Raccourci e1xplorer sur bureau
Résolu
Bonjour,
voiçi plusieurs semaines que j'ai ce raccourci ( e1xplorer ) sur mon bureau et pas moyen d'en être quitte.
Meme en safe-mode en faisant tourner Ewido,Ad-aware et clean-up il est tjrs là et impossible de le supprimer.
Voiçi le rapport Hijack this pour vous aider.
Si par la même occasion vous pourriez me conseiller un bon anti-virus gratuit ce serais cool.
Logfile of HijackThis v1.99.1
Scan saved at 16:56:35, on 1/07/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\ECURIT~1\msconfig.exe
C:\WINDOWS\?ymantec\d?dplay.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Software internet\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://be.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.yahoo.com/search?p=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {B7BA4036-858C-D70F-F83C-8EEA1BC27394} - (no file)
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [Mabc] "C:\WINDOWS\System32\ECURIT~1\msconfig.exe" -vt yazr
O4 - HKCU\..\Run: [Quthlo] C:\WINDOWS\?ymantec\d?dplay.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Lancer Voissa Anonymo - {C80DDAAA-310C-459B-9535-8370B4EBDA1F} - C:\Program Files\Voissa anonymo\Voissaanonymo.exe
O9 - Extra 'Tools' menuitem: Tools Menu Item - {C80DDAAA-310C-459B-9535-8370B4EBDA1F} - C:\Program Files\Voissa anonymo\Voissaanonymo.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O15 - Trusted Zone: www.1987324.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
O16 - DPF: {E02BE351-096F-44E5-8F22-6020002AC366} (WRLauncher Class) - https://intranet.sodexho.be/assimaFR/assima.cab
O16 - DPF: {FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} (Foto.com SpeedUploader 1.0 Control) - http://webalbum.foto.com/FUploader/SpeedUploader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A7E5AFA3-1D26-43EA-96B0-F514CAAA434C}: NameServer = 195.238.2.21 195.238.2.22
O21 - SSODL: Internet Explorer - {F28A40D7-AD0E-034A-C651-5F0ED76232E6} - (no file)
O21 - SSODL: DCOM Server - {2C1CD3D7-86AC-4068-93BC-A02304BB8C34} - (no file)
O23 - Service: ASN Service (asn.exe) - Unknown owner - C:\WINDOWS\asn.exe (file missing)
O23 - Service: F-Secure 2006 (BackWeb Plug-in - 4476822) - Unknown owner - C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE (file missing)
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: fsbwsys - Unknown owner - C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe (file missing)
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\System32\nvsvc32.exe (file missing)
O23 - Service: Win32 Kernel Update (Win32Kernel) - Unknown owner - C:\WINDOWS\win32host.exe (file missing)
Merci d'avance pour le coup de main.
Ben.
voiçi plusieurs semaines que j'ai ce raccourci ( e1xplorer ) sur mon bureau et pas moyen d'en être quitte.
Meme en safe-mode en faisant tourner Ewido,Ad-aware et clean-up il est tjrs là et impossible de le supprimer.
Voiçi le rapport Hijack this pour vous aider.
Si par la même occasion vous pourriez me conseiller un bon anti-virus gratuit ce serais cool.
Logfile of HijackThis v1.99.1
Scan saved at 16:56:35, on 1/07/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\ECURIT~1\msconfig.exe
C:\WINDOWS\?ymantec\d?dplay.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Software internet\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://be.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.yahoo.com/search?p=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {B7BA4036-858C-D70F-F83C-8EEA1BC27394} - (no file)
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [Mabc] "C:\WINDOWS\System32\ECURIT~1\msconfig.exe" -vt yazr
O4 - HKCU\..\Run: [Quthlo] C:\WINDOWS\?ymantec\d?dplay.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Lancer Voissa Anonymo - {C80DDAAA-310C-459B-9535-8370B4EBDA1F} - C:\Program Files\Voissa anonymo\Voissaanonymo.exe
O9 - Extra 'Tools' menuitem: Tools Menu Item - {C80DDAAA-310C-459B-9535-8370B4EBDA1F} - C:\Program Files\Voissa anonymo\Voissaanonymo.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O15 - Trusted Zone: www.1987324.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
O16 - DPF: {E02BE351-096F-44E5-8F22-6020002AC366} (WRLauncher Class) - https://intranet.sodexho.be/assimaFR/assima.cab
O16 - DPF: {FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} (Foto.com SpeedUploader 1.0 Control) - http://webalbum.foto.com/FUploader/SpeedUploader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A7E5AFA3-1D26-43EA-96B0-F514CAAA434C}: NameServer = 195.238.2.21 195.238.2.22
O21 - SSODL: Internet Explorer - {F28A40D7-AD0E-034A-C651-5F0ED76232E6} - (no file)
O21 - SSODL: DCOM Server - {2C1CD3D7-86AC-4068-93BC-A02304BB8C34} - (no file)
O23 - Service: ASN Service (asn.exe) - Unknown owner - C:\WINDOWS\asn.exe (file missing)
O23 - Service: F-Secure 2006 (BackWeb Plug-in - 4476822) - Unknown owner - C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE (file missing)
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: fsbwsys - Unknown owner - C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe (file missing)
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\System32\nvsvc32.exe (file missing)
O23 - Service: Win32 Kernel Update (Win32Kernel) - Unknown owner - C:\WINDOWS\win32host.exe (file missing)
Merci d'avance pour le coup de main.
Ben.
Configuration: windows xp pro
28 réponses
Résumé de la discussion
Un utilisateur signale la présence d'un raccourci nommé e1xplorer sur le bureau sous Windows XP, résistant aux modes sûrs et aux outils de suppression, avec un rapport HijackThis. Le log HijackThis répertorie de nombreuses entrées potentielles, dont des redirections de la page d'accueil et de recherche vers be.yahoo.com, des barres d'outils Yahoo et des programmes lancés au démarrage. Plusieurs réponses proposent vérifications supplémentaires via des antivirus en ligne gratuites (Jotti, upload sur des sites tiers) et le recours à Spybot - Search & Destroy pour détecter et supprimer les éléments malveillants. En dernier élément utile, les éléments évoqués incluent l'inventaire des programmes installés et des entrées de démarrage, signalant des composants obsolètes ou manquants et la nécessité d'un nettoyage approfondi.
-
Contributeur sécuritéSalut
Fais ce que te demande rumba ici:
< 36 > - raccourci e1xplorer sur bureau
Ajouté par Rumbacampus (19/07/2006 à 23:16 GMT+2)
Salut vous tous
Pour effacer ces deux lignes :
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\cmdService
Tu peux essayer ça, cherche les avec Regedit, puis clic-droit/autorisation et tu coches Contrôle Total...
Et tu effaces...ça peut marcher...
Ensuite, tu vois avec Régis
@+ -
Contributeur sécuritéSalut rumba,
j avais pas vu ton poste desole
Au pire on passera par un reg
Bonne nuit-
Salut régis,
voiçi le rapport hijack this:
Logfile of HijackThis v1.99.1
Scan saved at 18:30:42, on 20/07/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Software internet\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://be.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.yahoo.com/search?p=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Lancer Voissa Anonymo - {C80DDAAA-310C-459B-9535-8370B4EBDA1F} - C:\Program Files\Voissa anonymo\Voissaanonymo.exe
O9 - Extra 'Tools' menuitem: Tools Menu Item - {C80DDAAA-310C-459B-9535-8370B4EBDA1F} - C:\Program Files\Voissa anonymo\Voissaanonymo.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
O16 - DPF: {E02BE351-096F-44E5-8F22-6020002AC366} (WRLauncher Class) - https://intranet.sodexho.be/assimaFR/assima.cab
O16 - DPF: {FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} (Foto.com SpeedUploader 1.0 Control) - http://webalbum.foto.com/FUploader/SpeedUploader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A7E5AFA3-1D26-43EA-96B0-F514CAAA434C}: NameServer = 195.238.2.21 195.238.2.22
O23 - Service: ASN Service (asn.exe) - Unknown owner - C:\WINDOWS\asn.exe (file missing)
O23 - Service: F-Secure 2006 (BackWeb Plug-in - 4476822) - Unknown owner - C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE (file missing)
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: fsbwsys - Unknown owner - C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe (file missing)
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\System32\nvsvc32.exe (file missing)
A +
Benoit
-
-
Re
en plus de ce que te dit Régis essaies aussi ce qui est indiqué au post 36 pour voir
@+ -
Contributeur sécuritéParfait,
ca nettoie lol
Remet un Hijack this
a+ -
Contributeur sécuritéSalut
Telecharge ewido:
http://perso.orange.fr/entraide-hijackthis/Ewido/
Scan ton pc avec et copie colle le rapport
Apres on passera au plan C si besoin ;-)
a+-
Re,
voiçi le rapport de ewido:
---------------------------------------------------------
ewido anti-malware - Rapport de scan
---------------------------------------------------------
+ Créé le: 23:18:17, 19/07/2006
+ Somme de contrôle: 8F41F0B8
+ Résultats du scan:
C:\Documents and Settings\Benoît\Cookies\benoît@247realmedia[2].txt -> TrackingCookie.247realmedia : Nettoyer et sauvegarder
C:\Documents and Settings\Benoît\Cookies\benoît@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyer et sauvegarder
C:\Documents and Settings\Benoît\Cookies\benoît@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Nettoyer et sauvegarder
C:\Documents and Settings\Benoît\Cookies\benoît@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
C:\WINDOWS\system32\eraseme_83478.exe -> Backdoor.SdBot.xd : Nettoyer et sauvegarder
C:\WINDOWS\system32\ѕecurity\msconfig.exe -> Trojan.PurityAd : Nettoyer et sauvegarder
C:\WINDOWS\win32host.exe -> Backdoor.SdBot.xd : Nettoyer et sauvegarder
C:\WINDOWS\Ѕymantec\dνdplay.exe -> Adware.PurityScan : Nettoyer et sauvegarder
::Fin du rapport
Voilà...
qu'es-ce que ça dit??!!??
A+
-
-
Contributeur sécuritéSalut
Il faut donc le zipper.
(*) Si tu as besoin d'un programme gratuit pour zipper avant d'uploder : SIMPLYZIP
www.zdnet.fr/telecharger/windows/ fiche/0,39021313,22038669s,00.htm der : SIMPLYZIP
A+-
-
Salut vous tous
Pour effacer ces deux lignes :
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\cmdService
Tu peux essayer ça, cherche les avec Regedit, puis clic-droit/autorisation et tu coches Contrôle Total...
Et tu effaces...ça peut marcher...
Ensuite, tu vois avec Régis
@+
-
-
Contributeur sécuritéSalut
Rend toi sur ces 2sites stp:
1. -> S!Ri -remontée des fichiers (*). http://siri.urz.free.fr/upload/
2. -> SimplyTech-Adware-Upload (*) http://www.simplytech.it/public/upload/
Upload ceci:
C:\WINDOWS\system32\ipod.raw.exe
Le lien du poste c est:
raccourci e1xplorer sur bureau#2006 07 18%2019%3A53%3A02
Dis moi si c est ok pour les uploaded sur les 2sites.
a+-
re,
Pour le lien:
http://www.simplytech.it/public/upload/
J'ai copié ceçi:( C:\WINDOWS\system32\ipod.raw.exe ) dans la fenêtre file et aparement ça à été accepté.
Par contre dans l'autre lien:(http://siri.urz.free.fr/upload/ )
je tape dans la fenêtre :"lien avec le forum" ceçi:
raccourci e1xplorer sur bureau#2006 07 18%2019%3A53%3A02
puis je tape dans la fenêtre parcourrir ceci:
C:\WINDOWS\system32\ipod.raw.exe
et il me mets le message: erreur taille fichier incorrecte, taille maximum 600 ko.
Voilà où nous en sommes...
A+
-
-
Contributeur sécuritéSalut
Le plan B tout simple:
¤Démarre en mode sans échec :
Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter
Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
(Si F8 ne marche pas utilise la touche F5).
----------------------------------------------------------------------------
Relance spybot, et corrige les problemes
Revient en mode normal en redemarrant ton pc et relance spybot.
A+-
Salut régis,
J'ai remis tous mes anti-virus à jour ainsi que spybot et adaware.
J'ai tout fait tourner en safe mode.
Spybot ne corrige tjrs pas commande services après le scan.
