MagicControl.agent

bonsoir

voila j ai un probleme je ne sais s il s agit d un virus ou autre quand je fais l analyse avec spybot il me trouve a chaque fois MagicControl.agent...je le supprime comme indiqué mais a chaque ouverture de l ordi il se trouve toujours present..Quelqu un pourrait t il me dire comment faire pour l éliminé merci de votre aide...

12 réponses

  • Votes
  • Date
  • Date décroissante
  1. Contributeur sécurité
    Re,

    Un forum ou je fais partis? Euh y en a pas mal :-P
    Le forum des helpers? Bienvenue parmis nous, bien sur que tu peux le citer lol
    Une fois de temps en temps, humm bon lol

    Une fois que le poste est terminé et résolu, il n y aucuns problemes a faire cela :-)

    a+
    1. Contributeur sécurité
      Tu peux venir me faire un coucou de temps en temps lol

      A manger PFFFF y a plus rien, va falloir que j aille au MacDo lol
      1. ah oui j avais oublié de te dire que je suis aussi membre d un site que tu fais partis loll je ne c si je dois cité le nom sur ce forum lol

        mcdo ouaih faut aimer lol mais bon ....lol une fois de temps en temps alors...

        bon aller je ne vais pas trop encombré le forum pas une messagerie lol

        on dira alors a bientot ( mais pas trop tot)lol
    2. Contributeur sécurité
      lol Je ne t'ai pas forcé a le dire lol

      Content que tes soucis soient résolus.

      lol ne reviens pas trop vite lol

      Bon appetit Corinne
      1. ah ben non j espere pas a bientot lol

        bonne appetit a toi Regis et encore merci pour ton aide
    3. mdr... bon allez on va dire excellent ...mais attention au cheville quand meme....lol

      apparement mes problemes sont resolus du moin j espere .. je verrai bien par le suite ..

      en attendant je te remercie bien de ton aide, sympa de perdre du temps lol mais pour une bonne cause...

      ca fait deja deux fois jamais deux cent trois mais chuttt...lol

      grand merci à toi
      1. Contributeur sécurité
        lol

        AH bon, tu me trouve que bon? Meme pas excellent? pfff mdr

        Ou en sont tes soucis?

        a+
        1. Contributeur sécurité
          Re

          Si tu veux bien, il reste quelques petites choses a pauffiner.

          C'etait un spyware en fait qui te pousse a telecharger un faux utilitaire de desinfection.Les infections sont fausses bien sur, c est un attrape nigaux lol

          Supprime ceci s il existe
          C:\Programsfiles\mailskinner

          Et enfin, telecharge Ccleaner:
          https://www.pcastuces.com/logitheque/ccleaner.htm

          ¤ Lance CCleaner.

          Suppression des fichiers temporaires
          Va dans la section "Options" situé dans la marge gauche. Va dans "Avancé" et décoche "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures". Retourne ensuite dans la section "Nettoyeur"
          Fais bien attention de cocher toutes les cases dans la marge gauche (Internet Explorer/Windows Explorer/Système/Avancé)
          • Clique sur Analyse
          • Patiente le temps du scan, qui peut prendre un peu de temps si c'est la première fois.
          • Une fois le scan terminé, clique sur Lancer le Nettoyage
          Suppression des incohérence du registre
          • Clique sur l'icône Erreurs situés dans la marge à gauche.
          • Puis clique sur Analyser les erreurs
          • Patiente pendant que CCleaner scan ton registre.
          • Une fois le scan terminé, coche toutes les entrèes qu'il t'aura trouvée.
          • Tu peux cliquer ensuite sur Corriger les erreurs.

          Une fois fait, lance un nouvel HijackThis et donne moi le rapport.

          a+
          1. voila tous est fait lol par contre mailskinner etait deja supprimé dans C:\Programsfiles\mailskinner ....

            rapport hijack

            Logfile of HijackThis v1.99.1
            Scan saved at 11:56:51, on 05/08/2006
            Platform: Windows XP SP2 (WinNT 5.01.2600)
            MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
            C:\WINDOWS\system32\ZoneLabs\vsmon.exe
            C:\WINDOWS\system32\spoolsv.exe
            C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
            C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
            C:\Program Files\Alwil Software\Avast4\ashServ.exe
            C:\Program Files\ewido anti-malware\ewidoctrl.exe
            C:\WINDOWS\System32\FTRTSVC.exe
            C:\Program Files\Borland\InterBase\Bin\ibguard.exe
            C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
            C:\WINDOWS\system32\pctspk.exe
            C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
            C:\WINDOWS\Explorer.EXE
            C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\Lexmark\Lexmark Precision Photo\MemCard.exe
            C:\WINDOWS\vsnpstd.exe
            C:\Program Files\MessengerPlus! 3\MsgPlus.exe
            C:\Program Files\Real\RealPlayer\RealPlay.exe
            C:\Program Files\Ulead Systems\Ulead Photo Express My Scrapbook 2.0\calcheck.exe
            C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
            C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
            C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
            C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
            C:\Program Files\QuickTime\qttask.exe
            C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
            C:\WINDOWS\system32\ctfmon.exe
            C:\PROGRA~1\Ahead\NEROPH~1\data\xtras\mssysmgr.exe
            C:\Program Files\TGTSoft\StyleXP\StyleXP.exe
            C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE
            C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
            C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
            C:\PROGRA~1\Wanadoo\ComComp.exe
            C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
            C:\Program Files\Borland\InterBase\Bin\ibserver.exe
            C:\PROGRA~1\Wanadoo\Toaster.exe
            C:\PROGRA~1\Wanadoo\Inactivity.exe
            C:\PROGRA~1\Wanadoo\PollingModule.exe
            C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
            C:\PROGRA~1\Wanadoo\Watch.exe
            C:\Program Files\Internet Explorer\iexplore.exe
            C:\Program Files\Internet Explorer\iexplore.exe
            C:\Program Files\Internet Explorer\iexplore.exe
            C:\hijackThis\HijackThis.exe

            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
            R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
            O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
            O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
            O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
            O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
            O2 - BHO: BHO pour Compagnon Web Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\ENCWCBAR.DLL
            O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
            O2 - BHO: CoTGT_BHO Class - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dll
            O3 - Toolbar: Compagnon Web Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\ENCWCBAR.DLL
            O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
            O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
            O4 - HKLM\..\Run: [MemoryCardManager] C:\Program Files\Lexmark\Lexmark Precision Photo\MemCard.exe -startup
            O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
            O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
            O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
            O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
            O4 - HKLM\..\Run: [Ulead Photo Express Calendar Checker] C:\Program Files\Ulead Systems\Ulead Photo Express My Scrapbook 2.0\calcheck.exe
            O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
            O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
            O4 - HKLM\..\Run: [LXBSCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXBStime.dll,_RunDLLEntry@16
            O4 - HKLM\..\Run: [FSASWREG] "C:\Program Files\Securitoo\Av_Fw\Anti-Spyware\fsaswreg.exe"
            O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
            O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
            O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
            O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
            O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
            O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
            O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
            O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
            O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Ahead\NEROPH~1\data\xtras\mssysmgr.exe
            O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
            O4 - Startup: Norton System Doctor.LNK = C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE
            O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
            O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
            O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
            O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
            O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
            O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
            O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
            O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
            O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
            O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
            O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
            O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
            O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
            O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe (file missing)
            O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe (file missing)
            O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
            O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll
            O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
            O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.fr/computercheckup/qdiagcc.cab
            O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.av.fr.aol.com/molbin/shared/mcinsctl/fr/4,0,0,84/mcinsctl.cab
            O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
            O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
            O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
            O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/hardwaredetection.cab
            O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.av.fr.aol.com/molbin/shared/mcgdmgr/fr/1,0,0,21/mcgdmgr.cab
            O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
            O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
            O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
            O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
            O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
            O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
            O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
            O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
            O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
            O23 - Service: InterBase Guardian (InterBaseGuardian) - Inprise Corporation - C:\Program Files\Borland\InterBase\Bin\ibguard.exe
            O23 - Service: InterBaseServer - Inprise Corporation - C:\Program Files\Borland\InterBase\Bin\ibserver.exe
            O23 - Service: lxbs_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxbscoms.exe
            O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
            O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
            O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
            O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
            O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
            O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

            bon j espere que tout va bien lol

            sinon ben on continue sans pb j ai un bon professeur lol
        2. Contributeur sécurité
          Salut ;

          Parfait ;-)

          Télécharge Brute Force Uninstaller (de Merijn) ici:
          http://www.merijn.org/files/bfu.zip
          Créé un nouveau dossier directement à la racine de ton disque dur ou l'endroit qui te convient, nomme ce dossier BFU.
          Décompresse le fichier téléchargé dans ce nouveau dossier (par exemple C:\BFU)

          Ensuite, télécharge EGDACCESS.bfu (de Metallica) :

          Fais un clik droit ici : http://metallica.geekstogo.com/EGDACCESS.bfu et choisis "Enregistrer la cible sous..." afin de télécharger EGDACCESS.bfu (de Metallica). Sauvegarde dans le dossier créé (C:\BFU). **Note : si tu utlises Internet Explorer ; lors de la sauvegarde, assure-toi que le champs "Type :" affiche "Tous les fichiers". Tu dois maintenant avoir deux fichiers dans le dossier C:\BFU : EGDACCESS.bfu et BFU.exe (très important).

