Control: 1

              Service (registry key): atapi
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Canal IDE
              Image path: system32\drivers\atapi.sys
              Image size: 19944
              Image MD5: 1F05B78AB91C9075565A9D8A4B880BC4
              Control Set: CurrentControlSet
              Start: 0
              Type: 1
              Error Control: 3

              Service (registry key): Atierecord
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Control Set: CurrentControlSet
              Start: 0
              Type: 0
              Error Control: 0

              Service (registry key): AtiHdmiService
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: ATI Function Driver for HDMI Service
              Image path: system32\drivers\AtiHdmi.sys
              Image size: 101904
              Image MD5: 4995E9945AC009112B0A87DAE0CB51D4
              Control Set: CurrentControlSet
              Start: 3
              Type: 1
              Error Control: 1

              Service (registry key): atikmdag
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Image path: system32\DRIVERS\atikmdag.sys
              Image size: 5172224
              Image MD5: 65E22AA757601FB497EF495B202FB1A9
              Control Set: CurrentControlSet
              Start: 3
              Type: 1
              Error Control: 0

              Service (registry key): AtiPcie
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: ATI PCI Express (3GIO) Filter
              Image path: system32\DRIVERS\AtiPcie.sys
              Image size: 7680
              Image MD5: 4AA1EB65481C392955939E735D27118B
              Control Set: CurrentControlSet
              Start: 0
              Type: 1
              Error Control: 1

              Service (registry key): AudioEndpointBuilder
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @%SystemRoot%\system32\audiosrv.dll,-204
              Description: @%SystemRoot%\System32\audiosrv.dll,-205
              Object name: LocalSystem
              Image path: %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted
              Image size: 21504
              Image MD5: 3794B461C45882E06856F282EEF025AF
              Control Set: CurrentControlSet
              Start: 2
              Type: 32
              Error Control: 1
              Depends On services: PlugPlay

              Service (registry key): Audiosrv
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @%SystemRoot%\system32\audiosrv.dll,-200
              Description: @%SystemRoot%\System32\audiosrv.dll,-201
              Object name: NT AUTHORITY\LocalService
              Image path: %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted
              Image size: 21504
              Image MD5: 3794B461C45882E06856F282EEF025AF
              Control Set: CurrentControlSet
              Start: 2
              Type: 32
              Error Control: 1
              Depends On services: AudioEndpointBuilder,RpcSs,MMCSS

              Service (registry key): Avc
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Périphérique AVC
              Image path: system32\DRIVERS\avc.sys
              Image size: 40448
              Image MD5: F4B56425A00BEB32F5FA6603FF7B0EA2
              Control Set: CurrentControlSet
              Start: 3
              Type: 1
              Error Control: 1

              Service (registry key): avgio
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: avgio
              Image path: \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 1
              Type: 1
              Error Control: 1
              Depends On services: FltMgr

              Service (registry key): avgntflt
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: avgntflt
              Description: Avira files mini-filter driver
              Image path: system32\DRIVERS\avgntflt.sys
              Image size: 56816
              Image MD5: 14FE36D8F2C6A2435275338D061A0B66
              Control Set: CurrentControlSet
              Start: 2
              Type: 2
              Error Control: 1
              Depends On services: FltMgr

              Service (registry key): avipbb
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: avipbb
              Description: Avira's Driver for RootKit Detection
              Image path: system32\DRIVERS\avipbb.sys
              Image size: 96104
              Image MD5: AD9BD66A862116E79CB45BB6BE46055F
              Control Set: CurrentControlSet
              Start: 1
              Type: 1
              Error Control: 1

              Service (registry key): BattC
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Control Set: CurrentControlSet
              Start: 0
              Type: 0
              Error Control: 0

              Service (registry key): Beep
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Beep
              Control Set: CurrentControlSet
              Start: 1
              Type: 1
              Error Control: 1