Voiçi son rapport effectué en safe mode:
--- Search result list ---
SystemDoctor2006: Donnée (Fichier, fixed)
c:\uniq
Command Service: Réglages (Clé du registre, fixing failed)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService
Command Service: Réglages (Clé du registre, fixing failed)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService
Command Service: Réglages (Clé du registre, fixed)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\cmdService
Smitfraud-C.: Réglages (Valeur du registre, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{2C1CD3D7-86AC-4068-93BC-A02304BB8C34}
Smitfraud-C.: Exécutable (Fichier, fixed)
C:\WINDOWS\system32\ipod.raw.exe
--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---
2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2006-07-02 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2006-02-06 advcheck.dll (1.0.2.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2006-02-20 Tools.dll (2.0.0.2)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2006-07-14 Includes\Cookies.sbi (*)
2006-07-14 Includes\Dialer.sbi (*)
2006-07-14 Includes\Hijackers.sbi (*)
2006-07-14 Includes\Keyloggers.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2006-07-14 Includes\Malware.sbi (*)
2006-07-14 Includes\PUPS.sbi (*)
2006-07-14 Includes\Revision.sbi (*)
2006-07-14 Includes\Security.sbi (*)
2006-07-14 Includes\Spybots.sbi (*)
2005-02-17 Includes\Tracks.uti
2006-07-14 Includes\Trojans.sbi (*)
--- System information ---
Windows XP (Build: 2600)
--- Startup entries list ---
Located: HK_LM:Run, KernelFaultCheck
command: %systemroot%\system32\dumprep 0 -k
file: C:\WINDOWS\system32\dumprep.exe
size: 30208
MD5: aeed3f03a5869d0774bf8c75be4ba7a0
Located: HK_LM:Run, MSConfig
command: C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
file: C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe
size: 147968
MD5: 9572ba06b84aa7f7ea23a0d658031f8e
Located: HK_LM:RunOnce, SpybotSnD
command: "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
file: C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
size: 4393096
MD5: 09ca174a605b480318731e691dc98539
Located: System.ini, crypt32chain
command: crypt32.dll
file: crypt32.dll
Located: System.ini, cryptnet
command: cryptnet.dll
file: cryptnet.dll
Located: System.ini, cscdll
command: cscdll.dll
file: cscdll.dll
Located: System.ini, fcyaw
command: C:\WINDOWS\System32\fcyaw.dll
file: C:\WINDOWS\System32\fcyaw.dll
size: 569396
MD5: 3ad210e08eb975ededd9717f3653ced2
Located: System.ini, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
Located: System.ini, Schedule
command: wlnotify.dll
file: wlnotify.dll
Located: System.ini, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
Located: System.ini, SensLogn
command: WlNotify.dll
file: WlNotify.dll
Located: System.ini, termsrv
command: wlnotify.dll
file: wlnotify.dll
Located: System.ini, winogk32
command: winogk32.dll
file: winogk32.dll
Located: System.ini, wlballoon
command: wlnotify.dll
file: wlnotify.dll
--- Browser helper object list ---
{A81AAE89-642C-41D8-88DE-1E8A8215B049} ()
BHO name:
CLSID name:
Path: C:\WINDOWS\System32\
Long name: fcyaw.dll
Short name:
Date (created): 25/06/2006 20:26:18
Date (last access): 16/07/2006 22:27:34
Date (last write): 25/06/2006 20:26:20
Filesize: 569396
Attributes: hidden sysfile
MD5: 3AD210E08EB975EDEDD9717F3653CED2
CRC32: B5336661
{B7BA4036-858C-D70F-F83C-8EEA1BC27394} ()
BHO name:
CLSID name:
--- ActiveX list ---
{E02BE351-096F-44E5-8F22-6020002AC366} (WRLauncher Class)
DPF name:
CLSID name: WRLauncher Class
Installer: C:\WINDOWS\Downloaded Program Files\AssimaAx.inf
Codebase: https://intranet.sodexho.be/assimaFR/assima.cab
Path: C:\WINDOWS\Downloaded Program Files\
Long name: AssimaAx.dll
Short name:
Date (created): 23/03/2005 12:10:22
Date (last access): 16/07/2006 22:44:40
Date (last write): 23/03/2005 12:10:22
Filesize: 126976
Attributes: archive
MD5: 1658DB4077D92301FBDADA430BAC4FB6
CRC32: 1E63BFDA
Version: 1.0.0.35
{FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} (Foto.com SpeedUploader 1.0 Control)
DPF name:
CLSID name: Foto.com SpeedUploader 1.0 Control
Installer: C:\WINDOWS\Downloaded Program Files\SpeedUploader.inf
Codebase: http://webalbum.foto.com/FUploader/SpeedUploader.cab
Path: C:\WINDOWS\Downloaded Program Files\
Long name: SpeedUploader.ocx
Short name: SPEEDU~1.OCX
Date (created): 30/06/2006 18:53:24
Date (last access): 6/07/2006 20:58:14
Date (last write): 30/06/2006 18:53:24
Filesize: 2025216
Attributes: archive
MD5: 2CC3695DE15BDA60A37E9AEED1FC7B6F
CRC32: 5F28723C
Version: 3.6.23.0
--- Process list ---
PID: 0 ( 0) [System]
PID: 156 ( 4) \SystemRoot\System32\smss.exe
PID: 228 ( 156) \??\C:\WINDOWS\system32\winlogon.exe
PID: 272 ( 228) C:\WINDOWS\system32\services.exe
size: 101888
MD5: FC0691097471EE374907E1024EDCBD43
PID: 284 ( 228) C:\WINDOWS\system32\lsass.exe
size: 11776
MD5: 2C2431B30A629123C1757582C9D93F38
PID: 448 ( 272) C:\WINDOWS\system32\svchost.exe
size: 12800
MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
PID: 472 ( 272) C:\WINDOWS\system32\svchost.exe
size: 12800
MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
PID: 728 ( 708) C:\WINDOWS\Explorer.EXE
size: 1005056
MD5: 9E20A8EF0CA524446AFEE29F4423CC8F
PID: 1672 ( 728) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
size: 4393096
MD5: 09CA174A605B480318731E691DC98539
PID: 4 ( 0) System
PID: 204 ( 156) csrss.exe
--- Browser start & search pages list ---
Spybot - Search & Destroy browser pages report, 16/07/2006 23:11:40
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
C:\WINDOWS\System32\blank.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
https://www.bing.com/?toHttps=1&redig=17DBE7D168544FA98200E890A8051984
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
https://be.yahoo.com/
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
https://www.bing.com/?toHttps=1&redig=17DBE7D168544FA98200E890A8051984
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\SearchAssistant Explorer\Main\Default_Search_URL
about:blank
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\@
http://search.yahoo.com/search?p=%s
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
%SystemRoot%\system32\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
https://www.bing.com/?toHttps=1&redig=17DBE7D168544FA98200E890A8051984
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
about:blank
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant
https://www.bing.com/?toHttps=1&redig=17DBE7D168544FA98200E890A8051984
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm
--- Winsock Layered Service Provider list ---
--- Uninstall list ---
Ad-Aware SE Personal 1.06 (Ad-Aware SE Personal)
uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~2\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~2\INSTALL.LOG
publisher: Lavasoft
help link: https://www.adaware.com/
(AddressBook)
Adobe Acrobat 4.0 4.0 (Adobe Acrobat 4.0)
version (major): 4
install location: C:\Program Files\Adobe\Acrobat 4.0
install source: C:\Documents and Settings\Benoît\Local Settings\Temp\pftAB~tmp\
uninstall cmd: C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.dll"
publisher: Adobe Systems, Inc.
help link: https://acrobat.adobe.com/us/en/acrobat.html
(Branding)
CCleaner (remove only) (CCleaner)
uninstall cmd: "C:\Program Files\CCleaner\uninst.exe"
CleanUp! (CleanUp!)
uninstall cmd: C:\Program Files\CleanUp!\uninstall.exe
(Connection Manager)
Cowabanga by OIN (Cowabanga)
uninstall cmd: C:\Program Files\Cowabanga\uninstaller.exe
(DirectAnimation)
(DirectDrawEx)
DVD Shrink 3.2 (DVD Shrink_is1)
install location: C:\Program Files\DVD Shrink\
uninstall cmd: "C:\Program Files\DVD Shrink\unins000.exe"
publisher: DVD Shrink
help link: http://www.dvdshrink.org
ewido anti-malware (ewidoantimalware)
install location: C:\Program Files\ewido anti-malware
uninstall cmd: C:\Program Files\ewido anti-malware\Uninstall.exe
publisher: ewido networks
help link: https://www.avg.com/en-us/free-antivirus-download
(F-Secure Anti-Spyware)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware"
(F-Secure Anti-Spyware Scanner)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware Scanner"
(F-Secure Anti-Virus)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus"
(F-Secure Anti-Virus Client Security Installer)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus Client Security Installer"
(F-Secure DAAS)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure DAAS"
(F-Secure Diagnostics)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Diagnostics"
(F-Secure E-mail Scanning)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure E-mail Scanning"
(F-Secure FWES)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure FWES"
(F-Secure GUI)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure GUI"
(F-Secure Help)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Help"
(F-Secure Management Agent)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Management Agent"
(F-Secure TNB)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure TNB"
(Fontcore)
HijackThis 1.99.1 1.99.1 (HijackThis)
uninstall cmd: C:\Program Files\Software internet\HijackThis.exe /uninstall
publisher: Soeperman Enterprises Ltd.
HP Imaging Device Functions 5.0 5.0 (HP Imaging Device Functions)
uninstall cmd: C:\Program Files\HP\Digital Imaging\DigitalImagingMonitor\hpzscr01.exe -datfile hpqbud01.dat
publisher: HP
help link: https://support.hp.com/us-en?openCLC=true
HP Solution Center & Imaging Support Tools 5.0 5.0 (HP Solution Center & Imaging Support Tools)
uninstall cmd: C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
publisher: HP
help link: https://support.hp.com/us-en?openCLC=true
(ICW)
(IE40)
(IE4Data)
(IE5BAKEX)
(IEData)
Kazaa Lite K++ v2.4.3 2.4.3 (kazaalite202_is1)
uninstall cmd: "C:\Program Files\Kazaa Lite K++\unins000.exe"
publisher: Kazaa Lite K++
Lapin Malin Maternelle 2 + Atelier de dessin & de musique (Lapin Malin Maternelle 2 + Atelier de dessin & de musique)
uninstall cmd: C:\Program Files\Mindscape\Lapin Malin Maternelle 2 + Atelier de dessin & de musique\uninstall.exe
(Microsoft NetShow Player 2.0)
(MobileOptionPack)
(MPlayer2)
(MsJavaVM)
Multi Virus Cleaner 2006 (Multi Virus Cleaner 2006_is1)
install location: C:\Program Files\AxBx\Multi Virus Cleaner 2006\
uninstall cmd: "C:\Program Files\AxBx\Multi Virus Cleaner 2006\unins000.exe"
publisher: AxBx
help link: http://www.viruskeeper.com/fr/mvc.htm
Ahead Nero Burning ROM (Nero - Burning Rom!UninstallKey)
uninstall cmd: C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
(NetMeeting)
(News Service)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"News Service"
NVIDIA Drivers (NVIDIA Drivers)
uninstall cmd: C:\WINDOWS\System32\nvudisp.exe UninstallGUI
(OutlookExpress)
(PCHealth)
uninstall cmd: rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
PhotoFiltre (PhotoFiltre)
uninstall cmd: "C:\Program Files\PhotoFiltre\Uninst.exe"
QuickTime (QuickTime)
uninstall cmd: C:\WINDOWS\unvise32qt.exe C:\WINDOWS\System32\QuickTime\Uninstall.log
(SchedulingAgent)
Macromedia Flash Player 8 8 (ShockwaveFlash)
uninstall cmd: RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\swflash.inf,DefaultUninstall,5
publisher: Macromedia
help link: https://helpx.adobe.com/flash-player.html
Spybot - Search & Destroy 1.4 1.4 (Spybot - Search & Destroy_is1)
install location: C:\Program Files\Spybot - Search & Destroy\
uninstall cmd: "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
publisher: Safer Networking Limited
VIA Audio Driver Setup Program (VIA Audio Driver Setup Program)
uninstall cmd: RunDll32.exe UnAudioNT.dll,UninstallAudio C:\WINDOWS\IsUninst.exe -f"C:\PROGRA~1\VIATEC~1\VIAAUD~1/Uninst.isu"
Voissa Anonymo 2.0 (Voissa Anonymo 2_is1)
uninstall cmd: "C:\Program Files\Voissa anonymo\unins000.exe"
publisher: Cedrat Net
help link: http://www.voissa.com
Windows Media Format Runtime (Windows Media Format Runtime)
uninstall cmd: "C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Lecteur Windows Media 10 (Windows Media Player)
uninstall cmd: "C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Archiveur WinRAR (WinRAR archiver)
uninstall cmd: C:\Program Files\WinRAR\uninstall.exe
WinZip 9.0 SR-1 (6224f) (WinZip)
version (major): 9
install location: C:\PROGRA~1\WINZIP\
uninstall cmd: "C:\Program Files\WinZip\WINZIP32.EXE" /uninstall
publisher: WinZip Computing, Inc.
help link: https://www.winzip.com/win/en/xsupport.html
Yahoo! Toolbar (Yahoo! Companion)
uninstall cmd: C:\PROGRA~1\Yahoo!\Common\unyt.exe
Yahoo! Toolbar (Yahoo! Toolbar)
Zuma Deluxe 1.0 (Zuma Deluxe 1.0)
uninstall cmd: C:\Program Files\PopCap Games\Zuma Deluxe\PopUninstall.exe "C:\Program Files\PopCap Games\Zuma Deluxe\Install.log"
Macromedia Flash Player 7.0.19.0 ({0456ebd7-5f67-4ab6-852e-63781e3f389c})
version: 117440531
version (major): 7
estimated size: 1026
install date: 20051008
install source: C:\DOCUME~1\BENOT~1\LOCALS~1\Temp\{B5DC4618-C04D-4683-891E-B2CF5AE77114}\{1E2F8AE3-3437-44E6-BB75-E95751D6B83F}\
uninstall cmd: MsiExec.exe /X{0456ebd7-5f67-4ab6-852e-63781e3f389c}
publisher: Macromedia, Inc.
Je chante et je joue avec Lapin Malin ({075429DA-47AF-43F1-B889-91BAD1942442})
uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{075429DA-47AF-43F1-B889-91BAD1942442}\setup.exe"
HP Software Update 3.0.5.001 ({15EE79F4-4ED1-4267-9B0F-351009325D7D})
version: 50331653
version (major): 3
estimated size: 3861
install date: 20060420
install source: D:\setup\HPSoftwareUpdate\
uninstall cmd: MsiExec.exe /X{15EE79F4-4ED1-4267-9B0F-351009325D7D}
publisher: Hewlett-Packard
contact: https://support.hp.com/us-en?openCLC=true
AutoUpdate 1.1 ({18D10072035C4515918F7E37EAFAACFC})
install location: C:\Program Files\DivX
Ulead VideoStudio 5.0 DV 5.00.0004 ({27113CA3-36B8-48AB-A419-79CF1FC0ECED})
version: 83886084
version (major): 5
estimated size: 146030
install date: 20051102
install source: D:\Setup\C\E\F\G\I\J\K\P\S\SC\
publisher: Ulead Systems, Inc.
help link: https://www.videostudiopro.com/fr/
help telephone: +1-310-869-6391
readme: https://www.videostudiopro.com/en/?utm_source=ulead&utm_medium=redirect&utm_term=/vs/new.htm&utm_campaign=ulead
HP Deskjet 3900 series 5.0 ({3819891A-030B-4a4e-98ED-B28A649E48AB})
uninstall cmd: C:\Program Files\HP\Digital Imaging\{3819891A-030B-4a4e-98ED-B28A649E48AB}\setup\hpzscr01.exe -datfile hpfscr05.dat
publisher: HP
help link: https://support.hp.com/us-en?openCLC=true
HPDeskjet3900Series 1.00.0000 ({42F6BED9-41DD-40F1-85A8-8E0350493626})
version: 16777216
version (major): 1
estimated size: 20689
install date: 20060420
install source: D:\setup\DeskjetSoftware\
publisher: Hewlett-Packard
Sony USB Driver ({5C29CB8B-AC1E-4114-8D68-9CD080140D4A})
uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}\Setup.exe" UNINSTALL
ArcSoft VideoImpression 2 ({6762AB61-2BE9-45D8-B9F2-24014324CD35})
version (major): 2
install location: C:\Program Files\ArcSoft\VideoImpression 2
uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6762AB61-2BE9-45D8-B9F2-24014324CD35}\setup.exe" -l0x40c
publisher: ArcSoft
DivX Player 6.0 ({8ADFC4160D694100B5B8A22DE9DCABD9})
install location: C:\Program Files\DivX
uninstall cmd: C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
publisher: DivXNetworks, Inc.