          Si tu utilises Internet Explorer, assure-toi lors de la sauvegarde que le champs "Type :" affiche "Tous les fichiers".
          Tu dois maintenant avoir deux fichiers dans le dossier C:\BFU : EGDACCESS.bfu et BFU.exe (très important).

          -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-

          Lance "Brute Force Uninstaller" en double-cliquant BFU.exe (Dans le dossier C:\BFU)
          - Clique sur le petit dossier jaune, et clique sur : EGDACCESS.bfu
          - Coches la case Show log after script ends
          - Clique sur Execute pour que le fix fasse son boulot :-)

          Attends que le message Complete script execution apparaîsse et clique sur OK.
          Un rapport va s'afficher dans la fenetre du programme, copie et colle dans le bloc-notes, puis sauvegardes le, tu le posteras plus tard sur le forum.
          Clique Exit pour fermer le programme BFU.

          -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-

          Ensuite, lance Blacklight en double cliquant sur blbeta.exe et accepte la licence.
          Clique sur Scan pour lancer l'analyse.
          Une fois fait, selectionnes chaques fichiers trouvés et clic sur "RENAME"
          Puis valide.
          Réponds oui aux messages d'avertissements et te demandant si tu autorises le reboot du pc.

          -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-

          Après le reboot du pc, les fichiers :

          c:\WINDOWS\system32\hlmzfqxd.dat
          C:\windows\system32\hlmzfqxd.exe
          c:\WINDOWS\system32\hlmzfqxd_nav.dat
          c:\WINDOWS\system32\hlmzfqxd_navps.dat

          devraient être visible et pouvoir être supprimés sans aucuns soucis.
          Blacklight ne les supprimes pas, il les renommes simplement et il va falloir que tu les vires toi même:
          Va dans C:\windows\system32\ et recherches et effaces:

          hlmzfqxd.dat.ren
          hlmzfqxd.exe.ren
          hlmzfqxd_nav.dat.ren
          hlmzfqxd_navps.dat.ren

          Une fois fait, reposte un rapport hijackthis + le rapport de BFU que tu auras sauvegardé et un nouveau rapport de blacklight.
          Juste pour info, tu as eu installé le logiciel mailskinner ? (emoticone pour la messagerie)
          Tu peux verifier s il est dans ajout/suppression de programme?

          bon nettoyage et bon courage ;-)
          1. salut

            bon ben j espere que je suis bien arrivé lol mais pas evident...bon bref je te joins ce que tu m as dit de faire...

            rapport hijack

            Logfile of HijackThis v1.99.1
            Scan saved at 08:59:44, on 05/08/2006
            Platform: Windows XP SP2 (WinNT 5.01.2600)
            MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
            C:\WINDOWS\system32\ZoneLabs\vsmon.exe
            C:\WINDOWS\system32\spoolsv.exe
            C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
            C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
            C:\Program Files\Alwil Software\Avast4\ashServ.exe
            C:\Program Files\ewido anti-malware\ewidoctrl.exe
            C:\WINDOWS\System32\FTRTSVC.exe
            C:\Program Files\Borland\InterBase\Bin\ibguard.exe
            C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
            C:\WINDOWS\system32\pctspk.exe
            C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
            C:\WINDOWS\Explorer.EXE
            C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\Lexmark\Lexmark Precision Photo\MemCard.exe
            C:\WINDOWS\vsnpstd.exe
            C:\Program Files\MessengerPlus! 3\MsgPlus.exe
            C:\Program Files\Real\RealPlayer\RealPlay.exe
            C:\Program Files\Ulead Systems\Ulead Photo Express My Scrapbook 2.0\calcheck.exe
            C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
            C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
            C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
            C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
            C:\Program Files\QuickTime\qttask.exe
            C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
            C:\WINDOWS\system32\ctfmon.exe
            C:\PROGRA~1\Ahead\NEROPH~1\data\xtras\mssysmgr.exe
            C:\Program Files\TGTSoft\StyleXP\StyleXP.exe
            C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE
            C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
            C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
            C:\PROGRA~1\Wanadoo\ComComp.exe
            C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
            C:\Program Files\Borland\InterBase\Bin\ibserver.exe
            C:\PROGRA~1\Wanadoo\Toaster.exe
            C:\PROGRA~1\Wanadoo\Inactivity.exe
            C:\PROGRA~1\Wanadoo\PollingModule.exe
            C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
            C:\PROGRA~1\Wanadoo\Watch.exe
            C:\Program Files\Internet Explorer\iexplore.exe
            C:\hijackThis\HijackThis.exe

            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
            R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
            O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
            O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
            O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
            O2 - BHO: BHO pour Compagnon Web Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\ENCWCBAR.DLL
            O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
            O2 - BHO: CoTGT_BHO Class - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dll
            O3 - Toolbar: Compagnon Web Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\ENCWCBAR.DLL
            O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
            O4 - HKLM\..\Run: [MemoryCardManager] C:\Program Files\Lexmark\Lexmark Precision Photo\MemCard.exe -startup
            O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
            O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
            O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
            O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
            O4 - HKLM\..\Run: [Ulead Photo Express Calendar Checker] C:\Program Files\Ulead Systems\Ulead Photo Express My Scrapbook 2.0\calcheck.exe
            O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
            O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
            O4 - HKLM\..\Run: [LXBSCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXBStime.dll,_RunDLLEntry@16
            O4 - HKLM\..\Run: [FSASWREG] "C:\Program Files\Securitoo\Av_Fw\Anti-Spyware\fsaswreg.exe"
            O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
            O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
            O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
            O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
            O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
            O4 - HKLM\..\Run: [hlmzfqxd] c:\windows\system32\hlmzfqxd.exe hlmzfqxd
            O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
            O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
            O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
            O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Ahead\NEROPH~1\data\xtras\mssysmgr.exe
            O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
            O4 - Startup: Norton System Doctor.LNK = C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE
            O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
            O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
            O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
            O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
            O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
            O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
            O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
            O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
            O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
            O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
            O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
            O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
            O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
            O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe (file missing)
            O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe (file missing)
            O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
            O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll
            O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
            O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.fr/computercheckup/qdiagcc.cab
            O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.av.fr.aol.com/molbin/shared/mcinsctl/fr/4,0,0,84/mcinsctl.cab
            O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
            O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
            O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
            O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/hardwaredetection.cab
            O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.av.fr.aol.com/molbin/shared/mcgdmgr/fr/1,0,0,21/mcgdmgr.cab
            O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
            O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
            O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
            O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
            O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
            O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
            O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
            O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
            O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
            O23 - Service: InterBase Guardian (InterBaseGuardian) - Inprise Corporation - C:\Program Files\Borland\InterBase\Bin\ibguard.exe
            O23 - Service: InterBaseServer - Inprise Corporation - C:\Program Files\Borland\InterBase\Bin\ibserver.exe
            O23 - Service: lxbs_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxbscoms.exe
            O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
            O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
            O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
            O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
            O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
            O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

            rapport bfu

            BFU v1.00.9
            Windows XP SP2 (WinNT 5.01.2600 SP2)
            Script started at 08:32:12, on 05/08/2006

            Option Delete files to Recycle Bin: Yes
            Failed: DllUnregister C:\WINDOWS\system32\MSWBM32.DLL|1 (file not found)
            Failed: DllUnregister C:\Program Files\MailSkinner\OESkinner.dll|1 (file not found)
            Failed: FolderDelete C:\Program Files\dialpass (folder not found)
            Failed: FolderDelete C:\Program Files\eghtmldialer (folder not found)
            Failed: FolderDelete C:\Program Files\egroup (folder not found)
            Failed: FolderDelete C:\Program Files\Instant Access (folder not found)
            Failed: DllUnregister C:\WINDOWS\mslagent\2_mslagent.dll|1 (file not found)
            Failed: DllUnregister C:\WINDOWS\navmpc\2_navmpc.dll|1 (file not found)
            Failed: FolderDelete C:\WINDOWS\mslagent (folder not found)
            Failed: FolderDelete C:\WINDOWS\navmpc (folder not found)
            Failed: FileDelete C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\Perflib_Perfdata_c00.dat (operation failed)
            Failed: FileDelete C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\~DFE871.tmp (operation failed)
            Failed: FileDelete C:\WINDOWS\Temp\Perflib_Perfdata_5c8.dat (operation failed)
            Failed: FileDelete C:\WINDOWS\Temp\ZLT03580.TMP (operation failed)
            Failed: FileDelete C:\WINDOWS\Temp\ZLT057b4.TMP (operation failed)
            Failed: FolderDelete C:\WINDOWS\Temp\_avast4_ (operation failed)
            Script completed.

            rapport Blacklight
            08/05/06 09:07:22 [Info]: BlackLight Engine 1.0.42 initialized
            08/05/06 09:07:22 [Info]: OS: 5.1 build 2600 (Service Pack 2)
            08/05/06 09:07:22 [Note]: 7019 4
            08/05/06 09:07:22 [Note]: 7005 0
            08/05/06 09:07:26 [Note]: 7006 0
            08/05/06 09:07:26 [Note]: 7011 1928
            08/05/06 09:07:26 [Note]: 7026 0
            08/05/06 09:07:26 [Note]: 7026 0
            08/05/06 09:07:35 [Note]: FSRAW library version 1.7.1019
            08/05/06 09:13:39 [Note]: 2000 1006
            08/05/06 09:14:51 [Note]: 7007 0

            apparement il n y a plus rien lol

            oui effectivement j avais bien ce logiciel mailskinner que j ai supprimé dans ajout/suppression de programme il y a une semaine...il ne se trouve plus la maintenant...

