Supprimer Spyware Secure

Witch · le 7 août 2007

J'ai bien pris connaissance de ton message et je m'y mets desuite...

J'ai scanné le PC avec BitDefender, il vient de finir le scan.

Voici le rapport...

Je m'y replonge

***RAPPORT BITDEFENDER***

BitDefender Online Scanner

Rapport d'analyse généré à: Tue, Aug 07, 2007 - 13:40:29

Voie d'analyse: C:\;D:\;E:\;F:\;G:\;H:\;I:\;J:\;

Statistiques

Temps

01:13:39

Fichiers

332451

Directoires

7593

Secteurs de boot

3

Archives

15847

Paquets programmes

21794

Résultats

Virus identifiés

4

Fichiers infectés

9

Fichiers suspects

0

Avertissements

0

Désinfectés

0

Fichiers effacés

12

Info sur les moteurs

Définition virus

690018

Version des moteurs

AVCORE v1.0 (build 2410) (i386) (Jun 12 2007 21:08:27)

Analyse des plugins

14

Archive des plugins

38

Unpack des plugins

6

E-mail plugins

6

Système plugins

1

Paramètres d'analyse

Première action

Désinfecté

Seconde Action

Supprimé

Heuristique

Oui

Acceptez les avertissements

Oui

Extensions analysées

*;

Excludez les extensions

Analyse d'emails

Oui

Analyse des Archives

Oui

Analyser paquets programmes

Oui

Analyse des fichiers

Oui

Analyse de boot

Oui

Fichier analysé

Statut

C:\Documents and Settings\HP_Propriétaire\Application Data\errorsafescannerinstall_fr[1].exe

Infecté par: Trojan.Downloader.Winfixer.O

C:\Documents and Settings\HP_Propriétaire\Application Data\errorsafescannerinstall_fr[1].exe

Echec de la désinfection

C:\Documents and Settings\HP_Propriétaire\Application Data\errorsafescannerinstall_fr[1].exe

Supprimé

C:\Documents and Settings\HP_Propriétaire\Application Data\winantispyware2006freeinstall_fr[1].exe

Infecté par: Trojan.Downloader.Winfixer.O

C:\Documents and Settings\HP_Propriétaire\Application Data\winantispyware2006freeinstall_fr[1].exe

Echec de la désinfection

C:\Documents and Settings\HP_Propriétaire\Application Data\winantispyware2006freeinstall_fr[1].exe

Supprimé

C:\Program Files\HbTools\HBTV\uninstaller.exe=>(NSIS o)=>zlib_nsis0001

Infecté par: Trojan.Hotbar.A

C:\Program Files\HbTools\HBTV\uninstaller.exe=>(NSIS o)=>zlib_nsis0001

Echec de la désinfection

C:\Program Files\HbTools\HBTV\uninstaller.exe=>(NSIS o)=>zlib_nsis0001

Supprimé

C:\Program Files\HbTools\HBTV\uninstaller.exe=>(NSIS o)

Echec de la mise à jour

C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP370\A0049083.exe=>(Quarantine-2)

Infecté par: Trojan.FatObfus.Gen

C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP370\A0049083.exe=>(Quarantine-2)

Echec de la désinfection

C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP370\A0049083.exe=>(Quarantine-2)

Supprimé

C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP370\A0049084.exe=>(Quarantine-2)

Infecté par: Worm.RJump.K

C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP370\A0049084.exe=>(Quarantine-2)

Echec de la désinfection

C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP370\A0049084.exe=>(Quarantine-2)

Supprimé

C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP370\A0049085.exe=>(Quarantine-2)

Infecté par: Worm.RJump.K

C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP370\A0049085.exe=>(Quarantine-2)

Echec de la désinfection

C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP370\A0049085.exe=>(Quarantine-2)

Supprimé

C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP370\A0049317.exe

Infecté par: Trojan.Downloader.Winfixer.O

C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP370\A0049317.exe

Echec de la désinfection

C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP370\A0049317.exe

Supprimé

C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP398\A0053433.exe

Infecté par: Trojan.Downloader.Winfixer.O

C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP398\A0053433.exe

Echec de la désinfection

C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP398\A0053433.exe

Supprimé

C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP398\A0053434.exe

Infecté par: Trojan.Downloader.Winfixer.O

C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP398\A0053434.exe

Echec de la désinfection

C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP398\A0053434.exe

Supprimé

eclypse · le 7 août 2007

peut tu refaire un scan hijackthis stp et le poster

Witch · le 7 août 2007

***RAPPORT WINPFIND3U***

WinPFind3 logfile created on: 07/08/2007 13:50:00

WinPFind3U by OldTimer - Version 1.0.39 Folder = C:\Documents and Settings\HP_Propriétaire\Bureau\WinPFind3u\

Microsoft Windows XP Service Pack 2 (Version = 5.1.2600)

Internet Explorer (Version = 7.0.5730.11)

1022,48 Mb Total Physical Memory | 536,67 Mb Available Physical Memory | 52,49% Memory free

2,40 Gb Paging File | 2,05 Gb Available in Paging File | 85,21% Paging File free

Paging file location(s): C:\pagefile.sys 1536 3072;

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 179,33 Gb Total Space | 93,81 Gb Free Space | 52,31% Space Free

Drive D: | 6,96 Gb Total Space | 3,11 Gb Free Space | 44,63% Space Free

Drive E: | 6,98 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free

F: Drive not present or media not loaded

Computer Name: FAMILLE

Current User Name: HP_Propriétaire

Logged in as Administrator.

Current Boot Mode: Normal

[Processes - Non-Microsoft Only]

ati2evxx.exe -> %System32%\ati2evxx.exe -> ATI Technologies Inc. [Ver = 6.14.10.4109 | Size = 413696 bytes | Modified Date = 04/11/2004 06:38:10 | Attr = ]

broadwave.exe -> %ProgramFiles%\NCH Swift Sound\BroadWave\broadwave.exe -> [Ver = | Size = 401412 bytes | Modified Date = 03/08/2007 21:45:54 | Attr = ]

brss01a.exe -> %System32%\brss01a.exe -> brother Industries Ltd [Ver = 1.004 | Size = 45056 bytes | Modified Date = 13/12/2001 01:01:00 | Attr = ]

brsvc01a.exe -> %System32%\brsvc01a.exe -> brother Industries Ltd [Ver = 1, 0, 0, 3 | Size = 57344 bytes | Modified Date = 12/04/2002 01:00:00 | Attr = ]

firefox.exe -> %ProgramFiles%\Mozilla Firefox\firefox.exe -> Mozilla Corporation [Ver = 1.8.1.6: 2007072518 | Size = 7644520 bytes | Modified Date = 02/08/2007 11:42:58 | Attr = ]

googletoolbarnotifier.exe -> %ProgramFiles%\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe -> Google Inc. [Ver = 2, 0, 301, 1654 | Size = 68856 bytes | Modified Date = 28/07/2007 09:12:16 | Attr = ]

googleupdaterservice.exe -> %ProgramFiles%\Google\Common\Google Updater\GoogleUpdaterService.exe -> Google [Ver = 2.0.755.22488.beta | Size = 136952 bytes | Modified Date = 05/02/2007 16:16:16 | Attr = ]

hwapi.exe -> %CommonProgramFiles%\McAfee\HackerWatch\HWAPI.exe -> McAfee, Inc. [Ver = 8.3.105.0 | Size = 540776 bytes | Modified Date = 13/02/2007 12:09:12 | Attr = ]

lssrvc.exe -> %CommonProgramFiles%\LightScribe\LSSrvc.exe -> [Ver = 1.0.13.1 | Size = 38912 bytes | Modified Date = 23/09/2004 17:30:48 | Attr = ]

mcagent.exe -> %ProgramFiles%\McAfee.com\Agent\mcagent.exe -> McAfee, Inc. [Ver = 7,2,142,0 | Size = 566872 bytes | Modified Date = 05/01/2007 16:21:16 | Attr = ]

mcmscsvc.exe -> %ProgramFiles%\McAfee\MSC\mcmscsvc.exe -> McAfee, Inc. [Ver = 7,2,142,0 | Size = 361560 bytes | Modified Date = 05/01/2007 16:22:12 | Attr = ]

mcnasvc.exe -> %CommonProgramFiles%\McAfee\MNA\McNASvc.exe -> McAfee, Inc. [Ver = 1,2,106,0 | Size = 2209320 bytes | Modified Date = 11/01/2007 14:08:34 | Attr = ]

mcods.exe -> %ProgramFiles%\McAfee\VirusScan\mcods.exe -> McAfee, Inc. [Ver = 11,2,121,0 | Size = 362064 bytes | Modified Date = 16/01/2007 18:03:36 | Attr = ]

mcpromgr.exe -> %ProgramFiles%\McAfee\MSC\mcpromgr.exe -> McAfee, Inc. [Ver = 7,2,142,0 | Size = 493144 bytes | Modified Date = 05/01/2007 16:21:40 | Attr = ]

mcproxy.exe -> %CommonProgramFiles%\McAfee\McProxy\McProxy.exe -> McAfee, Inc. [Ver = 1,2,138,0 | Size = 353368 bytes | Modified Date = 12/04/2007 09:33:42 | Attr = ]

mcshield.exe -> %ProgramFiles%\McAfee\VirusScan\Mcshield.exe -> McAfee, Inc. [Ver = VSCORE.13.3.2.101.x86 | Size = 144960 bytes | Modified Date = 22/12/2006 16:02:26 | Attr = ]

mcsysmon.exe -> %ProgramFiles%\McAfee\VirusScan\mcsysmon.exe -> McAfee, Inc. [Ver = 11,2,131,0 | Size = 643664 bytes | Modified Date = 25/01/2007 18:01:58 | Attr = ]

mcuimgr.exe -> %ProgramFiles%\McAfee\MSC\mcuimgr.exe -> McAfee, Inc. [Ver = 7,2,142,0 | Size = 250968 bytes | Modified Date = 05/01/2007 16:22:00 | Attr = ]

mp3enc.exe -> %ProgramFiles%\NCH Swift Sound\Components\mp3el\mp3enc.exe -> [Ver = | Size = 110592 bytes | Modified Date = 03/08/2007 21:46:10 | Attr = ]

mpfsrv.exe -> %ProgramFiles%\McAfee\MPF\MpfSrv.exe -> McAfee, Inc. [Ver = 8.2.118.0 | Size = 841256 bytes | Modified Date = 09/03/2007 17:21:04 | Attr = ]

mps.exe -> %ProgramFiles%\McAfee\MPS\mps.exe -> McAfee, Inc. [Ver = 9.2.131.0 | Size = 906792 bytes | Modified Date = 23/01/2007 19:16:12 | Attr = ]

mpsevh.exe -> %ProgramFiles%\McAfee\MPS\mpsevh.exe -> McAfee, Inc. [Ver = 9.2.128.0 | Size = 304680 bytes | Modified Date = 16/01/2007 17:42:02 | Attr = ]

msksrver.exe -> %ProgramFiles%\McAfee\MSK\msksrver.exe -> McAfee Inc. [Ver = 8.2.125.0 | Size = 29264 bytes | Modified Date = 17/01/2007 16:30:34 | Attr = ]

olmntrservice.exe -> %ProgramFiles%\Olivetti\ANY_WAY\olMntrService.exe -> Olivetti [Ver = 2.0.027 | Size = 86016 bytes | Modified Date = 24/07/2006 12:02:12 | Attr = ]

redirsvc.exe -> %CommonProgramFiles%\McAfee\RedirSvc\RedirSvc.exe -> McAfee, Inc. [Ver = 1,3,109,0 | Size = 256096 bytes | Modified Date = 08/03/2007 15:42:42 | Attr = ]

saservice.exe -> %ProgramFiles%\SiteAdvisor\6066\SAService.exe -> McAfee, Inc. [Ver = 2.4.0 | Size = 321064 bytes | Modified Date = 31/07/2007 08:31:32 | Attr = ]

siteadv.exe -> %ProgramFiles%\SiteAdvisor\6066\SiteAdv.exe -> McAfee, Inc. [Ver = 2.4.0 | Size = 36904 bytes | Modified Date = 05/03/2007 21:10:38 | Attr = ]

winpfind3u.exe -> %UserDesktop%\WinPFind3u\WinPFind3U.exe -> OldTimer Tools [Ver = 1.0.38.0 | Size = 322048 bytes | Modified Date = 23/06/2007 15:15:54 | Attr = ]