Microsoft Office XP Professional avec FrontPage 10.0.4330.0 ({9028040C-6000-11D3-8CFE-0050048383C9})
version: 167776490
version (major): 10
estimated size: 156823
install date: 20050707
install location: INSTALLLOCATION
install source: D:\
uninstall cmd: MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us
readme: C:\Program Files\Microsoft Office\Office10\1036\OFREAD10.HTM
DiMAGE Viewer ({976EA7B1-7562-483D-88DA-4323D263B7CD})
uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{976EA7B1-7562-483D-88DA-4323D263B7CD}\Setup.exe" -l0x40c anything
Ulead DVD PictureShow 2 Trial 2.00.1300 ({A9212616-FCA2-4173-BD99-5C741EB3A068})
version: 33555732
version (major): 2
install location: C:\Program Files\Ulead Systems\Ulead DVD PictureShow 2 Trial
uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A9212616-FCA2-4173-BD99-5C741EB3A068}\Setup.exe" -l0x9
publisher: Ulead Systems, Inc.
Adobe Reader 6.0.1 - Français 006.000.001 ({AC76BA86-7AD7-1036-7B44-A00000000001})
version: 100663297
version (major): 6
estimated size: 53970
install date: 20050707
install location: C:\Program Files\Adobe\Acrobat 6.0\Reader\
install source: C:\WINDOWS\Cache\Adobe Reader 6.0.1\FRABIG\
uninstall cmd: MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A00000000001}
publisher: Adobe Systems Incorporated
comments:
contact: Service support clientèle
help link: https://helpx.adobe.com/support.html
help telephone:
readme: C:\Program Files\Adobe\Acrobat 6.0\Reader\Readme.htm
Microsoft .NET Framework 1.1 1.1.4322 ({CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1})
version: 16847074
version (major): 1
version (minor): 1
estimated size: 37963
install date: 20051013
install source: C:\DOCUME~1\BENOT~1\LOCALS~1\Temp\is-MGUQN.tmp\dotnetfx\
uninstall cmd: MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
publisher: Microsoft
readme: file://C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\RepairRedist.htm
SpeedTouch USB Software ({D41FAAA9-8048-4906-86B2-9AADEA1FA0B7})
uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D41FAAA9-8048-4906-86B2-9AADEA1FA0B7}\setup.exe" /l040c -Control_Panel
HPProductAssistant 53.0.13.000 ({E3F90083-80D4-4b5a-87C7-E97E12F5516D})
version: 889192461
version (major): 53
estimated size: 3247
install date: 20060420
install source: D:\setup\hpproductassistant\
publisher: Hewlett-Packard
SolutionCenter 50.0.152.000 ({EA103B64-C0E4-4C0E-A506-751590E1653D})
version: 838860952
version (major): 50
estimated size: 8865
install date: 20060420
install source: D:\setup\SolutionCenter\
publisher: Hewlett-Packard
HP Image Zone Express 1.5.1.29 ({FE64AE29-0883-4C70-8388-DC026019C900})
version: 17104897
version (major): 1
version (minor): 5
estimated size: 9578
install date: 20060420
install location: C:\Program Files\HP\
install source: D:\setup\ImageZoneExpress\
uninstall cmd: MsiExec.exe /X{FE64AE29-0883-4C70-8388-DC026019C900}
publisher: Hewlett-Packard
help link: https://www8.hp.com/fr/fr/home.html
--- System Services ---
Service (registry key): .NET CLR Data
Start: 0
Type: 0
Error Control: 0
Service (registry key): .NET CLR Networking
Start: 0
Type: 0
Error Control: 0
Service (registry key): .NETFramework
Start: 0
Type: 0
Error Control: 0
Service (registry key): 61883
Display name: Pilote d'unité 61883
Image path: System32\DRIVERS\61883.sys
Image size: 45952
Image MD5: 5BEE618443DE08BAE98047D631ED3872
Start: 3
Type: 1
Error Control: 1
Service (registry key): Abiosdsk
Start: 4
Type: 1
Error Control: 0
Service (registry key): abp480n5
Start: 4
Type: 1
Error Control: 1
Service (registry key): ACPI
Display name: Pilote ACPI Microsoft
Image path: System32\DRIVERS\ACPI.sys
Image size: 180096
Image MD5: 34128BB2AB7BD69C72017BE7FCF8BE34
Start: 0
Type: 1
Error Control: 1
Service (registry key): ACPIEC
Start: 4
Type: 1
Error Control: 1
Service (registry key): adpu160m
Start: 4
Type: 1
Error Control: 1
Service (registry key): aec
Display name: Suppresseur d'écho acoustique (Noyau Microsoft)
Image path: system32\drivers\aec.sys
Image size: 122472
Image MD5: B45A744CA0A15A59D8B0307CE9741E92
Start: 3
Type: 1
Error Control: 1
Service (registry key): AFD
Display name: Environnement de prise en charge de réseau AFD
Image path: \SystemRoot\System32\drivers\afd.sys
Start: 2
Type: 1
Error Control: 1
Service (registry key): Aha154x
Start: 4
Type: 1
Error Control: 1
Service (registry key): aic78u2
Start: 4
Type: 1
Error Control: 1
Service (registry key): aic78xx
Start: 4
Type: 1
Error Control: 1
Service (registry key): alcan5wn
Display name: Alcatel SpeedTouch USB ADSL PPP Networking Driver (NDISWAN)
Image path: System32\DRIVERS\alcan5wn.sys
Image size: 53600
Image MD5: 0940030D5A5869067CCC03E3B0B8DEC7
Start: 3
Type: 1
Error Control: 1
Service (registry key): alcaudsl
Display name: SpeedTouch ADSL Modem ATM Transport
Image path: System32\DRIVERS\alcaudsl.sys
Image size: 70688
Image MD5: 4C9577888C53243E2991456F510488A1
Start: 3
Type: 1
Error Control: 1
Service (registry key): Alerter
Display name: Avertissement
Description: Informe les utilisateurs et les ordinateurs sélectionnés des alertes administratives. Si ce service est arrêté, les programmes qui utilisent les alertes administratives ne les recevront pas. Si ce service est désactivé, les services qui en dépendent ne pourront pas démarrer.
Object name: NT AUTHORITY\LocalService
Image path: %SystemRoot%\System32\svchost.exe -k LocalService
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 3
Type: 32
Error Control: 1
Depends On services: LanmanWorkstation
Service (registry key): ALG
Display name: Service de la passerelle de la couche Application
Description: Fournit la prise en charge des plugins de protocoles tiers pour le partage de connexion Internet et le pare-feu Internet.
Object name: NT AUTHORITY\LocalService
Image path: %SystemRoot%\System32\alg.exe
Image size: 40960
Image MD5: 55D226818B6C3D99741432D37657BA73
Start: 3
Type: 16
Error Control: 1
Service (registry key): AliIde
Start: 4
Type: 1
Error Control: 1
Service (registry key): amsint
Start: 4
Type: 1
Error Control: 1
Service (registry key): AppMgmt
Display name: Gestion d'applications
Description: Fournit des services d'installation de logiciels tels que Attribuer, Publier et Supprimer.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 3
Type: 32
Error Control: 1
Service (registry key): Arp1394
Display name: Protocole client ARP 1394
Description: Protocole client ARP 1394
Image path: System32\DRIVERS\arp1394.sys
Image size: 54016
Image MD5: BAC00074336440DD961F4AB86D81B118
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip
Service (registry key): asc
Start: 4
Type: 1
Error Control: 1
Service (registry key): asc3350p
Start: 4
Type: 1
Error Control: 1
Service (registry key): asc3550
Start: 4
Type: 1
Error Control: 1
Service (registry key): asn.exe
Display name: ASN Service
Description: ASN Service
Object name: LocalSystem
Image path: "C:\WINDOWS\asn.exe"
Start: 2
Type: 272
Error Control: 0
Service (registry key): ASP.NET
Start: 0
Type: 0
Error Control: 0
Service (registry key): ASP.NET_1.1.4322
Start: 0
Type: 0
Error Control: 0
Service (registry key): Aspi32
Start: 2
Type: 1
Error Control: 1
Service (registry key): aspnet_state
Display name: ASP.NET State Service
Description: Provides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start.
Object name: NT AUTHORITY\NetworkService
Image path: %SystemRoot%\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
Image size: 32768
Image MD5: A986FCFDAC587E68478DB51547B90800
Start: 3
Type: 16
Error Control: 1
Service (registry key): AsyncMac
Display name: Pilote de média asynchrone RAS
Description: Pilote de média asynchrone RAS
Image path: System32\DRIVERS\asyncmac.sys
Image size: 13568
Image MD5: 03F403B07A884FC2AA54A0916C410931
Start: 3
Type: 1
Error Control: 1
Service (registry key): atapi
Display name: Contrôleur de disque dur IDE/ESDI standard
Image path: System32\DRIVERS\atapi.sys
Image size: 86656
Image MD5: A64013E98426E1877CB653685C5C0009
Start: 0
Type: 1
Error Control: 1
Service (registry key): Atdisk
Start: 4
Type: 1
Error Control: 0
Service (registry key): Atmarpc
Display name: Protocole client ATM ARP
Description: Protocole client ATM ARP
Image path: System32\DRIVERS\atmarpc.sys
Image size: 57216
Image MD5: 8D735CA1CBDB0081B0E3B9FF0EB222D0
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip
Service (registry key): AudioSrv
Display name: Audio Windows
Description: Gère les périphériques audio pour les programmes basés sur Windows. Si ce service est arrêté, les périphériques et les effets audio ne fonctionneront pas correctement. Si ce service est désactivé, les services en dépendant explicitement ne démarreront pas.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Depends On services: PlugPlay,RpcSs
Service (registry key): audstub
Display name: Pilote audio Stub
Image path: System32\DRIVERS\audstub.sys
Image size: 3072
Image MD5: D9F724AA26C010A217C97606B160ED68
Start: 3
Type: 1
Error Control: 1
Service (registry key): Avc
Display name: Périphérique AVC
Image path: System32\DRIVERS\avc.sys
Image size: 35584
Image MD5: 991BD56AA395E53B8B81FB70036FFBDD
Start: 3
Type: 1
Error Control: 1
Service (registry key): Avg7RsW
Start: 0
Type: 0
Error Control: 0
Service (registry key): Avg7RsXP
Start: 0
Type: 0
Error Control: 0
Service (registry key): Avg7UpdSvc
Start: 0
Type: 0
Error Control: 0
Service (registry key): AVGEMS
Start: 0
Type: 0
Error Control: 0
Service (registry key): AvgTdi
Start: 0
Type: 0
Error Control: 0
Service (registry key): BackWeb Plug-in - 4476822
Display name: F-Secure 2006
Object name: LocalSystem
Image path: C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
Start: 2
Type: 272
Error Control: 1
Depends On services: RPCSS
Service (registry key): BattC
Start: 0
Type: 0
Error Control: 0
Service (registry key): Beep
Start: 1
Type: 1
Error Control: 1
Service (registry key): BITS
Display name: Service de transfert intelligent en arrière-plan
Description: Utilise la bande passante réseau inactive pour transférer des données.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 3
Type: 32
Error Control: 1
Depends On services: LanmanWorkstation,RpcSs
Service (registry key): Browser
Display name: Explorateur d'ordinateur
Description: Tient à jour une liste des ordinateurs présents sur le réseau et fournit cette liste aux ordinateurs désignés comme navigateurs. Si ce service est arrêté, la liste ne sera pas mise ou tenue à jour. Si ce service est désactivé, les services qui en dépendent ne pourront pas démarrer.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Depends On services: LanmanWorkstation,LanmanServer
Service (registry key): cbidf2k
Start: 4
Type: 1
Error Control: 1
Service (registry key): CCDECODE
Display name: Closed Caption Decoder
Image path: System32\DRIVERS\CCDECODE.sys
Image size: 16384
Image MD5: FDC06E2ADA8C468EBB161624E03976CF
Start: 3
Type: 1
Error Control: 1
Service (registry key): cd20xrnt
Start: 4
Type: 1
Error Control: 1
Service (registry key): Cdaudio
Start: 1
Type: 1
Error Control: 0
Service (registry key): Cdfs
Start: 4
Type: 2
Error Control: 1
Depends On group: "SCSI CDROM Class"
Service (registry key): cdrbsdrv
Start: 1
Type: 1
Error Control: 0
Service (registry key): Cdrom
Display name: Pilote de CD-ROM
Image path: System32\DRIVERS\cdrom.sys
Image size: 47488
Image MD5: CB762E814F602229A574F4D78D3D6A30
Start: 1
Type: 1
Error Control: 1
Depends On group: "SCSI miniport"
Service (registry key): Changer
Start: 1
Type: 1
Error Control: 0
Service (registry key): cisvc
Display name: Service d'indexation
Description: Construit un index des contenus et des propriétés des fichiers sur les ordinateurs locaux et distants ; fournit un accès rapide aux fichiers par le biais d'un langage d'interrogation flexible.
Object name: LocalSystem
Image path: C:\WINDOWS\System32\cisvc.exe
Image size: 5120
Image MD5: 7901AF03767C140467671C7CEEB2C3FE
Start: 3
Type: 32
Error Control: 1
Depends On services: RPCSS
Service (registry key): ClipSrv
Display name: Gestionnaire de l'Album
Description: Active le Gestionnaire de l'Album afin de stocker les informations et les partager avec des ordinateurs à distance. Si le service est arrêté, le Gestionnaire de l'Album ne pourra pas partager les informations avec des ordinateurs à distance. Si ce service est désactivé, tout service en dépendant explicitement ne démarrera pas.
Object name: LocalSystem
Image path: %SystemRoot%\system32\clipsrv.exe
Image size: 30720
Image MD5: 3D1AAB2963FABCAFEB507B5C9D67BFBC
Start: 3
Type: 16
Error Control: 1
Depends On services: NetDDE
Service (registry key): CmdIde
Start: 4
Type: 1
Error Control: 1
Service (registry key): cmdService
Start: 0
Type: 0
Error Control: 0
Service (registry key): COMSysApp
Display name: Application système COM+
Description: Gère la configuration et le suivi des composants de base COM+ (Component Object Model) . Si le service est arrêté, la plupart des composants de base COM+ ne fonctionneront pas correctement. Si ce service est désactivé, les services qui en dépendent de manière explicite ne pourront pas démarrer.