            peux tu me dire ce qu il y avait exactement..lol merci et si tous est clean...lol
        3. bon j espere que je ne me suis pas trompé lol

          voila le rapport

          08/04/06 18:35:59 [Info]: BlackLight Engine 1.0.42 initialized
          08/04/06 18:35:59 [Info]: OS: 5.1 build 2600 (Service Pack 2)
          08/04/06 18:35:59 [Note]: 7019 4
          08/04/06 18:35:59 [Note]: 7005 0
          08/04/06 18:37:15 [Note]: 7006 0
          08/04/06 18:37:15 [Note]: 7011 2208
          08/04/06 18:37:16 [Note]: 7026 0
          08/04/06 18:37:16 [Note]: 7026 0
          08/04/06 18:37:16 [Note]: 7024 3
          08/04/06 18:37:16 [Info]: Hidden process: C:\windows\system32\hlmzfqxd.exe
          08/04/06 18:37:16 [Note]: FSRAW library version 1.7.1019
          08/04/06 18:42:22 [Info]: Hidden file: c:\WINDOWS\Prefetch\HLMZFQXD.EXE-12A81F92.pf
          08/04/06 18:42:22 [Note]: 10002 1
          08/04/06 18:43:05 [Info]: Hidden file: c:\WINDOWS\system32\hlmzfqxd.dat
          08/04/06 18:43:05 [Note]: 10002 1
          08/04/06 18:43:06 [Info]: Hidden file: C:\windows\system32\hlmzfqxd.exe
          08/04/06 18:43:06 [Note]: 10002 1
          08/04/06 18:43:07 [Info]: Hidden file: c:\WINDOWS\system32\hlmzfqxd_nav.dat
          08/04/06 18:43:07 [Note]: 10002 1
          08/04/06 18:43:08 [Info]: Hidden file: c:\WINDOWS\system32\hlmzfqxd_navps.dat
          08/04/06 18:43:08 [Note]: 10002 1
          08/04/06 18:47:38 [Note]: 7007 0
          1. Contributeur sécurité
            ok

            Télécharge Blacklight (de F-Secure) a l’une des 2 adresses :
            https://www.f-secure.com/en
            https://www.f-secure.com/en

            et sauvegarde le sur ton Bureau.

            Double-clique blbeta.exe et accepte la licence ; laisse [X]scan through Windows Explorer activé ; clique Scan puis Next

            Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport, sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres).

            Copie et colle le contenu de ce rapport dans ta prochaine réponse

            a+
            1. Contributeur sécurité
              Salut

              Je n avais pas vu ton message.lol

              télécharge HijackThis ici:
              https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.html

              Dézippe le dans un dossier prévu à cet effet.
              Par exemple C:\hijackthis < Enregistre le bien dans c : !
              Démo : (Merci a Balltrap34 pour cette réalisation)
              http://pageperso.aol.fr/balltrap34/Hijenr.gif

              Lance le puis:
              clique sur "do a system scan and save logfile" (cf démo)
              faire un copier coller du log entier sur le forum

              Démo : (Merci a Balltrap34 pour cette réalisation)
              http://pageperso.aol.fr/balltrap34/demohijack.htm

              Bon courage

              A+
              1. salut

                pas grave...lol

                voila mon hijack

                Logfile of HijackThis v1.99.1
                Scan saved at 15:24:07, on 04/08/2006
                Platform: Windows XP SP2 (WinNT 5.01.2600)
                MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                Running processes:
                C:\WINDOWS\System32\smss.exe
                C:\WINDOWS\system32\winlogon.exe
                C:\WINDOWS\system32\services.exe
                C:\WINDOWS\system32\lsass.exe
                C:\WINDOWS\system32\svchost.exe
                C:\WINDOWS\System32\svchost.exe
                C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
                C:\WINDOWS\system32\ZoneLabs\vsmon.exe
                C:\WINDOWS\system32\spoolsv.exe
                C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
                C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                C:\Program Files\Alwil Software\Avast4\ashServ.exe
                C:\Program Files\ewido anti-malware\ewidoctrl.exe
                C:\WINDOWS\System32\FTRTSVC.exe
                C:\Program Files\Borland\InterBase\Bin\ibguard.exe
                C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
                C:\WINDOWS\system32\pctspk.exe
                C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
                C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
                C:\WINDOWS\System32\svchost.exe
                C:\Program Files\Borland\InterBase\Bin\ibserver.exe
                C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                C:\WINDOWS\Explorer.EXE
                C:\Program Files\Lexmark\Lexmark Precision Photo\MemCard.exe
                C:\WINDOWS\vsnpstd.exe
                C:\Program Files\MessengerPlus! 3\MsgPlus.exe
                C:\Program Files\Real\RealPlayer\RealPlay.exe
                C:\Program Files\Ulead Systems\Ulead Photo Express My Scrapbook 2.0\calcheck.exe
                C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
                C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
                C:\Program Files\QuickTime\qttask.exe
                C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                C:\WINDOWS\system32\ctfmon.exe
                C:\PROGRA~1\Ahead\NEROPH~1\data\xtras\mssysmgr.exe
                C:\Program Files\TGTSoft\StyleXP\StyleXP.exe
                C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
                C:\PROGRA~1\Wanadoo\ComComp.exe
                C:\PROGRA~1\Wanadoo\Toaster.exe
                C:\PROGRA~1\Wanadoo\Inactivity.exe
                C:\PROGRA~1\Wanadoo\PollingModule.exe
                C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
                C:\Program Files\Internet Explorer\iexplore.exe
                C:\Program Files\Internet Explorer\iexplore.exe
                C:\hijackThis\HijackThis.exe

                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
                R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
                O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
                O2 - BHO: BHO pour Compagnon Web Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\ENCWCBAR.DLL
                O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                O2 - BHO: CoTGT_BHO Class - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dll
                O3 - Toolbar: Compagnon Web Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\ENCWCBAR.DLL
                O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                O4 - HKLM\..\Run: [MemoryCardManager] C:\Program Files\Lexmark\Lexmark Precision Photo\MemCard.exe -startup
                O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
                O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
                O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
                O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
                O4 - HKLM\..\Run: [Ulead Photo Express Calendar Checker] C:\Program Files\Ulead Systems\Ulead Photo Express My Scrapbook 2.0\calcheck.exe
                O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
                O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
                O4 - HKLM\..\Run: [LXBSCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXBStime.dll,_RunDLLEntry@16
                O4 - HKLM\..\Run: [FSASWREG] "C:\Program Files\Securitoo\Av_Fw\Anti-Spyware\fsaswreg.exe"
                O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
                O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
                O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
                O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
                O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
                O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Ahead\NEROPH~1\data\xtras\mssysmgr.exe
                O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
                O4 - HKCU\..\Run: [MailSkinner] c:\program files\mailskinner\mailskinner.exe
                O4 - Startup: Norton System Doctor.LNK = C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE
                O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
                O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
                O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
                O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
                O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
                O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
                O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
                O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
                O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
                O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
                O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
                O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
                O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe (file missing)
                O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe (file missing)
                O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
                O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll
                O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
                O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.fr/computercheckup/qdiagcc.cab
                O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.av.fr.aol.com/molbin/shared/mcinsctl/fr/4,0,0,84/mcinsctl.cab
                O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
                O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
                O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
                O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/hardwaredetection.cab
                O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.av.fr.aol.com/molbin/shared/mcgdmgr/fr/1,0,0,21/mcgdmgr.cab
                O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
                O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
                O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
                O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
                O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
                O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
                O23 - Service: InterBase Guardian (InterBaseGuardian) - Inprise Corporation - C:\Program Files\Borland\InterBase\Bin\ibguard.exe
                O23 - Service: InterBaseServer - Inprise Corporation - C:\Program Files\Borland\InterBase\Bin\ibserver.exe
                O23 - Service: lxbs_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxbscoms.exe
                O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
                O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
                O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
                O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
                O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
                O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
            2. Contributeur sécurité
              lol Aucuns problemes Corinne

              Lance un scan avec spybot, a la fin du scan, clik droit et copier dans le presse papier.
              Vient dans un message, clik droit et coller
              Le rapport doit apparaitre.

