Attention virus!!!

Résolu
Bonjour,
salut tout le monde, jai chopé un virus est ce que quelqu'un peut m'aider? avast detecte trojan-gen (que peut-il faire comme degats??)!!! et impossible de le supprimer.
voici une analyse hijackthis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:17:06, on 16/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe
C:\Program Files\Fichiers communs\Logitech\G-series Software\LGDCore.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ASUS\PC Probe II\Probe2.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\ASUS WiFi-AP Solo\RtWLan.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\StartClock\StartClock.exe
C:\Program Files\ASUS\AASP\1.00.32\aaCenter.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\ControlMK\ControlMK.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.fr...
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\xRaidSetup.exe boot
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
O4 - HKLM\..\Run: [Ai Nap] "C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Fichiers communs\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Launch PC Probe II] "C:\Program Files\ASUS\PC Probe II\Probe2.exe" 1
O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [SuperCopier 2 (explorer file copy replacement)] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
O4 - Startup: StartClock.lnk = C:\Program Files\StartClock\StartClock.exe
O4 - Global Startup: ASUS WiFi-AP Solo.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - C:PROGRA~1MICROS~2Office12EXCEL.EXE...
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CS2\Services\Tcpip\..\{33A930C7-2CE0-47AE-9FCE-790C3AED0DB3}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS3\Services\Tcpip\..\{33A930C7-2CE0-47AE-9FCE-790C3AED0DB3}: NameServer = 208.67.222.222,208.67.220.220
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTServ.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 7103 bytes

Si quelqu'un veux bien perde un peu de temps pour resoudre ce problème!!! ça serait cool!!
Configuration: Windows XP
Firefox 3.0.4

43 réponses

Résumé de la discussion

La discussion porte sur une infection virale détectée par Avast comme trojan-gen sur Windows XP, avec une analyse HijackThis détaillée qui montre de multiples processus et services potentiellement malveillants. Selon la meilleure réponse, la solution essentielle consiste à exécuter Malwarebytes' Anti-Malware après mise à jour, en mode normal, puis de supprimer les éléments détectés et de partager le rapport ou le tutoriel recommandé. Cette approche est cohérente avec les autres conseils du fil, qui insistent sur l’élimination des détections suspectes et la recherche de rapports de suppression détaillés. En cas de rémanence persistante après suppression, il peut être utile d’examiner ensuite les composants détectés dans les journaux et d’envisager des nettoyages complémentaires ciblés.

Bobot (l’IA à votre service)
  1. Contributeur sécurité
    panda avait trouvé quoi?

    encore des soucis?
    1. Je suis tombé sur ce fil après avoir fait une recherche google sur un certain "hotfix kbid 954550" pour windoz xp... que Microsoft ne connait même pas !!! et qui était impossible de supprimer... après être passé par un point de restauration système antérieur à ce hotfix, il semblerait que mon ordi arrête de déconner.

      Si vous aussi avez rencontré des problèmes après avoir installé ce hotfix, il pourrait s'avérer intéressant de chercher de ce côté... parce que si MS ne le connaît pas, ça sent plutôt mauvais...
    2. Attention... après une recherche plus approfondie, il serait possible que je me gourre... le hotfix en question semble entrer en conflit avec .net Framework et simplement provoquer un bourrage de la CPU... pas forcément un virus donc...

      Vu que je n'arrive pas à éditer mon 1er message, je laisse le soin aux modos de décider quoi en faire...

      Bonne année à tous...
  2. jlpjlp? comment ca se fait que sur le test en ligne avant quil se bloque à 18% il ttrouve 4fichiers infecté et la bitdefender trouve nada?
    1. le test ne me détecte rien! je présume que cest bon signe?

      //-----------------------------------------------------------------
      //
      // Produit BitDefender Free Edition v10
      // Produit 10.2
      //
      // Créé le: 20/12/2008 13:41:39
      //
      //-----------------------------------------------------------------

      Statistiques

      Chemin cible: C:\
      D:\
      E:\
      M:\
      Dossiers : 8944
      Fichiers : 172786
      Processus Mémoire analysés : 0
      Archives : 220
      Fichiers enpaquetés : 4709
      Virus trouvés : 0
      Fichiers infectés : 0
      Processus Mémoire infectés : 0
      Fichiers suspects : 0
      Alertes : 0
      Fichiers désinfectés : 0
      Fichiers effacés : 0
      Fichiers déplacés : 0
      Erreurs I/O : 44
      Temps d'analyse :=00:28:25
      Fichiers/seconde :101

      Statistiques Spywares

      Registres analysés : 0
      Registres infectés : 0
      Cookies analysés : 0
      Cookies infectés : 0
      Fichiers spyware infectés : 0
      Menaces Spyware détectées : 0

      Définitions virus : 2369498
      Plugins d'analyse : 17
      Plugins archives : 45
      Plug-ins décompression : 7
      Plug-ins messagerie : 6
      Plug-ins système : 5

      Options d'analyse

      Détection
      [X] Analyser le secteur de boot
      [X] Processus mémoire
      [ ] Analyser les archives
      [X] Analyser les fichiers enpaquetés
      [X] Analyser la messagerie

      Masque fichiers
      [ ] Programmes
      [X] Tous les fichiers
      [ ] Extensions définies par l'utilisateur:
      [ ] Exclure les extensions: ;

      Action

      Objets infectés
      [ ] Ignorer
      [X] Désinfecter
      [ ] Effacer
      [ ] Mettre en quarantaine
      [ ] Demander l'action

      Seconde action
      [ ] Ignorer
      [ ] Effacer
      [X] Mettre en quarantaine
      [ ] Demander l'action

      Options d'analyse
      [X] Activer les alertes
      [ ] Activer l'heuristique
      [ ] Afficher tous les fichiers dans le journal
      [X] Fichier journal: C:\Documents and Settings\All Users\Application Data\Bitdefender\Desktop\Profiles\Logs\full_scan\1229776899.log

      Options d'analyse Spyware

      [X] Analyse contre les risques non-viraux
      [ ] Ecarter de l'analyse les dialers et les applications
      [X] Clés de registres
      [X] Cookies
      1. ok jlpjlp je fais la mise a jrs puis janalyse je te redis ça tout de suite ;)
        1. slt! ben le scan en ligne je voudrai bien te le passer ya pas de problème!jessaie sur panda il se bloque a chaque fois à 18% sur "Elément en cours: C:\System Volume Informat...anagerRemoteDatabase" jai pourtant désactiver lav au cas ou mais rien ny fait! ya pas une autre solution?? à part formater...
          1. Ca me semble louche ça :

            C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

            on devrai le renommer super arnaque ^^
            1. jai refai un scan avec spyboth tal et voila le rapport :

              --- Search result list ---
              Hint of the Day: Click the bar at the right of this to see more information! ()

              MediaPlex: Cookie traceur (Internet Explorer: breizh-222) (Cookie, nothing done)

              MediaPlex: Cookie traceur (Internet Explorer: breizh-222) (Cookie, nothing done)