Object name: LocalSystem
Image path: C:\WINDOWS\System32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
Image size: 4608
Image MD5: 17681E6109A67F3AEA66AD6AAE2434E6
Start: 3
Type: 16
Error Control: 1
Depends On services: rpcss
Service (registry key): ContentFilter
Start: 0
Type: 0
Error Control: 0
Service (registry key): ContentIndex
Start: 0
Type: 0
Error Control: 0
Service (registry key): Cpqarray
Start: 4
Type: 1
Error Control: 1
Service (registry key): CryptSvc
Display name: Services de cryptographie
Description: Fournit trois services de gestion : le service de base de données de catalogue, qui confirme la signature des fichiers Windows; le service de racine protégée, qui ajoute et supprime des certificats d'autorité de certification de racine approuvés et le service Clé, qui fournit une aide dans l'inscription de cet ordinateur pour les certificats. Si ce service est arrêté, ces services de gestion ne fonctionneront pas correctement. Si ce service est désactivé, tout service en dépendant explicitement ne démarrera pas.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Depends On services: RpcSs
Service (registry key): dac2w2k
Start: 4
Type: 1
Error Control: 0
Service (registry key): dac960nt
Start: 4
Type: 1
Error Control: 1
Service (registry key): Dhcp
Display name: Client DHCP
Description: Gère la configuration réseau en inscrivant et en mettant à jour les adresses IP et les noms DNS.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Depends On services: Tcpip,Afd,NetBT
Service (registry key): Disk
Display name: Pilote de disque
Image path: System32\DRIVERS\disk.sys
Image size: 33664
Image MD5: 43A10CD19D648E57ED039A6CAA667A56
Start: 0
Type: 1
Error Control: 1
Depends On group: "SCSI miniport"
Service (registry key): dmadmin
Display name: Service d'administration du Gestionnaire de disque logique
Description: Configure les lecteurs de disque durs et les volumes. Le service ne s'exécute que pour les processus de configurations puis s'arrête.
Object name: LocalSystem
Image path: %SystemRoot%\System32\dmadmin.exe /com
Image size: 205312
Image MD5: F03B6377293A2CA253E02366B6F817D3
Start: 3
Type: 32
Error Control: 1
Depends On services: RpcSs,PlugPlay,DmServer
Service (registry key): dmboot
Image path: System32\drivers\dmboot.sys
Image size: 781440
Image MD5: 625043857173294DF9239909FC37CCD1
Start: 4
Type: 1
Error Control: 1
Service (registry key): dmio
Display name: Pilote de Gestionnaire de disque logique
Image path: System32\drivers\dmio.sys
Image size: 147456
Image MD5: C85A01B45E107B2D80A1263B365E62B5
Start: 0
Type: 1
Error Control: 1
Service (registry key): dmload
Image path: System32\drivers\dmload.sys
Image size: 5888
Image MD5: E9317282A63CA4D188C0DF5E09C6AC5F
Start: 0
Type: 1
Error Control: 1
Service (registry key): dmserver
Display name: Gestionnaire de disque logique
Description: Détecte et analyse de nouveaux lecteurs de disque durs et envoie les informations de volume de disque au service gestionnaire administratif de disque logique pour la configuration. Si ce service est arrêté, l'état des disques dynamiques et les informations de configuration peuvent devenir obsolètes. Si ce service est désactivé, tout service en dépendant explicitement ne démarrera pas.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Depends On services: RpcSs,PlugPlay
Service (registry key): DMusic
Display name: Synthétiseur DLS du noyau Microsoft
Image path: system32\drivers\DMusic.sys
Image size: 50048
Image MD5: EF05974D47D56FA8387F170F05BAE5E7
Start: 3
Type: 1
Error Control: 1
Service (registry key): Dnscache
Display name: Client DNS
Description: Résout et met en cache les noms DNS pour cet ordinateur. Si ce service est arrêté, l'ordinateur ne pourra pas résoudre les noms DNS et trouver les contrôleurs de domaine Active Directory. Si ce service est désactivé, les services qui en dépendent ne pourront pas démarrer.
Object name: NT AUTHORITY\NetworkService
Image path: %SystemRoot%\System32\svchost.exe -k NetworkService
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Depends On services: Tcpip
Service (registry key): dpti2o
Start: 4
Type: 1
Error Control: 1
Service (registry key): drmkaud
Display name: Filtre de décodeur DRM (Noyau Microsoft)
Image path: system32\drivers\drmkaud.sys
Image size: 2816
Image MD5: AA94E0CBD79DB63100D0EAE061EB69BC
Start: 3
Type: 1
Error Control: 1
Service (registry key): ERSvc
Display name: Service de rapport d'erreurs
Description: Active le rapport d'erreurs pour les services et les applications s'exécutant sur des environnements non standard.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 0
Depends On services: RpcSs
Service (registry key): Eventlog
Display name: Journal des événements
Description: Active les messages d'événements émis par les programmes fonctionnant sous Windows et les composants devant être affichés dans l'observateur d'événements. Ce service ne peut être arrêté.
Object name: LocalSystem
Image path: %SystemRoot%\system32\services.exe
Image size: 101888
Image MD5: FC0691097471EE374907E1024EDCBD43
Start: 2
Type: 32
Error Control: 1
Service (registry key): EventSystem
Display name: Système d'événements de COM+
Description: Prend en charge le service de notification d'événements système (SENS, System Event Notification Service), qui fournit une distribution automatique d'événements aux composants COM (Component Object Model) abonnés. Si le service est arrêté, SENS sera fermé et ne pourra fournir des informations d'ouverture et de fermeture de session. Si ce service est désactivé, le démarrage de tout service qui en dépend explicitement échouera.
Object name: LocalSystem
Image path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 3
Type: 32
Error Control: 1
Depends On services: RPCSS
Service (registry key): ewido security suite control
Display name: ewido security suite control
Object name: LocalSystem
Image path: C:\Program Files\ewido anti-malware\ewidoctrl.exe
Image size: 13888
Image MD5: 26830B750372AB1BF29C95DEEBEB802F
Start: 2
Type: 272
Error Control: 0
Service (registry key): ewido security suite driver
Display name: ewido security suite driver
Image path: \??\C:\Program Files\ewido anti-malware\guard.sys
Image size: 3072
Image MD5: 2FF233E31AEFFF332F187E8E2ABFA6C5
Start: 1
Type: 1
Error Control: 0
Service (registry key): ewido security suite guard
Display name: ewido security suite guard
Object name: LocalSystem
Image path: C:\Program Files\ewido anti-malware\ewidoguard.exe
Image size: 151616
Image MD5: 34A50717AD686900F078F5208F8E908E
Start: 4
Type: 272
Error Control: 0
Service (registry key): Fastfat
Start: 4
Type: 2
Error Control: 1
Service (registry key): FastUserSwitchingCompatibility
Display name: Compatibilité avec le Changement rapide d'utilisateur
Description: Fournit un système de gestion à des applications qui nécessitent de l'Assistance dans un environnement d'utilisateurs multiples.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 3
Type: 32
Error Control: 1
Depends On services: TermService
Service (registry key): Fdc
Display name: Pilote de contrôleur de lecteur de disquettes
Image path: System32\DRIVERS\fdc.sys
Image size: 26240
Image MD5: 19C5C7EAC0190A42522290BF002F64EA
Start: 3
Type: 1
Error Control: 1
Service (registry key): FETNDIS
Display name: Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet
Image path: System32\DRIVERS\fetnd5.sys
Image size: 27165
Image MD5: E9648254056BCE81A85380C0C3647DC4
Start: 3
Type: 1
Error Control: 1
Service (registry key): Fips
Start: 1
Type: 1
Error Control: 1
Service (registry key): Flpydisk
Display name: Pilote de lecteur de disquettes
Image path: System32\DRIVERS\flpydisk.sys
Image size: 19712
Image MD5: 21E41E89B9B191B685F99B7A8885310B
Start: 3
Type: 1
Error Control: 1
Service (registry key): fsbwsys
Display name: fsbwsys
Object name: LocalSystem
Image path: "C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe"
Start: 2
Type: 16
Error Control: 1
Depends On services: RPCSS
Service (registry key): FSDFWD
Display name: F-Secure Anti-Virus Firewall Daemon
Description: F-Secure Anti-Virus Firewall Daemon
Object name: LocalSystem
Image path: "C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe"
Image size: 204863
Image MD5: C81474EFD014D51C8A1B17129F8D4DEB
Start: 3
Type: 16
Error Control: 0
Service (registry key): FSFW
Display name: F-Secure Firewall Driver
Image path: System32\drivers\fsdfw.sys
Image size: 70896
Image MD5: 320C2169834EB7B410C56F93CCE1ECA8
Start: 0
Type: 1
Error Control: 1
Service (registry key): Fs_Rec
Start: 1
Type: 8
Error Control: 0
Service (registry key): Ftdisk
Display name: Pilote du Gestionnaire de volume
Image path: System32\DRIVERS\ftdisk.sys
Image size: 126080
Image MD5: A86859B77B908C18C2657F284AA29FE3
Start: 0
Type: 1
Error Control: 1
Service (registry key): gafwload
Display name: Eicon Networks USB ADSL Loader
Image path: System32\DRIVERS\gafwload.sys
Start: 2
Type: 1
Error Control: 1
Service (registry key): Gpc
Display name: Classificateur de paquets générique
Description: Classificateur de paquets générique
Image path: System32\DRIVERS\msgpc.sys
Image size: 33792
Image MD5: 13591E0A02E85DE2A388F3EC4BD206DF
Start: 3
Type: 1
Error Control: 1
Service (registry key): helpsvc
Display name: Aide et support
Description: Permet à l'application Aide et support de fonctionner sur cet ordinateur. Si ce service est arrêté, la fonctionnalité Aide et support ne sera pas disponible. S'il est désactivé, tous les services dépendant explicitement de ce service ne pourront pas démarrer.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Depends On services: RPCSS
Service (registry key): HidServ
Display name: HID Input Service
Description: Permet l'accès entrant générique aux périphériques d'interface utilisateur, qui activent et maintiennent l'utilisation des boutons actifs prédéfinis sur le clavier, les contrôles à distance, et d'autres périphériques multimédia. Si ce service est arrêté, les boutons actifs contrôlés par ce service ne fonctionneront pas. Si ce service est désactivé, tout service en dépendant explicitement ne démarrera pas.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Depends On services: RpcSs
Service (registry key): HidUsb
Display name: Pilote de classe HID Microsoft
Image path: System32\DRIVERS\hidusb.sys
Image size: 9600
Image MD5: 1DE6783B918F540149AA69943BDFEBA8
Start: 3
Type: 1
Error Control: 0
Service (registry key): hpn
Start: 4
Type: 1
Error Control: 1
Service (registry key): hpt3xx
Start: 4
Type: 1
Error Control: 1
Service (registry key): i2omgmt
Start: 1
Type: 1
Error Control: 1
Service (registry key): i2omp
Start: 4
Type: 1
Error Control: 1
Service (registry key): i8042prt
Display name: Pilote pour clavier i8042 et souris sur port PS/2
Image path: System32\DRIVERS\i8042prt.sys
Image size: 52608
Image MD5: 792E4B2D20A1967CF5B87990F9F7AD4E
Start: 1
Type: 1
Error Control: 1
Service (registry key): Imapi
Start: 1
Type: 1
Error Control: 0
Service (registry key): ImapiService
Display name: Service COM de gravage de CD IMAPI
Description: Gère le gravage des CD via l'interface série IMAPI (Image Mastering Applications Programming Interface). Si ce service est arrêté, cet ordinateur ne pourra plus enregistrer de CD. Si ce service est désactivé, les services qui en dépendent ne vont pas pouvoir démarrer.
Object name: LocalSystem
Image path: C:\WINDOWS\System32\imapi.exe
Image size: 118784
Image MD5: 409EF970372F4FD33EC69992846557D6
Start: 3
Type: 16
Error Control: 1
Service (registry key): inetaccs
Start: 0
Type: 0
Error Control: 0
Service (registry key): ini910u
Start: 4
Type: 1
Error Control: 1
Service (registry key): Inport
Start: 0
Type: 0
Error Control: 0
Service (registry key): IntelIde
Start: 4
Type: 1
Error Control: 1
Service (registry key): IpFilterDriver
Display name: Pilote de filtre de trafic IP
Description: Pilote de filtre de trafic IP
Image path: System32\DRIVERS\ipfltdrv.sys
Image size: 32896
Image MD5: 731F22BA402EE4B62748ADAF6363C182
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip
Service (registry key): IpInIp
Display name: Pilote de tunnelage IP dans IP
Description: Pilote de tunnelage IP dans IP
Image path: System32\DRIVERS\ipinip.sys
Image size: 19584
Image MD5: F56DD863BA732A4E8EE58D486C31250F
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip
Service (registry key): IpNat
Display name: Traducteur d'adresses réseau IP
Description: Traducteur d'adresses réseau IP
Image path: System32\DRIVERS\ipnat.sys
Image size: 76288
Image MD5: 561E2AEDE82CAE972D572C60D4E090BF
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip
Service (registry key): IPSec
Display name: Pilote IPSEC
Description: Pilote IPSEC
Image path: System32\DRIVERS\ipsec.sys
Image size: 56064
Image MD5: 87AD207BC4437F215508024559D72F30
Start: 1
Type: 1
Error Control: 1
Service (registry key): IRENUM
Display name: Service énumérateur IR
Image path: System32\DRIVERS\irenum.sys
Image size: 10496
Image MD5: B43201394646B7E98C89056EDDA686B5
Start: 3
Type: 1
Error Control: 1
Service (registry key): ISAPISearch
Start: 0
Type: 0
Error Control: 0
Service (registry key): isapnp
Display name: Pilote de bus Plug-and-Play ISA/EISA
Image path: System32\DRIVERS\isapnp.sys
Image size: 36224
Image MD5: 54632F1A7DE61DC3615D756F2A90FA72
Start: 0
Type: 1
Error Control: 3
Service (registry key): Kbdclass
Display name: Pilote de la classe Clavier
Image path: System32\DRIVERS\kbdclass.sys
Image size: 24064
Image MD5: 5A45795C098C1BDEB397C32C8C92BEC9
Start: 1
Type: 1
Error Control: 1
Service (registry key): kbdhid
Display name: Pilote HID de clavier
Image path: System32\DRIVERS\kbdhid.sys
Image size: 14080
Image MD5: 8E5BE87ACAB17764C034CB8E4B19742B
Start: 1
Type: 1
Error Control: 0
Service (registry key): kmixer
Display name: Mélangeur audio Wave de noyau Microsoft
Image path: system32\drivers\kmixer.sys
Image size: 159232
Image MD5: ECD42891ECC1CA80FCB849511D3DF186
Start: 3
Type: 1
Error Control: 1
Service (registry key): KSecDD
Start: 0
Type: 1
Error Control: 1
Service (registry key): lanmanserver
Display name: Serveur
Description: Prend en charge le partage de fichiers, d'impression et des canaux nommés via le réseau pour cet ordinateur. Si ce service est arrêté, ces fonctions ne seront pas disponibles. Si ce service est désactivé, les services qui en dépendent ne pourront pas démarrer.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Service (registry key): lanmanworkstation
Display name: Station de travail
Description: Crée et maintient des connexions de réseau client à des serveurs distants. Si ce service est arrêté, ces connexions ne seront pas disponibles. Si ce service est désactivé, les services qui en dépendent ne pourront pas démarrer.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Service (registry key): lbrtfdc
Start: 1
Type: 1
Error Control: 0
Service (registry key): ldap
Start: 0
Type: 0
Error Control: 0
Service (registry key): LicenseService
Start: 0
Type: 0
Error Control: 0
Service (registry key): LmHosts
Display name: Assistance TCP/IP NetBIOS
Description: Permet la prise en charge pour NetBIOS sur un service TCP/IP (NetBT) et la résolution des noms NetBIOS.