              Bonne nuit :-)

              PS/ Inutile que tu t inquietes, c est pas grave, c est pas un virus.
              1. bon je vois que nos messages se sont croisées lol j espere que ce que je viens d envoyé juste avant et au moin juste sinon ben je recommencerai maintenant que tu ma s dit comment faire...dejà pas mal que ce n est pas un virus lol mais j avais aussi oublié de te dire que j ai pas mal de pub aussi...

                merci pour ton coup de main

                bonne nuit
            3. Contributeur sécurité
              salut

              On peut avoir un rapport de spybot

              a+
              1. merci pour la reponse

                rapport de spybot ...peux tu me dire comment je peux faire car g oublié de te dire que je suis novice lol
              2. ahh j y suis arrivée lol

                --- Search result list ---
                MagicControl.Agent: Réglages utilisateur (Clé du registre, nothing done)
                HKEY_USERS\S-1-5-21-1547161642-1450960922-682003330-1003\Software\LanConfig

                Winsoftware: Cookie traceur (Internet Explorer: Propriétaire) (Cookie, nothing done)

                Winsoftware: Cookie traceur (Internet Explorer: Propriétaire) (Cookie, nothing done)

                Winsoftware: Cookie traceur (Internet Explorer: Propriétaire) (Cookie, nothing done)

                Winsoftware: Cookie traceur (Internet Explorer: Propriétaire) (Cookie, nothing done)

                Winsoftware.WinAntiVirusPro2006: Cookie traceur (Internet Explorer: Propriétaire) (Cookie, nothing done)

                --- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

                2005-05-31 blindman.exe (1.0.0.1)
                2005-05-31 SpybotSD.exe (1.4.0.3)
                2005-05-31 TeaTimer.exe (1.4.0.2)
                2005-09-04 unins000.exe (51.41.0.0)
                2005-05-31 Update.exe (1.4.0.0)
                2006-02-06 advcheck.dll (1.0.2.0)
                2005-05-31 aports.dll (2.1.0.0)
                2005-05-31 borlndmm.dll (7.0.4.453)
                2005-05-31 delphimm.dll (7.0.4.453)
                2005-05-31 SDHelper.dll (1.4.0.0)
                2006-02-20 Tools.dll (2.0.0.2)
                2005-05-31 UnzDll.dll (1.73.1.1)
                2005-05-31 ZipDll.dll (1.73.2.0)
                2006-07-28 Includes\Cookies.sbi (*)
                2006-07-28 Includes\Dialer.sbi (*)
                2006-07-28 Includes\Hijackers.sbi (*)
                2006-07-28 Includes\Keyloggers.sbi (*)
                2006-07-28 Includes\Malware.sbi (*)
                2006-07-28 Includes\PUPS.sbi (*)
                2006-07-28 Includes\Revision.sbi (*)
                2006-07-28 Includes\Security.sbi (*)
                2006-07-28 Includes\Spybots.sbi (*)
                2005-02-17 Includes\Tracks.uti
                2006-07-28 Includes\Trojans.sbi (*)

                --- System information ---
                Windows XP (Build: 2600) Service Pack 2
                / .NETFramework / 1.1: Microsoft .NET Framework 1.1 Hotfix (KB886903)
                / .NETFramework / 1.1: Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
                / Internet Explorer 6 / SP1: Correctif Windows XP - KB896727
                / Windows Media Player 10: Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)
                / Windows Media Player 10: Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)
                / Windows XP / SP2: Windows XP Service Pack 2
                / Windows XP / SP3: Correctif Windows XP - KB873333
                / Windows XP / SP3: Correctif Windows XP - KB873339
                / Windows XP / SP3: Correctif Windows XP - KB885250
                / Windows XP / SP3: Correctif Windows XP - KB885295
                / Windows XP / SP3: Correctif Windows XP - KB885835
                / Windows XP / SP3: Correctif Windows XP - KB885836
                / Windows XP / SP3: Correctif Windows XP - KB886185
                / Windows XP / SP3: Correctif Windows XP - KB887472
                / Windows XP / SP3: Correctif Windows XP - KB887742
                / Windows XP / SP3: Correctif Windows XP - KB887797
                / Windows XP / SP3: Correctif Windows XP - KB888113
                / Windows XP / SP3: Correctif Windows XP - KB888302
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB890046)
                / Windows XP / SP3: Correctif Windows XP - KB890859
                / Windows XP / SP3: Correctif Windows XP - KB891781
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB893066)
                / Windows XP / SP3: Correctif Windows XP - KB893086
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB893756)
                / Windows XP / SP3: Windows Installer 3.1 (KB893803)
                / Windows XP / SP3: Mise à jour pour Windows XP (KB894391)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896358)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896422)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896423)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896424)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896428)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896688)
                / Windows XP / SP3: Mise à jour pour Windows XP (KB896727)
                / Windows XP / SP3: Mise à jour pour Windows XP (KB898461)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899587)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899588)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899591)
                / Windows XP / SP3: Mise à jour pour Windows XP (KB900485)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB900725)
                / Windows XP / SP3: Mise à jour pour Windows XP (KB900930)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901017)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901214)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB902400)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB904706)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905414)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905749)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905915)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB908519)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB908531)
                / Windows XP / SP3: Mise à jour pour Windows XP (KB910437)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911280)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911562)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911567)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911927)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB912812)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB912919)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB913446)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB913580)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB914388)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB914389)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB916281)
                / Windows XP / SP3: Mise à jour pour Windows XP (KB916595)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917159)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917344)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917953)
                / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB918439)

                --- Startup entries list ---
                Located: HK_LM:Run, ATIPTA
                command: "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
                file: C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                size: 344064
                MD5: 8824078bda1635639aae125d24b85383

                Located: HK_LM:Run, avast!
                command: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                file: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                size: 108160
                MD5: 9c4db1f201c975b65fc4a83d4099a70e

                Located: HK_LM:Run, FSASWREG
                command: "C:\Program Files\Securitoo\Av_Fw\Anti-Spyware\fsaswreg.exe"
                file: C:\Program Files\Securitoo\Av_Fw\Anti-Spyware\fsaswreg.exe
                size: 16451
                MD5: a34dcefe6a1dfd0a4b9dc341587ba7d3

                Located: HK_LM:Run, LXBSCATS
                command: rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXBStime.dll,_RunDLLEntry@16
                file:

                Located: HK_LM:Run, MemoryCardManager
                command: C:\Program Files\Lexmark\Lexmark Precision Photo\MemCard.exe -startup
                file:

                Located: HK_LM:Run, MessengerPlus3
                command: "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
                file: C:\Program Files\MessengerPlus! 3\MsgPlus.exe
                size: 190024
                MD5: f5f3a19013808113b1f3dada4379606a

                Located: HK_LM:Run, NeroFilterCheck
                command: C:\WINDOWS\system32\NeroCheck.exe
                file: C:\WINDOWS\system32\NeroCheck.exe
                size: 155648
                MD5: 3e4c03cefad8de135263236b61a49c90

                Located: HK_LM:Run, QuickTime Task
                command: "C:\Program Files\QuickTime\qttask.exe" -atboottime
                file: C:\Program Files\QuickTime\qttask.exe
                size: 98304
                MD5: 9b4c1812595c389ab9ccf1ff3b315248

                Located: HK_LM:Run, RealTray
                command: C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
                file:

                Located: HK_LM:Run, snpstd
                command: C:\WINDOWS\vsnpstd.exe
                file: C:\WINDOWS\vsnpstd.exe
                size: 40960
                MD5: f14bd811617d3485ef3a8b6bff880024

                Located: HK_LM:Run, SunJavaUpdateSched
                command: C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
                file: C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
                size: 36975
                MD5: 61a3a9d5d98bf0331df5b716144a8100

                Located: HK_LM:Run, Ulead Photo Express Calendar Checker
                command: C:\Program Files\Ulead Systems\Ulead Photo Express My Scrapbook 2.0\calcheck.exe
                file: C:\Program Files\Ulead Systems\Ulead Photo Express My Scrapbook 2.0\calcheck.exe
                size: 69632
                MD5: 981ada7f82b71bf7085f1b1768ae56b3

                Located: HK_LM:Run, WOOTASKBARICON
                command: C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
                file: C:\PROGRA~1\Wanadoo\GestMaj.exe
                size: 32768
                MD5: 8d6f2c724cfc608872ede3cc4a7b49b9

                Located: HK_LM:Run, WOOWATCH
                command: C:\PROGRA~1\Wanadoo\Watch.exe
                file: C:\PROGRA~1\Wanadoo\Watch.exe
                size: 20480
                MD5: 9a29592cd135f6262c429152f7a8dd4a

                Located: HK_LM:Run, Zone Labs Client
                command: "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
                file: C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                size: 968696
                MD5: d1d3726a8508b6183c620b4f6ce82f70

                Located: HK_LM:Run, Zone Labs Client
                command: "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
                file: C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                size: 968696
                MD5: d1d3726a8508b6183c620b4f6ce82f70

                Located: HK_CU:Run, ccleaner
                command: "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
                file: C:\Program Files\CCleaner\ccleaner.exe
                size: 528384
                MD5: 149bb71d2bdf3235cd7174fcacd4dc09

                Located: HK_CU:Run, CTFMON.EXE
                command: C:\WINDOWS\system32\ctfmon.exe
                file: C:\WINDOWS\system32\ctfmon.exe
                size: 15360
                MD5: 64e41e8fee655b03e3f19ded21ba5118

                Located: HK_CU:Run, MailSkinner
                command: c:\program files\mailskinner\mailskinner.exe
                file:

                Located: HK_CU:Run, PhotoShow Deluxe Media Manager
                command: C:\PROGRA~1\Ahead\NEROPH~1\data\xtras\mssysmgr.exe
                file: C:\PROGRA~1\Ahead\NEROPH~1\data\xtras\mssysmgr.exe
                size: 212992
                MD5: 552a81085e1d52c83c81ac351d8e2aa9

                Located: HK_CU:Run, STYLEXP
                command: C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
                file:

                Located: HK_CU:Run, WOOKIT
                command: C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
                file: C:\PROGRA~1\Wanadoo\Shell.exe
                size: 122880
                MD5: 2bd5e1e68614dbc6b320597856ed6ea7