[Win32 Services - Non-Microsoft Only]

(dmadmin) Service d'administration du Gestionnaire de disque logique [Win32_Shared | On_Demand | Stopped] -> %System32%\dmadmin.exe -> Microsoft Corp., Veritas Software [Ver = 2600.2180.503.0 | Size = 225280 bytes | Modified Date = 05/08/2004 20:00:00 | Attr = ]

(McShield) McAfee Real-time Scanner [Win32_Own | Unknown | Paused] -> -> File not found

[Registry - Non-Microsoft Only]

< Run [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->

adiras -> adiras.exe -> File not found

AGRSMMSG -> %SystemRoot%\AGRSMMSG.exe -> Agere Systems [Ver = 2.1.41.10 2.1.41.10 06/29/2004 09:06:35 | Size = 88363 bytes | Modified Date = 29/06/2004 19:06:38 | Attr = ]

ATIPTA -> %ProgramFiles%\ATI Technologies\ATI Control Panel\atiptaxx.exe -> ATI Technologies, Inc. [Ver = 6.14.10.5131 | Size = 344064 bytes | Modified Date = 04/11/2004 05:10:00 | Attr = ]

autoclk -> autoclk.exe -> File not found

BroadWaveRun -> %ProgramFiles%\NCH Swift Sound\BroadWave\broadwave.exe -> [Ver = | Size = 401412 bytes | Modified Date = 03/08/2007 21:45:54 | Attr = ]

ControlCenter2.0 -> %ProgramFiles%\Brother\ControlCenter2\brctrcen.exe -> Brother Industries, Ltd. [Ver = 2, 1, 36, 20 | Size = 933888 bytes | Modified Date = 17/05/2005 18:42:32 | Attr = ]

EoClock -> -> File not found

EoEngine -> %ProgramFiles%\eoRezo\EoEngine.exe -> [Ver = 1, 0, 0, 1 | Size = 462848 bytes | Modified Date = 09/05/2007 17:57:40 | Attr = ]

HPHmon06 -> %System32%\hphmon06.exe -> Hewlett-Packard [Ver = 6,0,72 | Size = 659456 bytes | Modified Date = 07/06/2004 20:43:20 | Attr = ]

HPHUPD06 -> %ProgramFiles%\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe -> Hewlett-Packard [Ver = 6,0,72 | Size = 49152 bytes | Modified Date = 07/06/2004 20:53:26 | Attr = ]

hpsysdrv -> %SystemRoot%\system\hpsysdrv.exe -> Hewlett-Packard Company [Ver = 1, 7, 0, 0 | Size = 52736 bytes | Modified Date = 07/05/1998 18:04:38 | Attr = ]

ImInstaller_IncrediMail -> %SystemDrive%\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\ImInstaller\IncrediMail\IncrediMail_Install.exe -> File not found

iTunesHelper -> %ProgramFiles%\iTunes\iTunesHelper.exe -> Apple Computer, Inc. [Ver = 7.0.2.16 | Size = 256576 bytes | Modified Date = 30/10/2006 10:36:36 | Attr = ]

KBD -> %SystemDrive%\hp\KBD\kbd.exe -> Hewlett-Packard Company [Ver = 1.0.2.2.20205 | Size = 61440 bytes | Modified Date = 02/02/2005 16:44:24 | Attr = ]

MskAgentexe -> %ProgramFiles%\McAfee\MSK\mskagent.exe -> McAfee Inc. [Ver = 8.2.125.0 | Size = 152144 bytes | Modified Date = 17/01/2007 16:30:24 | Attr = ]

NeroFilterCheck -> %CommonProgramFiles%\Ahead\Lib\NeroCheck.exe -> Nero AG [Ver = 1, 0, 0, 6 | Size = 153136 bytes | Modified Date = 01/03/2007 15:57:24 | Attr = ]

NWEReboot -> -> File not found

OlStatusMon -> %ProgramFiles%\Olivetti\ANY_WAY\olDvcStatus.exe -> Olivetti [Ver = 2.0.027 | Size = 106496 bytes | Modified Date = 26/07/2006 16:20:54 | Attr = ]

Recguard -> %SystemRoot%\SMINST\Recguard.exe -> [Ver = 5, 0, 44, 2 | Size = 233472 bytes | Modified Date = 14/04/2004 22:43:46 | Attr = ]

RecordPadRun -> %ProgramFiles%\NCH Swift Sound\RecordPad\recordpad.exe -> [Ver = | Size = 512004 bytes | Modified Date = 03/08/2007 21:45:46 | Attr = ]

SetDefPrt -> %ProgramFiles%\Brother\Brmfl05a\BrStDvPt.exe -> Brother Industories, Ltd. [Ver = 1, 0, 1, 2 | Size = 49152 bytes | Modified Date = 26/01/2005 19:02:22 | Attr = ]

SiteAdvisor -> %ProgramFiles%\SiteAdvisor\6066\SiteAdv.exe -> McAfee, Inc. [Ver = 2.4.0 | Size = 36904 bytes | Modified Date = 05/03/2007 21:10:38 | Attr = ]

SSBkgdUpdate -> %CommonProgramFiles%\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -> Scansoft, Inc. [Ver = 1, 0, 0, 6 | Size = 155648 bytes | Modified Date = 14/10/2003 11:22:30 | Attr = R ]

SunJavaUpdateSched -> %ProgramFiles%\Java\j2re1.4.2_03\bin\jusched.exe -> [Ver = | Size = 32881 bytes | Modified Date = 01/01/2005 08:31:12 | Attr = ]

TkBellExe -> %CommonProgramFiles%\Real\Update_OB\realsched.exe -> RealNetworks, Inc. [Ver = 0.1.0.3760 | Size = 185896 bytes | Modified Date = 13/11/2006 08:51:06 | Attr = ]

View start global team -> %AllUsersAppData%\iso delete view start\64 License.exe -> File not found

Watch -> %SystemDrive%\PROGRA~1\AvA\Watch.exe -> File not found

WINREMOTE -> %ProgramFiles%\InterVideo\Common\Bin\WinRemote.exe -> InterVideo Inc. [Ver = 1.8.1 | Size = 192512 bytes | Modified Date = 05/11/2004 09:44:24 | Attr = ]

Workflow -> E:\Workflow.exe -> File not found

< Run [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->

BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} -> %CommonProgramFiles%\Ahead\Lib\NMBgMonitor.exe -> Nero AG [Ver = 2,0,16,0 | Size = 152872 bytes | Modified Date = 27/06/2007 19:03:40 | Attr = ]

swg -> %ProgramFiles%\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe -> Google Inc. [Ver = 2, 0, 301, 1654 | Size = 68856 bytes | Modified Date = 28/07/2007 09:12:16 | Attr = ]

WOOKIT -> %SystemDrive%\PROGRA~1\Wanadoo\Shell.exe -> File not found

< Common Startup > -> C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage ->

%AllUsersStartup%\Contrôleur d’état.lnk -> %ProgramFiles%\Brother\Brmfcmon\BrMfcWnd.exe -> Brother Industries, Ltd. [Ver = 1, 2, 0, 6 | Size = 802816 bytes | Modified Date = 23/04/2005 20:12:00 | Attr = ]

%AllUsersStartup%\HP Digital Imaging Monitor.lnk -> %ProgramFiles%\HP\Digital Imaging\bin\hpqtra08.exe -> Hewlett-Packard Co. [Ver = 45.4.157.000 | Size = 258048 bytes | Modified Date = 05/11/2004 03:28:24 | Attr = ]

%AllUsersStartup%\Lancement rapide d'Adobe Reader.lnk -> %ProgramFiles%\Adobe\Acrobat 7.0\Reader\reader_sl.exe -> Adobe Systems Incorporated [Ver = 7.0.5.2005092300 | Size = 29696 bytes | Modified Date = 23/09/2005 22:05:26 | Attr = ]

%AllUsersStartup%\Outil de mise à jour Google.lnk -> %ProgramFiles%\Google\Google Updater\GoogleUpdater.exe -> Google [Ver = 2.0.755.22488.beta | Size = 123640 bytes | Modified Date = 05/02/2007 16:16:14 | Attr = ]

< User Startup > -> C:\Documents and Settings\HP_Propriétaire\Menu Démarrer\Programmes\Démarrage ->

%UserStartup%\Stardock ObjectDock.lnk -> %SystemRoot%\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe -> Stardock [Ver = v1.11.517u | Size = 1826885 bytes | Modified Date = 21/02/2005 15:56:00 | Attr = ]

%UserStartup%\Y'z ToolBar.lnk -> %SystemRoot%\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe -> Y'z@Home [Ver = 1, 3, 0, 0 | Size = 90112 bytes | Modified Date = 29/09/2002 15:41:00 | Attr = ]

< ICQ Agent [HKCU] > -> HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps\ ->

HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps\ -> ->

< SecurityProviders [HKLM] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders ->

< Winlogon settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon ->

< Winlogon settings [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon ->

< Winlogon\Notify settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ ->

AtiExtEvent -> %System32%\ati2evxx.dll -> ATI Technologies Inc. [Ver = 6.14.10.4109 | Size = 90112 bytes | Modified Date = 04/11/2004 06:38:16 | Attr = ]

< CurrentVersion Policy Settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoCDBurning -> 0 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{BDEADF00-C265-11D0-BCED-00A0C90AB50F} -> 1 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} -> 1073741857 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{0DF44EAA-FF21-4412-828E-260A8728E7F1} -> 32 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\dontdisplaylastusername -> 0 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticecaption -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticetext -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\shutdownwithoutlogon -> 1 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\undockwithoutlogon -> 1 ->

< CurrentVersion Policy Settings [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ ->