              Service (registry key): BFE
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @%SystemRoot%\system32\bfe.dll,-1001
              Description: @%SystemRoot%\system32\bfe.dll,-1002
              Object name: NT AUTHORITY\LocalService
              Image path: %systemroot%\system32\svchost.exe -k LocalServiceNoNetwork
              Image size: 21504
              Image MD5: 3794B461C45882E06856F282EEF025AF
              Control Set: CurrentControlSet
              Start: 2
              Type: 32
              Error Control: 1
              Depends On services: RpcSs

              Service (registry key): BITS
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @%SystemRoot%\system32\qmgr.dll,-1000
              Description: @%SystemRoot%\system32\qmgr.dll,-1001
              Object name: LocalSystem
              Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
              Image size: 21504
              Image MD5: 3794B461C45882E06856F282EEF025AF
              Control Set: CurrentControlSet
              Start: 2
              Type: 32
              Error Control: 1
              Depends On services: RpcSs,EventSystem

              Service (registry key): blbdrive
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Image path: \SystemRoot\system32\drivers\blbdrive.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 4
              Type: 1
              Error Control: 1

              Service (registry key): bowser
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Bowser
              Description: Implements the datagram receiver for the computer browser browser service.
              Image path: system32\DRIVERS\bowser.sys
              Image size: 69632
              Image MD5: 74B442B2BE1260B7588C136177CEAC66
              Control Set: CurrentControlSet
              Start: 3
              Type: 2
              Error Control: 1

              Service (registry key): BrFiltLo
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Brother USB Mass-Storage Lower Filter Driver
              Image path: \SystemRoot\system32\drivers\brfiltlo.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 3
              Type: 1
              Error Control: 1

              Service (registry key): BrFiltUp
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Brother USB Mass-Storage Upper Filter Driver
              Image path: \SystemRoot\system32\drivers\brfiltup.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 3
              Type: 1
              Error Control: 1

              Service (registry key): Browser
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @%systemroot%\system32\browser.dll,-100
              Description: @%systemroot%\system32\browser.dll,-101
              Object name: LocalSystem
              Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
              Image size: 21504
              Image MD5: 3794B461C45882E06856F282EEF025AF
              Control Set: CurrentControlSet
              Start: 2
              Type: 32
              Error Control: 1
              Depends On services: LanmanWorkstation,LanmanServer

              Service (registry key): Brserid
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Brother MFC Serial Port Interface Driver (WDM)
              Image path: \SystemRoot\system32\drivers\brserid.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 4
              Type: 1
              Error Control: 1

              Service (registry key): BrSerWdm
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Brother WDM Serial driver
              Image path: \SystemRoot\system32\drivers\brserwdm.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 4
              Type: 1
              Error Control: 1

              Service (registry key): BrUsbMdm
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Brother MFC USB Fax Only Modem
              Image path: \SystemRoot\system32\drivers\brusbmdm.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 4
              Type: 1
              Error Control: 1

              Service (registry key): BrUsbSer
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Brother MFC USB Serial WDM Driver
              Image path: \SystemRoot\system32\drivers\brusbser.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 3
              Type: 1
              Error Control: 1

              Service (registry key): BTHMODEM
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Bluetooth Serial Communications Driver
              Image path: \SystemRoot\system32\drivers\bthmodem.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 4
              Type: 1
              Error Control: 1

              Service (registry key): BTHPORT
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Control Set: CurrentControlSet
              Start: 0
              Type: 0
              Error Control: 0

              Service (registry key): cdfs
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: CD/DVD File System Reader
              Description: ISO9660/Joliet File System Reader for CD/DVDs. (Core) (All pieces)
              Image path: system32\DRIVERS\cdfs.sys
              Image size: 70144
              Image MD5: 7ADD03E75BEB9E6DD102C3081D29840A
              Control Set: CurrentControlSet
              Start: 4
              Type: 2
              Error Control: 1
              Depends On group: "SCSI CDROM Class"

              Service (registry key): cdrom
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Pilote de CD-ROM
              Image path: system32\DRIVERS\cdrom.sys
              Image size: 67072
              Image MD5: 6B4BFFB9BECD728097024276430DB314
              Control Set: CurrentControlSet
              Start: 1
              Type: 1
              Error Control: 1