              BlueStreak: Cookie traceur (Firefox: default) (Cookie, nothing done)

              DoubleClick: Cookie traceur (Firefox: default) (Cookie, nothing done)

              Tradedoubler: Cookie traceur (Firefox: default) (Cookie, nothing done)

              Tradedoubler: Cookie traceur (Firefox: default) (Cookie, nothing done)

              Tradedoubler: Cookie traceur (Firefox: default) (Cookie, nothing done)

              Statcounter: Cookie traceur (Firefox: default) (Cookie, nothing done)

              Adviva: Cookie traceur (Firefox: default) (Cookie, nothing done)

              --- Spybot - Search & Destroy version: 1.6.0 (build: 20080707) ---

              2008-07-07 blindman.exe (1.0.0.8)
              2008-07-07 SDFiles.exe (1.6.0.4)
              2008-07-07 SDMain.exe (1.0.0.6)
              2008-07-07 SDShred.exe (1.0.2.3)
              2008-07-07 SDUpdate.exe (1.6.0.8)
              2008-07-07 SDWinSec.exe (1.0.0.12)
              2008-07-07 SpybotSD.exe (1.6.0.30)
              2008-09-16 TeaTimer.exe (1.6.3.25)
              2008-09-04 unins000.exe (51.49.0.0)
              2008-07-07 Update.exe (1.6.0.7)
              2008-10-22 advcheck.dll (1.6.2.13)
              2007-04-02 aports.dll (2.1.0.0)
              2008-06-14 DelZip179.dll (1.79.11.1)
              2008-09-15 SDHelper.dll (1.6.2.14)
              2008-06-19 sqlite3.dll
              2008-10-22 Tools.dll (2.1.6.8)
              2008-11-04 Includes\Adware.sbi (*)
              2008-12-09 Includes\AdwareC.sbi (*)
              2008-06-03 Includes\Cookies.sbi (*)
              2008-09-02 Includes\Dialer.sbi (*)
              2008-09-09 Includes\DialerC.sbi (*)
              2008-07-23 Includes\HeavyDuty.sbi (*)
              2008-11-18 Includes\Hijackers.sbi (*)
              2008-11-18 Includes\HijackersC.sbi (*)
              2008-12-09 Includes\Keyloggers.sbi (*)
              2008-12-09 Includes\KeyloggersC.sbi (*)
              2004-11-29 Includes\LSP.sbi (*)
              2008-11-18 Includes\Malware.sbi (*)
              2008-12-09 Includes\MalwareC.sbi (*)
              2008-11-03 Includes\PUPS.sbi (*)
              2008-12-09 Includes\PUPSC.sbi (*)
              2007-11-07 Includes\Revision.sbi (*)
              2008-06-18 Includes\Security.sbi (*)
              2008-12-09 Includes\SecurityC.sbi (*)
              2008-06-03 Includes\Spybots.sbi (*)
              2008-06-03 Includes\SpybotsC.sbi (*)
              2008-12-10 Includes\Spyware.sbi (*)
              2008-12-10 Includes\SpywareC.sbi (*)
              2008-06-03 Includes\Tracks.uti
              2008-11-04 Includes\Trojans.sbi (*)
              2008-12-10 Includes\TrojansC.sbi (*)
              2008-03-04 Plugins\Chai.dll
              2008-03-05 Plugins\Fennel.dll
              2008-02-26 Plugins\Mate.dll
              2007-12-24 Plugins\TCPIPAddress.dll

              --- System information ---
              Windows XP (Build: 2600) Service Pack 3 (5.1.2600)
              / MSXML4SP2: Security update for MSXML4 SP2 (KB936181)
              / MSXML4SP2: Security update for MSXML4 SP2 (KB954430)
              / Windows / SP1: Microsoft Internationalized Domain Names Mitigation APIs
              / Windows / SP1: Microsoft National Language Support Downlevel APIs
              / Windows Media Format 11 SDK: Hotfix for Windows Media Format 11 SDK (KB929399)
              / Windows Media Player: Mise à jour de sécurité pour Lecteur Windows Media (KB952069)
              / Windows Media Player 11: Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)
              / Windows Media Player 11: Correctif pour Lecteur Windows Media 11 (KB939683)
              / Windows Media Player 11: Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)
              / Windows XP: Mise à jour de sécurité pour Windows XP (KB923689)
              / Windows XP: Mise à jour de sécurité pour Windows XP (KB941569)
              / Windows XP / SP10: Microsoft Compression Client Pack 1.0 for Windows XP
              / Windows XP / SP3: High Definition Audio Driver Package - KB888111
              / Windows XP / SP3: Windows XP Service Pack 3
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB938464)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB946648)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB950762)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB950974)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB951066)
              / Windows XP / SP4: Mise à jour pour Windows XP (KB951072-v2)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB951376-v2)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB951698)
              / Windows XP / SP4: Mise à jour pour Windows XP (KB951978)
              / Windows XP / SP4: Correctif pour Windows XP (KB952287)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB952954)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB953838)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB953839)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB954211)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB954459)
              / Windows XP / SP4: Hotfix for Windows XP (KB954550-v5)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB954600)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB955069)
              / Windows XP / SP4: Mise à jour pour Windows XP (KB955839)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956390)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956391)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956802)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956841)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB957095)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB957097)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB958215)
              / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB958644)
              / XML Paper Specification Shared Components Pack 1.0: XML Paper Specification Shared Components Pack 1.0

              --- Startup entries list ---
              Located: HK_LM:Run, 36X Raid Configurer
              command: C:\WINDOWS\system32\xRaidSetup.exe boot
              file: C:\WINDOWS\system32\xRaidSetup.exe
              size: 1953792
              MD5: E251DD212E50BC9262D067296B2E5788

              Located: HK_LM:Run, Adobe Reader Speed Launcher
              command: "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
              file: C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
              size: 34672
              MD5: 69B16C7B7746BA5C642FC05B3561FC73

              Located: HK_LM:Run, Ai Nap
              command: "C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe"
              file: C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe
              size: 1423360
              MD5: EE3CE36574FD53E5D7713183838E3BE1

              Located: HK_LM:Run, avast!
              command: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
              file: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
              size: 81000
              MD5: 55EBFBAB39BFAB5E62358C093F297641

              Located: HK_LM:Run, EPSON Stylus C46 Series
              command: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
              file: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
              size: 99840
              MD5: 32B0CBB036AE701352881A4303B10A7A

              Located: HK_LM:Run, JMB36X IDE Setup
              command: C:\WINDOWS\RaidTool\xInsIDE.exe
              file: C:\WINDOWS\RaidTool\xInsIDE.exe
              size: 36864
              MD5: DB4E2D9C09A5762CB2551222B5E443B2

              Located: HK_LM:Run, Kernel and Hardware Abstraction Layer
              command: KHALMNPR.EXE
              file: C:\WINDOWS\KHALMNPR.EXE
              size: 76304
              MD5: E6A9F68D26A094FB78B98180A40A29FC