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> ->

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> ->

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> •

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\ -> ->

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\ -> ->

< HOSTS File > (4158 bytes) -> C:\WINDOWS\System32\drivers\etc\Hosts ->

127.0.0.1 localhost -> ->

127.0.0.1 bin.errorprotector.com ## added by CiD -> ->

127.0.0.1 br.errorsafe.com ## added by CiD -> ->

127.0.0.1 br.winantivirus.com ## added by CiD -> ->

127.0.0.1 br.winfixer.com ## added by CiD -> ->

127.0.0.1 de.errorsafe.com ## added by CiD -> ->

127.0.0.1 de.winantivirus.com ## added by CiD -> ->

127.0.0.1 download.cdn.winsoftware.com ## added by CiD -> ->

127.0.0.1 download.errorsafe.com ## added by CiD -> ->

127.0.0.1 download.systemdoctor.com ## added by CiD -> ->

127.0.0.1 download.winantispyware.com ## added by CiD -> ->

127.0.0.1 download.windrivecleaner.com ## added by CiD -> ->

127.0.0.1 download.winfixer.com ## added by CiD -> ->

127.0.0.1 drivecleaner.com ## added by CiD -> ->

127.0.0.1 dynamique.drivecleaner.com ## added by CiD -> ->

127.0.0.1 errorprotector.com ## added by CiD -> ->

127.0.0.1 errorsafe.com ## added by CiD -> ->

127.0.0.1 es.winantivirus.com ## added by CiD -> ->

127.0.0.1 fr.winantivirus.com ## added by CiD -> ->

127.0.0.1 fr.winfixer.com ## added by CiD -> ->

127.0.0.1 go.drivecleaner.com ## added by CiD -> ->

127.0.0.1 go.errorsafe.com ## added by CiD -> ->

127.0.0.1 go.winantispyware.com ## added by CiD -> ->

127.0.0.1 go.winantivirus.com ## added by CiD -> ->

127.0.0.1 hk.winantivirus.com ## added by CiD -> ->

127.0.0.1 instlog.errorsafe.com ## added by CiD -> ->

127.0.0.1 instlog.winantivirus.com ## added by CiD -> ->

127.0.0.1 jsp.drivecleaner.com ## added by CiD -> ->

127.0.0.1 kb.errorsafe.com ## added by CiD -> ->

127.0.0.1 kb.winantivirus.com ## added by CiD -> ->

127.0.0.1 nl.errorsafe.com ## added by CiD -> ->

127.0.0.1 se.errorsafe.com ## added by CiD -> ->

127.0.0.1 secure.drivecleaner.com ## added by CiD -> ->

127.0.0.1 secure.errorsafe.com ## added by CiD -> ->

127.0.0.1 secure.winantispam.com ## added by CiD -> ->

127.0.0.1 secure.winantispy.com ## added by CiD -> ->

127.0.0.1 secure.winantivirus.com ## added by CiD -> ->

127.0.0.1 support.winantivirus.com ## added by CiD -> ->

127.0.0.1 ulog.winantivirus.com ## added by CiD -> ->

127.0.0.1 utils.errorsafe.com ## added by CiD -> ->

127.0.0.1 utils.winantivirus.com ## added by CiD -> ->

127.0.0.1 winantispyware.com ## added by CiD -> ->

127.0.0.1 winantivirus.com ## added by CiD -> ->

127.0.0.1 winfixer.com ## added by CiD -> ->

127.0.0.1 www.drivecleaner.com ## added by CiD -> ->

127.0.0.1 www.errorprotector.com ## added by CiD -> ->

127.0.0.1 www.errorsafe.com ## added by CiD -> ->

127.0.0.1 www.systemdoctor.com ## added by CiD -> ->

127.0.0.1 www.win-anti-virus-pro.com ## added by CiD -> ->

127.0.0.1 www.win-virus-pro.com ## added by CiD -> ->

127.0.0.1 www.winantispam.com ## added by CiD -> ->

127.0.0.1 www.winantispy.com ## added by CiD -> ->

127.0.0.1 www.winantispyware.com ## added by CiD -> ->

127.0.0.1 www.winantivirus.com ## added by CiD -> ->

127.0.0.1 www.winantiviruspro.com ## added by CiD -> ->

127.0.0.1 www.windrivecleaner.com ## added by CiD -> ->

127.0.0.1 www.windrivesafe.com ## added by CiD -> ->

127.0.0.1 www.winfixer.com ## added by CiD -> ->

127.0.0.1 cdn.drivecleaner.com ## added by CiD -> ->

127.0.0.1 cdn.errorsafe.com ## added by CiD -> ->

127.0.0.1 cdn.winsoftware.com ## added by CiD -> ->

127.0.0.1 download.cdn.drivecleaner.com ## added by CiD -> ->

127.0.0.1 download.cdn.errorsafe.com ## added by CiD -> ->

127.0.0.1 instlog.winfixer.com ## added by CiD -> ->

127.0.0.1 trial.updates.winsoftware.com ## added by CiD -> ->

127.0.0.1 utils.winfixer.com ## added by CiD -> ->

127.0.0.1 winfixer2006.com ## added by CiD -> ->

127.0.0.1 winsoftware.com ## added by CiD -> ->

127.0.0.1 www.utils.winfixer.com ## added by CiD -> ->

127.0.0.1 www.winfixer2006.com ## added by CiD -> ->

127.0.0.1 www.winsoftware.com ## added by CiD -> ->

< Internet Explorer Settings > -> ->

HKLM: Default_Page_URL -> http://go.microsoft.com/fwlink/?LinkId=69157 ->

HKLM: Main\\Default_Search_URL -> http://go.microsoft.com/fwlink/?LinkId=54896 ->

HKLM: Local Page -> %SystemRoot%\system32\blank.htm ->

HKLM: Search Bar -> http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop ->

HKLM: Search Page -> http://go.microsoft.com/fwlink/?LinkId=54896 ->

HKLM: Start Page -> http://go.microsoft.com/fwlink/?LinkId=69157 ->

HKLM: CustomizeSearch -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm ->

HKLM: Search\\Default_Search_URL -> http://www.google.com/ie ->

HKLM: SearchAssistant -> http://www.google.com/ie ->

HKCU: Default_Page_URL -> http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop ->

HKCU: Default_Search_URL -> http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop ->

HKCU: Local Page -> C:\WINDOWS\system32\blank.htm ->

HKCU: Search Bar -> http://www.google.com/ie ->

HKCU: Search Page -> http://www.google.com ->

HKCU: Start Page -> http://www.google.fr/ ->

HKCU: SearchAssistant -> http://www.aliceadsl.fr ->

HKCU: URLSearchHooks\\{9CB65206-89C4-402c-BA80-02D8C59F9B1D} [HKLM] -> %ProgramFiles%\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL [] -> Ask.com [Ver = 1, 0, 2, 4 | Size = 57344 bytes | Modified Date = 19/07/2007 18:18:48 | Attr = ]

HKCU: ProxyEnable -> 0 ->

HKCU: ProxyOverride -> 127.0.0.1 ->

< Trusted Sites > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->

msn.com [ - ] -> ->

< BHO's > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ ->

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [HKLM] -> %ProgramFiles%\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [Adobe PDF Reader Link Helper] -> Adobe Systems Incorporated [Ver = 7.0.9.2006121800 | Size = 59032 bytes | Modified Date = 18/12/2006 04:16:42 | Attr = ]

{089FD14D-132B-48FC-8861-0048AE113215} [HKLM] -> %ProgramFiles%\SiteAdvisor\6066\SiteAdv.dll [Reg Data - Value does not exist] -> McAfee, Inc. [Ver = 2.4.0 | Size = 1099304 bytes | Modified Date = 30/03/2007 17:41:24 | Attr = ]

{64F56FC1-1272-44CD-BA6E-39723696E350} [HKLM] -> %ProgramFiles%\eoRezo\EoAdv\EoRezoBHO.dll [EoBho Class] -> [Ver = 1, 0, 0, 1 | Size = 106496 bytes | Modified Date = 25/01/2007 10:22:42 | Attr = ]

{7DB2D5A0-7241-4E79-B68D-6309F01C5231} [HKLM] -> %ProgramFiles%\McAfee\virusscan\scriptcl.dll [scriptproxy] -> McAfee, Inc. [Ver = VSCORE.13.3.2.101.x86 | Size = 67136 bytes | Modified Date = 22/12/2006 16:02:40 | Attr = ]

{9CB65201-89C4-402c-BA80-02D8C59F9B1D} [HKLM] -> %ProgramFiles%\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL [Ask Search Assistant BHO] -> Ask.com [Ver = 1, 0, 2, 4 | Size = 57344 bytes | Modified Date = 19/07/2007 18:18:48 | Attr = ]

{AA58ED58-01DD-4d91-8333-CF10577473F7} [HKLM] -> %ProgramFiles%\Google\googletoolbar1.dll [Google Toolbar Helper] -> Google Inc. [Ver = 4, 0, 1601, 4978 | Size = 2436160 bytes | Modified Date = 12/07/2007 00:16:12 | Attr = R ]

{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [HKLM] -> %ProgramFiles%\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll [Google Toolbar Notifier BHO] -> Google Inc. [Ver = 2, 0, 301, 7164 | Size = 325048 bytes | Modified Date = 28/07/2007 09:12:16 | Attr = ]

{FE063DB1-4EC0-403e-8DD8-394C54984B2C} [HKLM] -> %ProgramFiles%\AskTBar\bar\1.bin\ASKTBAR.DLL [Ask Toolbar BHO] -> Ask.com [Ver = 2, 1, 10, 2 | Size = 245760 bytes | Modified Date = 19/07/2007 18:18:46 | Attr = ]

< Internet Explorer Bars [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\ ->

{7E66936C-FEA0-4984-AD26-7B6661AC5B2E} [HKLM] -> %ProgramFiles%\HbTools\Bin\4.8.2.0\HbtHostIE.dll [Hotbar Information Window] -> File not found

< Internet Explorer Bars [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\ ->

{66B90ADB-0BE3-40AE-8680-84A6F0577CA0} [HKLM] -> %ProgramFiles%\HbTools\Bin\4.8.0.0\HbtHostIE.dll [Web Assistant] -> File not found

{7E66936C-FEA0-4984-AD26-7B6661AC5B2E} [HKLM] -> %ProgramFiles%\HbTools\Bin\4.8.2.0\HbtHostIE.dll [Hotbar Information Window] -> File not found

< Internet Explorer ToolBars [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar ->

[HKLM] -> Reg Data - Key not found [Reg Data - Value does not exist] -> File not found

{0BF43445-2F28-4351-9252-17FE6E806AA0} [HKLM] -> %ProgramFiles%\SiteAdvisor\6066\SiteAdv.dll [McAfee SiteAdvisor] -> McAfee, Inc. [Ver = 2.4.0 | Size = 1099304 bytes | Modified Date = 30/03/2007 17:41:24 | Attr = ]

{2318C2B1-4965-11d4-9B18-009027A5CD4F} [HKLM] -> %ProgramFiles%\Google\googletoolbar1.dll [&Google] -> Google Inc. [Ver = 4, 0, 1601, 4978 | Size = 2436160 bytes | Modified Date = 12/07/2007 00:16:12 | Attr = R ]

{B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} [HKLM] -> %ProgramFiles%\HP\Digital Imaging\bin\HPDTLK02.dll [Vue HP] -> Hewlett-Packard Company [Ver = 1.0.0.7 | Size = 98304 bytes | Modified Date = 21/11/2003 12:26:28 | Attr = ]

{FE063DB9-4EC0-403e-8DD8-394C54984B2C} [HKLM] -> %ProgramFiles%\AskTBar\bar\1.bin\ASKTBAR.DLL [Ask Toolbar] -> Ask.com [Ver = 2, 1, 10, 2 | Size = 245760 bytes | Modified Date = 19/07/2007 18:18:46 | Attr = ]

< Internet Explorer ToolBars [HKCU] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ ->

ShellBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} [HKLM] -> %ProgramFiles%\Google\googletoolbar1.dll [&Google] -> Google Inc. [Ver = 4, 0, 1601, 4978 | Size = 2436160 bytes | Modified Date = 12/07/2007 00:16:12 | Attr = R ]

ShellBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found] -> File not found

ShellBrowser\\{74CC49F7-EB32-4A08-B204-948962A6E3DB} [HKLM] -> %ProgramFiles%\HbTools\Bin\4.8.2.0\HbtHostIE.dll [H&otbar] -> File not found

ShellBrowser\\{B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} [HKLM] -> %ProgramFiles%\HP\Digital Imaging\bin\HPDTLK02.dll [Vue HP] -> Hewlett-Packard Company [Ver = 1.0.0.7 | Size = 98304 bytes | Modified Date = 21/11/2003 12:26:28 | Attr = ]

WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} [HKLM] -> %ProgramFiles%\Google\googletoolbar1.dll [&Google] -> Google Inc. [Ver = 4, 0, 1601, 4978 | Size = 2436160 bytes | Modified Date = 12/07/2007 00:16:12 | Attr = R ]

WebBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found] -> File not found

WebBrowser\\{4982D40A-C53B-4615-B15B-B5B5E98D167C} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found] -> File not found

WebBrowser\\{5CBE2611-C31B-401F-89BC-4CBB25E853D7} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found] -> File not found

WebBrowser\\{74CC49F7-EB32-4A08-B204-948962A6E3DB} [HKLM] -> %ProgramFiles%\HbTools\Bin\4.8.2.0\HbtHostIE.dll [H&otbar] -> File not found