Object name: NT AUTHORITY\LocalService
Image path: %SystemRoot%\System32\svchost.exe -k LocalService
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Depends On services: NetBT,Afd
Service (registry key): Messenger
Display name: Affichage des messages
Description: Envoie et reçoit les messages des services d'alertes entre les clients et les serveurs. Ce service n'est pas lié à Windows Messenger. Si ce service est arrêté, les messages d'alertes ne seront pas transmis. Si ce service est désactivé, les services qui en dépendent ne pourront pas démarrer.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 4
Type: 32
Error Control: 1
Depends On services: LanmanWorkstation,NetBIOS,PlugPlay,RpcSS
Service (registry key): mnmdd
Start: 1
Type: 1
Error Control: 0
Service (registry key): mnmsrvc
Display name: Partage de Bureau à distance NetMeeting
Description: Permet aux personnes autorisées d'accéder à votre Bureau Windows en utilisant NetMeeting.
Object name: LocalSystem
Image path: C:\WINDOWS\System32\mnmsrvc.exe
Image size: 32768
Image MD5: 2C9008DEE1C905D0AE54AA18BC3BD5DB
Start: 3
Type: 272
Error Control: 1
Service (registry key): Modem
Start: 3
Type: 1
Error Control: 0
Service (registry key): Mouclass
Display name: Pilote de la classe Souris
Image path: System32\DRIVERS\mouclass.sys
Image size: 22656
Image MD5: 568966A71EF97C673336888EE7EBB869
Start: 1
Type: 1
Error Control: 1
Service (registry key): mouhid
Display name: Pilote HID de souris
Image path: System32\DRIVERS\mouhid.sys
Image size: 12288
Image MD5: 124D6846040C79B9C997F78EF4B2A4E5
Start: 3
Type: 1
Error Control: 0
Service (registry key): MountMgr
Start: 0
Type: 1
Error Control: 1
Service (registry key): mraid35x
Start: 4
Type: 1
Error Control: 1
Service (registry key): MRxDAV
Display name: Redirecteur client WebDav
Description: Redirecteur client WebDav
Image path: System32\DRIVERS\mrxdav.sys
Image size: 172672
Image MD5: D30CBA20CC355D3648B9FED5BB55A9D5
Start: 3
Type: 2
Error Control: 1
Service (registry key): MRxSmb
Display name: MRXSMB
Description: MRXSMB
Image path: System32\DRIVERS\mrxsmb.sys
Image size: 407680
Image MD5: A3AD34D36242E92C86B0C1BFBD131255
Start: 1
Type: 2
Error Control: 1
Service (registry key): MSDTC
Display name: Distributed Transaction Coordinator
Description: Coordonne les transactions qui comportent plusieurs gestionnaires de ressources, tels que des bases de données, des files d'attente de messages net des systèmes de fichiers. Si ce service est arrêté, ces transactions ne se produiront pas. S'il est désactivé, le démarrage de tout service qui en dépend explicitement échouera.
Object name: NT AUTHORITY\NetworkService
Image path: C:\WINDOWS\System32\msdtc.exe
Image size: 6144
Image MD5: EFB2948D32F4D1871D0646D1F32
-
-
Bosoir Régis,
je viens de faire tourner delreg.bat
De nouveau il fonctionne 1 fraction de seconde et c'est fini.
je pense qu'on va passer au plan B:
"Sinon bha on fera autrement ;-) "
A+ -
Contributeur sécuritéSalut
Il est ok !
Tu peux essayer de relancer delcmdservice?
Sinon bha on fera autrement ;-)
a+ -
Salut Régis,
Je pense que ça a fonctionné.
Voiçi le contenu de la clé:
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment
ComSpec REG_EXPAND_SZ %SystemRoot%\system32\cmd.exe
Path REG_EXPAND_SZ %SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Fichiers communs\Ulead Systems\MPEG
windir REG_EXPAND_SZ %SystemRoot%
OS REG_SZ Windows_NT
PROCESSOR_ARCHITECTURE REG_SZ x86
PROCESSOR_LEVEL REG_SZ 6
PROCESSOR_IDENTIFIER REG_SZ x86 Family 6 Model 10 Stepping 0, AuthenticAMD
PROCESSOR_REVISION REG_SZ 0a00
NUMBER_OF_PROCESSORS REG_SZ 1
PATHEXT REG_SZ .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
TEMP REG_EXPAND_SZ %SystemRoot%\TEMP
TMP REG_EXPAND_SZ %SystemRoot%\TEMP
J'attend tes directives, merci encore,
Benoit -
Contributeur sécuritéSalut bigben,
y a pas de soucis, on fait comme on peut, je sais, moi aussi parfois je galere lol
Ouvre ton bloc note et copie colle ceci:
C:\Windows\system32\reg.exe query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" /s >> look.txt
start notepad look.txt
Enregistrer sous le nom look.bat (selectionner le type: tous les fichiers au moment de sauvegarder).
Un rapport look.txt est créé et s'ouvre automatiquement, affichant le contenu de la clé.
Donne le moi.
A+ -
Salut,
Tout ce passe bien jusqu'au moment ou je dois taper :
cd C:\
cd FIXPATH2
(Attention aux espaces juste après cd)
entrer encore:
fixpath.exe
Une fois que j'ai tapé cmd ds executer, une fenetre noire s'ouvre où je tape ce que tu me dis mais ce n'est pas reconnu comme des commandes.
désolé d'être si nul mais fais ce que je peux. -
Contributeur sécuritéSalut,
On va essayer automatiquement:
Un fix a telecharger:
http://internet.cybermesa.com/~bstewart/files/fixpath2.zip
Dezipper le contenu de fixpath2.zip dans un répertoire sur C:\, par exemple: C:\FIXPATH2
Cliquer sur Démarrer, Executer et entrer cmd
Valider par entrée.
Dans la fenêtre de commande, entrer:
cd C:\
cd FIXPATH2
(Attention aux espaces juste après cd)
entrer encore:
fixpath.exe
Ceci va afficher un message d'information, cliquer Yes
Si les changements ont été effectués, il faudra redemarrer l'ordinateur pour tenir compte des modifications.
Relance le prog et dis moi si c est bon
a+ -
Salut,
Ca fait exactement la même chose!
1 fraction de seconde et ça disparaît!
A+ -
Contributeur sécuritéSalut
Oui retelecharge le, si ca fait pareil, dis le moi, je te ferais une petite modif afin qu il marche
a+ -
Contributeur sécuritéSalut
On va le faire via un programme:
Télécharge delcmdservice (par Marckie), et sauvegarde-le sur ton Bureau.
http://users.telenet.be/marcvn/tools/delcmdservice.zip
• En extraire (dézippe) le contenu sur ton Bureau (un dossier nommé delcmdservice)
• Double-clique sur le dossier delcmdservice
• Double-clique sur delreg.bat afin de lancer l'outil
• Redémarre ton PC lorsque l'outil aura complété son travail
• Suite au redémarrage, scan avec HijackThis! et colle le nouveau rapport, dans ta prochaine réponse -
Contributeur sécuritéSalut
Ouvre le bloc note et copie/colle ceci/(sans etoiles et avec regedit sur la 1ere ligne)
****
REGEDIT4
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService]
**
Puis enregistrer sous et dans:
Nom du fichier, met bureau.reg
Type : sélectionne "tous les fichiers"
clique sur enregistrer
Double clik dessu et accepte la fusion avec le registre
relance spybot et donne le rapport.
a+-
salut,
j'avoue 1 peu paniqueé à l'idée de chipoter ds les clés de registre.
Si je comprend bien je dois taper regedit ds executer et puis coller les clés ke tu m'as donner à l'endroit indiquer par ces clés!?!
Peux-tu me ré-expliquer + précisement la marche a suivre pour pas faire de conneries.
Merci
-
-
Contributeur sécuritéSalut
Relance le programme que je t ai fait telecharger en dernier.
Relance spybot, clik droit a la fin du scan, copie dans le presse papier
Vient dans un message et clik droit, coller
Le rapport de spybot doit s afficher
a+-
Salut,
voiçi ce que tu m'as demandé.j'espère que ça va marché.
A+,
Benoit
--- Search result list ---
Command Service: Réglages (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService
Command Service: Réglages (Clé du registre, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService
--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---
2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2006-07-02 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2006-02-06 advcheck.dll (1.0.2.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2006-02-20 Tools.dll (2.0.0.2)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2006-07-01 Includes\Cookies.sbi (*)
2006-07-01 Includes\Dialer.sbi (*)
2006-07-01 Includes\Hijackers.sbi (*)
2006-07-01 Includes\Keyloggers.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2006-07-01 Includes\Malware.sbi (*)
2006-07-01 Includes\PUPS.sbi (*)
2006-07-01 Includes\Revision.sbi (*)
2006-07-01 Includes\Security.sbi (*)
2006-07-01 Includes\Spybots.sbi (*)
2005-02-17 Includes\Tracks.uti
2006-07-01 Includes\Trojans.sbi (*)
--- System information ---
Windows XP (Build: 2600)
--- Startup entries list ---
Located: HK_LM:Run, KernelFaultCheck
command: %systemroot%\system32\dumprep 0 -k
file: C:\WINDOWS\system32\dumprep.exe
size: 30208
MD5: aeed3f03a5869d0774bf8c75be4ba7a0
Located: HK_LM:RunOnce, SpybotSnD
command: "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
file: C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
size: 4393096
MD5: 09ca174a605b480318731e691dc98539
Located: System.ini, crypt32chain
command: crypt32.dll
file: crypt32.dll
Located: System.ini, cryptnet
command: cryptnet.dll
file: cryptnet.dll
Located: System.ini, cscdll
command: cscdll.dll
file: cscdll.dll
Located: System.ini, fcyaw
command: C:\WINDOWS\System32\fcyaw.dll
file: C:\WINDOWS\System32\fcyaw.dll
size: 569396
MD5: 3ad210e08eb975ededd9717f3653ced2
Located: System.ini, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
Located: System.ini, Schedule
command: wlnotify.dll
file: wlnotify.dll
Located: System.ini, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
Located: System.ini, SensLogn
command: WlNotify.dll
file: WlNotify.dll
Located: System.ini, termsrv
command: wlnotify.dll
file: wlnotify.dll
Located: System.ini, winogk32
command: winogk32.dll
file: winogk32.dll
Located: System.ini, wlballoon
command: wlnotify.dll
file: wlnotify.dll
--- Browser helper object list ---
{4D552A7D-722C-4089-A9C4-EB9CEEFD8E8C} ()
BHO name:
CLSID name:
Path: C:\WINDOWS\System32\
Long name: fcyaw.dll
Short name:
Date (created): 25/06/2006 20:26:18
Date (last access): 6/07/2006 20:34:38
Date (last write): 25/06/2006 20:26:20
Filesize: 569396
Attributes: hidden sysfile
MD5: 3AD210E08EB975EDEDD9717F3653CED2
CRC32: B5336661
{B7BA4036-858C-D70F-F83C-8EEA1BC27394} ()
BHO name:
CLSID name:
--- ActiveX list ---
{E02BE351-096F-44E5-8F22-6020002AC366} (WRLauncher Class)
DPF name:
CLSID name: WRLauncher Class
Installer: C:\WINDOWS\Downloaded Program Files\AssimaAx.inf
Codebase: https://intranet.sodexho.be/assimaFR/assima.cab
Path: C:\WINDOWS\Downloaded Program Files\
Long name: AssimaAx.dll
Short name:
Date (created): 23/03/2005 12:10:22
Date (last access): 6/07/2006 20:38:40
Date (last write): 23/03/2005 12:10:22
Filesize: 126976
Attributes: archive
MD5: 1658DB4077D92301FBDADA430BAC4FB6
CRC32: 1E63BFDA
Version: 1.0.0.35
{FB90BA05-66E6-4C56-BCD3-D65B0F7EBA39} (Foto.com SpeedUploader 1.0 Control)
DPF name:
CLSID name: Foto.com SpeedUploader 1.0 Control
Installer: C:\WINDOWS\Downloaded Program Files\SpeedUploader.inf
Codebase: http://webalbum.foto.com/FUploader/SpeedUploader.cab
Path: C:\WINDOWS\Downloaded Program Files\
Long name: SpeedUploader.ocx
Short name: SPEEDU~1.OCX
Date (created): 30/06/2006 18:53:24
Date (last access): 6/07/2006 20:44:56
Date (last write): 30/06/2006 18:53:24
Filesize: 2025216
Attributes: archive
MD5: 2CC3695DE15BDA60A37E9AEED1FC7B6F
CRC32: 5F28723C
Version: 3.6.23.0
--- Process list ---
PID: 0 ( 0) [System]
PID: 608 ( 4) \SystemRoot\System32\smss.exe
PID: 680 ( 608) \??\C:\WINDOWS\system32\winlogon.exe
PID: 724 ( 680) C:\WINDOWS\system32\services.exe
size: 101888
MD5: FC0691097471EE374907E1024EDCBD43
PID: 744 ( 680) C:\WINDOWS\system32\lsass.exe
size: 11776
MD5: 2C2431B30A629123C1757582C9D93F38
PID: 916 ( 724) C:\WINDOWS\system32\svchost.exe
size: 12800
MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
PID: 940 ( 724) C:\WINDOWS\System32\svchost.exe
size: 12800
MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
PID: 1268 (1236) C:\WINDOWS\Explorer.EXE
size: 1005056
MD5: 9E20A8EF0CA524446AFEE29F4423CC8F
PID: 1368 ( 724) C:\WINDOWS\system32\spoolsv.exe
size: 51200
MD5: B1CE5287F096895D9BE26EB86F4D5FAF
PID: 1524 ( 724) C:\Program Files\ewido anti-malware\ewidoctrl.exe
size: 13888
MD5: 26830B750372AB1BF29C95DEEBEB802F
PID: 1624 ( 724) C:\WINDOWS\System32\svchost.exe
size: 12800
MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
PID: 240 (1268) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
size: 4393096
MD5: 09CA174A605B480318731E691DC98539
PID: 4 ( 0) System
PID: 656 ( 608) csrss.exe
PID: 1096 ( 724) svchost.exe
PID: 1148 ( 724) svchost.exe
PID: 1672 ( 724) wdfmgr.exe
PID: 644 (1268) C:\Program Files\Internet Explorer\iexplore.exe
size: 91136
MD5: 77D9CB6DBC2CACB6E2779240548BEC10
--- Browser start & search pages list ---
Spybot - Search & Destroy browser pages report, 6/07/2006 20:58:12
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
C:\WINDOWS\System32\blank.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
https://www.bing.com/?toHttps=1&redig=17DBE7D168544FA98200E890A8051984
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
https://be.yahoo.com/
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
https://www.bing.com/?toHttps=1&redig=17DBE7D168544FA98200E890A8051984
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\SearchAssistant Explorer\Main\Default_Search_URL
about:blank
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\@
http://search.yahoo.com/search?p=%s
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
%SystemRoot%\system32\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
https://www.bing.com/?toHttps=1&redig=17DBE7D168544FA98200E890A8051984
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
about:blank
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant
https://www.bing.com/?toHttps=1&redig=17DBE7D168544FA98200E890A8051984
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm
--- Winsock Layered Service Provider list ---
--- Uninstall list ---
Ad-Aware SE Personal 1.06 (Ad-Aware SE Personal)
uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~2\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~2\INSTALL.LOG
publisher: Lavasoft
help link: https://www.adaware.com/
(AddressBook)
Adobe Acrobat 4.0 4.0 (Adobe Acrobat 4.0)
version (major): 4
install location: C:\Program Files\Adobe\Acrobat 4.0
install source: C:\Documents and Settings\Benoît\Local Settings\Temp\pftAB~tmp\
uninstall cmd: C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.dll"
publisher: Adobe Systems, Inc.