              Located: HK_LM:Run, Launch LGDCore
              command: "C:\Program Files\Fichiers communs\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
              file: C:\Program Files\Fichiers communs\Logitech\G-series Software\LGDCore.exe
              size: 1126400
              MD5: 0AD5DF852C968892B3173716A71441A9

              Located: HK_LM:Run, Launch PC Probe II
              command: "C:\Program Files\ASUS\PC Probe II\Probe2.exe" 1
              file: C:\Program Files\ASUS\PC Probe II\Probe2.exe
              size: 2130432
              MD5: 66E2BC18AA31B9FF3E5C57399B5CA8FF

              Located: HK_LM:Run, SoundMAXPnP
              command: C:\Program Files\Analog Devices\Core\smax4pnp.exe
              file: C:\Program Files\Analog Devices\Core\smax4pnp.exe
              size: 868352
              MD5: 1983A11F702BDC5DB65B4B0F376FF6FD

              Located: HK_LM:Run, StartCCC
              command: "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
              file: C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
              size: 61440
              MD5: E1E71D80D078C576801B6FE2A29FCF85

              Located: HK_LM:Run, SunJavaUpdateSched
              command: "C:\Program Files\Java\jre6\bin\jusched.exe"
              file: C:\Program Files\Java\jre6\bin\jusched.exe
              size: 136600
              MD5: B98FFA8288EFAABC436C30D198608345

              Located: HK_LM:Run, WinPatrol
              command: C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
              file: C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
              size: 333120
              MD5: D6CF53D042B26E9E055D5457F5E98F30

              Located: HK_LM:Run, ZoneAlarm Client
              command: "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
              file: C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
              size: 919016
              MD5: 6B632BE30A0930421560A9A9C677ABD4

              Located: HK_CU:Run, CTFMON.EXE
              where: .DEFAULT...
              command: C:\WINDOWS\system32\CTFMON.EXE
              file: C:\WINDOWS\system32\CTFMON.EXE
              size: 15360
              MD5: 59DC5BB82E4C8E0B3EADCFDBC44BA6E4

              Located: HK_CU:Run, IncrediMail
              where: S-1-5-21-117609710-1645522239-839522115-1003...
              command: C:\Program Files\IncrediMail\bin\IncMail.exe /c
              file: C:\Program Files\IncrediMail\bin\IncMail.exe
              size: 243072
              MD5: 7AD7DAAA39AD39931E5947543084DDF3

              Located: HK_CU:Run, msnmsgr
              where: S-1-5-21-117609710-1645522239-839522115-1003...
              command: "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
              file: C:\Program Files\Windows Live\Messenger\msnmsgr.exe
              size: 5724184
              MD5: 97384875B6D03831B2D1820AB8952F67

              Located: HK_CU:Run, SuperCopier 2 (explorer file copy replacement)
              where: S-1-5-21-117609710-1645522239-839522115-1003...
              command: C:\Program Files\SuperCopier2\SuperCopier2.exe
              file: C:\Program Files\SuperCopier2\SuperCopier2.exe
              size: 1052672
              MD5: B8DA797CEA896C42F5BAD9E08E21AF9F

              Located: HK_CU:Run, CTFMON.EXE
              where: S-1-5-18...
              command: C:\WINDOWS\system32\CTFMON.EXE
              file: C:\WINDOWS\system32\CTFMON.EXE
              size: 15360
              MD5: 59DC5BB82E4C8E0B3EADCFDBC44BA6E4

              Located: Démarrage (tous utilisateurs), ASUS WiFi-AP Solo.lnk
              where: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage...
              command: C:\Program Files\ASUS WiFi-AP Solo\RtWLan.exe
              file: C:\Program Files\ASUS WiFi-AP Solo\RtWLan.exe
              size: 987136
              MD5: FC4715240C014A3268278AFBFF7AE70E

              Located: Démarrage (tous utilisateurs), Logitech SetPoint.lnk
              where: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage...
              command: C:\Program Files\Logitech\SetPoint\SetPoint.exe
              file: C:\Program Files\Logitech\SetPoint\SetPoint.exe
              size: 805392
              MD5: D0948BE9B3547B9669195D7F84FC09F7

              Located: Démarrage (utilisateur), MSN Pictures Displayer.lnk
              where: C:\Documents and Settings\breizh-222\Menu Démarrer\Programmes\Démarrage...
              command: C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
              file: C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
              size: 0
              MD5: D41D8CD98F00B204E9800998ECF8427E
              Warning: if the file is actually larger than 0 bytes,
              the checksum could not be properly calculated!

              Located: Démarrage (utilisateur), StartClock.lnk
              where: C:\Documents and Settings\breizh-222\Menu Démarrer\Programmes\Démarrage...
              command: C:\Program Files\StartClock\StartClock.exe
              file: C:\Program Files\StartClock\StartClock.exe
              size: 93696
              MD5: 750BAED62B5CAA46322B9A9BDE67A8B1

              Located: WinLogon, !SASWinLogon
              command: C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
              file: C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
              size: 352256
              MD5: D8EDAEEAF63BBF45ED9B7A3666641C2A

              Located: WinLogon, AtiExtEvent
              command: Ati2evxx.dll
              file: Ati2evxx.dll
              size: 0
              MD5: D41D8CD98F00B204E9800998ECF8427E
              Warning: if the file is actually larger than 0 bytes,
              the checksum could not be properly calculated!

              Located: WinLogon, crypt32chain
              command: crypt32.dll
              file: crypt32.dll
              size: 0
              MD5: D41D8CD98F00B204E9800998ECF8427E
              Warning: if the file is actually larger than 0 bytes,
              the checksum could not be properly calculated!

              Located: WinLogon, cryptnet
              command: cryptnet.dll
              file: cryptnet.dll
              size: 0
              MD5: D41D8CD98F00B204E9800998ECF8427E
              Warning: if the file is actually larger than 0 bytes,
              the checksum could not be properly calculated!

              Located: WinLogon, cscdll
              command: cscdll.dll
              file: cscdll.dll
              size: 0
              MD5: D41D8CD98F00B204E9800998ECF8427E
              Warning: if the file is actually larger than 0 bytes,
              the checksum could not be properly calculated!

              Located: WinLogon, dimsntfy
              command: %SystemRoot%\System32\dimsntfy.dll
              file: %SystemRoot%\System32\dimsntfy.dll
              size: 0
              MD5: D41D8CD98F00B204E9800998ECF8427E
              Warning: if the file is actually larger than 0 bytes,
              the checksum could not be properly calculated!

              Located: WinLogon, LBTWlgn
              command: c:\program files\fichiers communs\logitech\bluetooth\LBTWlgn.dll
              file: c:\program files\fichiers communs\logitech\bluetooth\LBTWlgn.dll
              size: 72208
              MD5: 2ACBFEF9984F0FE9849DA857206CCECC

              Located: WinLogon, ScCertProp
              command: wlnotify.dll
              file: wlnotify.dll
              size: 0
              MD5: D41D8CD98F00B204E9800998ECF8427E
              Warning: if the file is actually larger than 0 bytes,
              the checksum could not be properly calculated!