WebBrowser\\{B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} [HKLM] -> %ProgramFiles%\HP\Digital Imaging\bin\HPDTLK02.dll [Vue HP] -> Hewlett-Packard Company [Ver = 1.0.0.7 | Size = 98304 bytes | Modified Date = 21/11/2003 12:26:28 | Attr = ]

< Internet Explorer Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ ->

{85d1f590-48f4-11d9-9669-0800200c9a66} [HKLM] -> Reg Data - Key not found [MenuText: Uninstall BitDefender Online Scanner v8] -> File not found

{CD67F990-D8E9-11d2-98FE-00C0F0318AFE} -> Reg Data - Value does not exist [buttonText: Real.com] -> File not found

{e2e2dd38-d088-4134-82b7-f2ba38496583} [HKLM] -> Reg Data - Key not found [MenuText: @xpsp3res.dll,-20001] -> File not found

CmdMapping [HKLM] -> Reg Data - Key not found [MenuText: Reg Data - Value does not exist] -> File not found

< Internet Explorer Menu Extensions [HKCU] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\ ->

&Recherche AOL Toolbar -> %ProgramFiles%\AOL Toolbar\toolbar.dll\SEARCH.HTM -> File not found

&Windows Live Search -> %ProgramFiles%\Windows Live Toolbar\msntb.dll\search.htm -> File not found

< DNS Name Servers [HKLM] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ ->

{100AA260-52CA-4A6C-B92B-2725F27ECC7E} -> (ADI USB Remote NDIS Network Device) ->

{251CD8EB-0AF4-43F4-AB50-BDBD80B886FD} -> () ->

{6FD0D544-CC2D-4497-A56D-9F1F564BC817} -> (Realtek RTL8139/810x Family Fast Ethernet NIC) ->

{CA079F25-617F-438D-AB74-483165333550} -> (Carte réseau 1394) ->

< Protocol Handlers [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ ->

ipp -> Reg Data - Key not found -> File not found

msdaipp -> Reg Data - Key not found -> File not found

siteadvisor -> %ProgramFiles%\SiteAdvisor\6066\SiteAdv.dll -> McAfee, Inc. [Ver = 2.4.0 | Size = 1099304 bytes | Modified Date = 30/03/2007 17:41:24 | Attr = ]

< Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ ->

{0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} -> CKAVWebScan Object - CodeBase = http://webscanner.kaspersky.fr/kavwebscan_unicode.cab ->

{5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} -> BDSCANONLINE Control - CodeBase = http://www.zebulon.fr/scan8/oscan8.cab ->

{8AD9C840-044E-11D1-B3E9-00805F499D93} -> Java Plug-in 1.4.2_03 - CodeBase = http://java.sun.com/products/plugin/autodl...indows-i586.cab ->

{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} -> Java Plug-in 1.4.2_03 - CodeBase = http://java.sun.com/products/plugin/autodl...indows-i586.cab ->

Microsoft XML Parser for Java -> - CodeBase = file://C:\WINDOWS\Java\classes\xmldso.cab ->

[Registry - Additional Scans - Non-Microsoft Only]

< Security Settings > -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirstRunDisabled -> 1 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\AntiVirusDisableNotify -> 1 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirewallDisableNotify -> 1 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\UpdatesDisableNotify -> 0 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\AntiVirusOverride -> 0 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirewallOverride -> 0 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus\\DisableMonitoring -> 1 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall\\DisableMonitoring -> 1 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\Type -> 32 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\Start -> 2 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\ErrorControl -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\ImagePath -> %SystemRoot%\system32\svchost.exe -k netsvcs ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\DisplayName -> Service de transfert intelligent en arrière-plan ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\DependOnService -> RpcSs; ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\DependOnGroup -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\ObjectName -> LocalSystem ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\Description -> Transfère des données entre les clients et les serveurs en tâche de fond. Si le service BITS est désactivé, les fonctionnalités telles que Windows Update ne fonctionneront pas correctement. ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\FailureActions ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Parameters\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Parameters\\ServiceDll -> C:\WINDOWS\system32\qmgr.dll ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Security\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Security\\Security ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\ -> Root\LEGACY_BITS00 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\\Count -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\\NextInstance -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DependOnGroup -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DependOnService -> Netman;WinMgmt; ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Description -> Assure la traduction d'adresses de réseau, l'adressage, les services de résolution de noms et/ou les services de prévention d'intrusion pour un réseau de petite entreprise ou un réseau domestique. ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DisplayName -> Pare-feu Windows / Partage de connexion Internet ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ErrorControl -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ImagePath -> %SystemRoot%\system32\svchost.exe -k netsvcs ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ObjectName -> LocalSystem ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Start -> 2 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Type -> 32 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch\\Epoch -> 52960 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\\ServiceDll -> %SystemRoot%\System32\ipnathlp.dll ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\%windir%\system32\sessmgr.exe -> %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\%ProgramFiles%\iTunes\iTunes.exe -> %ProgramFiles%\iTunes\iTunes.exe:*:enabled:iTunes ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe -> C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe:*:Enabled:AOL ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe -> C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe:*:Enabled:AOL ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\AOL 9.0\waol.exe -> C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\MSN Messenger\msncall.exe -> C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone) ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\%windir%\Network Diagnostic\xpnetdiag.exe -> %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\MSN Messenger\msnmsgr.exe -> C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\MSN Messenger\livecall.exe -> C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\1900:UDP -> 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\2869:TCP -> 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\EnableFirewall -> 0 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\DoNotAllowExceptions -> 0 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\DisableNotifications -> 0 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\%windir%\system32\sessmgr.exe -> %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Messenger\msmsgs.exe -> C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe -> C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe:*:Enabled:AOL ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe -> C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe:*:Enabled:AOL ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\AOL 9.0\waol.exe -> C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\MSN Messenger\msncall.exe -> C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone) ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\IncrediMail\bin\IMApp.exe -> C:\Program Files\IncrediMail\bin\IMApp.exe:*:Enabled:IncrediMail ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\IncrediMail\bin\IncMail.exe -> C:\Program Files\IncrediMail\bin\IncMail.exe:*:Enabled:IncrediMail ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\IncrediMail\bin\ImpCnt.exe -> C:\Program Files\IncrediMail\bin\ImpCnt.exe:*:Enabled:IncrediMail ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\IncrediMail\bin\IncrediMail_Install.exe -> C:\Program Files\IncrediMail\bin\IncrediMail_Install.exe:*:Enabled:IncrediMail Installer ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Documents and Settings\HP_Propriétaire\Local Settings\Temp\ImInstaller\IncrediMail\IncrediMail_Install.exe -> C:\Documents and Settings\HP_Propriétaire\Local Settings\Temp\ImInstaller\IncrediMail\IncrediMail_Install.exe:*:Enabled:IncrediMail Installer ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\%windir%\Network Diagnostic\xpnetdiag.exe -> %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\eMule\emule.exe -> C:\Program Files\eMule\emule.exe:*:Enabled:eMule ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\iTunes\iTunes.exe -> C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Midway Games\Rise and Fall\RiseAndFall.exe -> C:\Program Files\Midway Games\Rise and Fall\RiseAndFall.exe:*:Enabled:Rise and Fall: Civilizations at War ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Internet Explorer\iexplore.exe -> C:\Program Files\Internet Explorer\iexplore.exe:*:Disabled:Internet Explorer ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\MSN Messenger\msnmsgr.exe -> C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\MSN Messenger\livecall.exe -> C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Azureus\Azureus.exe -> C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Fichiers communs\McAfee\MNA\McNASvc.exe -> C:\Program Files\Fichiers communs\McAfee\MNA\McNASvc.exe:*:Enabled:McAfee Network Agent ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\1900:UDP -> 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\2869:TCP -> 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\139:TCP -> 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\445:TCP -> 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\137:UDP -> 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\138:UDP -> 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\\ServiceUpgrade -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\InterfacesUnfirewalledAtUpdate\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\InterfacesUnfirewalledAtUpdate\\All -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\ -> Root\LEGACY_SHAREDACCESS00 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\\Count -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\\NextInstance -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Type -> 32 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Start -> 2 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ErrorControl -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ImagePath -> %systemroot%\system32\svchost.exe -k netsvcs ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\DisplayName -> Mises à jour automatiques ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ObjectName -> LocalSystem ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Description -> Active le téléchargement et l'installation des mises à jour Windows. Si ce service est désactivé, cet ordinateur ne pourra pas utiliser la fonctionnalité des mises à jour automatiques ou le site Windows Update. ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Parameters\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Parameters\\ServiceDll -> C:\WINDOWS\system32\wuauserv.dll ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Security\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Security\\Security ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\ -> Root\LEGACY_WUAUSERV00 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\\Count -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\\NextInstance -> 1 ->

< Uninstall List > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ ->

{01501EBA-EC35-4F9F-8889-3BE346E5DA13} -> MSXML4 Parser ->

{0BEDBD4E-2D34-47B5-9973-57E62B29307C} -> ATI Control Panel ->

{0C66761E-497A-4BE3-AE0D-8EC30FC9A9AA} -> PC-Doctor for Windows ->

{10890BBB-5CBB-468B-88E7-C83D56DE2440} -> Code de la Route ->

{15EE79F4-4ED1-4267-9B0F-351009325D7D} -> HP Software Update ->

{18D10072035C4515918F7E37EAFAACFC} -> AutoUpdate ->

{1AD5F465-8282-4DAD-B957-E09C0B783D18} -> InstantShare ->

{1F63ED0B-EDD2-4037-B6AB-1358C624AF48} -> Scan ->

{20FBC0A0-3160-4F14-83ED-3A74BB6B8C31} -> TrayApp ->

{21E75254-410E-49C4-8981-2E1A2A2221F2} -> HP Diagnostic Assistant ->

{2318C2B1-4965-11d4-9B18-009027A5CD4F} -> Google Toolbar for Internet Explorer ->

{24960CD0-661D-4957-9D5F-D2905A30EDB1} -> Jasc Paint Shop Photo Album 5 ->

{267868CE-6DFF-40F7-9C58-C01119B7B117} -> Fax ->

{272EC8BA-5A08-4ea1-A189-684466A06B02} -> cp_dwShrek2Albums1 ->

{28CFF19D-B92C-4109-A427-F75505E81688} -> cp_dwSharkTaleAlbums1 ->

{2E8428AD-6CD2-4031-916A-3CF9BBF2DEC9} -> Unload ->

{2FCE4FC5-6930-40E7-A4F1-F862207424EF} -> InterVideo WinDVD Creator ->

{34A59AC3-6C5C-4A09-A7F5-369A37176C8A} -> AiOSoftware ->

{350C940c-3D7C-4EE8-BAA9-00BCB3D54227} -> WebFldrs XP ->

{36FCD82D-1CED-436d-B33C-874EEC666D68} -> cp_dwSharkTaleCards1 ->

{37477865-A3F1-4772-AD43-AAFC6BCFF99F} -> MSXML 4.0 SP2 (KB927978) ->

{3762DB2D-71BD-421F-9E55-C74DA7DF4D07} -> CueTour ->

{3912A629-0020-0005-3757-2FBA74D4DF0A} -> InterVideo WinDVD Player ->

{3AE681E0-4E8D-453F-950A-48534D3C0724} -> Copy ->

{3AEF2F6C-F1D3-47CD-BF3B-A327F1FABE58} -> PSPrinters06 ->

{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B} -> Google Earth ->

{43B402B3-0027-0002-3757-3015BD2DE2CD} -> Home Theater ->

{446DBFFA-4088-48E3-8932-74316BA4CAE4} -> iTunes ->

{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F} -> SAGEM F@st 800-840 ->