                Located: Démarrage (tous utilisateurs), Lancement rapide d'Adobe Reader.lnk
                command: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                file: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                size: 29696
                MD5: 43362b96870ce8649f4f2ec893da93f0

                Located: Démarrage (utilisateur), Norton System Doctor.LNK
                command: C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE
                file: C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE
                size: 24614
                MD5: 3ce65fcf1a99a0293aa4be5af6ccff56

                Located: System.ini, AtiExtEvent
                command:
                file:

                Located: System.ini, crypt32chain
                command: crypt32.dll
                file: crypt32.dll

                Located: System.ini, cryptnet
                command: cryptnet.dll
                file: cryptnet.dll

                Located: System.ini, cscdll
                command: cscdll.dll
                file: cscdll.dll

                Located: System.ini, ScCertProp
                command: wlnotify.dll
                file: wlnotify.dll

                Located: System.ini, Schedule
                command: wlnotify.dll
                file: wlnotify.dll

                Located: System.ini, sclgntfy
                command: sclgntfy.dll
                file: sclgntfy.dll

                Located: System.ini, SensLogn
                command: WlNotify.dll
                file: WlNotify.dll

                Located: System.ini, termsrv
                command: wlnotify.dll
                file: wlnotify.dll

                Located: System.ini, WgaLogon
                command: WgaLogon.dll
                file: WgaLogon.dll

                Located: System.ini, wlballoon
                command: wlnotify.dll
                file: wlnotify.dll

                --- Browser helper object list ---
                {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
                BHO name:
                CLSID name: SSVHelper Class
                Path: C:\Program Files\Java\jre1.5.0_06\bin\
                Long name: ssv.dll
                Short name:
                Date (created): 02/03/2006 14:53:00
                Date (last access): 03/08/2006 21:48:56
                Date (last write): 10/11/2005 14:22:12
                Filesize: 184423
                Attributes: archive
                MD5: F01726F7CA8538FDD4663C9DB8FEAEDC
                CRC32: 0111B892
                Version: 5.0.60.5

                {955BE0B8-BC85-4CAF-856E-8E0D8B610560} (BHO pour Compagnon Web Encarta)
                BHO name:
                CLSID name: BHO pour Compagnon Web Encarta
                Path: C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\
                Long name: ENCWCBAR.DLL
                Short name:
                Date (created): 04/06/2005 11:04:06
                Date (last access): 03/08/2006 21:48:56
                Date (last write): 04/06/2005 11:04:06
                Filesize: 228048
                Attributes: archive
                MD5: 32DFA1F7FBFF2092374DAB6AEF0BC0CB
                CRC32: 30C2C111
                Version: 15.0.3400.603

                {AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper)
                BHO name:
                CLSID name: Google Toolbar Helper
                description: Google toolbar
                classification: Open for discussion
                known filename: googletoolbar.dll<br>googletoolbar*.dll<br>(* = number)<br>googletoolbar_en_*.**-big.dll<br>Googletoolbar_en_*.*.**-deleon.dll
                info link: http://www.google.com/intl/fr/toolbar/ie/index.html
                info source: TonyKlein
                Path: c:\program files\google\
                Long name: GoogleToolbar1.dll
                Short name: GOOGLE~1.DLL
                Date (created): 25/02/2006 09:28:38
                Date (last access): 03/08/2006 21:48:56
                Date (last write): 14/02/2006 21:06:14
                Filesize: 1204224
                Attributes: readonly archive
                MD5: D91CB7361D7814035F543C7CCAE9DD60
                CRC32: 16D568FF
                Version: 3.0.131.0

                {C333CF63-767F-4831-94AC-E683D962C63C} (CoTGT_BHO Class)
                BHO name:
                CLSID name: CoTGT_BHO Class
                Path: C:\Program Files\TGTSoft\StyleXP\
                Long name: TGT_BHO.dll
                Short name:
                Date (created): 25/10/2004 21:32:22
                Date (last access): 03/08/2006 21:48:56
                Date (last write): 25/10/2004 21:32:22
                Filesize: 49152
                Attributes: archive
                MD5: 173F42E9A3281F408807404720D41105
                CRC32: 6906889A

                --- ActiveX list ---
                {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class)
                DPF name:
                CLSID name: QDiagAOLCCUpdateObj Class
                Installer: C:\WINDOWS\Downloaded Program Files\qdiagcc.inf
                Codebase: http://aolcc.aol.fr/computercheckup/qdiagcc.cab
                description:
                classification: Open for discussion
                known filename: qdiagcc.ocx
                info link:
                info source: Safer Networking Ltd.
                Path: C:\WINDOWS\system32\
                Long name: qdiagcc.ocx
                Short name:
                Date (created): 18/08/2004 13:31:08
                Date (last access): 03/08/2006 16:37:52
                Date (last write): 18/08/2004 13:31:08
                Filesize: 1352816
                Attributes: archive
                MD5: 6BD1F54AAB2B4BEDF6DF7DE7A4EA6D57
                CRC32: 08A81619
                Version: 1.0.1.375

                {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} ()
                DPF name:
                CLSID name:
                Installer: C:\WINDOWS\Downloaded Program Files\mcinsctl.inf
                Codebase: http://download.av.fr.aol.com/molbin/shared/mcinsctl/fr/4,0,0,84/mcinsctl.cab
                description:
                classification: Open for discussion
                known filename: mcinsctl.dll
                info link:
                info source: Safer Networking Ltd.

                {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control)
                DPF name:
                CLSID name: HardwareDetection Control
                Installer: C:\WINDOWS\Downloaded Program Files\HardwareDetection.inf
                Codebase: http://drivers1.free.fr/hardwaredetection.cab
                Path: C:\PROGRA~1\HARDWA~1\IE\
                Long name: HardwareDetection.ocx
                Short name: HARDWA~1.OCX
                Date (created): 28/06/2005 19:00:44
                Date (last access): 23/04/2006 01:29:44
                Date (last write): 28/06/2005 19:00:44
                Filesize: 634880
                Attributes: archive
                MD5: F21F0D356C2104C06D95D80FB5027146
                CRC32: F88FDE07
                Version: 2.0.0.6

                {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} ()
                DPF name:
                CLSID name:
                Installer: C:\WINDOWS\Downloaded Program Files\McGDMgr.inf
                Codebase: http://download.av.fr.aol.com/molbin/shared/mcgdmgr/fr/1,0,0,21/mcgdmgr.cab
                description:
                classification: Open for discussion
                known filename: McGDMgr.dll
                info link:
                info source: Safer Networking Ltd.

                {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} (Java Runtime Environment 1.5.0)
                DPF name: Java Runtime Environment 1.5.0
                CLSID name: Java Plug-in 1.5.0_06
                Installer:
                Codebase: http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
                Path: C:\Program Files\Java\jre1.5.0_06\bin\
                Long name: NPJPI150_06.dll
                Short name: NPJPI1~1.DLL
                Date (created): 02/03/2006 14:52:58
                Date (last access): 25/07/2006 15:14:44
                Date (last write): 10/11/2005 14:22:12
                Filesize: 69746
                Attributes: archive
                MD5: D2CF6BB5E9020E6707B62575F8083954
                CRC32: 7F39DC54
                Version: 5.0.60.5

                {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.5.0)
                DPF name: Java Runtime Environment 1.5.0
                CLSID name: Java Plug-in 1.5.0_06
                Installer:
                Codebase: http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
                Path: C:\Program Files\Java\jre1.5.0_06\bin\
                Long name: NPJPI150_06.dll
                Short name: NPJPI1~1.DLL
                Date (created): 02/03/2006 14:52:58
                Date (last access): 03/08/2006 22:47:10
                Date (last write): 10/11/2005 14:22:12
                Filesize: 69746
                Attributes: archive
                MD5: D2CF6BB5E9020E6707B62575F8083954
                CRC32: 7F39DC54
                Version: 5.0.60.5

