Pub intempestives

Fermé
Bonjour,
Bonjour,

J'ai parcourru le forum qui je dois l'avouer représente beaucoup de travail. Mercci à vous du temps consacré pour toute la population néophite en info (comme moi) !

J'ai plusieurs fenêtres de pub qui s'ouvrent toutes seules dès que je navigue sur le net. J'ai fait un scan minutieux avec avast mais pas de changement. J'ai télécharger hijackthis fait u scan et j'anticipe en vous envoyant le rapport.

Merci de m'aider dans les futurs opérations.

Bonne journée

thony

ogfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:24:30, on 27/10/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe
C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe
C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Users\Maryse\AppData\Local\mekdjbbf.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\conime.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Maryse\AppData\Local\Temp\Temp1_HiJackThis[1].zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [DVDAgent] "C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe"
O4 - HKLM\..\Run: [TSMAgent] "C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe"
O4 - HKLM\..\Run: [CLMLServer for HP TouchSmart] "C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe"
O4 - HKLM\..\Run: [TVAgent] "C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe"
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Hewlett-Packard\Media\Webcam" update "Software\Hewlett-Packard\Media\Webcam"
O4 - HKLM\..\Run: [SmartMenu] %ProgramFiles%\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
O4 - HKLM\..\Run: [UpdateLBPShortCut] "C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
O4 - HKLM\..\Run: [UpdatePSTShortCut] "C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [UpdatePDIRShortCut] "C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\PowerDirector" UpdateWithCreateOnce "SOFTWARE\CyberLink\PowerDirector\7.0"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [mekdjbbf] "c:\users\maryse\appdata\local\mekdjbbf.exe" mekdjbbf
O8 - Extra context menu item: &Recherche AOL Toolbar - C:\ProgramData\AOL\ieToolbar\resources\fr-FR\local\search.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\aestsrv.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Service Google Update (gupdate1c9fb4e1b156e60) (gupdate1c9fb4e1b156e60) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Norton Internet Security - Unknown owner - C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Program Files\SMINST\BLService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_408c4e5a\STacSV.exe
O23 - Service: TV Background Capture Service (TVBCS) (TVCapSvc) - Unknown owner - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe
O23 - Service: TV Task Scheduler (TVTS) (TVSched) - Unknown owner - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe

--
End of file - 11313 bytes
Configuration: Windows Vista Internet Explorer 8.0

11 réponses

  • Votes
  • Date
  • Date décroissante
  1. pffffff !!!n'importe quoi !!

    Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):

    ▶- Vas dans "Démarrer" puis Panneau de configuration.

    ▶- Double Clique sur l'icône Comptes d'utilisateurs et sur Activer ou désactiver le contrôle des comptes d'utilisateurs.

    ▶- Clique sur Continuer.

    ▶- Décoche la case Utiliser le contrôle des comptes d'utilisateurs pour vous aider à protéger votre ordinateur.

    ▶- Valide par OK et redémarre.

    Tuto

    ensuite :

    Télécharge Navilog1 depuis-ce lien

    ▶ Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
    ▶ Ensuite clic droit "executer en tant qu'administrateur" sur navilog1.exe pour lancer l'installation.

    Une fois l'installation terminée, le fix s'exécutera automatiquement.

    ▶ Au menu principal, Fais le choix 1 >> Recherche / suppression automatique

    Patiente jusqu'au message :
    *** Analyse Termine le ..... ***

    >>>>> Le fix peut durer une dizaine de minutes ;)

    ▶ Appuie sur une touche le bloc note va s'ouvrir.

    ▶ Copie-colle le rapport ici.

    ensuite ;

    ▶ Télécharge TOOLBAR S&D ( de Eric_71/Team IDN ) sur ton bureau :

    !! Déconnecte toi,desactive tes protections résidentes, et ferme toutes tes applications en cours le temps de la manip. !!

    ▶ clic droit "executer en tant qu'administrateur" sur ToolBar SD.exe pour lancer l'outil et laisse toi guider ...

    ▶ option recherche puis [Entrée].

    Un rapport sera généré à la fin du processus : poste son contenu dans ta prochaine réponse

    ( le rapport est en outre sauvegardé ici -> C:\TB.txt )

    Tutoriel
    1. tu peux supprimer List&Kill'em

      ▶ Passer de Avast à AntiVir :

      ▶ Télécharge Désinstalleur d'Avast!.