{4B0A96C1-2C2D-4C84-81B0-B87EB2522837} -> Sony Sound Forge 7.0 ->

{4C04DF1B-6A39-4299-9DD1-1FA60000266E} -> HP Appareils photos Photosmart 4.0 ->

{50D8FFDD-90CD-4859-841F-AA1961C7767A} -> QuickTime ->

{5421155F-B033-49DB-9B33-8F80F233D4D5} -> GdiplusUpgrade ->

{55508A44-8225-47AB-9666-1F57A5B5CE2E} -> CP_PLSBusinessFlyers ->

{56C049BE-79E9-4502-BEA7-9754A3E60F9B} -> neroxml ->

{5C29CB8B-AC1E-4114-8D68-9CD080140D4A} -> Sony USB Driver ->

{5E8D588F-307C-4250-B622-26969027319A} -> PanoStandAlone ->

{5EC786D5-C0CA-42E0-AF88-5379EF9D91EC} -> First Step Guide ->

{644D04A2-C682-4FD5-977D-03B804C4B9C5} -> CreativeProjects ->

{646A65DD-23FC-418E-B9F0-E0500FB42CB1} -> PhotoGallery ->

{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA} -> Sonic Express Labeler ->

{68963635-14A4-48D9-B431-DF3A74D1AAE1} -> Destinations ->

{6B350CA4-0031-0002-3757-34999AD85AEC} -> InterVideo WinDVD Creator ->

{7148F0A8-6813-11D6-A77B-00B0D0142030} -> Java 2 Runtime Environment, SE v1.4.2_03 ->

{724517BD-1DE1-4986-BFCA-C1DFD379E3BC} -> cp_dwShrek2Cards1 ->

{725249C3-B94C-4141-8799-0D3BA43D0812} -> CameraDrivers ->

{76902AF9-DA86-419D-B533-077643124722} -> Sony ACID Pro 5.0 ->

{7882C030-705A-45FF-A705-DC6089DC51BF} -> SIMPLE_WAY ->

{7B63B2922B174135AFC0E1377DD81EC2} -> DivX ->

{7B98685A-4E21-4A4F-A2D6-DC557042BADA} -> HPIZplus450 ->

{8105684D-8CA6-440D-8F58-7E5FD67A499D} -> Connexion Facile à Internet ->

{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111173220} -> Pacific Heroes 2 ->

{84CDF5A8-1D57-4B69-BAB6-1F11D8923375} -> SkinsHP1 ->

{8777AC6D-89F9-4793-8266-DE406F343E89} -> QFolder ->

{8ADFC4160D694100B5B8A22DE9DCABD9} -> DivX Player ->

{91810AFC-A4F8-4EBA-A5AA-B198BBC81144} -> InterVideo WinDVD Player ->

{9541FED0-327F-4DF0-8B96-EF57EF622F19} -> Sonic RecordNow! ->

{9A394342-4A68-4EBA-85A6-55B559F4E700} -> Microsoft .NET Framework 1.1 French Language Pack ->

{9CB2512B-3EC4-43DF-8002-46BDAB5EDD1B} -> QuickProjects ->

{9EEBF8D5-8712-4D1D-88F4-4CDC2D270BC3} -> PrintScreen ->

{A1062847-0846-427A-92A1-BB8251A91E91} -> HP PSC & OfficeJet 4.0 ->

{A17EABB6-D0C6-44E5-820C-72DC7F495064} -> PaperPort ->

{A2500497-FD32-493e-B8E5-28D6728DBEF5} -> Readme ->

{A4EA3AB4-E78C-4286-96DF-26035507CE55} -> AiO_Scan ->

{A50C25D7-62E9-4511-AD70-8E2DA5E79B7D} -> Apple Software Update ->

{A5B9D22C-755A-4AC6-9904-875E80838BB6} -> CP_AtenaShokunin1Config ->

{AAC4FC36-8F89-4587-8DD3-EBC57C83374D} -> Photosmart 320,370,7400,8100,8400 Series (fra) ->

{AC76BA86-7AD7-1036-7B44-A70900000002} -> Adobe Reader 7.0.9 - Français ->

{B32C75F2-7495-4D01-9431-C11E97D66F8C} -> DocProc ->

{B56D5B09-C4FB-4EA0-8EAD-7BC3E2715A2D} -> DocumentViewer ->

{B911B811-BA3E-46D4-90F8-6F3338359651} -> Director ->

{BB9AC6BF-71B6-42A4-9689-C17D9F44E79A} -> Brother MFL-Pro Suite ->

{C3F058C0-A21C-452D-8D99-95B1A45F417D} -> InterVideo DiscLabel ->

{C4A978A3-CAE4-4856-89D5-696498A7B8F7} -> HPODiscovery ->

{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} -> Microsoft .NET Framework 1.1 ->

{CDFCF124-115F-4976-8BF4-08C89187A146} -> WebReg ->

{CF097717-F174-4144-954A-FBC4BF301036} -> Nero 7 ->

{D0420D64-8D33-4374-A2B2-9225C7925CA6} -> HP Image Zone Plus 4.5.3 ->

{D078226E-83F2-45FD-9CDE-5DA66E5ADB51} -> Rise and Fall ->

{DB518BA6-CB74-4EB6-9ABD-880B6D6E1F38} -> HpSdpAppCoreApp ->

{DBEA1034-5882-4A88-8033-81C4EF0CFA29} -> Google Toolbar for Internet Explorer ->

{DE56FE92-9AD5-4DCB-9111-DDDF73EA5E5E} -> Windows Live Toolbar ->

{E0343A4C-2FFD-4CCB-B0EB-5DE9F0E2A083} -> LS_HSI ->

{EC8673DA-F96B-497E-B2DB-BC7B029FD680} -> BufferChm ->

{F419D20A-7719-4639-8E30-C073A040D878} -> HP Deskjet Preloaded Printer Drivers ->

{F6326B60-1B1D-4ABF-BFCD-7B7404F44411} -> Windows Live Messenger ->

{F652D238-5F29-42D5-BAF3-0115EF977EC2} -> Windows Live Sign-in Assistant ->

{F7514465-E5F3-48E9-A952-327DAEF33DE6} -> InterVideo Home Theater ->

{F8C6BABF-0837-4EA0-AD6C-8E5A392A7538} -> ImageMixer VCD2 ->

{FC22D020-3005-4715-8DF9-F3EDE81DEB3D} -> CreativeProjectsTemplates ->

Age of Mythology Expansion Pack Trial 1.0 -> Age of Mythology Titans Expansion Trial ->

Agere Systems Soft Modem -> Agere Systems PCI Soft Modem ->

AOL YGP Screensaver -> Ecran de veille AOL Photos ->

AskTBar Uninstall -> Ask Toolbar ->

ATI Display Driver -> ATI Display Driver ->

AvA Kiosque Micro -> AvA Kiosque Micro ->

Azureus Vuze -> Azureus Vuze ->

BroadJump Client Foundation -> BroadJump Client Foundation ->

BroadWave -> BroadWave Uninstall ->

ButtonFly -> ButtonFly ->

CCleaner -> CCleaner (remove only) ->

ConfigurateurModem -> Configurateur Modem ->

Corsairs -> Corsairs Gold ->

ECONOMISEUR ECRAN -> ECONOMISEUR ECRAN Screen Saver ->

eMule -> eMule ->

eoClock_is1 -> eoClock 3.6 ->

eoEngine_is1 -> eoEngine 4.6 ->

ExpressBurn -> Express Burn ->

ExpressRip -> Express Rip ->

FreeDial -> FreeDial ->

Frontline Attack - War over Europe -> Frontline Attack - War over Europe ->

GalleryPlayer Images -> GalleryPlayer Images ->

GameSpy Arcade -> GameSpy Arcade ->

Google Updater -> Outil de mise à jour Google ->

HbToolsOutlookTools -> Hotbar Outlook Tools ->

HbToolsWebTools -> Hotbar Browser, Weather and Wowpapers Tools ->

Help and Support Additions -> Help and Support Additions ->

HijackThis -> HijackThis 1.99.1 ->

Hijackthis Version Française_is1 -> Hijackthis Version Française ->

HP Photo & Imaging -> HP Image Zone 4.5.3 ->

IDNMitigationAPIs -> Microsoft Internationalized Domain Names Mitigation APIs ->

ie7 -> Windows Internet Explorer 7 ->

InstallShield_{0C66761E-497A-4BE3-AE0D-8EC30FC9A9AA} -> PC-Doctor for Windows ->

InstallShield_{8105684D-8CA6-440D-8F58-7E5FD67A499D} -> Connexion Facile à Internet ->

ItsTV_is1 -> ItsTV 3.0 ->

Kaspersky Online Scanner -> Kaspersky Online Scanner ->

Kaspersky On-line Scanner -> Kaspersky On-line Scanner ->

KB873339 -> Correctif Windows XP - KB873339 ->

KB883667 -> Correctif Windows XP - KB883667 ->

KB885835 -> Correctif Windows XP - KB885835 ->

KB885836 -> Correctif Windows XP - KB885836 ->

KB886185 -> Correctif Windows XP - KB886185 ->

KB887472 -> Correctif Windows XP - KB887472 ->

KB887742 -> Correctif Windows XP - KB887742 ->

KB888113 -> Correctif Windows XP - KB888113 ->

KB888302 -> Correctif Windows XP - KB888302 ->

KB890046 -> Mise à jour de sécurité pour Windows XP (KB890046) ->

KB890175 -> Correctif Windows XP - KB890175 ->

KB890859 -> Correctif Windows XP - KB890859 ->

KB891781 -> Correctif Windows XP - KB891781 ->

KB893756 -> Mise à jour de sécurité pour Windows XP (KB893756) ->

KB893803v2 -> Windows Installer 3.1 (KB893803) ->

KB894391 -> Mise à jour pour Windows XP (KB894391) ->

KB896358 -> Mise à jour de sécurité pour Windows XP (KB896358) ->

KB896423 -> Mise à jour de sécurité pour Windows XP (KB896423) ->

KB896424 -> Mise à jour de sécurité pour Windows XP (KB896424) ->

KB896428 -> Mise à jour de sécurité pour Windows XP (KB896428) ->

KB898458 -> Mise à jour de sécurité pour Step by Step Interactive Training (KB898458) ->

KB898461 -> Mise à jour pour Windows XP (KB898461) ->

KB899587 -> Mise à jour de sécurité pour Windows XP (KB899587) ->

KB899591 -> Mise à jour de sécurité pour Windows XP (KB899591) ->

KB900485 -> Mise à jour pour Windows XP (KB900485) ->

KB900725 -> Mise à jour de sécurité pour Windows XP (KB900725) ->

KB901017 -> Mise à jour de sécurité pour Windows XP (KB901017) ->

KB901190 -> Mise à jour de sécurité pour Windows XP (KB901190) ->

KB901214 -> Mise à jour de sécurité pour Windows XP (KB901214) ->

KB902400 -> Mise à jour de sécurité pour Windows XP (KB902400) ->

KB904706 -> Mise à jour de sécurité pour Windows XP (KB904706) ->

KB904942 -> Mise à jour pour Windows XP (KB904942) ->

KB905414 -> Mise à jour de sécurité pour Windows XP (KB905414) ->

KB905749 -> Mise à jour de sécurité pour Windows XP (KB905749) ->

KB908519 -> Mise à jour de sécurité pour Windows XP (KB908519) ->

KB908531 -> Mise à jour pour Windows XP (KB908531) ->

KB910437 -> Mise à jour pour Windows XP (KB910437) ->

KB911280 -> Mise à jour pour Windows XP (KB911280) ->

KB911562 -> Mise à jour de sécurité pour Windows XP (KB911562) ->

KB911564 -> Mise à jour de sécurité pour Lecteur Windows Media (KB911564) ->

KB911567 -> Mise à jour de sécurité pour Windows XP (KB911567) ->

KB911927 -> Mise à jour de sécurité pour Windows XP (KB911927) ->

KB912919 -> Mise à jour de sécurité pour Windows XP (KB912919) ->

KB913580 -> Mise à jour de sécurité pour Windows XP (KB913580) ->

KB914388 -> Mise à jour de sécurité pour Windows XP (KB914388) ->

KB914389 -> Mise à jour de sécurité pour Windows XP (KB914389) ->

KB914440 -> Correctif pour Windows XP (KB914440) ->

KB915865 -> Hotfix for Windows XP (KB915865) ->

KB916281 -> Mise à jour de sécurité pour Windows XP (KB916281) ->

KB916595 -> Mise à jour pour Windows XP (KB916595) ->

KB917159 -> Mise à jour de sécurité pour Windows XP (KB917159) ->

KB917344 -> Mise à jour de sécurité pour Windows XP (KB917344) ->

KB917422 -> Mise à jour de sécurité pour Windows XP (KB917422) ->

KB917734_WMP10 -> Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734) ->

KB917734_WMP9 -> Mise à jour de sécurité pour Lecteur Windows Media 9 (KB917734) ->