                --- Process list ---
                PID: 0 ( 0) [System]
                PID: 468 ( 4) \SystemRoot\System32\smss.exe
                PID: 528 ( 468) \??\C:\WINDOWS\system32\csrss.exe
                PID: 552 ( 468) \??\C:\WINDOWS\system32\winlogon.exe
                PID: 596 ( 552) C:\WINDOWS\system32\services.exe
                size: 108544
                MD5: 63DCDE1A0D86EEB8924D6738FF616EAD
                PID: 608 ( 552) C:\WINDOWS\system32\lsass.exe
                size: 13312
                MD5: 259AF82A0932EEA4F316F92DB94707B6
                PID: 756 ( 596) C:\WINDOWS\system32\svchost.exe
                size: 14336
                MD5: 2979B03D5382A602623C0535B16AB9C0
                PID: 812 ( 596) C:\WINDOWS\system32\svchost.exe
                size: 14336
                MD5: 2979B03D5382A602623C0535B16AB9C0
                PID: 876 ( 596) C:\WINDOWS\System32\svchost.exe
                size: 14336
                MD5: 2979B03D5382A602623C0535B16AB9C0
                PID: 904 ( 596) C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
                size: 307200
                MD5: 68528F3390FD984D520DA35BCD67E748
                PID: 984 ( 596) C:\WINDOWS\System32\svchost.exe
                size: 14336
                MD5: 2979B03D5382A602623C0535B16AB9C0
                PID: 1024 ( 596) C:\WINDOWS\System32\svchost.exe
                size: 14336
                MD5: 2979B03D5382A602623C0535B16AB9C0
                PID: 1068 ( 596) C:\WINDOWS\system32\ZoneLabs\vsmon.exe
                size: 75768
                MD5: ACE93FFFFD1F6B2C3E9F9C996BDEC6DB
                PID: 1364 ( 596) C:\WINDOWS\system32\spoolsv.exe
                size: 57856
                MD5: DA81EC57ACD4CDC3D4C51CF3D409AF9F
                PID: 1488 (1444) C:\WINDOWS\Explorer.EXE
                size: 1036288
                MD5: 2A7BD330924252A2FD80344FC949BB72
                PID: 1564 (1488) C:\Program Files\Lexmark\Lexmark Precision Photo\MemCard.exe
                size: 139264
                MD5: 158860204098A6D34B51F6E372D9D60C
                PID: 1572 (1488) C:\WINDOWS\vsnpstd.exe
                size: 40960
                MD5: F14BD811617D3485EF3A8B6BFF880024
                PID: 1580 (1488) C:\Program Files\MessengerPlus! 3\MsgPlus.exe
                size: 190024
                MD5: F5F3A19013808113B1F3DADA4379606A
                PID: 1592 (1488) C:\Program Files\Real\RealPlayer\RealPlay.exe
                size: 26112
                MD5: EA9D3466AC7A7F62D386937DF9CB8C41
                PID: 1616 (1488) C:\Program Files\Ulead Systems\Ulead Photo Express My Scrapbook 2.0\calcheck.exe
                size: 69632
                MD5: 981ADA7F82B71BF7085F1B1768AE56B3
                PID: 1764 (1488) C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                size: 108160
                MD5: 9C4DB1F201C975B65FC4A83D4099A70E
                PID: 1772 (1664) C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
                size: 61440
                MD5: F9710A77123CC3FD09D062F2AF33E473
                PID: 1796 (1488) C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                size: 344064
                MD5: 8824078BDA1635639AAE125D24B85383
                PID: 1820 (1488) C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
                size: 36975
                MD5: 61A3A9D5D98BF0331DF5B716144A8100
                PID: 1828 (1488) C:\Program Files\QuickTime\qttask.exe
                size: 98304
                MD5: 9B4C1812595C389AB9CCF1FF3B315248
                PID: 1836 (1488) C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                size: 968696
                MD5: D1D3726A8508B6183C620B4F6CE82F70
                PID: 1892 (1488) C:\WINDOWS\system32\ctfmon.exe
                size: 15360
                MD5: 64E41E8FEE655B03E3F19DED21BA5118
                PID: 1976 (1488) C:\PROGRA~1\Ahead\NEROPH~1\data\xtras\mssysmgr.exe
                size: 212992
                MD5: 552A81085E1D52C83C81AC351D8E2AA9
                PID: 1984 (1488) C:\Program Files\TGTSoft\StyleXP\StyleXP.exe
                size: 1118208
                MD5: C5EB75B5A45C4A01D8CE6D577750194A
                PID: 2020 (1488) C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE
                size: 24614
                MD5: 3CE65FCF1A99A0293AA4BE5AF6CCFF56
                PID: 264 ( 232) C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
                size: 802816
                MD5: 3413F188DDC03149E02EC683CC8CF72B
                PID: 368 ( 596) C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
                size: 98304
                MD5: 0F6D872FD048D437DCBF5C1A80194886
                PID: 400 ( 264) C:\PROGRA~1\Wanadoo\ComComp.exe
                size: 245760
                MD5: B61E01BE313E30D37AC2D74C86D9E719
                PID: 112 ( 596) C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                size: 53248
                MD5: 2422BFA24680354CBEC04F5F54E897F3
                PID: 516 ( 596) C:\Program Files\Alwil Software\Avast4\ashServ.exe
                size: 102448
                MD5: F5E1A90965097369F9A2628E3FC8B85A
                PID: 612 ( 264) C:\PROGRA~1\Wanadoo\Toaster.exe
                size: 69632
                MD5: C2D1BD2B433571ECEC29924ACE5D7C62
                PID: 728 ( 264) C:\PROGRA~1\Wanadoo\Inactivity.exe
                size: 32768
                MD5: 5F6DBF75D05462EED92B42376E89D9FE
                PID: 644 ( 264) C:\PROGRA~1\Wanadoo\PollingModule.exe
                size: 69632
                MD5: EDF02F58940FD56C12357D150F5397C0
                PID: 1000 ( 596) C:\Program Files\ewido anti-malware\ewidoctrl.exe
                size: 13888
                MD5: 26830B750372AB1BF29C95DEEBEB802F
                PID: 1192 ( 756) C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
                size: 45056
                MD5: 68E404DB5525373FE0554ED2607F0C82
                PID: 1216 ( 596) C:\WINDOWS\System32\FTRTSVC.exe
                size: 40960
                MD5: D1261099E03EEE90976EA19002995B89
                PID: 1320 ( 596) C:\Program Files\Borland\InterBase\Bin\ibguard.exe
                size: 22016
                MD5: D8294A7ACF476036680F14C24121A689
                PID: 1400 ( 596) C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
                size: 139264
                MD5: 6EF1CC877E7074E4885247374B623D98
                PID: 1732 ( 596) C:\WINDOWS\system32\pctspk.exe
                size: 86016
                MD5: 9946F9F9B359B010E879D6FF0155D9B7
                PID: 1788 ( 596) C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
                size: 118784
                MD5: E0297D369962F00E52BBACE14A554DF5
                PID: 2080 ( 596) C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
                size: 172065
                MD5: 0BB8DF87CDA6138F84E6C84D7AE492E9
                PID: 2152 ( 596) C:\WINDOWS\System32\svchost.exe
                size: 14336
                MD5: 2979B03D5382A602623C0535B16AB9C0
                PID: 2208 ( 596) C:\WINDOWS\system32\wdfmgr.exe
                size: 38912
                MD5: C81B8635DEE0D3EF5F64B3DD643023A5
                PID: 2980 ( 596) C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                size: 245808
                MD5: E23DE26414C4C544E6EB7D00672C0F8F
                PID: 3088 ( 596) C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                size: 364592
                MD5: EE7A544188ED76A296005735E26BDB51
                PID: 3184 ( 596) C:\Program Files\Borland\InterBase\Bin\ibserver.exe
                size: 1703936
                MD5: A9719B33E13E7AC7B9DB15F30439E7C6
                PID: 3412 ( 596) C:\WINDOWS\System32\alg.exe
                size: 44544
                MD5: B43CC0F07752D456038CD0268E4D84E9
                PID: 3476 ( 400) C:\PROGRA~1\Wanadoo\Watch.exe
                size: 20480
                MD5: 9A29592CD135F6262C429152F7A8DD4A
                PID: 3968 ( 400) C:\Program Files\Internet Explorer\iexplore.exe
                size: 93184
                MD5: 385D1644E676C96EB07848ADA63E37FA
                PID: 416 (1488) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
                size: 4393096
                MD5: 09CA174A605B480318731E691DC98539
                PID: 1424 ( 400) C:\Program Files\Internet Explorer\iexplore.exe
                size: 93184
                MD5: 385D1644E676C96EB07848ADA63E37FA
                PID: 1752 ( 400) C:\Program Files\Internet Explorer\iexplore.exe
                size: 93184
                MD5: 385D1644E676C96EB07848ADA63E37FA
                PID: 4 ( 0) System

                --- Browser start & search pages list ---
                Spybot - Search & Destroy browser pages report, 03/08/2006 22:47:11

                HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
                C:\WINDOWS\system32\blank.htm
                HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
                https://www.google.com/?gws_rd=ssl
                HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar
                https://www.orange.fr/portail
                HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
                https://www.orange.fr/portail
                HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\@
                http://www.google.com/keyword/%s
                HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
                %SystemRoot%\system32\blank.htm
                HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
                http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
                HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
                http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
                http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
                https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm

                --- Winsock Layered Service Provider list ---

                --- Uninstall list ---
                5 Clicks (5 Clicks)
                uninstall cmd: C:\WINDOWS\uninst.exe -f"C:\Program Files\Interapple\5 Clicks\DeIsL1.isu" -c"C:\Program Files\Interapple\5 Clicks\_ISREG32.DLL"

                e-zshopper (ActiveShopper)
                install location: C:\Program Files\e-zshopper
                uninstall cmd: C:\Program Files\e-zshopper\Uninstall.exe
                publisher: Shelron

                Ad-Aware SE Personal 1.06 (Ad-Aware SE Personal)
                uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
                publisher: Lavasoft
                help link: https://www.adaware.com/

                (AddressBook)

                Adobe Photoshop 7.0 7.0 (Adobe Photoshop 7.0)
                version (major): 7
                install location: C:\Program Files\Adobe\Photoshop 7.0
                install source: F:\Photoshop\
                uninstall cmd: C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Adobe\Photoshop 7.0\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop 7.0\Uninst.dll"
                publisher: Adobe Systems, Inc.