              Located: WinLogon, Schedule
              command: wlnotify.dll
              file: wlnotify.dll
              size: 0
              MD5: D41D8CD98F00B204E9800998ECF8427E
              Warning: if the file is actually larger than 0 bytes,
              the checksum could not be properly calculated!

              Located: WinLogon, sclgntfy
              command: sclgntfy.dll
              file: sclgntfy.dll
              size: 0
              MD5: D41D8CD98F00B204E9800998ECF8427E
              Warning: if the file is actually larger than 0 bytes,
              the checksum could not be properly calculated!

              Located: WinLogon, SensLogn
              command: WlNotify.dll
              file: WlNotify.dll
              size: 0
              MD5: D41D8CD98F00B204E9800998ECF8427E
              Warning: if the file is actually larger than 0 bytes,
              the checksum could not be properly calculated!

              Located: WinLogon, termsrv
              command: wlnotify.dll
              file: wlnotify.dll
              size: 0
              MD5: D41D8CD98F00B204E9800998ECF8427E
              Warning: if the file is actually larger than 0 bytes,
              the checksum could not be properly calculated!

              Located: WinLogon, wlballoon
              command: wlnotify.dll
              file: wlnotify.dll
              size: 0
              MD5: D41D8CD98F00B204E9800998ECF8427E
              Warning: if the file is actually larger than 0 bytes,
              the checksum could not be properly calculated!

              --- Browser helper object list ---
              {18DF081C-E8AD-4283-A596-FA578C2EBDC3} (AcroIEHelperStub)
              location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
              BHO name: AcroIEHelperStub
              CLSID name: Adobe PDF Link Helper
              Path: C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\
              Long name: AcroIEHelperShim.dll
              Short name: ACROIE~2.DLL
              Date (created): 11/06/2008 21:33:16
              Date (last access): 17/12/2008 13:21:58
              Date (last write): 11/06/2008 21:33:16
              Filesize: 75128
              Attributes: archive
              MD5: E96C752BBA0E22330A43258FC800200E
              CRC32: E5D72083
              Version: 9.0.0.332

              {7E853D72-626A-48EC-A868-BA8D5E23E045} ()
              location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
              BHO name:
              CLSID name:

              {9030D464-4C02-4ABF-8ECC-5164760863C6} (Programme d'aide de l'Assistant de connexion Windows Live)
              location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
              BHO name:
              CLSID name: Programme d'aide de l'Assistant de connexion Windows Live
              Path: C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\
              Long name: WindowsLiveLogin.dll
              Short name: WINDOW~1.DLL
              Date (created): 20/09/2007 09:30:18
              Date (last access): 17/12/2008 13:21:58
              Date (last write): 20/09/2007 09:30:18
              Filesize: 328752
              Attributes: archive
              MD5: 59CF5BF6684AFCF906CADAD39B4214DE
              CRC32: C363813C
              Version: 4.200.520.1

              {DBC80044-A445-435b-BC74-9C25C1C588A9} (Java(tm) Plug-In 2 SSV Helper)
              location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
              BHO name:
              CLSID name: Java(tm) Plug-In 2 SSV Helper
              Path: C:\Program Files\Java\jre6\bin\
              Long name: jp2ssv.dll
              Short name:
              Date (created): 16/12/2008 22:37:46
              Date (last access): 17/12/2008 13:21:58
              Date (last write): 16/12/2008 22:37:46
              Filesize: 34816
              Attributes: archive
              MD5: 5D57FD3DF32DC69CEC3D1D54B4C43162
              CRC32: D7C13FB2
              Version: 6.0.110.3

              {E7E6F031-17CE-4C07-BC86-EABFE594F69C} (JQSIEStartDetectorImpl)
              location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
              BHO name: JQSIEStartDetectorImpl
              CLSID name: JQSIEStartDetectorImpl Class
              Path: C:\Program Files\Java\jre6\lib\deploy\jqs\ie\
              Long name: jqs_plugin.dll
              Short name: JQS_PL~1.DLL
              Date (created): 16/12/2008 22:37:46
              Date (last access): 17/12/2008 13:21:58
              Date (last write): 16/12/2008 22:37:46
              Filesize: 73728
              Attributes: archive
              MD5: F68EDAFE003F2B3523C0742CD3B8D673
              CRC32: 9C709350
              Version: 6.0.110.3

              --- ActiveX list ---
              {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0)
              DPF name: Java Runtime Environment 1.6.0
              CLSID name: Java Plug-in 1.6.0_11
              Installer:
              Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
              description: Sun Java
              classification: Legitimate
              known filename: %PROGRAM FILES%\JabaSoft\JRE\*\Bin\npjava131.dll
              info link:
              info source: Patrick M. Kolla
              Path: C:\Program Files\Java\jre6\bin\
              Long name: npjpi160_11.dll
              Short name: NPJPI1~1.DLL
              Date (created): 16/12/2008 22:37:46
              Date (last access): 17/12/2008 13:55:14
              Date (last write): 16/12/2008 22:37:46
              Filesize: 132504
              Attributes: archive
              MD5: D400116F6776ACB6EDB6B1F5EEB9F92D
              CRC32: CECB5751
              Version: 6.0.110.3

              {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
              DPF name: Java Runtime Environment 1.6.0
              CLSID name: Java Plug-in 1.6.0_07
              Installer:
              Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
              Path: C:\Program Files\Java\jre1.6.0_07\bin\
              Long name: npjpi160_07.dll

              {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
              DPF name: Java Runtime Environment 1.6.0
              CLSID name: Java Plug-in 1.6.0_11
              Installer:
              Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
              Path: C:\Program Files\Java\jre6\bin\
              Long name: npjpi160_11.dll
              Short name: NPJPI1~1.DLL
              Date (created): 16/12/2008 22:37:46
              Date (last access): 17/12/2008 13:55:14
              Date (last write): 16/12/2008 22:37:46
              Filesize: 132504
              Attributes: archive
              MD5: D400116F6776ACB6EDB6B1F5EEB9F92D
              CRC32: CECB5751
              Version: 6.0.110.3

              {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
              DPF name: Java Runtime Environment 1.6.0
              CLSID name: Java Plug-in 1.6.0_11
              Installer:
              Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
              description:
              classification: Legitimate
              known filename: npjpi150_06.dll
              info link:
              info source: Safer Networking Ltd.
              Path: C:\Program Files\Java\jre6\bin\
              Long name: npjpi160_11.dll
              Short name: NPJPI1~1.DLL
              Date (created): 16/12/2008 22:37:46
              Date (last access): 17/12/2008 13:55:14
              Date (last write): 16/12/2008 22:37:46
              Filesize: 132504
              Attributes: archive
              MD5: D400116F6776ACB6EDB6B1F5EEB9F92D
              CRC32: CECB5751
              Version: 6.0.110.3