help link: https://acrobat.adobe.com/us/en/acrobat.html
(Branding)
CCleaner (remove only) (CCleaner)
uninstall cmd: "C:\Program Files\CCleaner\uninst.exe"
CleanUp! (CleanUp!)
uninstall cmd: C:\Program Files\CleanUp!\uninstall.exe
CloneDVD2 (CloneDVD2)
install location: C:\Program Files\Elaborate Bytes\CloneDVD2
uninstall cmd: "C:\Program Files\Elaborate Bytes\CloneDVD2\CloneDVD2-uninst.exe" /D="C:\Program Files\Elaborate Bytes\CloneDVD2"
publisher: Elaborate Bytes
(Connection Manager)
Cowabanga by OIN (Cowabanga)
uninstall cmd: C:\Program Files\Cowabanga\uninstaller.exe
(DirectAnimation)
(DirectDrawEx)
DVD Shrink 3.2 (DVD Shrink_is1)
install location: C:\Program Files\DVD Shrink\
uninstall cmd: "C:\Program Files\DVD Shrink\unins000.exe"
publisher: DVD Shrink
help link: http://www.dvdshrink.org
ewido anti-malware (ewidoantimalware)
install location: C:\Program Files\ewido anti-malware
uninstall cmd: C:\Program Files\ewido anti-malware\Uninstall.exe
publisher: ewido networks
help link: https://www.avg.com/en-us/free-antivirus-download
(F-Secure Anti-Spyware)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware"
(F-Secure Anti-Spyware Scanner)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware Scanner"
(F-Secure Anti-Virus)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus"
(F-Secure Anti-Virus Client Security Installer)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus Client Security Installer"
(F-Secure DAAS)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure DAAS"
(F-Secure Diagnostics)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Diagnostics"
(F-Secure E-mail Scanning)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure E-mail Scanning"
(F-Secure FWES)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure FWES"
(F-Secure GUI)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure GUI"
(F-Secure Help)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Help"
(F-Secure Management Agent)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure Management Agent"
(F-Secure TNB)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"F-Secure TNB"
(Fontcore)
HijackThis 1.99.1 1.99.1 (HijackThis)
uninstall cmd: C:\Program Files\Software internet\HijackThis.exe /uninstall
publisher: Soeperman Enterprises Ltd.
HP Imaging Device Functions 5.0 5.0 (HP Imaging Device Functions)
uninstall cmd: C:\Program Files\HP\Digital Imaging\DigitalImagingMonitor\hpzscr01.exe -datfile hpqbud01.dat
publisher: HP
help link: https://support.hp.com/us-en?openCLC=true
HP Solution Center & Imaging Support Tools 5.0 5.0 (HP Solution Center & Imaging Support Tools)
uninstall cmd: C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
publisher: HP
help link: https://support.hp.com/us-en?openCLC=true
(ICW)
(IE40)
(IE4Data)
(IE5BAKEX)
(IEData)
Kazaa Lite K++ v2.4.3 2.4.3 (kazaalite202_is1)
uninstall cmd: "C:\Program Files\Kazaa Lite K++\unins000.exe"
publisher: Kazaa Lite K++
Lapin Malin Maternelle 2 + Atelier de dessin & de musique (Lapin Malin Maternelle 2 + Atelier de dessin & de musique)
uninstall cmd: C:\Program Files\Mindscape\Lapin Malin Maternelle 2 + Atelier de dessin & de musique\uninstall.exe
(Microsoft NetShow Player 2.0)
(MobileOptionPack)
(MPlayer2)
(MsJavaVM)
Multi Virus Cleaner 2006 (Multi Virus Cleaner 2006_is1)
install location: C:\Program Files\AxBx\Multi Virus Cleaner 2006\
uninstall cmd: "C:\Program Files\AxBx\Multi Virus Cleaner 2006\unins000.exe"
publisher: AxBx
help link: http://www.viruskeeper.com/fr/mvc.htm
Ahead Nero Burning ROM (Nero - Burning Rom!UninstallKey)
uninstall cmd: C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
(NetMeeting)
(News Service)
uninstall cmd: "C:\Program Files\F-Secure Internet Security\fsuninst.exe" /UninstRegKey:"News Service"
NVIDIA Drivers (NVIDIA Drivers)
uninstall cmd: C:\WINDOWS\System32\nvudisp.exe UninstallGUI
(OutlookExpress)
(PCHealth)
uninstall cmd: rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Perfect DVD Duplication 3.0 (Perfect DVD Duplication_is1)
uninstall cmd: "C:\Program Files\Perfect DVD Duplication\unins000.exe"
publisher: Perfect DVD Duplication
help link: http://www.dvdduplication.ws
PhotoFiltre (PhotoFiltre)
uninstall cmd: "C:\Program Files\PhotoFiltre\Uninst.exe"
QuickTime (QuickTime)
uninstall cmd: C:\WINDOWS\unvise32qt.exe C:\WINDOWS\System32\QuickTime\Uninstall.log
RealPlayer Basic (RealPlayer 6.0)
uninstall cmd: C:\Program Files\Fichiers communs\Real\Update\\rnuninst.exe RealNetworks|RealPlayer|6.0
(SchedulingAgent)
Macromedia Flash Player 8 8 (ShockwaveFlash)
uninstall cmd: RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\swflash.inf,DefaultUninstall,5
publisher: Macromedia
help link: https://helpx.adobe.com/flash-player.html
Spybot - Search & Destroy 1.4 1.4 (Spybot - Search & Destroy_is1)
install location: C:\Program Files\Spybot - Search & Destroy\
uninstall cmd: "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
publisher: Safer Networking Limited
VIA Audio Driver Setup Program (VIA Audio Driver Setup Program)
uninstall cmd: RunDll32.exe UnAudioNT.dll,UninstallAudio C:\WINDOWS\IsUninst.exe -f"C:\PROGRA~1\VIATEC~1\VIAAUD~1/Uninst.isu"
Voissa Anonymo 2.0 (Voissa Anonymo 2_is1)
uninstall cmd: "C:\Program Files\Voissa anonymo\unins000.exe"
publisher: Cedrat Net
help link: http://www.voissa.com
Windows Media Format Runtime (Windows Media Format Runtime)
uninstall cmd: "C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Lecteur Windows Media 10 (Windows Media Player)
uninstall cmd: "C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Archiveur WinRAR (WinRAR archiver)
uninstall cmd: C:\Program Files\WinRAR\uninstall.exe
WinZip 9.0 SR-1 (6224f) (WinZip)
version (major): 9
install location: C:\PROGRA~1\WINZIP\
uninstall cmd: "C:\Program Files\WinZip\WINZIP32.EXE" /uninstall
publisher: WinZip Computing, Inc.
help link: https://www.winzip.com/win/en/xsupport.html
Yahoo! Toolbar (Yahoo! Companion)
uninstall cmd: C:\PROGRA~1\Yahoo!\Common\unyt.exe
Yahoo! Toolbar (Yahoo! Toolbar)
Zuma Deluxe 1.0 (Zuma Deluxe 1.0)
uninstall cmd: C:\Program Files\PopCap Games\Zuma Deluxe\PopUninstall.exe "C:\Program Files\PopCap Games\Zuma Deluxe\Install.log"
Macromedia Flash Player 7.0.19.0 ({0456ebd7-5f67-4ab6-852e-63781e3f389c})
version: 117440531
version (major): 7
estimated size: 1026
install date: 20051008
install source: C:\DOCUME~1\BENOT~1\LOCALS~1\Temp\{B5DC4618-C04D-4683-891E-B2CF5AE77114}\{1E2F8AE3-3437-44E6-BB75-E95751D6B83F}\
uninstall cmd: MsiExec.exe /X{0456ebd7-5f67-4ab6-852e-63781e3f389c}
publisher: Macromedia, Inc.
Je chante et je joue avec Lapin Malin ({075429DA-47AF-43F1-B889-91BAD1942442})
uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{075429DA-47AF-43F1-B889-91BAD1942442}\setup.exe"
HP Software Update 3.0.5.001 ({15EE79F4-4ED1-4267-9B0F-351009325D7D})
version: 50331653
version (major): 3
estimated size: 3861
install date: 20060420
install source: D:\setup\HPSoftwareUpdate\
uninstall cmd: MsiExec.exe /X{15EE79F4-4ED1-4267-9B0F-351009325D7D}
publisher: Hewlett-Packard
contact: https://support.hp.com/us-en?openCLC=true
AutoUpdate 1.1 ({18D10072035C4515918F7E37EAFAACFC})
install location: C:\Program Files\DivX
Ulead VideoStudio 5.0 DV 5.00.0004 ({27113CA3-36B8-48AB-A419-79CF1FC0ECED})
version: 83886084
version (major): 5
estimated size: 146030
install date: 20051102
install source: D:\Setup\C\E\F\G\I\J\K\P\S\SC\
publisher: Ulead Systems, Inc.
help link: https://www.videostudiopro.com/fr/
help telephone: +1-310-869-6391
readme: https://www.videostudiopro.com/en/?utm_source=ulead&utm_medium=redirect&utm_term=/vs/new.htm&utm_campaign=ulead
HP Deskjet 3900 series 5.0 ({3819891A-030B-4a4e-98ED-B28A649E48AB})
uninstall cmd: C:\Program Files\HP\Digital Imaging\{3819891A-030B-4a4e-98ED-B28A649E48AB}\setup\hpzscr01.exe -datfile hpfscr05.dat
publisher: HP
help link: https://support.hp.com/us-en?openCLC=true
HPDeskjet3900Series 1.00.0000 ({42F6BED9-41DD-40F1-85A8-8E0350493626})
version: 16777216
version (major): 1
estimated size: 20689
install date: 20060420
install source: D:\setup\DeskjetSoftware\
publisher: Hewlett-Packard
Sony USB Driver ({5C29CB8B-AC1E-4114-8D68-9CD080140D4A})
uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}\Setup.exe" UNINSTALL
ArcSoft VideoImpression 2 ({6762AB61-2BE9-45D8-B9F2-24014324CD35})
version (major): 2
install location: C:\Program Files\ArcSoft\VideoImpression 2
uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6762AB61-2BE9-45D8-B9F2-24014324CD35}\setup.exe" -l0x40c
publisher: ArcSoft
DivX Player 6.0 ({8ADFC4160D694100B5B8A22DE9DCABD9})
install location: C:\Program Files\DivX
uninstall cmd: C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
publisher: DivXNetworks, Inc.
Microsoft Office XP Professional avec FrontPage 10.0.4330.0 ({9028040C-6000-11D3-8CFE-0050048383C9})
version: 167776490
version (major): 10
estimated size: 156823
install date: 20050707
install location: INSTALLLOCATION
install source: D:\
uninstall cmd: MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us
readme: C:\Program Files\Microsoft Office\Office10\1036\OFREAD10.HTM
DiMAGE Viewer ({976EA7B1-7562-483D-88DA-4323D263B7CD})
uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{976EA7B1-7562-483D-88DA-4323D263B7CD}\Setup.exe" -l0x40c anything
Ulead DVD PictureShow 2 Trial 2.00.1300 ({A9212616-FCA2-4173-BD99-5C741EB3A068})
version: 33555732
version (major): 2
install location: C:\Program Files\Ulead Systems\Ulead DVD PictureShow 2 Trial
uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A9212616-FCA2-4173-BD99-5C741EB3A068}\Setup.exe" -l0x9
publisher: Ulead Systems, Inc.