KB917953 -> Mise à jour de sécurité pour Windows XP (KB917953) ->

KB918118 -> Mise à jour de sécurité pour Windows XP (KB918118) ->

KB918439 -> Mise à jour de sécurité pour Windows XP (KB918439) ->

KB918899 -> Mise à jour de sécurité pour Windows XP (KB918899) ->

KB919007 -> Mise à jour de sécurité pour Windows XP (KB919007) ->

KB920213 -> Mise à jour de sécurité pour Windows XP (KB920213) ->

KB920214 -> Mise à jour de sécurité pour Windows XP (KB920214) ->

KB920670 -> Mise à jour de sécurité pour Windows XP (KB920670) ->

KB920683 -> Mise à jour de sécurité pour Windows XP (KB920683) ->

KB920685 -> Mise à jour de sécurité pour Windows XP (KB920685) ->

KB920872 -> Mise à jour pour Windows XP (KB920872) ->

KB921398 -> Mise à jour de sécurité pour Windows XP (KB921398) ->

KB921883 -> Mise à jour de sécurité pour Windows XP (KB921883) ->

KB922582 -> Mise à jour pour Windows XP (KB922582) ->

KB922616 -> Mise à jour de sécurité pour Windows XP (KB922616) ->

KB922760 -> Mise à jour de sécurité pour Windows XP (KB922760) ->

KB922819 -> Mise à jour de sécurité pour Windows XP (KB922819) ->

KB923191 -> Mise à jour de sécurité pour Windows XP (KB923191) ->

KB923414 -> Mise à jour de sécurité pour Windows XP (KB923414) ->

KB923689 -> Mise à jour de sécurité pour Windows XP (KB923689) ->

KB923694 -> Mise à jour de sécurité pour Windows XP (KB923694) ->

KB923723 -> Mise à jour de sécurité pour Step by Step Interactive Training (KB923723) ->

KB923980 -> Mise à jour de sécurité pour Windows XP (KB923980) ->

KB924191 -> Mise à jour de sécurité pour Windows XP (KB924191) ->

KB924270 -> Mise à jour de sécurité pour Windows XP (KB924270) ->

KB924496 -> Mise à jour de sécurité pour Windows XP (KB924496) ->

KB924667 -> Mise à jour de sécurité pour Windows XP (KB924667) ->

KB925398_WMP64 -> Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398) ->

KB925486 -> Mise à jour de sécurité pour Windows XP (KB925486) ->

KB925902 -> Mise à jour de sécurité pour Windows XP (KB925902) ->

KB926239 -> Hotfix for Windows XP (KB926239) ->

KB926255 -> Mise à jour de sécurité pour Windows XP (KB926255) ->

KB926436 -> Mise à jour de sécurité pour Windows XP (KB926436) ->

KB927779 -> Mise à jour de sécurité pour Windows XP (KB927779) ->

KB927802 -> Mise à jour de sécurité pour Windows XP (KB927802) ->

KB927891 -> Mise à jour pour Windows XP (KB927891) ->

KB928090-IE7 -> Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090) ->

KB928255 -> Mise à jour de sécurité pour Windows XP (KB928255) ->

KB928843 -> Mise à jour de sécurité pour Windows XP (KB928843) ->

KB929123 -> Mise à jour de sécurité pour Windows XP (KB929123) ->

KB929399 -> Hotfix for Windows Media Format 11 SDK (KB929399) ->

KB929969 -> Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969) ->

KB930178 -> Mise à jour de sécurité pour Windows XP (KB930178) ->

KB930916 -> Mise à jour pour Windows XP (KB930916) ->

KB931261 -> Mise à jour de sécurité pour Windows XP (KB931261) ->

KB931784 -> Mise à jour de sécurité pour Windows XP (KB931784) ->

KB931836 -> Mise à jour pour Windows XP (KB931836) ->

KB932168 -> Mise à jour de sécurité pour Windows XP (KB932168) ->

KB933566-IE7 -> Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566) ->

KB935839 -> Mise à jour de sécurité pour Windows XP (KB935839) ->

KB935840 -> Mise à jour de sécurité pour Windows XP (KB935840) ->

KBD -> Enhanced Multimedia Keyboard Solution ->

Le code de la route -> Le code de la route ->

Messenger Plus! Live -> Messenger Plus! Live & Sponsor (CiD) ->

MixPad -> MixPad ->

Mozilla Firefox (2.0.0.6) -> Mozilla Firefox (2.0.0.6) ->

MSC -> McAfee SecurityCenter ->

MSCompPackV1 -> Microsoft Compression Client Pack 1.0 for Windows XP ->

MSNINST -> MSN ->

Navilog1 -> Navilog1 Version 2.0.6 ->

NLSDownlevelMapping -> Microsoft National Language Support Downlevel APIs ->

Pack Vista Inspirat -> Pack Vista Inspirat 1.1 ->

photos -> photos ->

Picasa2 -> Picasa 2 ->

PS2 -> PS2 ->

Python 2.2.3 -> Python 2.2.3 ->

pywin32-py2.2 -> Python 2.2 pywin32 extensions (build 203) ->

RealPlayer 6.0 -> RealPlayer ->

RecordPad -> RecordPad Sound Recorder ->

ShockwaveFlash -> Adobe Flash Player 9 ActiveX ->

Slice -> Slice Uninstall ->

SoundTap -> SoundTap Uninstall ->

Spyware-Secure -> Spyware-Secure ->

Stamp -> Stamp Uninstall ->

StreetPlugin -> Learn2 Player (Uninstall Only) ->

Switch -> Switch ->

ViewpointMediaPlayer -> Viewpoint Media Player ->

WavePad -> WavePad Uninstall ->

WgaNotify -> Windows Genuine Advantage Notifications (KB905474) ->

Windows Live Toolbar -> Windows Live Toolbar ->

Windows Media Format Runtime -> Windows Media Format 11 runtime ->

Windows Media Player -> Lecteur Windows Media 11 ->

WinRAR archiver -> Archiveur WinRAR ->

WMFDist11 -> Windows Media Format 11 runtime ->

wmp11 -> Windows Media Player 11 ->

Wudf01000 -> Microsoft User-Mode Driver Framework Feature Pack 1.0 ->

[Files/Folders - Created Within 30 days]

hiberfil.sys -> %SystemDrive%\hiberfil.sys -> [Ver = | Size = 1072222208 bytes | Created Date = 02/01/1601 23:00:00 | Attr = HS]

$NtUninstallKB925902$ -> %SystemRoot%\$NtUninstallKB925902$ -> [Folder | Created Date = 12/07/2007 02:02:30 | Attr = H ]

$NtUninstallKB927891$ -> %SystemRoot%\$NtUninstallKB927891$ -> [Folder | Created Date = 12/07/2007 02:02:39 | Attr = H ]

$NtUninstallKB929123$ -> %SystemRoot%\$NtUninstallKB929123$ -> [Folder | Created Date = 12/07/2007 02:02:21 | Attr = H ]

$NtUninstallKB929399$ -> %SystemRoot%\$NtUninstallKB929399$ -> [Folder | Created Date = 12/07/2007 02:01:59 | Attr = H ]

$NtUninstallKB930178$ -> %SystemRoot%\$NtUninstallKB930178$ -> [Folder | Created Date = 12/07/2007 02:02:13 | Attr = H ]

$NtUninstallKB930916$ -> %SystemRoot%\$NtUninstallKB930916$ -> [Folder | Created Date = 12/07/2007 02:01:23 | Attr = H ]

$NtUninstallKB931261$ -> %SystemRoot%\$NtUninstallKB931261$ -> [Folder | Created Date = 12/07/2007 02:02:46 | Attr = H ]

$NtUninstallKB931784$ -> %SystemRoot%\$NtUninstallKB931784$ -> [Folder | Created Date = 12/07/2007 02:02:54 | Attr = H ]

$NtUninstallKB932168$ -> %SystemRoot%\$NtUninstallKB932168$ -> [Folder | Created Date = 12/07/2007 02:02:07 | Attr = H ]

$NtUninstallKB935839$ -> %SystemRoot%\$NtUninstallKB935839$ -> [Folder | Created Date = 12/07/2007 02:01:16 | Attr = H ]

$NtUninstallKB935840$ -> %SystemRoot%\$NtUninstallKB935840$ -> [Folder | Created Date = 12/07/2007 02:01:30 | Attr = H ]

BDOSCAN8 -> %SystemRoot%\BDOSCAN8 -> [Folder | Created Date = 07/08/2007 11:26:01 | Attr = ]

COVERE~1.INI -> %SystemRoot%\COVERE~1.INI -> [Ver = | Size = 391 bytes | Created Date = 19/07/2007 19:30:59 | Attr = ]

LastGood -> %SystemRoot%\LastGood -> [Folder | Created Date = 07/08/2007 11:25:59 | Attr = ]

NeroDigital.ini -> %SystemRoot%\NeroDigital.ini -> [Ver = | Size = 69 bytes | Created Date = 19/07/2007 21:17:32 | Attr = ]

PIF -> %SystemRoot%\PIF -> [Folder | Created Date = 12/07/2007 08:54:54 | Attr = H ]

pss -> %SystemRoot%\pss -> [Folder | Created Date = 05/08/2007 21:32:12 | Attr = ]

UbiSoft -> %SystemRoot%\UbiSoft -> [Folder | Created Date = 10/07/2007 13:09:48 | Attr = ]

wininit.ini -> %SystemRoot%\wininit.ini -> [Ver = | Size = 345 bytes | Created Date = 19/07/2007 15:30:42 | Attr = ]

McDefragTask.job -> %SystemRoot%\tasks\McDefragTask.job -> [Ver = | Size = 382 bytes | Created Date = 30/07/2007 12:38:36 | Attr = ]

McQcTask.job -> %SystemRoot%\tasks\McQcTask.job -> [Ver = | Size = 372 bytes | Created Date = 30/07/2007 12:38:35 | Attr = ]

Config.MPF -> %System32%\Config.MPF -> [Ver = | Size = 8838 bytes | Created Date = 30/07/2007 12:42:00 | Attr = ]

dunzip32.dll -> %System32%\dunzip32.dll -> Inner Media, Inc. [Ver = 5.00.06 | Size = 143360 bytes | Created Date = 30/07/2007 12:40:14 | Attr = ]

Kaspersky Lab -> %System32%\Kaspersky Lab -> [Folder | Created Date = 06/08/2007 19:56:57 | Attr = ]

mfeavfk.sys -> %System32%\drivers\mfeavfk.sys -> McAfee, Inc. [Ver = SYSCORE.13.3.0.108.x86 | Size = 71496 bytes | Created Date = 30/07/2007 12:39:01 | Attr = ]

mfebopk.sys -> %System32%\drivers\mfebopk.sys -> McAfee, Inc. [Ver = SYSCORE.13.3.0.120.x86 | Size = 34184 bytes | Created Date = 30/07/2007 12:39:03 | Attr = ]

mfehidk.sys -> %System32%\drivers\mfehidk.sys -> McAfee, Inc. [Ver = SYSCORE.13.3.0.120.x86 | Size = 170408 bytes | Created Date = 30/07/2007 12:39:01 | Attr = ]

mferkdk.sys -> %System32%\drivers\mferkdk.sys -> McAfee, Inc. [Ver = SYSCORE.13.3.0.120.x86 | Size = 32008 bytes | Created Date = 30/07/2007 12:39:04 | Attr = ]

mfesmfk.sys -> %System32%\drivers\mfesmfk.sys -> McAfee, Inc. [Ver = SYSCORE.13.3.0.120.x86 | Size = 37480 bytes | Created Date = 30/07/2007 12:39:03 | Attr = ]