              Service (registry key): CertPropSvc
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @%SystemRoot%\System32\certprop.dll,-11
              Description: @%SystemRoot%\System32\certprop.dll,-12
              Object name: LocalSystem
              Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
              Image size: 21504
              Image MD5: 3794B461C45882E06856F282EEF025AF
              Control Set: CurrentControlSet
              Start: 3
              Type: 32
              Error Control: 1
              Depends On services: RpcSs

              Service (registry key): circlass
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Consumer IR Devices
              Image path: \SystemRoot\system32\drivers\circlass.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 4
              Type: 1
              Error Control: 1

              Service (registry key): CLFS
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Common Log (CLFS)
              Description: Common Log (CLFS)
              Image path: System32\CLFS.sys
              Image size: 245736
              Image MD5: D7659D3B5B92C31E84E53C1431F35132
              Control Set: CurrentControlSet
              Start: 0
              Type: 1
              Error Control: 3

              Service (registry key): clr_optimization_v2.0.50727_32
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Microsoft .NET Framework NGEN v2.0.50727_X86
              Description: Microsoft .NET Framework NGEN
              Object name: LocalSystem
              Image path: %systemroot%\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
              Image size: 66368
              Image MD5: 8EE772032E2FE80A924F3B8DD5082194
              Control Set: CurrentControlSet
              Start: 3
              Type: 16
              Error Control: 0

              Service (registry key): cmdide
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Image path: \SystemRoot\system32\drivers\cmdide.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 4
              Type: 1
              Error Control: 3

              Service (registry key): Compbatt
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Microsoft Composite Battery Driver
              Image path: \SystemRoot\system32\drivers\compbatt.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 4
              Type: 1
              Error Control: 3

              Service (registry key): COMSysApp
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @comres.dll,-947
              Description: @comres.dll,-948
              Object name: LocalSystem
              Image path: %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
              Image size: 7168
              Image MD5: BE01E566D1F569AAB32D0335613E1EEA
              Control Set: CurrentControlSet
              Start: 3
              Type: 16
              Error Control: 1
              Depends On services: RpcSs,EventSystem,SENS

              Service (registry key): cpuz132
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: cpuz132
              Image path: \??\C:\Windows\system32\drivers\cpuz132_x32.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 3
              Type: 1
              Error Control: 1

              Service (registry key): crcdisk
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Crcdisk Filter Driver
              Image path: system32\drivers\crcdisk.sys
              Image size: 22632
              Image MD5: 2A213AE086BBEC5E937553C7D9A2B22C
              Control Set: CurrentControlSet
              Start: 0
              Type: 1
              Error Control: 1

              Service (registry key): Crusoe
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Transmeta Crusoe Processor Driver
              Image path: \SystemRoot\system32\drivers\crusoe.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 4
              Type: 1
              Error Control: 1

              Service (registry key): crypt32
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Control Set: CurrentControlSet
              Start: 0
              Type: 0
              Error Control: 0

              Service (registry key): CryptSvc
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @%SystemRoot%\system32\cryptsvc.dll,-1001
              Description: @%SystemRoot%\system32\cryptsvc.dll,-1002
              Object name: NT Authority\NetworkService
              Image path: %SystemRoot%\system32\svchost.exe -k NetworkService
              Image size: 21504
              Image MD5: 3794B461C45882E06856F282EEF025AF
              Control Set: CurrentControlSet
              Start: 3
              Type: 32
              Error Control: 1
              Depends On services: RpcSs

              Service (registry key): DCLocator
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Control Set: CurrentControlSet
              Start: 0
              Type: 0
              Error Control: 0

              Service (registry key): DcomLaunch
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @oleres.dll,-5012
              Description: @oleres.dll,-5013
              Object name: LocalSystem
              Image path: %SystemRoot%\system32\svchost.exe -k DcomLaunch
              Image size: 21504
              Image MD5: 3794B461C45882E06856F282EEF025AF
              Control Set: CurrentControlSet
              Start: 2
              Type: 32
              Error Control: 1