              {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object)
              DPF name:
              CLSID name: Shockwave Flash Object
              Installer: C:\WINDOWS\Downloaded Program Files\swflash.inf
              Codebase: http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
              description: Macromedia Shockwave Flash Player
              classification: Legitimate
              known filename:
              info link:
              info source: Patrick M. Kolla
              Path: C:\WINDOWS\system32\Macromed\Flash\
              Long name: Flash9f.ocx
              Short name:
              Date (created): 25/03/2008 03:32:42
              Date (last access): 17/12/2008 13:51:28
              Date (last write): 25/03/2008 03:32:42
              Filesize: 2991488
              Attributes: readonly archive
              MD5: 48FDF435B8595604E54125B321924510
              CRC32: 12335E29
              Version: 9.0.124.0

              --- Process list ---
              PID: 0 ( 0) [System]
              PID: 692 ( 4) \SystemRoot\System32\smss.exe
              size: 50688
              PID: 944 ( 692) \??\C:\WINDOWS\system32\csrss.exe
              size: 6144
              PID: 980 ( 692) \??\C:\WINDOWS\system32\winlogon.exe
              size: 512000
              PID: 1028 ( 980) C:\WINDOWS\system32\services.exe
              size: 109056
              MD5: 54CB50058851D95E56EC70D09F70857F
              PID: 1040 ( 980) C:\WINDOWS\system32\lsass.exe
              size: 13312
              MD5: 91E6024D6D4DCDECDB36C43ECF9BBECB
              PID: 1192 (1028) C:\WINDOWS\system32\Ati2evxx.exe
              size: 561152
              MD5: 3C94E4E7983EFF03E7E128325891EA80
              PID: 1212 (1028) C:\WINDOWS\system32\svchost.exe
              size: 14336
              MD5: E4BDF223CD75478BF44567B4D5C2634D
              PID: 1272 (1028) C:\WINDOWS\system32\svchost.exe
              size: 14336
              MD5: E4BDF223CD75478BF44567B4D5C2634D
              PID: 1324 (1028) C:\WINDOWS\System32\svchost.exe
              size: 14336
              MD5: E4BDF223CD75478BF44567B4D5C2634D
              PID: 1464 (1028) C:\WINDOWS\system32\svchost.exe
              size: 14336
              MD5: E4BDF223CD75478BF44567B4D5C2634D
              PID: 1492 (1028) C:\WINDOWS\system32\svchost.exe
              size: 14336
              MD5: E4BDF223CD75478BF44567B4D5C2634D
              PID: 1504 (1028) C:\WINDOWS\system32\ZoneLabs\vsmon.exe
              size: 75304
              MD5: 4BB7862806BEA6BF50D618C5D593ED54
              PID: 1544 ( 980) C:\WINDOWS\system32\Ati2evxx.exe
              size: 561152
              MD5: 3C94E4E7983EFF03E7E128325891EA80
              PID: 1920 (1028) C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              size: 18752
              MD5: 118F964817982E771B8953DF2E99E3AB
              PID: 1980 (1028) C:\Program Files\Alwil Software\Avast4\ashServ.exe
              size: 155160
              MD5: E1D075B489A5E6E294E968501184C5F6
              PID: 340 (1028) C:\WINDOWS\system32\spoolsv.exe
              size: 57856
              MD5: 460E4CE148BD07218DA0B6A3D31885A9
              PID: 712 (1028) C:\Program Files\Java\jre6\bin\jqs.exe
              size: 152984
              MD5: 32192B4EBE8720ED8D49A455C962CB91
              PID: 1472 (1028) C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
              size: 254040
              MD5: 2D697C9C4FBDA956E4BE318C334CD95E
              PID: 1568 (1028) C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
              size: 352920
              MD5: B9FD2B7A954A45963C3BF932DB10A633
              PID: 1000 (1028) C:\WINDOWS\System32\alg.exe
              size: 44544
              MD5: 5E9A6658A2A69AE7EB195113B7A2E7A9
              PID: 2444 (1028) C:\WINDOWS\system32\wbem\wmiapsrv.exe
              size: 126464
              MD5: 4E8E8A58F56B25D0795F484E5EB7F898
              PID: 2900 (2832) C:\WINDOWS\Explorer.EXE
              size: 1037824
              MD5: F2317622D29F9FF0F88AEECD5F60F0DD
              PID: 3496 (2900) C:\Program Files\Analog Devices\Core\smax4pnp.exe
              size: 868352
              MD5: 1983A11F702BDC5DB65B4B0F376FF6FD
              PID: 3524 (2900) C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
              size: 333120
              MD5: D6CF53D042B26E9E055D5457F5E98F30
              PID: 3564 (2900) C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe
              size: 1423360
              MD5: EE3CE36574FD53E5D7713183838E3BE1
              PID: 3584 (2900) C:\Program Files\Fichiers communs\Logitech\G-series Software\LGDCore.exe
              size: 1126400
              MD5: 0AD5DF852C968892B3173716A71441A9
              PID: 3596 (2900) C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
              size: 81000
              MD5: 55EBFBAB39BFAB5E62358C093F297641
              PID: 3632 (2900) C:\Program Files\ASUS\PC Probe II\Probe2.exe
              size: 2130432
              MD5: 66E2BC18AA31B9FF3E5C57399B5CA8FF
              PID: 3644 (3612) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
              size: 49152
              MD5: E681281D9BFC9D45D3B72532717E5880
              PID: 3652 (2900) C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
              size: 99840
              MD5: 32B0CBB036AE701352881A4303B10A7A
              PID: 3660 (2900) C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
              size: 919016
              MD5: 6B632BE30A0930421560A9A9C677ABD4
              PID: 3696 (2900) C:\Program Files\Java\jre6\bin\jusched.exe
              size: 136600
              MD5: B98FFA8288EFAABC436C30D198608345
              PID: 3784 (2900) C:\Program Files\SuperCopier2\SuperCopier2.exe
              size: 1052672
              MD5: B8DA797CEA896C42F5BAD9E08E21AF9F
              PID: 3828 (2900) C:\Program Files\ASUS WiFi-AP Solo\RtWLan.exe
              size: 987136
              MD5: FC4715240C014A3268278AFBFF7AE70E
              PID: 3940 (2900) C:\Program Files\Logitech\SetPoint\SetPoint.exe
              size: 805392
              MD5: D0948BE9B3547B9669195D7F84FC09F7
              PID: 484 (2900) C:\Program Files\StartClock\StartClock.exe
              size: 93696
              MD5: 750BAED62B5CAA46322B9A9BDE67A8B1
              PID: 2780 (3940) C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
              size: 76304
              MD5: 19E0D28FE38F55CA4C63F77D3657959A
              PID: 1584 (1028) C:\WINDOWS\System32\svchost.exe
              size: 14336
              MD5: E4BDF223CD75478BF44567B4D5C2634D
              PID: 3532 (1212) C:\Program Files\IncrediMail\bin\IMApp.exe
              size: 189824
              MD5: B019A29934FFE34F44D5D43E76676DA4
              PID: 3000 (3632) C:\Program Files\ASUS\AASP\1.00.32\aaCenter.exe
              size: 603648
              MD5: 9B8FEBDB9D6D2A19A985C45F9FD7D83D
              PID: 4008 (3644) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
              size: 49152
              MD5: 25CA1677AAA3CDC99CD4FCF940886F3C
              PID: 3868 (1028) C:\Program Files\Windows Live\Messenger\usnsvc.exe
              size: 98328
              MD5: 9D19B042A4FD5C02195071EA2FE0C821
              PID: 1828 (2900) C:\Program Files\Mozilla Firefox\firefox.exe
              size: 307712
              MD5: BAC6F7DE724D7F30EBD78648C86B4617
              PID: 3040 (3948) C:\Program Files\Micro Application\9 Dictionnaires Utiles\MediaDICO9Ut.EXE
              size: 281600
              MD5: 82B7D15914C96BE28308CBF925B02CFE
              PID: 2284 (3948) C:\Program Files\Micro Application\9 Dictionnaires Utiles\Rac9Ut.EXE
              size: 213078
              MD5: 096F79108A21E6E99EBF6DB5B2E9AA88
              PID: 2496 (2900) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
              size: 4891472
              MD5: 3B1B5D09D3C9C4CD39D4DB06ED7A0855
              PID: 3964 (2900) C:\Program Files\ControlMK\ControlMK.exe
              size: 185344
              MD5: BBCAE258D8C37A855735148B1E9131DB
              PID: 4 ( 0) System