      ▶ redemarre en mode sans echec :

      Comment aller en Mode sans échec
      1) Redémarres ton ordi
      2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip"
      3) Tu verras un écran avec options de démarrage apparaître
      4) Choisis la première option : Sans Échec, et valide avec "Entrée"
      5) Choisis ton compte habituel, et non Administrateur (si besoin ... )
      (attention : pas de connexion possible en mode sans échec , donc copies ou imprimes bien la manipe pour éviter les erreurs ...)

      ▶ Désinstalle via Ajout/Suppression de Programmes (si présents) :

      * Avast!

      ▶ ensuite execute le desinstaller

      Ceci effacera la majorité des traces du produit Avast! d'Alwil Software.

      ▶ redemarre

      ▶ Télécharge Ccleaner sur ton Bureau. :

      ▶ Clique sur "download the latest version"
      ▶ Installe-le en laissant seulement les options suivantes cochées :

      - Ajouter un raccourci sur le Bureau
      - Contrôler automatiquement les mises à jour de CCleaner

      ▶ Lance le Nettoyage
      ▶ Clique sur Chercher des erreurs et sauvegarde si tu le souhaites.

      plus de precision sur la configuration de ccleaner te seront donnees plus tard

      tuto Comment utiliser CCleaner.
      ***************

      ▶ Télécharge Antivir en Francais ou Antivir en Francais sur ton Bureau.:

      ▶ Double clique sur l'exécutable téléchargé pour lancer l'installation.
      ▶ À la fin de l'installation, clique sur Finish.
      ▶ Ouvre Antivir, assure-toi qu’il soit bien à jour !
      ▶ Dans l'onglet Protection Locale, choisis Contrôler.
      ▶ Active la recherche de rootkits via le + de Recherche de Rootkits, puis dans Sélection manuelle, coche tout (tes partitions de disque dur).
      ▶ Clique sur la loupe du milieu pour lancer le scan en tant qu'Administrateur.
      ▶ Poste moi le rapport généré : Pour cela, clique sur l'onglet Aperçu, puis choisis Rapports, tu trouveras son rapport..
      ▶ Sélectionne le rapport et clique sur l'icône "Afficher le fichier de rapport du rapport sélectionné.

      ▶ Note : Pour une éradication des menaces plus efficace, lance le scan en mode sans échec.

      Pourquoi changer ? :Avast Vs Antivir

      Tuto de configuration en vidéo (Merci Nico)

      1. ▶ Télécharge Rooter (créé par l'équipe IDN) sur ton bureau.

        ▶ /!\ Déconnecte toi d'internet et ferme toutes les applications en cours /!\

        ▶ Exécute Rooter et laisse le travailler jusqu'à l'apparition du rapport dans le bloc note

        ▶ Ensuite poste le rapport dans ta prochaine réponse
        1. Bonjour, voilà le rapport

          Fix Navipromo version 4.0.3 commencé le 27/10/2009 17:33:44,39

          !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
          !!! Postez ce rapport sur le forum pour le faire analyser !!!

          Outil exécuté depuis C:\Program Files\navilog1

          Mise à jour le 21.10.2009 à 22h00 par IL-MAFIOSO

          Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
          X86-based PC ( Multiprocessor Free : Pentium(R) Dual-Core CPU T4200 @ 2.00GHz )
          BIOS : Default System BIOS
          USER : Maryse ( Administrator )
          BOOT : Normal boot

          C:\ (Local Disk) - NTFS - Total:222 Go (Free:163 Go)
          D:\ (Local Disk) - NTFS - Total:10 Go (Free:1 Go)
          E:\ (CD or DVD)
          F:\ (CD or DVD)

          Recherche executée en mode normal

          Nettoyage exécuté au redémarrage de l'ordinateur

          C:\Program Files\Live-Player supprimé !
          c:\progra~2\micros~1\windows\startm~1\programs\Live-Player supprimé !
          C:\Users\Maryse\AppData\Roaming\Live-Player supprimé !
          c:\users\public\desktop\Live-Player.lnk supprimé !
          C:\Users\Maryse\AppData\Local\mekdjbbf.exe supprimé !
          C:\Users\Maryse\AppData\Local\mekdjbbf.dat supprimé !
          C:\Users\Maryse\AppData\Local\mekdjbbf_nav.dat supprimé !
          C:\Users\Maryse\AppData\Local\mekdjbbf_navps.dat supprimé !
          C:\Users\Maryse\AppData\Local\splauswb_nav.dat supprimé !
          C:\Windows\prefetch\splauswb*.pf supprimé !

          Nettoyage contenu C:\Windows\Temp effectué !
          Nettoyage contenu C:\Users\Maryse\AppData\Local\Temp effectué !