              Service (registry key): DfsC
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @%systemroot%\system32\drivers\dfsc.sys,-101
              Description: @%systemroot%\system32\drivers\dfsc.sys,-102
              Image path: System32\Drivers\dfsc.sys
              Image size: 75264
              Image MD5: 218D8AE46C88E82014F5D73D0236D9B2
              Control Set: CurrentControlSet
              Start: 1
              Type: 2
              Error Control: 1
              Depends On services: Mup

              Service (registry key): DFSR
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @dfsrres.dll,-101
              Description: @dfsrres.dll,-102
              Object name: LocalSystem
              Image path: %SystemRoot%\system32\DFSR.exe
              Image size: 2092544
              Image MD5: 2CC3DCFB533A1035B13DCAB6160AB38B
              Control Set: CurrentControlSet
              Start: 3
              Type: 16
              Error Control: 1
              Depends On services: RpcSs,EventSystem

              Service (registry key): Dhcp
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @%SystemRoot%\system32\dhcpcsvc.dll,-100
              Description: @%SystemRoot%\system32\dhcpcsvc.dll,-101
              Object name: NT Authority\LocalService
              Image path: %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted
              Image size: 21504
              Image MD5: 3794B461C45882E06856F282EEF025AF
              Control Set: CurrentControlSet
              Start: 2
              Type: 32
              Error Control: 1
              Depends On services: NSI,Tdx,Afd

              Service (registry key): disk
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Pilote de disque
              Image path: system32\drivers\disk.sys
              Image size: 53736
              Image MD5: 5D4AEFC3386920236A548271F8F1AF6A
              Control Set: CurrentControlSet
              Start: 0
              Type: 1
              Error Control: 1

              Service (registry key): Dnscache
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @%SystemRoot%\System32\dnsapi.dll,-101
              Description: @%SystemRoot%\System32\dnsapi.dll,-102
              Object name: NT AUTHORITY\NetworkService
              Image path: %SystemRoot%\system32\svchost.exe -k NetworkService
              Image size: 21504
              Image MD5: 3794B461C45882E06856F282EEF025AF
              Control Set: CurrentControlSet
              Start: 2
              Type: 32
              Error Control: 1
              Depends On services: Tdx

              Service (registry key): dot3svc
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @%systemroot%\system32\dot3svc.dll,-1102
              Description: @%systemroot%\system32\dot3svc.dll,-1103
              Object name: localSystem
              Image path: %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted
              Image size: 21504
              Image MD5: 3794B461C45882E06856F282EEF025AF
              Control Set: CurrentControlSet
              Start: 3
              Type: 32
              Error Control: 1
              Depends On services: RpcSs,Ndisuio,Eaphost

              Service (registry key): DPS
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @%systemroot%\system32\dps.dll,-500
              Description: @%systemroot%\system32\dps.dll,-501
              Object name: NT AUTHORITY\LocalService
              Image path: %SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork
              Image size: 21504
              Image MD5: 3794B461C45882E06856F282EEF025AF
              Control Set: CurrentControlSet
              Start: 2
              Type: 32
              Error Control: 1

              Service (registry key): driverhardwarev2
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: driverhardwarev2
              Image path: \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 3
              Type: 1
              Error Control: 1

              Service (registry key): drmkaud
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Filtre de décodeur DRM (Noyau Microsoft)
              Image path: system32\drivers\drmkaud.sys
              Image size: 5632
              Image MD5: 97FEF831AB90BEE128C9AF390E243F80
              Control Set: CurrentControlSet
              Start: 3
              Type: 1
              Error Control: 1

              Service (registry key): DXGKrnl
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: LDDM Graphics Subsystem
              Description: Controls the underlying video driver stacks to provide fully-featured display capabilities.
              Image path: \SystemRoot\System32\drivers\dxgkrnl.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 3
              Type: 1
              Error Control: 0