                AIM (AIM)
                uninstall cmd: C:\Program Files\AIM\uninstll.exe -LOG= C:\Program Files\AIM\install.log -OEM=

                Anti-Trojan 5.5 5.5 (Anti-Trojan 5.5_is1)
                uninstall cmd: "C:\Program Files\Anti-Trojan-55\unins000.exe"
                publisher: Anti-Trojan Network
                help link: http://www.anti-trojan.net

                ATI Display Driver (ATI Display Driver)
                uninstall cmd: rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean

                avast! Antivirus 4.7 (avast!)
                version (major): 4
                version (minor): 7
                install location: C:\PROGRA~1\ALWILS~1\Avast4
                install source: C:\PROGRA~1\ALWILS~1\Avast4\setup
                uninstall cmd: rundll32 C:\PROGRA~1\ALWILS~1\Avast4\Setup\setiface.dll,RunSetup
                publisher: Alwil Software
                help link: https://www.avast.com/fr-fr/index

                (Branding)

                Cartes de visite - (C) Easy (Cartes de visite - (C) Easy_is1)
                install location: C:\Program Files\Anuman Interactive\Cartes de visite - (C) Easy\
                uninstall cmd: "C:\Program Files\Anuman Interactive\Cartes de visite - (C) Easy\unins000.exe"
                publisher: Anuman Interactive
                help link: http://www.anuman-interactive.com

                CCleaner (remove only) (CCleaner)
                uninstall cmd: "C:\Program Files\CCleaner\uninst.exe"

                ColorNick v2 plugin for Messenger Plus! (ColorNick)
                uninstall cmd: "C:\Program Files\MessengerPlus! 3\Plugins\ColorNick\CNuninst.exe"
                publisher: FC Prod.
                contact: fabien@crespel.net

                (Connection Manager)

                (Creative WebCam Vista)

                (Creative WebCam Vista Guide de l'utilisateur Francais)

                (DirectAnimation)

                (DirectDrawEx)

                (DXM_Runtime)

                eMule (eMule)
                uninstall cmd: "C:\Program Files\eMule\Uninstall.exe"

                Outil de connexion Wanadoo (EspaceWanadoo.exe)
                uninstall cmd: C:\PROGRA~1\Wanadoo\MessageDesinstallation.exe Wanadoo

                ewido anti-malware (ewidoantimalware)
                install location: C:\Program Files\ewido anti-malware
                uninstall cmd: C:\Program Files\ewido anti-malware\Uninstall.exe
                publisher: ewido networks
                help link: https://www.avg.com/en-us/free-antivirus-download

                (F-Secure Anti-Spyware)
                uninstall cmd: "C:\Program Files\Securitoo\Av_Fw\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware"

                Securitoo AntiSpyware (F-Secure Anti-Spyware Standalone)
                uninstall cmd: "C:\Program Files\Securitoo\Av_Fw\FSuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware Standalone"

                (Fontcore)

                HijackThis 1.99.1 1.99.1 (HijackThis)
                uninstall cmd: C:\HijackThis.exe /uninstall
                publisher: Soeperman Enterprises Ltd.

                (ICW)

                (IE40)

                (IE4Data)

                (IE5BAKEX)

                (IEData)

                Photos numériques (ImpPhotosNum)
                uninstall cmd: "C:\Program Files\Anuman Interactive\Photos numériques\uninstall.exe"

                IncrediMail Xe (IncrediMail)
                uninstall cmd: C:\PROGRA~1\INCRED~1\bin\imsetup.exe /remove /addon:IncrediMail /log:IncMail.log

                (InstallShield Uninstall Information)

                Lexmark Precision Photo 1.20 (InstallShield_{56F81937-C3B5-4C98-A260-E47B631709D7})
                version: 18087936
                version (major): 1
                version (minor): 20
                estimated size: 23055
                install date: 20050831
                install source: E:\PHOTOCTR\
                uninstall cmd: C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\8\INTEL3~1\IDriver.exe /M{56F81937-C3B5-4C98-A260-E47B631709D7} /l1036 /z/U
                publisher: Lexmark International
                comments: Logiciel du Lexmark Precision Photo

                Plus de 200 000 Cliparts et Photos 3.0.6 (InstallShield_{D01940CE-8BD3-4258-B4E2-42F185AE1968})
                version: 50331654
                version (major): 3
                estimated size: 291536
                install date: 20050912
                install source: F:\
                uninstall cmd: C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{D01940CE-8BD3-4258-B4E2-42F185AE1968}
                publisher: Hemera
                comments: Vos remarques
                contact: Service support clientèle
                help link: http://www.votresociété.com/aide
                help telephone: +1-555-555-4505

                InterBase 6.0 6.0 (InterBase 6.0)
                uninstall cmd: C:\PROGRA~1\Borland\INTERB~1\UNWISE.EXE C:\PROGRA~1\Borland\INTERB~1\INSTIB6.LOG
                publisher: aGecko
                contact: support@ancestrologie.com
                help link: www.ancestrologie.com
                help telephone: 04 04 01 05 06

                IncrediMail JunkFilter Plus (JunkFilterPlus)
                uninstall cmd: C:\PROGRA~1\INCRED~1\bin\imsetup.exe /remove /addon:JunkFilterPlus

                Correctif Windows XP - KB873333 20050114.005213 (KB873333)
                uninstall cmd: C:\WINDOWS\$NtUninstallKB873333$\spuninst\spuninst.exe
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/873333/ms05-012-vulnerability-in-ole-and-com-could-allow-remote-code-executio

                Correctif Windows XP - KB873339 20041117.092459 (KB873339)
                uninstall cmd: C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/873339

                (KB884016)

                Correctif Windows XP - KB885250 20050118.202711 (KB885250)
                uninstall cmd: C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/885250

                Correctif Windows XP - KB885295 20040901.162738 (KB885295)
                uninstall cmd: C:\WINDOWS\$NtUninstallKB885295$\spuninst\spuninst.exe
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/885295

                Correctif Windows XP - KB885835 20041027.181713 (KB885835)
                uninstall cmd: C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/885835/ms04-044-vulnerabilities-in-windows-kernel-and-lsass-could-allow-eleva

                Correctif Windows XP - KB885836 20041028.173203 (KB885836)
                uninstall cmd: C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/885836/ms04-041-a-vulnerability-in-wordpad-could-allow-code-execution

                Correctif Windows XP - KB886185 20041021.090540 (KB886185)
                uninstall cmd: C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/886185

                Correctif Windows XP - KB887472 20041014.162858 (KB887472)
                uninstall cmd: C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/887472

                Correctif Windows XP - KB887742 20041103.095002 (KB887742)
                uninstall cmd: C:\WINDOWS\$NtUninstallKB887742$\spuninst\spuninst.exe
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/887742

                Correctif Windows XP - KB887797 20041018.133824 (KB887797)
                uninstall cmd: C:\WINDOWS\$NtUninstallKB887797$\spuninst\spuninst.exe
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/887797

                Correctif Windows XP - KB888113 20041116.131036 (KB888113)
                uninstall cmd: C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/888113

                Correctif Windows XP - KB888302 20041207.111426 (KB888302)
                uninstall cmd: C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/888302

                Mise à jour de sécurité pour Windows XP (KB890046) 1 (KB890046)
                install date: 20050830
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/890046

                Correctif Windows XP - KB890859 1 (KB890859)
                install date: 20050830
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/890859

                Correctif Windows XP - KB891781 20050110.165439 (KB891781)
                uninstall cmd: C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/891781

                Mise à jour de sécurité pour Windows XP (KB893066) 2 (KB893066)
                install date: 20050830
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/893066/ms05-019-vulnerabilities-in-tcp-ip-could-allow-remote-code-execution-a

                Correctif Windows XP - KB893086 1 (KB893086)
                install date: 20050830
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB893086$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/893086

                Mise à jour de sécurité pour Windows XP (KB893756) 1 (KB893756)
                install date: 20050830
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/893756

                (KB893803)

                Windows Installer 3.1 (KB893803) 3.1 (KB893803v2)
                uninstall cmd: "C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/893803/windows-installer-3-1-v2-3-1-4000-2435-is-available

                Mise à jour pour Windows XP (KB894391) 1 (KB894391)
                install date: 20050831
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/894391/

                Mise à jour de sécurité pour Windows XP (KB896358) 1 (KB896358)
                install date: 20050830
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/896358/ms05-026-a-vulnerability-in-html-help-could-allow-remote-code-executio

                Mise à jour de sécurité pour Windows XP (KB896422) 1 (KB896422)
                install date: 20050830
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/896422/ms05-027-vulnerability-in-server-message-block-could-allow-remote-code

                Mise à jour de sécurité pour Windows XP (KB896423) 1 (KB896423)
                install date: 20050830
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/windows?ui=en-US&rs=en-001&ad=US

                Mise à jour de sécurité pour Windows XP (KB896424) 1 (KB896424)
                install date: 20051110
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/896424

                Mise à jour de sécurité pour Windows XP (KB896428) 1 (KB896428)
                install date: 20050830
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/896428

                Mise à jour de sécurité pour Windows XP (KB896688) 1 (KB896688)
                install date: 20051012
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB896688$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/896688/ms05-052-cumulative-security-update-for-internet-explorer

                Mise à jour pour Windows XP (KB896727) 1 (KB896727)
                install date: 20050831
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB896727$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/896727

                Mise à jour pour Windows XP (KB898461) 1 (KB898461)
                install date: 20050830
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/898461/

                Mise à jour de sécurité pour Windows XP (KB899587) 1 (KB899587)
                install date: 20050830
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/899587