Mpfp.sys -> %System32%\drivers\Mpfp.sys -> McAfee, Inc. [Ver = 8.3.111.0 | Size = 109608 bytes | Created Date = 30/07/2007 12:38:53 | Attr = ]

hosts.msn -> %System32%\drivers\etc\hosts.msn -> [Ver = | Size = 4158 bytes | Created Date = 30/07/2007 20:04:13 | Attr = ]

[Files/Folders - Modified Within 30 days]

boot.ini -> %SystemDrive%\boot.ini -> [Ver = | Size = 296 bytes | Modified Date = 05/08/2007 22:52:46 | Attr = RHS]

Config.Msi -> %SystemDrive%\Config.Msi -> [Folder | Modified Date = 04/08/2007 18:59:14 | Attr = H ]

Documents and Settings -> %SystemDrive%\Documents and Settings -> [Folder | Modified Date = 14/07/2007 18:10:26 | Attr = ]

hiberfil.sys -> %SystemDrive%\hiberfil.sys -> [Ver = | Size = 1072222208 bytes | Modified Date = 07/08/2007 10:27:54 | Attr = HS]

Program Files -> %ProgramFiles% -> [Folder | Modified Date = 07/08/2007 10:28:02 | Attr = ]

sqmdata11.sqm -> %SystemDrive%\sqmdata11.sqm -> [Ver = | Size = 232 bytes | Modified Date = 26/07/2007 01:02:04 | Attr = H ]

sqmnoopt07.sqm -> %SystemDrive%\sqmnoopt07.sqm -> [Ver = | Size = 244 bytes | Modified Date = 26/07/2007 01:02:04 | Attr = H ]

temp -> %SystemDrive%\temp -> [Folder | Modified Date = 19/07/2007 18:17:30 | Attr = ]

WINDOWS -> %SystemRoot% -> [Folder | Modified Date = 07/08/2007 12:26:04 | Attr = ]

$hf_mig$ -> %SystemRoot%\$hf_mig$ -> [Folder | Modified Date = 12/07/2007 03:02:40 | Attr = H ]

$NtUninstallKB925902$ -> %SystemRoot%\$NtUninstallKB925902$ -> [Folder | Modified Date = 12/07/2007 03:02:34 | Attr = H ]

$NtUninstallKB927891$ -> %SystemRoot%\$NtUninstallKB927891$ -> [Folder | Modified Date = 12/07/2007 03:02:42 | Attr = H ]

$NtUninstallKB929123$ -> %SystemRoot%\$NtUninstallKB929123$ -> [Folder | Modified Date = 12/07/2007 03:02:24 | Attr = H ]

$NtUninstallKB929399$ -> %SystemRoot%\$NtUninstallKB929399$ -> [Folder | Modified Date = 12/07/2007 03:02:02 | Attr = H ]

$NtUninstallKB930178$ -> %SystemRoot%\$NtUninstallKB930178$ -> [Folder | Modified Date = 12/07/2007 03:02:16 | Attr = H ]

$NtUninstallKB930916$ -> %SystemRoot%\$NtUninstallKB930916$ -> [Folder | Modified Date = 12/07/2007 03:01:26 | Attr = H ]

$NtUninstallKB931261$ -> %SystemRoot%\$NtUninstallKB931261$ -> [Folder | Modified Date = 12/07/2007 03:02:48 | Attr = H ]

$NtUninstallKB931784$ -> %SystemRoot%\$NtUninstallKB931784$ -> [Folder | Modified Date = 12/07/2007 03:02:58 | Attr = H ]

$NtUninstallKB932168$ -> %SystemRoot%\$NtUninstallKB932168$ -> [Folder | Modified Date = 12/07/2007 03:02:10 | Attr = H ]

$NtUninstallKB935839$ -> %SystemRoot%\$NtUninstallKB935839$ -> [Folder | Modified Date = 12/07/2007 03:01:18 | Attr = H ]

$NtUninstallKB935840$ -> %SystemRoot%\$NtUninstallKB935840$ -> [Folder | Modified Date = 12/07/2007 03:01:32 | Attr = H ]

BDOSCAN8 -> %SystemRoot%\BDOSCAN8 -> [Folder | Modified Date = 07/08/2007 13:40:30 | Attr = ]

bootstat.dat -> %SystemRoot%\bootstat.dat -> [Ver = | Size = 2048 bytes | Modified Date = 07/08/2007 10:27:56 | Attr = S]

cdplayer.ini -> %SystemRoot%\cdplayer.ini -> [Ver = | Size = 1278 bytes | Modified Date = 20/07/2007 12:48:28 | Attr = ]

COVERE~1.INI -> %SystemRoot%\COVERE~1.INI -> [Ver = | Size = 391 bytes | Modified Date = 19/07/2007 20:31:00 | Attr = ]

Debug -> %SystemRoot%\Debug -> [Folder | Modified Date = 05/08/2007 22:53:44 | Attr = ]

Downloaded Program Files -> %SystemRoot%\Downloaded Program Files -> [Folder | Modified Date = 07/08/2007 12:26:06 | Attr = ]

Help -> %SystemRoot%\Help -> [Folder | Modified Date = 11/07/2007 15:24:28 | Attr = ]

ie7updates -> %SystemRoot%\ie7updates -> [Folder | Modified Date = 12/07/2007 03:00:52 | Attr = ]

inf -> %SystemRoot%\inf -> [Folder | Modified Date = 07/08/2007 12:26:02 | Attr = H ]

Installer -> %SystemRoot%\Installer -> [Folder | Modified Date = 04/08/2007 18:59:14 | Attr = HS]

LastGood -> %SystemRoot%\LastGood -> [Folder | Modified Date = 07/08/2007 12:26:00 | Attr = ]

Minidump -> %SystemRoot%\Minidump -> [Folder | Modified Date = 05/08/2007 22:53:44 | Attr = ]

mozver.dat -> %SystemRoot%\mozver.dat -> [Ver = | Size = 4052 bytes | Modified Date = 11/07/2007 16:41:42 | Attr = ]

msagent -> %SystemRoot%\msagent -> [Folder | Modified Date = 12/07/2007 09:29:54 | Attr = ]

NeroDigital.ini -> %SystemRoot%\NeroDigital.ini -> [Ver = | Size = 69 bytes | Modified Date = 03/08/2007 13:13:48 | Attr = ]

network diagnostic -> %SystemRoot%\network diagnostic -> [Folder | Modified Date = 31/07/2007 23:08:24 | Attr = ]

PIF -> %SystemRoot%\PIF -> [Folder | Modified Date = 12/07/2007 09:54:56 | Attr = H ]

Prefetch -> %SystemRoot%\Prefetch -> [Folder | Modified Date = 07/08/2007 13:49:10 | Attr = ]

pss -> %SystemRoot%\pss -> [Folder | Modified Date = 05/08/2007 22:32:22 | Attr = ]

SoftwareDistribution -> %SystemRoot%\SoftwareDistribution -> [Folder | Modified Date = 11/07/2007 15:24:30 | Attr = ]

system.ini -> %SystemRoot%\system.ini -> [Ver = | Size = 227 bytes | Modified Date = 05/08/2007 22:52:46 | Attr = ]

system32 -> %System32% -> [Folder | Modified Date = 07/08/2007 10:29:02 | Attr = ]

Tasks -> %SystemRoot%\Tasks -> [Folder | Modified Date = 30/07/2007 13:38:38 | Attr = ]

Temp -> %SystemRoot%\Temp -> [Folder | Modified Date = 07/08/2007 13:50:04 | Attr = ]

UbiSoft -> %SystemRoot%\UbiSoft -> [Folder | Modified Date = 10/07/2007 14:09:50 | Attr = ]

win.ini -> %SystemRoot%\win.ini -> [Ver = | Size = 686 bytes | Modified Date = 05/08/2007 22:52:46 | Attr = ]

wininit.ini -> %SystemRoot%\wininit.ini -> [Ver = | Size = 345 bytes | Modified Date = 19/07/2007 16:33:38 | Attr = ]

AppleSoftwareUpdate.job -> %SystemRoot%\tasks\AppleSoftwareUpdate.job -> [Ver = | Size = 284 bytes | Modified Date = 13/07/2007 08:22:02 | Attr = ]

Check Updates for Windows Live Toolbar.job -> %SystemRoot%\tasks\Check Updates for Windows Live Toolbar.job -> [Ver = | Size = 376 bytes | Modified Date = 07/08/2007 12:59:10 | Attr = ]

McDefragTask.job -> %SystemRoot%\tasks\McDefragTask.job -> [Ver = | Size = 382 bytes | Modified Date = 30/07/2007 13:38:38 | Attr = ]

McQcTask.job -> %SystemRoot%\tasks\McQcTask.job -> [Ver = | Size = 372 bytes | Modified Date = 30/07/2007 13:38:38 | Attr = ]

SA.DAT -> %SystemRoot%\tasks\SA.DAT -> [Ver = | Size = 6 bytes | Modified Date = 07/08/2007 10:27:58 | Attr = H ]

CatRoot2 -> %System32%\CatRoot2 -> [Folder | Modified Date = 07/08/2007 12:26:00 | Attr = ]

Config.MPF -> %System32%\Config.MPF -> [Ver = | Size = 8838 bytes | Modified Date = 07/08/2007 10:28:56 | Attr = ]

CONFIG.NT -> %System32%\CONFIG.NT -> [Ver = | Size = 3072 bytes | Modified Date = 11/07/2007 19:07:52 | Attr = ]

DirectX -> %System32%\DirectX -> [Folder | Modified Date = 19/07/2007 18:21:26 | Attr = ]

dllcache -> %System32%\dllcache -> [Folder | Modified Date = 12/07/2007 09:29:54 | Attr = ]

drivers -> %System32%\drivers -> [Folder | Modified Date = 05/08/2007 21:33:24 | Attr = ]

FNTCACHE.DAT -> %System32%\FNTCACHE.DAT -> [Ver = | Size = 200144 bytes | Modified Date = 12/07/2007 09:29:56 | Attr = ]

Kaspersky Lab -> %System32%\Kaspersky Lab -> [Folder | Modified Date = 06/08/2007 20:56:58 | Attr = ]

LogFiles -> %System32%\LogFiles -> [Folder | Modified Date = 05/08/2007 22:53:46 | Attr = ]

wpa.dbl -> %System32%\wpa.dbl -> [Ver = | Size = 1158 bytes | Modified Date = 07/08/2007 10:29:06 | Attr = ]

etc -> %System32%\drivers\etc -> [Folder | Modified Date = 11/07/2007 14:57:54 | Attr = ]

lvuvc.hs -> %System32%\drivers\lvuvc.hs -> [Ver = | Size = 0 bytes | Modified Date = 07/08/2007 10:27:52 | Attr = ]

[File String Scan - Non-Microsoft Only]

WSUD , -> %System32%\ALSNDMGR.CPL -> Realtek Semiconductor Corp. [Ver = 2.2.0.34 | Size = 16121856 bytes | Modified Date = 21/09/2004 00:20:44 | Attr = ]

PEC2 , -> %System32%\dfrg.msc -> [Ver = | Size = 41131 bytes | Modified Date = 05/08/2004 14:00:00 | Attr = ]

PEC2 , PECompact2 , -> %System32%\DivX.dll -> DivXNetworks, Inc. [Ver = 5.2.1.1328 | Size = 716800 bytes | Modified Date = 03/09/2004 20:03:48 | Attr = ]

Thawte Consulting , -> %System32%\rmoc3260.dll -> RealNetworks, Inc. [Ver = 6.0.9.2568 | Size = 185952 bytes | Modified Date = 13/11/2006 08:51:36 | Attr = ]

winsync , -> %System32%\wbdbase.deu -> [Ver = | Size = 1309184 bytes | Modified Date = 05/08/2004 14:00:00 | Attr = ]

Thawte Consulting , -> %System32%\XceedFtp.dll -> Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com [Ver = 1.1.129.0 | Size = 279392 bytes | Modified Date = 31/01/2005 10:35:06 | Attr = ]

WSUD , UPX0 , -> %System32%\dllcache\hwxjpn.dll -> [Ver = | Size = 13463552 bytes | Modified Date = 05/08/2004 14:00:00 | Attr = ]

UPX0 , -> %System32%\dllcache\NT5IIS.CAT -> [Ver = | Size = 809394 bytes | Modified Date = 05/08/2004 14:00:00 | Attr = ]

< End of report >

Thanos · le 7 août 2007

je regarde tes rapports et te laisse une procédure...