              Service (registry key): E1G60
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: Intel(R) PRO/1000 NDIS 6 Adapter Driver
              Image path: system32\DRIVERS\E1G60I32.sys
              Image size: 117760
              Image MD5: F88FB26547FD2CE6D0A5AF2985892C48
              Control Set: CurrentControlSet
              Start: 3
              Type: 1
              Error Control: 1

              Service (registry key): EapHost
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @%systemroot%\system32\eapsvc.dll,-1
              Description: @%systemroot%\system32\eapsvc.dll,-2
              Object name: localSystem
              Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
              Image size: 21504
              Image MD5: 3794B461C45882E06856F282EEF025AF
              Control Set: CurrentControlSet
              Start: 3
              Type: 32
              Error Control: 1
              Depends On services: RPCSS,KeyIso

              Service (registry key): Ecache
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: ReadyBoost Caching Driver
              Description: ReadyBoost Caching Driver
              Image path: System32\drivers\ecache.sys
              Image size: 141288
              Image MD5: 7F64EA048DCFAC7ACF8B4D7B4E6FE371
              Control Set: CurrentControlSet
              Start: 0
              Type: 1
              Error Control: 3

              Service (registry key): ehRecvr
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @%SystemRoot%\ehome\ehrecvr.exe,-101
              Description: @%SystemRoot%\ehome\ehrecvr.exe,-102
              Object name: NT AUTHORITY\networkService
              Image path: %systemroot%\ehome\ehRecvr.exe
              Image size: 292352
              Image MD5: 9BE3744D295A7701EB425332014F0797
              Control Set: CurrentControlSet
              Start: 3
              Type: 16
              Error Control: 0
              Depends On services: RPCSS

              Service (registry key): ehSched
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @%SystemRoot%\ehome\ehsched.exe,-101
              Description: @%SystemRoot%\ehome\ehsched.exe,-102
              Object name: NT AUTHORITY\networkService
              Image path: %systemroot%\ehome\ehsched.exe
              Image size: 131072
              Image MD5: AD1870C8E5D6DD340C829E6074BF3C3F
              Control Set: CurrentControlSet
              Start: 3
              Type: 16
              Error Control: 0
              Depends On services: RPCSS

              Service (registry key): ehstart
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @%SystemRoot%\ehome\ehstart.dll,-101
              Description: @%SystemRoot%\ehome\ehstart.dll,-102
              Object name: NT AUTHORITY\LocalService
              Image path: %windir%\system32\svchost.exe -k LocalServiceNoNetwork
              Image size: 21504
              Image MD5: 3794B461C45882E06856F282EEF025AF
              Control Set: CurrentControlSet
              Start: 2
              Type: 32
              Error Control: 0
              Depends On services: RPCSS

              Service (registry key): elxstor
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Image path: \SystemRoot\system32\drivers\elxstor.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 4
              Type: 1
              Error Control: 1

              Service (registry key): EmdCache
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Control Set: CurrentControlSet
              Start: 0
              Type: 0
              Error Control: 0

              Service (registry key): EMDMgmt
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: @%SystemRoot%\system32\emdmgmt.dll,-1000
              Description: @%SystemRoot%\system32\emdmgmt.dll,-1001
              Object name: LocalSystem
              Image path: %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted
              Image size: 21504
              Image MD5: 3794B461C45882E06856F282EEF025AF
              Control Set: CurrentControlSet
              Start: 2
              Type: 32
              Error Control: 0
              Depends On services: rpcss,ecache,slsvc,fileinfo

              Service (registry key): epmntdrv
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: epmntdrv
              Image path: \??\C:\Windows\system32\epmntdrv.sys
              Image size: 0
              Image MD5: D41D8CD98F00B204E9800998ECF8427E
              Control Set: CurrentControlSet
              Start: 3
              Type: 1
              Error Control: 1

              Service (registry key): ESENT
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Control Set: CurrentControlSet
              Start: 0
              Type: 0
              Error Control: 0

              Service (registry key): EuGdiDrv
              Registry path: \SYSTEM\CurrentControlSet\Services\
              Display name: EuGdiDrv
              Image path: \??\C:\Windows\system32\EuG
              • 1
              • 2