              --- Browser start & search pages list ---
              Spybot - Search & Destroy browser pages report, 17/12/2008 13:59:20

              HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
              C:\WINDOWS\system32\blank.htm
              HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
              http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
              HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
              https://www.google.fr/?gws_rd=ssl
              HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\First Home Page
              http://www.microsoft.com/isapi/redir.dll?Prd=ie&Pver=5.0&Ar=ie5update&O1=b1
              HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
              %SystemRoot%\system32\blank.htm
              HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
              https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
              https://www.msn.com/fr-fr
              HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
              https://www.msn.com/fr-fr/?ocid=iehp
              HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
              https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant
              https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
              HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
              https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm

              --- Winsock Layered Service Provider list ---

              --- Uninstall list ---
              Panda ActiveScan 2.0 01.02.03.0000 (ActiveScan 2.0)
              estimated size: 4000
              install location: C:\Program Files\Panda Security\ActiveScan 2.0
              uninstall cmd: C:\Program Files\Panda Security\ActiveScan 2.0\as2uninst.exe
              publisher: Panda Security
              help link: https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan

              (AddressBook)

              Adobe Flash Player ActiveX 9.0.124.0 (Adobe Flash Player ActiveX)
              uninstall cmd: C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
              publisher: Adobe Systems Incorporated
              help link: https://helpx.adobe.com/flash-player.html

              Adobe Flash Player Plugin 9.0.124.0 (Adobe Flash Player Plugin)
              uninstall cmd: C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
              publisher: Adobe Systems Incorporated

              ATI - Software Uninstall Utility 6.14.10.1022 (All ATI Software)
              install location: C:\Program Files\ATI Technologies\UninstallAll
              uninstall cmd: C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe

              ALUpdate (ALUpdate_is1)
              install location: C:\Program Files\ESTsoft\ALUpdate\
              uninstall cmd: "C:\Program Files\ESTsoft\ALUpdate\unins000.exe"
              publisher: ESTsoft Corp.

              ATI Display Driver 8.512-080703a-066900C-ATI (ATI Display Driver)
              uninstall cmd: rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean

              avast! Antivirus 4.8 (avast!)
              version (major): 4
              version (minor): 8
              install location: C:\PROGRA~1\ALWILS~1\Avast4
              install source: C:\PROGRA~1\ALWILS~1\Avast4\setup
              uninstall cmd: C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
              publisher: Alwil Software
              help link: https://www.avast.com/fr-fr/index

              (Branding)

              cbgeo (cbgeo)
              uninstall cmd: C:\Program Files\cbgeo\uninstall.exe

              CCleaner (remove only) (CCleaner)
              uninstall cmd: "C:\Program Files\CCleaner\uninst.exe"

              Code de la route (Code de la route_is1)
              install location: C:\Program Files\Code de la route\
              uninstall cmd: "C:\Program Files\Code de la route\unins000.exe"
              publisher: Anuman Interactive
              help link: http://www.anuman-interactive.com

              (Connection Manager)

              ControlMK 0.232 0.232 (ControlMK)
              uninstall cmd: C:\Program Files\ControlMK\uninst.exe
              publisher: Redcl0ud

              CULTIX 2.0 (CULTIX 2.0)
              uninstall cmd: c:\Program Files\cultix\Uninstal.exe

              (DirectAnimation)

              (DirectDrawEx)

              (Drawing Hand Screen Saver)

              (DXM_Runtime)

              eMule (eMule)
              uninstall cmd: "C:\Program Files\eMule\Uninstall.exe"

              EPSON Logiciel imprimante (EPSON Printer and Utilities)
              uninstall cmd: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R

              ERUNT 1.1j (ERUNT_is1)
              install location: C:\Program Files\ERUNT\
              uninstall cmd: "C:\Program Files\ERUNT\unins000.exe"
              publisher: Lars Hederer
              help link: http://www.larshederer.homepage.t-online.de/erunt

              (Fontcore)

              HijackThis 2.0.2 2.0.2 (HijackThis)
              uninstall cmd: "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
              publisher: TrendMicro

              (ICW)

              Microsoft Internationalized Domain Names Mitigation APIs (IDNMitigationAPIs)
              install date: 20080906
              uninstall cmd: "C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation

              (IE40)

              (IE4Data)

              (IE5BAKEX)

              (IEData)

              IncrediMail Xe 5.8.5.3718 (IncrediMail)
              uninstall cmd: C:\Program Files\IncrediMail\bin\ImSetup.exe /remove /addon:IncrediMail /log:IncMail.log
              publisher: IncrediMail Ltd.
              help link: http://help.incredimail.com/english/help/index.html

              Karen's Directory Printer 5.3.0.0 (Karen's Directory Printer)
              uninstall cmd: C:\Program Files\Karen's Power Tools\Directory Printer\uninst.exe
              publisher: Karen Kenworthy

              (KB884016)

              (KB884267)

              (KB885353)

              (KB886612)

              (KB887078)

              (KB887626)

              High Definition Audio Driver Package - KB888111 20040219.000000 (KB888111WXPSP2)
              uninstall cmd: C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us

              (KB888656)

              (KB889858)

              (KB891122)

              (KB892313)

              (KB893240)

              (KB893241)

              (KB893803)

              (KB895181)

              (KB895316)

              (KB895572)

              (KB897586)

              (KB898549)

              (KB900399)

              (KB902344)

              (KB907658)

              (KB911565)

              (KB911854)

              Mise à jour de sécurité pour Windows XP (KB923689) (KB923689)
              install date: 20080904
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/923689

              Mise à jour de sécurité pour Windows XP (KB923789) (KB923789)
              uninstall cmd: C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/923789/ms06-069-vulnerabilities-in-macromedia-flash-player-from-adobe-could-a

              Hotfix for Windows Media Format 11 SDK (KB929399) (KB929399)
              install date: 20080905
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/929399

              Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782) (KB936782_WMP11)
              install date: 20080905
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/936782/ms07-047-vulnerability-in-windows-media-player-could-allow-remote-code

              Mise à jour de sécurité pour Windows XP (KB938464) 1 (KB938464)
              install date: 20080910
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/938464/ms08-052-description-of-the-security-update-for-gdi-for-all-editions-o

              Correctif pour Lecteur Windows Media 11 (KB939683) (KB939683)
              install date: 20080905
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/939683

              Mise à jour de sécurité pour Windows XP (KB941569) (KB941569)
              install date: 20080904
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/941569/ms07-068-vulnerability-in-windows-media-file-format-could-allow-remote

              Mise à jour de sécurité pour Windows XP (KB946648) 1 (KB946648)
              install date: 20080907
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/946648

              Mise à jour de sécurité pour Windows XP (KB950762) 1 (KB950762)
              install date: 20080907
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/950762/ms08-036-vulnerabilities-in-pragmatic-general-multicast-pgm-could-allo

              Mise à jour de sécurité pour Windows XP (KB950974) 1 (KB950974)
              install date: 20080907
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/950974/ms08-049-vulnerability-in-event-system-could-allow-remote-code-executi

              Mise à jour de sécurité pour Windows XP (KB951066) 1 (KB951066)
              install date: 20080907
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/951066

              Mise à jour pour Windows XP (KB951072-v2) 2 (KB951072-v2)
              install date: 20080904
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/951072/

              Mise à jour de sécurité pour Windows XP (KB951376-v2) 2 (KB951376-v2)
              install date: 20080907
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/951376/ms08-030-vulnerability-in-bluetooth-stack-could-allow-remote-code-exec

              Mise à jour de sécurité pour Windows XP (KB951698) 1 (KB951698)
              install date: 20080907
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/951698

              Mise à jour pour Windows XP (KB951978) 1 (KB951978)
              install date: 20080907
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/951978

              Mise à jour de sécurité pour Lecteur Windows Media (KB952069) (KB952069_WM9)
              install date: 20081210
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/952069/ms08-076-description-of-the-security-update-for-windows-media-format-r

              Correctif pour Windows XP (KB952287) 1 (KB952287)
              install date: 20080907
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/952287

              Mise à jour de sécurité pour Windows XP (KB952954) 1 (KB952954)
              install date: 20080907
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/952954/ms08-046-vulnerabilities-in-microsoft-windows-image-color-management-c

              Mise à jour de sécurité pour Windows XP (KB953838) 1 (KB953838)
              install date: 20080907
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/953838

              Mise à jour de sécurité pour Windows XP (KB953839) 1 (KB953839)
              install date: 20080904
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/953839

              Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154) (KB954154_WM11)
              install date: 20080910
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/954154/ms08-054-vulnerability-in-windows-media-player-could-allow-remote-code

              Mise à jour de sécurité pour Windows XP (KB954211) 1 (KB954211)
              install date: 20081015
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/954211/ms08-061-vulnerabilities-in-windows-kernel-could-allow-elevation-of-pr

              Mise à jour de sécurité pour Windows XP (KB954459) 1 (KB954459)
              install date: 20081113
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/954459/ms08-069-description-of-the-security-update-for-xml-core-services-6-0

              Hotfix for Windows XP (KB954550-v5) 5 (KB954550-v5)
              install date: 20080905
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/954550

              Mise à jour de sécurité pour Windows XP (KB954600) 1 (KB954600)
              install date: 20081210
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/954600

              Mise à jour de sécurité pour Windows XP (KB955069) 1 (KB955069)
              install date: 20081113
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/955069

              Mise à jour pour Windows XP (KB955839) 1 (KB955839)
              install date: 20081210
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/955839

              Mise à jour de sécurité pour Windows XP (KB956390) 1 (KB956390)
              install date: 20081015
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/956390

              Mise à jour de sécurité pour Windows XP (KB956391) 1 (KB956391)
              install date: 20081015
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/956391/

              Mise à jour de sécurité pour Windows XP (KB956802) 1 (KB956802)
              install date: 20081210
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/956802

              Mise à jour de sécurité pour Windows XP (KB956841) 1 (KB956841)
              install date: 20081015
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/956841

              Mise à jour de sécurité pour Windows XP (KB957095) 1 (KB957095)
              install date: 20081015
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/957095

              Mise à jour de sécurité pour Windows XP (KB957097) 1 (KB957097)
              install date: 20081113
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/957097/ms08-068-vulnerability-in-smb-could-allow-remote-code-execution

              Mise à jour de sécurité pour Windows XP (KB958215) 1 (KB958215)
              install date: 20081210
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/958215

              Mise à jour de sécurité pour Windows XP (KB958644) 1 (KB958644)
              install date: 20081024
              uninstall cmd: "C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/958644/ms08-067-vulnerability-in-server-service-could-allow-remote-code-execu

              K-Lite Mega Codec Pack 4.1.7 4.1.7 (KLiteCodecPack_is1)
              install date: 20081028
              install location: C:\Program Files\K-Lite Codec Pack\
              uninstall cmd: "C:\Program Files\K-Lite Codec Pack\unins000.exe"

              LimeWire PRO 4.12.3 4.12.3 (LimeWire)
              uninstall cmd: "E:\téléchargement\limewire\uninstall.exe"
              publisher: Lime Wire, LLC
              help link: http://www.limewire.com/support

              Malware Removal Tool (Malware Removal Tool_is1)
              install location: C:\Program Files\Malware Removal Tool\
              uninstall cmd: "C:\Program Files\Malware Removal Tool\unins000.exe"
              help link: http://www.users.muohio.edu/pestroja/spyware/

              Messenger Plus! Live 4.70 (build 334) (Messenger Plus! Live)
              install location: C:\Program Files\Messenger Plus! Live
              uninstall cmd: "C:\Program Files\Messenger Plus! Live\Uninstall.exe"
              publisher: Patchou

              Module linguistique Microsoft .NET Framework 3.5 SP1- fra (Microsoft .NET Framework 3.5 Language Pack SP1 - fra)
              install location: C:\WINDOWS\Microsoft.NET\Framework\v3.5\
              uninstall cmd: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
              publisher: Microsoft Corporation
              help link: https://www.microsoft.com/fr-fr/

              Microsoft .NET Framework 3.5 SP1 (Microsoft .NET Framework 3.5 SP1)
              install location: C:\WINDOWS\Microsoft.NET\Framework\v3.5\
              uninstall cmd: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
              publisher: Microsoft Corporation
              help link: https://www.microsoft.com/fr-fr/

              (MobileOptionPack)

              Mozilla Firefox (3.0.4) 3.0.4 (fr) (Mozilla Firefox (3.0.4))
              install location: C:\Program Files\Mozilla Firefox
              uninstall cmd: C:\Program Files\Mozilla Firefox\uninstall\helper.exe
              publisher: Mozilla
              comments: Mozilla Firefox

              (MPlayer2)