Adobe Reader 6.0.1 - Français 006.000.001 ({AC76BA86-7AD7-1036-7B44-A00000000001})
version: 100663297
version (major): 6
estimated size: 53970
install date: 20050707
install location: C:\Program Files\Adobe\Acrobat 6.0\Reader\
install source: C:\WINDOWS\Cache\Adobe Reader 6.0.1\FRABIG\
uninstall cmd: MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A00000000001}
publisher: Adobe Systems Incorporated
comments:
contact: Service support clientèle
help link: https://helpx.adobe.com/support.html
help telephone:
readme: C:\Program Files\Adobe\Acrobat 6.0\Reader\Readme.htm
Microsoft .NET Framework 1.1 1.1.4322 ({CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1})
version: 16847074
version (major): 1
version (minor): 1
estimated size: 37963
install date: 20051013
install source: C:\DOCUME~1\BENOT~1\LOCALS~1\Temp\is-MGUQN.tmp\dotnetfx\
uninstall cmd: MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
publisher: Microsoft
readme: file://C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\RepairRedist.htm
SpeedTouch USB Software ({D41FAAA9-8048-4906-86B2-9AADEA1FA0B7})
uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D41FAAA9-8048-4906-86B2-9AADEA1FA0B7}\setup.exe" /l040c -Control_Panel
HPProductAssistant 53.0.13.000 ({E3F90083-80D4-4b5a-87C7-E97E12F5516D})
version: 889192461
version (major): 53
estimated size: 3247
install date: 20060420
install source: D:\setup\hpproductassistant\
publisher: Hewlett-Packard
SolutionCenter 50.0.152.000 ({EA103B64-C0E4-4C0E-A506-751590E1653D})
version: 838860952
version (major): 50
estimated size: 8865
install date: 20060420
install source: D:\setup\SolutionCenter\
publisher: Hewlett-Packard
HP Image Zone Express 1.5.1.29 ({FE64AE29-0883-4C70-8388-DC026019C900})
version: 17104897
version (major): 1
version (minor): 5
estimated size: 9578
install date: 20060420
install location: C:\Program Files\HP\
install source: D:\setup\ImageZoneExpress\
uninstall cmd: MsiExec.exe /X{FE64AE29-0883-4C70-8388-DC026019C900}
publisher: Hewlett-Packard
help link: https://www8.hp.com/fr/fr/home.html
--- System Services ---
Service (registry key): .NET CLR Data
Start: 0
Type: 0
Error Control: 0
Service (registry key): .NET CLR Networking
Start: 0
Type: 0
Error Control: 0
Service (registry key): .NETFramework
Start: 0
Type: 0
Error Control: 0
Service (registry key): 61883
Display name: Pilote d'unité 61883
Image path: System32\DRIVERS\61883.sys
Image size: 45952
Image MD5: 5BEE618443DE08BAE98047D631ED3872
Start: 3
Type: 1
Error Control: 1
Service (registry key): Abiosdsk
Start: 4
Type: 1
Error Control: 0
Service (registry key): abp480n5
Start: 4
Type: 1
Error Control: 1
Service (registry key): ACPI
Display name: Pilote ACPI Microsoft
Image path: System32\DRIVERS\ACPI.sys
Image size: 180096
Image MD5: 34128BB2AB7BD69C72017BE7FCF8BE34
Start: 0
Type: 1
Error Control: 1
Service (registry key): ACPIEC
Start: 4
Type: 1
Error Control: 1
Service (registry key): adpu160m
Start: 4
Type: 1
Error Control: 1
Service (registry key): aec
Display name: Suppresseur d'écho acoustique (Noyau Microsoft)
Image path: system32\drivers\aec.sys
Image size: 122472
Image MD5: B45A744CA0A15A59D8B0307CE9741E92
Start: 3
Type: 1
Error Control: 1
Service (registry key): AFD
Display name: Environnement de prise en charge de réseau AFD
Image path: \SystemRoot\System32\drivers\afd.sys
Start: 2
Type: 1
Error Control: 1
Service (registry key): Aha154x
Start: 4
Type: 1
Error Control: 1
Service (registry key): aic78u2
Start: 4
Type: 1
Error Control: 1
Service (registry key): aic78xx
Start: 4
Type: 1
Error Control: 1
Service (registry key): alcan5wn
Display name: Alcatel SpeedTouch USB ADSL PPP Networking Driver (NDISWAN)
Image path: System32\DRIVERS\alcan5wn.sys
Image size: 53600
Image MD5: 0940030D5A5869067CCC03E3B0B8DEC7
Start: 3
Type: 1
Error Control: 1
Service (registry key): alcaudsl
Display name: SpeedTouch ADSL Modem ATM Transport
Image path: System32\DRIVERS\alcaudsl.sys
Image size: 70688
Image MD5: 4C9577888C53243E2991456F510488A1
Start: 3
Type: 1
Error Control: 1
Service (registry key): Alerter
Display name: Avertissement
Description: Informe les utilisateurs et les ordinateurs sélectionnés des alertes administratives. Si ce service est arrêté, les programmes qui utilisent les alertes administratives ne les recevront pas. Si ce service est désactivé, les services qui en dépendent ne pourront pas démarrer.
Object name: NT AUTHORITY\LocalService
Image path: %SystemRoot%\System32\svchost.exe -k LocalService
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 3
Type: 32
Error Control: 1
Depends On services: LanmanWorkstation
Service (registry key): ALG
Display name: Service de la passerelle de la couche Application
Description: Fournit la prise en charge des plugins de protocoles tiers pour le partage de connexion Internet et le pare-feu Internet.
Object name: NT AUTHORITY\LocalService
Image path: %SystemRoot%\System32\alg.exe
Image size: 40960
Image MD5: 55D226818B6C3D99741432D37657BA73
Start: 3
Type: 16
Error Control: 1
Service (registry key): AliIde
Start: 4
Type: 1
Error Control: 1
Service (registry key): amsint
Start: 4
Type: 1
Error Control: 1
Service (registry key): AppMgmt
Display name: Gestion d'applications
Description: Fournit des services d'installation de logiciels tels que Attribuer, Publier et Supprimer.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 3
Type: 32
Error Control: 1
Service (registry key): Arp1394
Display name: Protocole client ARP 1394
Description: Protocole client ARP 1394
Image path: System32\DRIVERS\arp1394.sys
Image size: 54016
Image MD5: BAC00074336440DD961F4AB86D81B118
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip
Service (registry key): asc
Start: 4
Type: 1
Error Control: 1
Service (registry key): asc3350p
Start: 4
Type: 1
Error Control: 1
Service (registry key): asc3550
Start: 4
Type: 1
Error Control: 1
Service (registry key): asn.exe
Display name: ASN Service
Description: ASN Service
Object name: LocalSystem
Image path: "C:\WINDOWS\asn.exe"
Start: 2
Type: 272
Error Control: 0
Service (registry key): ASP.NET
Start: 0
Type: 0
Error Control: 0
Service (registry key): ASP.NET_1.1.4322
Start: 0
Type: 0
Error Control: 0
Service (registry key): Aspi32
Start: 2
Type: 1
Error Control: 1
Service (registry key): aspnet_state
Display name: ASP.NET State Service
Description: Provides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start.
Object name: NT AUTHORITY\NetworkService
Image path: %SystemRoot%\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
Image size: 32768
Image MD5: A986FCFDAC587E68478DB51547B90800
Start: 3
Type: 16
Error Control: 1
Service (registry key): AsyncMac
Display name: Pilote de média asynchrone RAS
Description: Pilote de média asynchrone RAS
Image path: System32\DRIVERS\asyncmac.sys
Image size: 13568
Image MD5: 03F403B07A884FC2AA54A0916C410931
Start: 3
Type: 1
Error Control: 1
Service (registry key): atapi
Display name: Contrôleur de disque dur IDE/ESDI standard
Image path: System32\DRIVERS\atapi.sys
Image size: 86656
Image MD5: A64013E98426E1877CB653685C5C0009
Start: 0
Type: 1
Error Control: 1
Service (registry key): Atdisk
Start: 4
Type: 1
Error Control: 0
Service (registry key): Atmarpc
Display name: Protocole client ATM ARP
Description: Protocole client ATM ARP
Image path: System32\DRIVERS\atmarpc.sys
Image size: 57216
Image MD5: 8D735CA1CBDB0081B0E3B9FF0EB222D0
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip
Service (registry key): AudioSrv
Display name: Audio Windows
Description: Gère les périphériques audio pour les programmes basés sur Windows. Si ce service est arrêté, les périphériques et les effets audio ne fonctionneront pas correctement. Si ce service est désactivé, les services en dépendant explicitement ne démarreront pas.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Depends On services: PlugPlay,RpcSs
Service (registry key): audstub
Display name: Pilote audio Stub
Image path: System32\DRIVERS\audstub.sys
Image size: 3072
Image MD5: D9F724AA26C010A217C97606B160ED68
Start: 3
Type: 1
Error Control: 1
Service (registry key): Avc
Display name: Périphérique AVC
Image path: System32\DRIVERS\avc.sys
Image size: 35584
Image MD5: 991BD56AA395E53B8B81FB70036FFBDD
Start: 3
Type: 1
Error Control: 1
Service (registry key): Avg7RsW
Start: 0
Type: 0
Error Control: 0
Service (registry key): Avg7RsXP
Start: 0
Type: 0
Error Control: 0
Service (registry key): Avg7UpdSvc
Start: 0
Type: 0
Error Control: 0
Service (registry key): AVGEMS
Start: 0
Type: 0
Error Control: 0
Service (registry key): AvgTdi
Start: 0
Type: 0
Error Control: 0
Service (registry key): BackWeb Plug-in - 4476822
Display name: F-Secure 2006
Object name: LocalSystem
Image path: C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
Start: 2
Type: 272
Error Control: 1
Depends On services: RPCSS
Service (registry key): BattC
Start: 0
Type: 0
Error Control: 0
Service (registry key): Beep
Start: 1
Type: 1
Error Control: 1
Service (registry key): BITS
Display name: Service de transfert intelligent en arrière-plan
Description: Utilise la bande passante réseau inactive pour transférer des données.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 3
Type: 32
Error Control: 1
Depends On services: LanmanWorkstation,RpcSs
Service (registry key): Browser
Display name: Explorateur d'ordinateur
Description: Tient à jour une liste des ordinateurs présents sur le réseau et fournit cette liste aux ordinateurs désignés comme navigateurs. Si ce service est arrêté, la liste ne sera pas mise ou tenue à jour. Si ce service est désactivé, les services qui en dépendent ne pourront pas démarrer.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Depends On services: LanmanWorkstation,LanmanServer
Service (registry key): cbidf2k
Start: 4
Type: 1
Error Control: 1
Service (registry key): CCDECODE
Display name: Closed Caption Decoder
Image path: System32\DRIVERS\CCDECODE.sys
Image size: 16384
Image MD5: FDC06E2ADA8C468EBB161624E03976CF
Start: 3
Type: 1
Error Control: 1
Service (registry key): cd20xrnt
Start: 4
Type: 1
Error Control: 1
Service (registry key): Cdaudio
Start: 1
Type: 1
Error Control: 0
Service (registry key): Cdfs
Start: 4
Type: 2
Error Control: 1
Depends On group: "SCSI CDROM Class"
Service (registry key): cdrbsdrv
Start: 1
Type: 1
Error Control: 0
Service (registry key): Cdrom
Display name: Pilote de CD-ROM
Image path: System32\DRIVERS\cdrom.sys
Image size: 47488
Image MD5: CB762E814F602229A574F4D78D3D6A30
Start: 1
Type: 1
Error Control: 1
Depends On group: "SCSI miniport"
Service (registry key): Changer
Start: 1
Type: 1
Error Control: 0
Service (registry key): cisvc
Display name: Service d'indexation
Description: Construit un index des contenus et des propriétés des fichiers sur les ordinateurs locaux et distants ; fournit un accès rapide aux fichiers par le biais d'un langage d'interrogation flexible.
Object name: LocalSystem
Image path: C:\WINDOWS\System32\cisvc.exe
Image size: 5120
Image MD5: 7901AF03767C140467671C7CEEB2C3FE
Start: 3
Type: 32
Error Control: 1
Depends On services: RPCSS
Service (registry key): ClipSrv
Display name: Gestionnaire de l'Album
Description: Active le Gestionnaire de l'Album afin de stocker les informations et les partager avec des ordinateurs à distance. Si le service est arrêté, le Gestionnaire de l'Album ne pourra pas partager les informations avec des ordinateurs à distance. Si ce service est désactivé, tout service en dépendant explicitement ne démarrera pas.
Object name: LocalSystem
Image path: %SystemRoot%\system32\clipsrv.exe
Image size: 30720
Image MD5: 3D1AAB2963FABCAFEB507B5C9D67BFBC
Start: 3
Type: 16
Error Control: 1
Depends On services: NetDDE
Service (registry key): CmdIde
Start: 4
Type: 1
Error Control: 1
Service (registry key): cmdService
Start: 0
Type: 0
Error Control: 0
Service (registry key): COMSysApp
Display name: Application système COM+
Description: Gère la configuration et le suivi des composants de base COM+ (Component Object Model) . Si le service est arrêté, la plupart des composants de base COM+ ne fonctionneront pas correctement. Si ce service est désactivé, les services qui en dépendent de manière explicite ne pourront pas démarrer.
Object name: LocalSystem
Image path: C:\WINDOWS\System32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
Image size: 4608
Image MD5: 17681E6109A67F3AEA66AD6AAE2434E6
Start: 3
Type: 16
Error Control: 1
Depends On services: rpcss
Service (registry key): ContentFilter
Start: 0
Type: 0
Error Control: 0
Service (registry key): ContentIndex
Start: 0
Type: 0
Error Control: 0
Service (registry key): Cpqarray
Start: 4
Type: 1
Error Control: 1
Service (registry key): CryptSvc
Display name: Services de cryptographie
Description: Fournit trois services de gestion : le service de base de données de catalogue, qui confirme la signature des fichiers Windows; le service de racine protégée, qui ajoute et supprime des certificats d'autorité de certification de racine approuvés et le service Clé, qui fournit une aide dans l'inscription de cet ordinateur pour les certificats. Si ce service est arrêté, ces services de gestion ne fonctionneront pas correctement. Si ce service est désactivé, tout service en dépendant explicitement ne démarrera pas.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Depends On services: RpcSs
Service (registry key): dac2w2k
Start: 4
Type: 1
Error Control: 0
Service (registry key): dac960nt
Start: 4
Type: 1
Error Control: 1
Service (registry key): Dhcp
Display name: Client DHCP
Description: Gère la configuration réseau en inscrivant et en mettant à jour les adresses IP et les noms DNS.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Depends On services: Tcpip,Afd,NetBT
Service (registry key): Disk
Display name: Pilote de disque
Image path: System32\DRIVERS\disk.sys
Image size: 33664
Image MD5: 43A10CD19D648E57ED039A6CAA667A56
Start: 0
Type: 1
Error Control: 1
Depends On group: "SCSI miniport"
Service (registry key): dmadmin
Display name: Service d'administration du Gestionnaire de disque logique
Description: Configure les lecteurs de disque durs et les volumes. Le service ne s'exécute que pour les processus de configurations puis s'arrête.
Object name: LocalSystem
Image path: %SystemRoot%\System32\dmadmin.exe /com
Image size: 205312
Image MD5: F03B6377293A2CA253E02366B6F817D3
Start: 3
Type: 32
Error Control: 1
Depends On services: RpcSs,PlugPlay,DmServer
Service (registry key): dmboot
Image path: System32\drivers\dmboot.sys
Image size: 781440
Image MD5: 625043857173294DF9239909FC37CCD1
Start: 4
Type: 1
Error Control: 1
Service (registry key): dmio
Display name: Pilote de Gestionnaire de disque logique
Image path: System32\drivers\dmio.sys
Image size: 147456
Image MD5: C85A01B45E107B2D80A1263B365E62B5
Start: 0
Type: 1
Error Control: 1
Service (registry key): dmload
Image path: System32\drivers\dmload.sys
Image size: 5888
Image MD5: E9317282A63CA4D188C0DF5E09C6AC5F
Start: 0
Type: 1
Error Control: 1
Service (registry key): dmserver
Display name: Gestionnaire de disque logique
Description: Détecte et analyse de nouveaux lecteurs de disque durs et envoie les informations de volume de disque au service gestionnaire administratif de disque logique pour la configuration. Si ce service est arrêté, l'état des disques dynamiques et les informations de configuration peuvent devenir obsolètes. Si ce service est désactivé, tout service en dépendant explicitement ne démarrera pas.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Depends On services: RpcSs,PlugPlay
Service (registry key): DMusic
Display name: Synthétiseur DLS du noyau Microsoft
Image path: system32\drivers\DMusic.sys
Image size: 50048
Image MD5: EF05974D47D56FA8387F170F05BAE5E7
Start: 3
Type: 1
Error Control: 1
Service (registry key): Dnscache
Display name: Client DNS
Description: Résout et met en cache les noms DNS pour cet ordinateur. Si ce service est arrêté, l'ordinateur ne pourra pas résoudre les noms DNS et trouver les contrôleurs de domaine Active Directory. Si ce service est désactivé, les services qui en dépendent ne pourront pas démarrer.