          *** Sauvegarde du Registre vers dossier Safebackup ***

          sauvegarde du Registre réalisée avec succès !

          *** Nettoyage Registre ***

          Nettoyage Registre Ok
          1. Re moi!!!

            Voici le deuxième rapport.

            Du coup je recoche la case Utiliser le contrôle des comptes d'utilisateurs pour vous aider à protéger votre ordinateur?

            Merci

            thony

            -----------\\ ToolBar S&D 1.2.9 XP/Vista

            Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
            X86-based PC ( Multiprocessor Free : Pentium(R) Dual-Core CPU T4200 @ 2.00GHz )
            BIOS : Default System BIOS
            USER : Maryse ( Administrator )
            BOOT : Normal boot
            C:\ (Local Disk) - NTFS - Total:222 Go (Free:162 Go)
            D:\ (Local Disk) - NTFS - Total:10 Go (Free:1 Go)
            E:\ (CD or DVD)
            F:\ (CD or DVD)

            "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
            Option : [1] ( 27/10/2009|17:42 )

            [ UAC => 0 ]

            -----------\\ Recherche de Fichiers / Dossiers ...

            C:\Program Files\DAEMON Tools Toolbar
            C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
            C:\Program Files\DAEMON Tools Toolbar\Resources
            C:\Program Files\DAEMON Tools Toolbar\uninst.exe
            C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
            C:\Program Files\DAEMON Tools Toolbar\Resources\about.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\AboutWindow.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\AddRadioStation.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\as.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\as.png
            C:\Program Files\DAEMON Tools Toolbar\Resources\astro.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\az.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\b1.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\b1.png
            C:\Program Files\DAEMON Tools Toolbar\Resources\BurnImage.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\buy.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond000.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond001.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond003.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond004.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond005.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond006.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond007.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond008.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond009.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond010.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond011.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond019.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond020.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond021.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond022.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond023.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond024.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond025.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond026.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond037.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond038.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond039.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond040.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond041.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond046.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond048.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond050.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond051.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond052.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond053.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond054.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond055.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond056.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond057.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond058.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond059.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond060.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond061.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond062.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond063.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond064.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond065.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond066.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond067.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond068.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond069.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond075.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond076.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond077.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond078.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond079.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond080.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond084.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond085.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond086.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond087.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond088.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond089.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond090.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond091.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond092.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond093.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond094.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond095.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond108.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond109.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond110.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond111.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond112.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond113.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond120.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond121.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond122.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond126.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond127.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond128.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond129.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond130.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond131.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond132.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond133.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond134.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond135.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond136.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond137.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond138.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond140.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond141.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond142.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond143.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond148.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond149.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond152.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond154.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond155.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond156.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\cond157.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\Config.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\d.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\d2.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\daemon.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\dot_disabled.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\dot_enabled.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\dot_on_over.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\ds.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\dsearch.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\dt.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\DTPro.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\dtt16.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\dtt32.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\Dwnl.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\emulation.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\favicon.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\features.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\GameCentrix.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\GameS.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\GameSA.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\gd.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\genre.xml
            C:\Program Files\DAEMON Tools Toolbar\Resources\globe.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\GrabImage.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\hb.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\hb.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\help.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\hide.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\ImageS.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\ImageSA.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\ip.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\lang.xml
            C:\Program Files\DAEMON Tools Toolbar\Resources\lingvo.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\m.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\mail.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\mailc.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_down.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_m.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_under.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\mail_disable.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\mail_down.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\mail_m.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\mail_under.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRadioConfig.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRadioStation.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRSCur.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\MenuTr.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\next.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\next_down.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\next_m.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\next_under.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\none.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\none_m.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\noW.gif
            C:\Program Files\DAEMON Tools Toolbar\Resources\op.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\play.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\play.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\play_down.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\play_m.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\play_under.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\pragma.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\prev.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\prev_down.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\prev_m.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\prev_under.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\prod.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\Radio.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBg.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBg.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBgMask.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDisp.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDisp_m.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_down.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_m.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_under.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioE.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioG.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioL.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLDotMask.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLeft.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLeftMask.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLM.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioM.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioN.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioR.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioR.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioRM.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioRU.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_down.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_m.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_under.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\RadioW.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\rbcheck.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\rbtxt.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\refresh.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_down.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_m.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_under.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\Rss.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\Rss1.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\RssA.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\RssA1.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\rssClose.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\rssL.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\rssOpen.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\RssRefresh.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\s2.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\show.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\size.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\size_m.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\skins.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\spt.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\stop.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\stop.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\stop_down.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\stop_m.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\stop_under.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\style.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\SupportRequest.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\time.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\TitleIcon.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\toolbar.xml
            C:\Program Files\DAEMON Tools Toolbar\Resources\trans.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\Trash.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_down.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_m.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_under.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\u.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\vol.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\vol.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\vol_back.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\vol_dott.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\vol_dott_m.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\vol_down.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\vol_m.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\vol_mute.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\vol_mute_check.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\vol_under.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\wb.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m42.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m43.bmp
            C:\Program Files\DAEMON Tools Toolbar\Resources\WebS.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\WebSa.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\wi.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\wi0.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\wi1.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\wi10.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\wi11.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\wi12.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\wi13.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\wi14.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\wi2.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\wi3.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\wi4.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\wi5.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\wi6.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\wi7.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\wi8.ico
            C:\Program Files\DAEMON Tools Toolbar\Resources\wi9.ico