                Mise à jour de sécurité pour Windows XP (KB899588) 1 (KB899588)
                install date: 20050830
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB899588$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/899588

                Mise à jour de sécurité pour Windows XP (KB899591) 1 (KB899591)
                install date: 20050830
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/899591

                Mise à jour pour Windows XP (KB900485) 2 (KB900485)
                install date: 20060426
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/900485

                Mise à jour de sécurité pour Windows XP (KB900725) 1 (KB900725)
                install date: 20051012
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/900725

                Mise à jour pour Windows XP (KB900930) 1 (KB900930)
                install date: 20050831
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB900930$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/900930

                Mise à jour de sécurité pour Windows XP (KB901017) 1 (KB901017)
                install date: 20051012
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/901017

                Mise à jour de sécurité pour Windows XP (KB901214) 1 (KB901214)
                install date: 20050830
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/901214

                Mise à jour de sécurité pour Windows XP (KB902400) 1 (KB902400)
                install date: 20051012
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/902400/ms05-051-vulnerabilities-in-ms-dtc-and-com-could-allow-remote-code-exe

                Mise à jour de sécurité pour Windows XP (KB904706) 1 (KB904706)
                install date: 20051012
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/904706

                Mise à jour de sécurité pour Windows XP (KB905414) 1 (KB905414)
                install date: 20051012
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/905414

                Mise à jour de sécurité pour Windows XP (KB905749) 1 (KB905749)
                install date: 20051012
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/905749

                Mise à jour de sécurité pour Windows XP (KB905915) 1 (KB905915)
                install date: 20051217
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB905915$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/905915

                Mise à jour de sécurité pour Windows XP (KB908519) 1 (KB908519)
                install date: 20060209
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/908519

                Mise à jour de sécurité pour Windows XP (KB908531) 1 (KB908531)
                install date: 20060416
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/908531

                Mise à jour pour Windows XP (KB910437) 1 (KB910437)
                install date: 20051217
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/910437

                Mise à jour de sécurité pour Windows XP (KB911280) 1 (KB911280)
                install date: 20060617
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/911280

                Mise à jour de sécurité pour Windows XP (KB911562) 1 (KB911562)
                install date: 20060416
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/911562

                Mise à jour de sécurité pour Lecteur Windows Media (KB911564) (KB911564)
                install date: 20060214
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/911564

                Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565) (KB911565)
                install date: 20060214
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/911565

                Mise à jour de sécurité pour Windows XP (KB911567) 1 (KB911567)
                install date: 20060416
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/911567

                Mise à jour de sécurité pour Windows XP (KB911927) 1 (KB911927)
                install date: 20060214
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/911927

                Mise à jour de sécurité pour Windows XP (KB912812) 1 (KB912812)
                install date: 20060416
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB912812$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/912812/ms06-013-cumulative-security-update-for-internet-explorer

                Mise à jour de sécurité pour Windows XP (KB912919) 1 (KB912919)
                install date: 20060209
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/912919

                Mise à jour de sécurité pour Windows XP (KB913446) 1 (KB913446)
                install date: 20060214
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB913446$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/913446

                Mise à jour de sécurité pour Windows XP (KB913580) 1 (KB913580)
                install date: 20060512
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/913580

                Mise à jour de sécurité pour Windows XP (KB914388) 1 (KB914388)
                install date: 20060712
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/914388

                Mise à jour de sécurité pour Windows XP (KB914389) 1 (KB914389)
                install date: 20060617
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/914389

                Mise à jour de sécurité pour Windows XP (KB916281) 1 (KB916281)
                install date: 20060617
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB916281$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/916281

                Mise à jour pour Windows XP (KB916595) 1 (KB916595)
                install date: 20060712
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/916595

                Mise à jour de sécurité pour Windows XP (KB917159) 1 (KB917159)
                install date: 20060712
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB917159$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/917159

                Mise à jour de sécurité pour Windows XP (KB917344) 1 (KB917344)
                install date: 20060617
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/917344

                Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734) (KB917734_WMP10)
                install date: 20060617
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/917734

                Mise à jour de sécurité pour Windows XP (KB917953) 1 (KB917953)
                install date: 20060617
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/917953

                Mise à jour de sécurité pour Windows XP (KB918439) 1 (KB918439)
                install date: 20060617
                uninstall cmd: "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
                publisher: Microsoft Corporation
                help link: https://support.microsoft.com/en-us/help/918439

                Language pack for Ad-Aware SE (Language pack for Ad-Aware SE)
                uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\INSTALL.LOG
                publisher: Lavasoft
                help link: http://www.lavasoft.de

                Lexmark 810 Series (Lexmark 810 Series)
                uninstall cmd: C:\WINDOWS\system32\spool\drivers\w32x86\3\LXBSUNST.EXE -NOLICENSE

                L&H TTS3000 Français (LHTTSFRF)
                uninstall cmd: RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\LHTTSFRF.inf, Uninstall

                LifeGlobe Sharks, Terrors of the Deep 0.9 (LifeGlobe Sharks, Terrors of the Deep_is1)
                uninstall cmd: "C:\Program Files\Prolific Publishing, Inc.\Sharks\unins000.exe"
                publisher: Prolific Publishing, Inc.
                help link: https://prolificpublishinginc.com/store/manufacturers.php?manufacturerid=2

                LimeWire 4.10.9 4.10.9 (LimeWire)
                uninstall cmd: "C:\Program Files\LimeWire\uninstall.exe"
                publisher: Lime Wire, LLC
                help link: http://www.limewire.com/support

                LiveReg (Symantec Corporation) 2.2.0.1621 (LiveReg)
                install location: C:\Program Files\Fichiers communs\Symantec Shared\LiveReg
                uninstall cmd: C:\Program Files\Fichiers communs\Symantec Shared\LiveReg\VcSetup.exe /REMOVE
                publisher: Symantec Corporation

                LiveUpdate 2.6 (Symantec Corporation) 2.6.14.0 (LiveUpdate)
                install location: C:\Program Files\Symantec\LiveUpdate
                uninstall cmd: C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
                publisher: Symantec Corporation

                Microsoft .NET Framework 1.1 Hotfix (KB886903) (M886903)
                uninstall cmd: "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M886903\M886903Uninstall.msp"

                Macromedia Shockwave Player (Macromedia Shockwave Player)
                uninstall cmd: C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log

                Microsoft .NET Framework 1.1 (Microsoft .NET Framework 1.1 (1033))
                uninstall cmd: msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
                readme: file://C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\RepairRedist.htm

                (Microsoft NetShow Player 2.0)

                (MobileOptionPack)

                (MPlayer2)

                Messenger Plus! 3 (MsgPlus! Plugin)
                uninstall cmd: "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /Remove

                (MSI30-Beta1)

                (MSI30-Beta2)

                (MSI30-KB884016)

                (MSI30-RC1)

                (MSI30-RC2)

                (MSI30a-KB884016)

                (MSI31-Beta)

                (MSI31-RC1)

                (MsJavaVM)

                Nero 6 Ultra Edition (Nero - Burning Rom!UninstallKey)
                uninstall cmd: C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL

                Nero PhotoShow Elite 3.0 (Nero PhotoShow Elite)
                version (major): 3
                install location: C:\Program Files\Ahead\Nero PhotoShow\Nero PhotoShow Elite.exe
                uninstall cmd: "C:\Program Files\Ahead\Nero PhotoShow\data\Xtras\Uninstall.exe"
                publisher: Simple Star, Inc.
                help link: https://www.simplestar.com/support

                (NetMeeting)

                Norton CleanSweep (Norton CleanSweep)
                version: 7
                version (major): 7
                version (minor): 1
                install location: C:\Program Files\Norton SystemWorks\Norton CleanSweep
                publisher: Symantec Corporation

                Norton Speed Disk 7.0 pour Windows NT (Norton Speed Disk)

                Norton Utilities 2003 pour Windows (Norton Utilities)
                version (major): 7
                install location: C:\Program Files\Norton SystemWorks\Norton Utilities\NORTON.EXE
                publisher: Symantec Corporation

                (OutlookExpress)

                (PCHealth)
                uninstall cmd: rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

                QuickTime (QuickTime)
                uninstall cmd: C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log

                RealPlayer Basic (RealPlayer 6.0)
                uninstall cmd: C:\Program Files\Fichiers communs\Real\Update\\rnuninst.exe RealNetworks|RealPlayer|6.0

                (SchedulingAgent)

                SereneScreen Marine Aquarium Time 1.1.2 (SereneScreen Marine Aquarium Time_is1)
                uninstall cmd: "C:\Program Files\SereneScreen\Marine Aquarium Time\unins000.exe"
                publisher: Prolific Publishing, Inc.
                help link: https://serenescreen.com/v2/

                (Sevinst)

                (Shockwave)

                Adobe Flash Player 9 ActiveX 9 (ShockwaveFlash)
                uninstall cmd: C:\WINDOWS\system32\Macromed\Flash\UninstFl.exe -q
                publisher: Adobe Systems
                help link: https://helpx.adobe.com/flash-player.html

                SLD Codec Pack (SLD Codec Pack)
                uninstall cmd: C:\Program Files\SLD Codec Pack\uninstall.exe

                Spybot - Search & Destroy 1.4 1.4 (Spybot - Search & Destroy_is1)
                install location: C:\Program Files\Spybot - Search & Destroy\
                uninstall cmd: "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
                publisher: Safer Networking Limite