Object name: NT AUTHORITY\NetworkService
Image path: %SystemRoot%\System32\svchost.exe -k NetworkService
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Depends On services: Tcpip
Service (registry key): dpti2o
Start: 4
Type: 1
Error Control: 1
Service (registry key): drmkaud
Display name: Filtre de décodeur DRM (Noyau Microsoft)
Image path: system32\drivers\drmkaud.sys
Image size: 2816
Image MD5: AA94E0CBD79DB63100D0EAE061EB69BC
Start: 3
Type: 1
Error Control: 1
Service (registry key): ElbyCDIO
Display name: ElbyCDIO Driver
Image path: System32\Drivers\ElbyCDIO.sys
Image size: 10624
Image MD5: 084A13F18856D610D44D3109A9D2ACDE
Start: 2
Type: 1
Error Control: 1
Service (registry key): ElbyDelay
Display name: ElbyDelay
Image path: System32\Drivers\ElbyDelay.sys
Image size: 4608
Image MD5: DF9957DB3BFE5136AAD3C2C101806C98
Start: 3
Type: 1
Error Control: 1
Service (registry key): ERSvc
Display name: Service de rapport d'erreurs
Description: Active le rapport d'erreurs pour les services et les applications s'exécutant sur des environnements non standard.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 0
Depends On services: RpcSs
Service (registry key): Eventlog
Display name: Journal des événements
Description: Active les messages d'événements émis par les programmes fonctionnant sous Windows et les composants devant être affichés dans l'observateur d'événements. Ce service ne peut être arrêté.
Object name: LocalSystem
Image path: %SystemRoot%\system32\services.exe
Image size: 101888
Image MD5: FC0691097471EE374907E1024EDCBD43
Start: 2
Type: 32
Error Control: 1
Service (registry key): EventSystem
Display name: Système d'événements de COM+
Description: Prend en charge le service de notification d'événements système (SENS, System Event Notification Service), qui fournit une distribution automatique d'événements aux composants COM (Component Object Model) abonnés. Si le service est arrêté, SENS sera fermé et ne pourra fournir des informations d'ouverture et de fermeture de session. Si ce service est désactivé, le démarrage de tout service qui en dépend explicitement échouera.
Object name: LocalSystem
Image path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 3
Type: 32
Error Control: 1
Depends On services: RPCSS
Service (registry key): ewido security suite control
Display name: ewido security suite control
Object name: LocalSystem
Image path: C:\Program Files\ewido anti-malware\ewidoctrl.exe
Image size: 13888
Image MD5: 26830B750372AB1BF29C95DEEBEB802F
Start: 2
Type: 272
Error Control: 0
Service (registry key): ewido security suite driver
Display name: ewido security suite driver
Image path: \??\C:\Program Files\ewido anti-malware\guard.sys
Image size: 3072
Image MD5: 2FF233E31AEFFF332F187E8E2ABFA6C5
Start: 1
Type: 1
Error Control: 0
Service (registry key): ewido security suite guard
Display name: ewido security suite guard
Object name: LocalSystem
Image path: C:\Program Files\ewido anti-malware\ewidoguard.exe
Image size: 151616
Image MD5: 34A50717AD686900F078F5208F8E908E
Start: 4
Type: 272
Error Control: 0
Service (registry key): Fastfat
Start: 4
Type: 2
Error Control: 1
Service (registry key): FastUserSwitchingCompatibility
Display name: Compatibilité avec le Changement rapide d'utilisateur
Description: Fournit un système de gestion à des applications qui nécessitent de l'Assistance dans un environnement d'utilisateurs multiples.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 3
Type: 32
Error Control: 1
Depends On services: TermService
Service (registry key): Fdc
Display name: Pilote de contrôleur de lecteur de disquettes
Image path: System32\DRIVERS\fdc.sys
Image size: 26240
Image MD5: 19C5C7EAC0190A42522290BF002F64EA
Start: 3
Type: 1
Error Control: 1
Service (registry key): FETNDIS
Display name: Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet
Image path: System32\DRIVERS\fetnd5.sys
Image size: 27165
Image MD5: E9648254056BCE81A85380C0C3647DC4
Start: 3
Type: 1
Error Control: 1
Service (registry key): Fips
Start: 1
Type: 1
Error Control: 1
Service (registry key): Flpydisk
Display name: Pilote de lecteur de disquettes
Image path: System32\DRIVERS\flpydisk.sys
Image size: 19712
Image MD5: 21E41E89B9B191B685F99B7A8885310B
Start: 3
Type: 1
Error Control: 1
Service (registry key): fsbwsys
Display name: fsbwsys
Object name: LocalSystem
Image path: "C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe"
Start: 2
Type: 16
Error Control: 1
Depends On services: RPCSS
Service (registry key): FSDFWD
Display name: F-Secure Anti-Virus Firewall Daemon
Description: F-Secure Anti-Virus Firewall Daemon
Object name: LocalSystem
Image path: "C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe"
Image size: 204863
Image MD5: C81474EFD014D51C8A1B17129F8D4DEB
Start: 3
Type: 16
Error Control: 0
Service (registry key): FSFW
Display name: F-Secure Firewall Driver
Image path: System32\drivers\fsdfw.sys
Image size: 70896
Image MD5: 320C2169834EB7B410C56F93CCE1ECA8
Start: 0
Type: 1
Error Control: 1
Service (registry key): Fs_Rec
Start: 1
Type: 8
Error Control: 0
Service (registry key): Ftdisk
Display name: Pilote du Gestionnaire de volume
Image path: System32\DRIVERS\ftdisk.sys
Image size: 126080
Image MD5: A86859B77B908C18C2657F284AA29FE3
Start: 0
Type: 1
Error Control: 1
Service (registry key): gafwload
Display name: Eicon Networks USB ADSL Loader
Image path: System32\DRIVERS\gafwload.sys
Start: 2
Type: 1
Error Control: 1
Service (registry key): Gpc
Display name: Classificateur de paquets générique
Description: Classificateur de paquets générique
Image path: System32\DRIVERS\msgpc.sys
Image size: 33792
Image MD5: 13591E0A02E85DE2A388F3EC4BD206DF
Start: 3
Type: 1
Error Control: 1
Service (registry key): helpsvc
Display name: Aide et support
Description: Permet à l'application Aide et support de fonctionner sur cet ordinateur. Si ce service est arrêté, la fonctionnalité Aide et support ne sera pas disponible. S'il est désactivé, tous les services dépendant explicitement de ce service ne pourront pas démarrer.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Depends On services: RPCSS
Service (registry key): HidServ
Display name: HID Input Service
Description: Permet l'accès entrant générique aux périphériques d'interface utilisateur, qui activent et maintiennent l'utilisation des boutons actifs prédéfinis sur le clavier, les contrôles à distance, et d'autres périphériques multimédia. Si ce service est arrêté, les boutons actifs contrôlés par ce service ne fonctionneront pas. Si ce service est désactivé, tout service en dépendant explicitement ne démarrera pas.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Depends On services: RpcSs
Service (registry key): HidUsb
Display name: Pilote de classe HID Microsoft
Image path: System32\DRIVERS\hidusb.sys
Image size: 9600
Image MD5: 1DE6783B918F540149AA69943BDFEBA8
Start: 3
Type: 1
Error Control: 0
Service (registry key): hpn
Start: 4
Type: 1
Error Control: 1
Service (registry key): hpt3xx
Start: 4
Type: 1
Error Control: 1
Service (registry key): i2omgmt
Start: 1
Type: 1
Error Control: 1
Service (registry key): i2omp
Start: 4
Type: 1
Error Control: 1
Service (registry key): i8042prt
Display name: Pilote pour clavier i8042 et souris sur port PS/2
Image path: System32\DRIVERS\i8042prt.sys
Image size: 52608
Image MD5: 792E4B2D20A1967CF5B87990F9F7AD4E
Start: 1
Type: 1
Error Control: 1
Service (registry key): Imapi
Start: 1
Type: 1
Error Control: 0
Service (registry key): ImapiService
Display name: Service COM de gravage de CD IMAPI
Description: Gère le gravage des CD via l'interface série IMAPI (Image Mastering Applications Programming Interface). Si ce service est arrêté, cet ordinateur ne pourra plus enregistrer de CD. Si ce service est désactivé, les services qui en dépendent ne vont pas pouvoir démarrer.
Object name: LocalSystem
Image path: C:\WINDOWS\System32\imapi.exe
Image size: 118784
Image MD5: 409EF970372F4FD33EC69992846557D6
Start: 3
Type: 16
Error Control: 1
Service (registry key): inetaccs
Start: 0
Type: 0
Error Control: 0
Service (registry key): ini910u
Start: 4
Type: 1
Error Control: 1
Service (registry key): Inport
Start: 0
Type: 0
Error Control: 0
Service (registry key): IntelIde
Start: 4
Type: 1
Error Control: 1
Service (registry key): IpFilterDriver
Display name: Pilote de filtre de trafic IP
Description: Pilote de filtre de trafic IP
Image path: System32\DRIVERS\ipfltdrv.sys
Image size: 32896
Image MD5: 731F22BA402EE4B62748ADAF6363C182
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip
Service (registry key): IpInIp
Display name: Pilote de tunnelage IP dans IP
Description: Pilote de tunnelage IP dans IP
Image path: System32\DRIVERS\ipinip.sys
Image size: 19584
Image MD5: F56DD863BA732A4E8EE58D486C31250F
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip
Service (registry key): IpNat
Display name: Traducteur d'adresses réseau IP
Description: Traducteur d'adresses réseau IP
Image path: System32\DRIVERS\ipnat.sys
Image size: 76288
Image MD5: 561E2AEDE82CAE972D572C60D4E090BF
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip
Service (registry key): IPSec
Display name: Pilote IPSEC
Description: Pilote IPSEC
Image path: System32\DRIVERS\ipsec.sys
Image size: 56064
Image MD5: 87AD207BC4437F215508024559D72F30
Start: 1
Type: 1
Error Control: 1
Service (registry key): IRENUM
Display name: Service énumérateur IR
Image path: System32\DRIVERS\irenum.sys
Image size: 10496
Image MD5: B43201394646B7E98C89056EDDA686B5
Start: 3
Type: 1
Error Control: 1
Service (registry key): ISAPISearch
Start: 0
Type: 0
Error Control: 0
Service (registry key): isapnp
Display name: Pilote de bus Plug-and-Play ISA/EISA
Image path: System32\DRIVERS\isapnp.sys
Image size: 36224
Image MD5: 54632F1A7DE61DC3615D756F2A90FA72
Start: 0
Type: 1
Error Control: 3
Service (registry key): Kbdclass
Display name: Pilote de la classe Clavier
Image path: System32\DRIVERS\kbdclass.sys
Image size: 24064
Image MD5: 5A45795C098C1BDEB397C32C8C92BEC9
Start: 1
Type: 1
Error Control: 1
Service (registry key): kbdhid
Display name: Pilote HID de clavier
Image path: System32\DRIVERS\kbdhid.sys
Image size: 14080
Image MD5: 8E5BE87ACAB17764C034CB8E4B19742B
Start: 1
Type: 1
Error Control: 0
Service (registry key): kmixer
Display name: Mélangeur audio Wave de noyau Microsoft
Image path: system32\drivers\kmixer.sys
Image size: 159232
Image MD5: ECD42891ECC1CA80FCB849511D3DF186
Start: 3
Type: 1
Error Control: 1
Service (registry key): KSecDD
Start: 0
Type: 1
Error Control: 1
Service (registry key): lanmanserver
Display name: Serveur
Description: Prend en charge le partage de fichiers, d'impression et des canaux nommés via le réseau pour cet ordinateur. Si ce service est arrêté, ces fonctions ne seront pas disponibles. Si ce service est désactivé, les services qui en dépendent ne pourront pas démarrer.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Service (registry key): lanmanworkstation
Display name: Station de travail
Description: Crée et maintient des connexions de réseau client à des serveurs distants. Si ce service est arrêté, ces connexions ne seront pas disponibles. Si ce service est désactivé, les services qui en dépendent ne pourront pas démarrer.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Service (registry key): lbrtfdc
Start: 1
Type: 1
Error Control: 0
Service (registry key): ldap
Start: 0
Type: 0
Error Control: 0
Service (registry key): LicenseService
Start: 0
Type: 0
Error Control: 0
Service (registry key): LmHosts
Display name: Assistance TCP/IP NetBIOS
Description: Permet la prise en charge pour NetBIOS sur un service TCP/IP (NetBT) et la résolution des noms NetBIOS.
Object name: NT AUTHORITY\LocalService
Image path: %SystemRoot%\System32\svchost.exe -k LocalService
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 2
Type: 32
Error Control: 1
Depends On services: NetBT,Afd
Service (registry key): Messenger
Display name: Affichage des messages
Description: Envoie et reçoit les messages des services d'alertes entre les clients et les serveurs. Ce service n'est pas lié à Windows Messenger. Si ce service est arrêté, les messages d'alertes ne seront pas transmis. Si ce service est désactivé, les services qui en dépendent ne pourront pas démarrer.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 12800
Image MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
Start: 4
Type: 32
Error Control: 1
Depends On services: LanmanWorkstation,NetBIOS,PlugPlay,RpcSS
Service (registry key): mnmdd
Start: 1
Type: 1
Error Control: 0
Service (registry key): mnmsrvc
Display name: Partage de Bureau à distance NetMeeting
Description: Permet aux personnes autorisées d'accéder à votre Bureau Windows en utilisant NetMeeting.
Object name: LocalSystem
Image path: C:\WINDOWS\System32\mnmsrvc.exe
Image size: 32768
Image MD5: 2C9008DEE1C905D0AE54AA18BC3BD5DB
Start: 3
Type: 272
Error Control: 1
Service (registry key): Modem
Start: 3
Type: 1
Error Control: 0
Service (registry key): Mouclass
Display name: Pilote de la classe Souris
Image path: System32\DRIVERS\mouclass.sys
Image size: 22656
Image MD5: 568966A71EF97C673336888EE7EBB869
Start: 1
Type: 1
Error Control: 1
Service (registry key): mouhid
Display name: Pilote HID de souris
Image path: System32\DRIVERS\mouhid.sys
Image size: 12288
Image MD5: 124D6846040C79B9C997F78EF4B2A4E5
Start: 3
Type: 1
Error Control: 0
Service (registry key): MountMgr
Start: 0
Type: 1
Error Control: 1
Service (registry key): mraid35x
Start: 4
Type: 1
Error Control: 1
Service (registry key): MRxDAV
Display name: Redirecteur client WebDav
Description: Redirecteur client WebDav
Image path: System32\DRIVERS\mrxdav.sys
Imag
-
-
Re,
il est tjrs détecté par spyboot et j'ai tjrs ce truc bizzard sur mon bureau: e1xplorer.
A+
Benoit
- 1
- 2
Suivant