            -----------\\ [..\Internet Explorer\Main]

            [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
            "Start Page"="https://www.google.fr/?gws_rd=ssl"
            "Default_Page_URL"="https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF"
            "Local Page"="C:\\Windows\\system32\\blank.htm"
            "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
            "Url"="https://www.msn.com/fr-fr/actualite/"

            [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
            "Start Page"="https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF"
            "Default_Page_URL"="https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF"
            "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
            "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
            "Local Page"="C:\\Windows\\System32\\blank.htm"

            --------------------\\ Recherche d'autres infections

            Aucune autre infection trouvée !

            [ UAC => 1 ]

            1 - "C:\ToolBar SD\TB_1.txt" - 27/10/2009|17:42 - Option : [1]

            -----------\\ Fin du rapport a 17:42:43,66
            1. non tu recocheras en fin de desinfection

              ▶ Relance Toolbar-S&D en clic droit "en tant qu'administrateur" sur le raccourci

              ▶ Tape sur "2" puis valide en appuyant sur "Entrée".

              ! Ne ferme pas la fenêtre lors de la suppression !

              Un rapport sera généré,

              ▶ poste son contenu ici.

              NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
              Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
              Tape explorer puis valide.

              1. salut, je viens d'installer xp au lieu de vista sur mon laptop, tout les périphériques fonctionne correctement mais le microphone intégré ne fonctionne pas :(
                1. voilà le rapport

                  NB: Ca à l'air de marcher je n'ai plus de pub!

                  Le nettoyage est-il fini?

                  -----------\\ ToolBar S&D 1.2.9 XP/Vista

                  Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
                  X86-based PC ( Multiprocessor Free : Pentium(R) Dual-Core CPU T4200 @ 2.00GHz )
                  BIOS : Default System BIOS
                  USER : Maryse ( Administrator )
                  BOOT : Normal boot
                  C:\ (Local Disk) - NTFS - Total:222 Go (Free:162 Go)
                  D:\ (Local Disk) - NTFS - Total:10 Go (Free:1 Go)
                  E:\ (CD or DVD)
                  F:\ (CD or DVD)

                  "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
                  Option : [2] ( 27/10/2009|17:58 )

                  [ UAC => 1 ]

                  -----------\\ SUPPRESSION

                  Supprime! - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
                  Supprime! - C:\Program Files\DAEMON Tools Toolbar\Resources
                  Supprime! - C:\Program Files\DAEMON Tools Toolbar\uninst.exe
                  Supprime! - C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
                  Supprime! - C:\Program Files\DAEMON Tools Toolbar

                  -----------\\ Recherche de Fichiers / Dossiers ...

                  -----------\\ [..\Internet Explorer\Main]

                  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                  "Start Page"="https://www.google.fr/?gws_rd=ssl"
                  "Default_Page_URL"="http://ie.redirect.hp.com/..."
                  "Local Page"="C:\\Windows\\system32\\blank.htm"
                  "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
                  "Url"="http://go.microsoft.com/fwlink/?LinkId=75720"

                  [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                  "Start Page"="https://www.msn.com/fr-fr/"
                  "Default_Page_URL"="http://ie.redirect.hp.com/..."
                  "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
                  "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
                  "Local Page"="C:\\Windows\\System32\\blank.htm"

                  --------------------\\ Recherche d'autres infections

                  Aucune autre infection trouvée !