Thanos · le 7 août 2007

désolé pour l'attente!!

La suite >

1) Démarre WinPFind3U en double cliquant sur WinPFind3U.exe et copie/colle le texte ci dessous (ne copie pas le mot CITATION)

dans le Panneau Paste fix here , puis clique sur le bouton Run Fix.

[Registry - Non-Microsoft Only]
< Internet Explorer Settings > ->

YY -> HKCU: URLSearchHooks\\{9CB65206-89C4-402c-BA80-02D8C59F9B1D} [HKLM] -> %ProgramFiles%\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL []

< BHO's > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\

YY -> {9CB65201-89C4-402c-BA80-02D8C59F9B1D} [HKLM] -> %ProgramFiles%\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL [Ask Search Assistant BHO]

YY -> {FE063DB1-4EC0-403e-8DD8-394C54984B2C} [HKLM] -> %ProgramFiles%\AskTBar\bar\1.bin\ASKTBAR.DLL [Ask Toolbar BHO]

< Internet Explorer Bars [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\

YN -> {7E66936C-FEA0-4984-AD26-7B6661AC5B2E} [HKLM] -> %ProgramFiles%\HbTools\Bin\4.8.2.0\HbtHostIE.dll [Hotbar Information Window]

< Internet Explorer Bars [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\

YN -> {66B90ADB-0BE3-40AE-8680-84A6F0577CA0} [HKLM] -> %ProgramFiles%\HbTools\Bin\4.8.0.0\HbtHostIE.dll [Web Assistant]

YN -> {7E66936C-FEA0-4984-AD26-7B6661AC5B2E} [HKLM] -> %ProgramFiles%\HbTools\Bin\4.8.2.0\HbtHostIE.dll [Hotbar Information Window]

< Internet Explorer ToolBars [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar

YY -> {FE063DB9-4EC0-403e-8DD8-394C54984B2C} [HKLM] -> %ProgramFiles%\AskTBar\bar\1.bin\ASKTBAR.DLL [Ask Toolbar]

< Internet Explorer ToolBars [HKCU] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\

YN -> ShellBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found]

YN -> ShellBrowser\\{74CC49F7-EB32-4A08-B204-948962A6E3DB} [HKLM] -> %ProgramFiles%\HbTools\Bin\4.8.2.0\HbtHostIE.dll [H&otbar]

YN -> WebBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found]

YN -> WebBrowser\\{74CC49F7-EB32-4A08-B204-948962A6E3DB} [HKLM] -> %ProgramFiles%\HbTools\Bin\4.8.2.0\HbtHostIE.dll [H&otbar]

[Registry - Additional Scans - Non-Microsoft Only]

< Uninstall List > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\

YN -> AskTBar Uninstall -> Ask Toolbar

YN -> HbToolsOutlookTools -> Hotbar Outlook Tools

YN -> HbToolsWebTools -> Hotbar Browser, Weather and Wowpapers Tools

YN -> Spyware-Secure -> Spyware-Secure

Le Fix va se faire rapidement,puis il te sera demandé de redémarrer ton pc : accepte en cliquant sur Yes

Poste le rapport qui se trouve dans le dossier WinPFind3u( c'est un rapport qui a pour nom la date du jour\mois\année\heure).

2) Poste un nouveau rapport hijackthis

Note: Je ne t'ai pas fait éliminer EoRezo , mais saches qu'il affice aussi des pubs!! si tu veux t'en débarrasser, il te suffit de le désinstaller simplement via Ajouter/Supprimer des Programmes.

Witch · le 7 août 2007

Pas de souci pour l'attente, je piquais une tête dans la piscine en attendant

voici le rapport.

ps : il ne m'a pas demandé de redémarrer le PC, je le fais manuellement et ensuite je t'envoie le rapport hijackthis

***RAPPORT WINPFIND3***

[Registry - Non-Microsoft Only]

Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\\{9CB65206-89C4-402c-BA80-02D8C59F9B1D} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9CB65206-89C4-402c-BA80-02D8C59F9B1D} deleted successfully.

C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL moved successfully.

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CB65201-89C4-402c-BA80-02D8C59F9B1D} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9CB65201-89C4-402c-BA80-02D8C59F9B1D} deleted successfully.

File C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL not found.

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FE063DB1-4EC0-403e-8DD8-394C54984B2C} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FE063DB1-4EC0-403e-8DD8-394C54984B2C} deleted successfully.

C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL moved successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{7E66936C-FEA0-4984-AD26-7B6661AC5B2E} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7E66936C-FEA0-4984-AD26-7B6661AC5B2E} deleted successfully.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{66B90ADB-0BE3-40AE-8680-84A6F0577CA0} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{66B90ADB-0BE3-40AE-8680-84A6F0577CA0} deleted successfully.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{7E66936C-FEA0-4984-AD26-7B6661AC5B2E} deleted successfully.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar\\{FE063DB9-4EC0-403e-8DD8-394C54984B2C} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FE063DB9-4EC0-403e-8DD8-394C54984B2C} deleted successfully.

File C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL not found.

Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} deleted successfully.

Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{74CC49F7-EB32-4A08-B204-948962A6E3DB} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{74CC49F7-EB32-4A08-B204-948962A6E3DB} deleted successfully.

Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} deleted successfully.

Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{74CC49F7-EB32-4A08-B204-948962A6E3DB} deleted successfully.

[Registry - Additional Scans - Non-Microsoft Only]

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AskTBar Uninstall deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HbToolsOutlookTools deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HbToolsWebTools deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Spyware-Secure deleted successfully.

< End of log >

Created on 08/07/2007 15:16:31

Witch · le 7 août 2007

Voila pour vous (dsl Eclypse je n'avais pas vu ton post :-s)

***RAPPORT HIJACKTHIS***

Logfile of HijackThis v1.99.1

Scan saved at 15:28:08, on 07/08/2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\brsvc01a.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\brss01a.exe

C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe

C:\windows\system\hpsysdrv.exe

C:\WINDOWS\AGRSMMSG.exe

C:\WINDOWS\system32\hphmon06.exe

C:\Program Files\InterVideo\Common\Bin\WinRemote.exe

C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

C:\HP\KBD\KBD.EXE

C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

C:\Program Files\eoRezo\EoEngine.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Brother\ControlCenter2\brctrcen.exe

C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe

C:\Program Files\McAfee\MSK\MskAgent.exe

C:\Program Files\SiteAdvisor\6066\SiteAdv.exe

C:\Program Files\NCH Swift Sound\RecordPad\recordpad.exe

C:\Program Files\NCH Swift Sound\BroadWave\broadwave.exe

C:\Program Files\MSN Messenger\MsnMsgr.Exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\Google\Google Updater\GoogleUpdater.exe

C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe

C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe

C:\Program Files\NCH Swift Sound\BroadWave\broadwave.exe

C:\Program Files\NCH Swift Sound\Components\mp3el\mp3enc.exe

C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe

C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe

c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe

C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe

C:\PROGRA~1\McAfee\MSC\mcpromgr.exe

c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe

c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe

C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe

C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe

C:\Program Files\McAfee\MPF\MPFSrv.exe

C:\PROGRA~1\McAfee\MPS\mps.exe

C:\Program Files\McAfee\MSK\MskSrver.exe

C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe

C:\Program Files\SiteAdvisor\6066\SAService.exe

C:\WINDOWS\system32\svchost.exe

c:\PROGRA~1\mcafee.com\agent\mcagent.exe

C:\Program Files\McAfee\MPS\mpsevh.exe

C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\MSN Messenger\usnsvc.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.aliceadsl.fr

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll

O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\eoRezo\EoAdv\EoRezoBHO.dll

O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll

O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll

O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll

O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe

O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe

O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe

O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe

O4 - HKLM\..\Run: [WINREMOTE] "C:\Program Files\InterVideo\Common\Bin\WinRemote.exe"

O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE

O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [Workflow] E:\Workflow.exe

O4 - HKLM\..\Run: [autoclk] autoclk.exe

O4 - HKLM\..\Run: [adiras] adiras.exe

O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE

O4 - HKLM\..\Run: [imInstaller_IncrediMail] C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\ImInstaller\IncrediMail\IncrediMail_Install.exe -startup -product IncrediMail

O4 - HKLM\..\Run: [Watch] C:\PROGRA~1\AvA\Watch.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\eoRezo\EoEngine.exe"

O4 - HKLM\..\Run: [View start global team] C:\Documents and Settings\All Users\Application Data\iso delete view start\64 License.exe

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [sSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot

O4 - HKLM\..\Run: [setDefPrt] C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe

O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun

O4 - HKLM\..\Run: [OlStatusMon] "C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe" dvcStatusMinimize

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exe

O4 - HKLM\..\Run: [siteAdvisor] C:\Program Files\SiteAdvisor\6066\SiteAdv.exe

O4 - HKLM\..\Run: [RecordPadRun] "C:\Program Files\NCH Swift Sound\RecordPad\recordpad.exe" -logon

O4 - HKLM\..\Run: [broadWaveRun] "C:\Program Files\NCH Swift Sound\BroadWave\broadwave.exe" -logon

O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe

O4 - Startup: Y'z ToolBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe

O4 - Global Startup: Contrôleur d’état.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe

O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML

O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)

O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O11 - Options group: [iNTERNATIONAL] International*

O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: BroadWave Service (BroadWaveService) - Unknown owner - C:\Program Files\NCH Swift Sound\BroadWave\broadwave.exe" -service (file missing)

O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe

O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\FICHIE~1\McAfee\EmProxy\emproxy.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe

O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe

O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe

O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe

O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe

O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe

O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe

O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe

O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe

O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe

O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe

O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe

O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe

O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe

O23 - Service: olMntrService - Olivetti - C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe

O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6066\SAService.exe

eclypse · le 7 août 2007

Telecharge en cliquant Ici GenProc de narco et jean-chretien )sur ton bureau

Dezippe le et lance GenProc.bat

Colle le rapport ici

Tuto dispo : http://www.alt-shift-return.org/Info/GenProc-HowTo.html

Amicalement

Eclypse

Modifié le 7 août 2007 par eclypse

Witch · le 7 août 2007

ho les gars! Je suis trop contente d'avoir éclaté Spyware secure !!

Franchement merci !

Charles merci, on respire un peu mieux maintenant qu'il n'y est plus...

La petite maison dans la prairie te doit une fière chandelle!

ps : Eclypse le logiciel va me servir à faire quoi ?

eclypse · le 7 août 2007

verifier qu'il n'y ai plus rien et que ton spywaresecure soit bien parti et que tu n'es pas d'autres infections courrantes qui pourraient etre embriquées dans celle ci

Connexion

Pas encore inscrit ?

Supprimer Spyware Secure

Messages recommandés

Witch

eclypse

Witch

Thanos

Thanos

Witch

Witch

eclypse

Witch

eclypse

Rejoindre la conversation

En ligne récemment 0 membre est en ligne

Zebulon

Outils en ligne

Naviguer