              Microsoft Compression Client Pack 1.0 for Windows XP 1 (MSCompPackV1)
              install date: 20080904
              uninstall cmd: "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://www.microsoft.com/fr-fr/?ref=go

              (MSI30-Beta1)

              (MSI30-Beta2)

              (MSI30-KB884016)

              (MSI30-RC1)

              (MSI30-RC2)

              (MSI30a-KB884016)

              (MSI31-Beta)

              (MSI31-RC1)

              (NetMeeting)

              Microsoft National Language Support Downlevel APIs (NLSDownlevelMapping)
              install date: 20080906
              uninstall cmd: "C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation

              (OutlookExpress)

              Pack Français de ERUNT (Pack Français de ERUNT)
              uninstall cmd: C:\Program Files\ERUNT\Uninstal.exe

              (PCHealth)
              uninstall cmd: rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

              Pegtop Deflexion (Pegtop Deflexion)
              uninstall cmd: C:\WINDOWS\system32\Deflexion.scr -uninstall "C:\Documents and Settings\All Users\Application Data\Pegtop\Deflexion\Installation.xml"
              publisher: Pegtop Software

              Microsoft Office Professional Plus 2007 12.0.6215.1000 (PROPLUS)
              install location: C:\Program Files\Microsoft Office
              uninstall cmd: "C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
              publisher: Microsoft Corporation

              Real Alternative 1.7.5 1.7.5 (RealAlt_is1)
              install date: 20080904
              install location: C:\Program Files\Real Alternative\
              uninstall cmd: "C:\Program Files\Real Alternative\unins000.exe"

              SAMSUNG Mobile Modem Driver Set (SAMSUNG Mobile Modem)
              uninstall cmd: C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe

              Samsung Mobile phone USB driver Software (Samsung Mobile phone USB driver)
              uninstall cmd: C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe

              SAMSUNG Mobile USB Modem Software (SAMSUNG Mobile USB Modem)
              uninstall cmd: C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe

              SAMSUNG Mobile USB Modem 1.0 Software (SAMSUNG Mobile USB Modem 1.0)
              uninstall cmd: C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe

              (SchedulingAgent)

              9.0.124.0 (ShockwaveFlash)

              StartClock 3.2 (StartClock_is1)
              install date: 20080904
              install location: C:\Program Files\StartClock\
              uninstall cmd: "C:\Program Files\StartClock\unins000.exe"
              publisher: Grégory HARGOUS
              help link: http://www.GregLand.Net

              SUPER © Version 2008.bld.32 (July 8, 2008) Version 2008.bld.32 (July 8, 2008) (SUPER ©)
              install date: 2008-09-04 20:58:04
              install location: C:\Program Files\eRightSoft\SUPER
              install source: D:\Mes Documents\Programmes\changer format video
              uninstall cmd: C:\PROGRA~1\ERIGHT~1\SUPER\Setup.exe /remove /q0
              publisher: eRightSoft
              contact: support@eRightSoft.com
              help link: https://www.erightsoft.com/home.html

              SuperCopier2 (SuperCopier2)
              uninstall cmd: "C:\Program Files\SuperCopier2\SC2Uninst.exe"

              Unlocker 1.8.7 1.8.7 (Unlocker)
              uninstall cmd: C:\Program Files\Unlocker\uninst.exe
              publisher: Cedrick Collomb

              UsbFix (UsbFix)
              uninstall cmd: C:\Program Files\UsbFix\Uninstal.exe

              VLC media player 0.9.6 0.9.6 (VLC media player)
              uninstall cmd: C:\Program Files\VideoLAN\VLC\uninstall.exe
              publisher: VideoLAN Team

              Wallpaper 5.0.3 (Wallpaper)
              uninstall cmd: C:\Program Files\Wallpaper\uninst.exe
              publisher: Silver76

              (Wdf01000)

              (Wdf01001)

              Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 (Wdf01005)
              install date: 20080904
              uninstall cmd: "C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation

              Windows Imaging Component 3.0.0.0 (WIC)
              install date: 20080905
              uninstall cmd: "C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation

              Winamp 5.541 (Winamp)
              uninstall cmd: "C:\Program Files\Winamp\UninstWA.exe"
              publisher: Nullsoft, Inc
              help link: http://forums.winamp.com

              Windows Media Format 11 runtime (Windows Media Format Runtime)
              uninstall cmd: "C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
              help link: https://support.microsoft.com/en-us

              Lecteur Windows Media 11 (Windows Media Player)
              uninstall cmd: "C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall

              Windows XP Service Pack 3 20080413.144513 (Windows XP Service)
              install date: 20080907
              uninstall cmd: "C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: https://support.microsoft.com/en-us/help/936929

              (Windows XP Service Pack)

              WinPatrol 2008 15.5.2008.0 (WinPatrol)
              version (major): 15
              version (minor): 5
              install date: 2008-09-04 15:42:06
              install location: C:\Program Files\BillP Studios\WinPatrol
              install source: L:\logiciels\winpatrol
              uninstall cmd: C:\PROGRA~1\BILLPS~1\WINPAT~1\Setup.exe /remove /q0
              publisher: BillP Studios
              contact: support@winpatrol.com
              help link: https://www.winpatrol.com/

              Archiveur WinRAR (WinRAR archiver)
              uninstall cmd: C:\Program Files\WinRAR\uninstall.exe

              (WMCSetup)

              Windows Media Format 11 runtime (WMFDist11)
              install date: 20080904
              uninstall cmd: "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: http:

              Windows Media Player 11 (wmp11)
              install date: 20080904
              uninstall cmd: "C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              help link: http:

              Microsoft User-Mode Driver Framework Feature Pack 1.0 (Wudf01000)
              install date: 20080904
              uninstall cmd: "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
              publisher: Microsoft Corporation
              comments: Build Number 5716

              XBCD 360 0.2.5 0.2.5 (XBCD 360)
              uninstall cmd: C:\Program Files\XBCD 360\uninst.exe
              1. je relance le scan en fait hier il sest stopper a 18% puis m'a demander de payer pour supprimer le fichier infecté! en fait le problème cest quil a pas continuer son scan! on va voir ce que ca donne cette fois ;)
                1. Contributeur sécurité
                  pas grave donne juste le rapport panda sans désinfecter et je le ferai!
                  1. merci jlpjlp jai trouvé ça hier ils en vendent sur cdscount. au fait pr le scan en ligne jai un ptit probleme ça me détecte bien des fichier infecté mais ça ne me dit pas lesquel, en fait il demande de payer sur le site panda donc voila! tu n'aurais pas une autre solution???
                    1. ca vient de trouver un fichier infecté et un fichier suspect! par contre lanalyse devrait prendre un peu plus dune heure! et demain je me lève à 4h30! je laisse le pc tourné cette nuit! tu sera dans le coin demain jlpjlp?
                      1. la ca recherche les virus! tien en attendant est-ce que tu sais si ca existe un cable dvi/hdmi? cest pr bancher ordi sur lcd...
                        1. si ça marche avec panda apres linstallation dun plugin, analyse a 50%
                          • 1
                          • 2
                          • 3