                  [ UAC => 1 ]

                  1 - "C:\ToolBar SD\TB_1.txt" - 27/10/2009|17:42 - Option : [1]
                  2 - "C:\ToolBar SD\TB_2.txt" - 27/10/2009|17:59 - Option : [2]

                  -----------\\ Fin du rapport a 17:59:07,57
                  1. Desactive ton antivirus le temps de la manip ainsi que ton parefeu si présent

                    ▶ Télécharge List&Kill'em et enregistre le sur ton bureau

                    Il ne necessite pas d'installation

                    ▶double clic (clic droit "executer en tant qu'administrateur" pour Vista) pour lancer le scan

                    choisis la langue puis choisis l'option 1 = Mode Recherche

                    ▶laisse travailler l'outil

                    le rapport va s'afficher , une fois le scan fini

                    ▶colle le contenu dans ta prochaine réponse
                    1. voici

                      ist'em by g3n-h@ckm@n 1.0.4.7

                      updated on 27.10.2009 ::::: 11.30

                      Windows_NT

                      Microsoft Windows [version 6.0.6001]

                      27/10/2009 18:22:38,52

                      Nom de l'h“te: PC-DE-MARYSE
                      Nom du systŠme d'exploitation: Microsoft© Windows VistaT dition Familiale Premium
                      Version du systŠme: 6.0.6001 Service Pack 1 version 6001
                      Fabricant du systŠme d'exploitation: Microsoft Corporation
                      Configuration du systŠme d'exploitation: Station de travail autonome
                      Type de version du systŠme d'exploitation: Multiprocessor Free
                      Propri‚taire enregistr‚: Maryse
                      Organisation enregistr‚e: Hewlett-Packard
                      Identificateur de produit: 89578-OEM-7332157-00061
                      Date d'installation originale: 16/12/2008, 02:40:16
                      Heure de d‚marrage du systŠme: 27/10/2009, 17:36:33
                      Fabricant du systŠme: Hewlett-Packard
                      ModŠle du systŠme: HP Pavilion dv6 Notebook PC
                      Type du systŠme: X86-based PC
                      Processeur(s): 1 processeur(s) install‚(s).
                      [01]ÿ: x64 Family 6 Model 23 Stepping 10 GenuineIntel ~2000 MHz
                      Version du BIOS: Hewlett-Packard F.02, 14/11/2008
                      R‚pertoire Windows: C:\Windows
                      R‚pertoire systŠme: C:\Windows\system32
                      P‚riph‚rique d'amor‡age: \Device\HarddiskVolume1
                      Option r‚gionale du systŠme: fr;Fran‡ais (France)
                      ParamŠtres r‚gionaux d'entr‚e: fr;Fran‡ais (France)
                      Fuseau horaire: (GMT+01:00) Bruxelles, Copenhague, Madrid, Paris
                      M‚moire physique totale: 3ÿ068 Mo
                      M‚moire physique disponible: 1ÿ852 Mo
                      Fichier d'‚changeÿ: taille maximale: 6ÿ351 Mo
                      Fichier d'‚changeÿ: disponible: 4ÿ931 Mo
                      Fichier d'‚changeÿ: en cours d'utilisation: 1ÿ420 Mo
                      Emplacements des fichiers d'‚change: C:\pagefile.sys
                      Domaine: WORKGROUP
                      Serveur d'ouverture de session: \\PC-DE-MARYSE
                      Correctif(s): 141 Corrections install‚es.
                      [01]: {24DD0B2E-2E93-4EB2-A32D-3AC2B830C43C}
                      [02]: {3D019598-7B59-447A-80AE-815B703B84FF}
                      [03]: {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
                      [04]: {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
                      [05]: {D2F3957E-AD54-4614-8E48-8E234F0B4053}
                      [06]: {DD81B82D-1372-4E26-9FED-DBC561C62E18}
                      [07]: {3D019598-7B59-447A-80AE-815B703B84FF}
                      [08]: {917C5AB0-0E17-49AF-A3AC-0C7D4DE31891}
                      [09]: {D2F3957E-AD54-4614-8E48-8E234F0B4053}
                      [10]: {D03EFEA4-C1D4-42E4-9691-21B526AC500B} - Installation de Microsoft Works
                      [11]: {3E439F9C-CCF8-4AB8-8AE1-063F2042A78B}
                      [12]: {14B11C98-291A-44B1-8AEA-DCCE20B5E13A}
                      [13]: {17A63756-C0F5-4393-A4E9-FF05F5498C86}
                      [14]: {1B3307FB-B5AD-4877-AA3C-DB0DABF5902E}
                      [15]: {1E045AEC-D6EA-4D1D-A1E6-106EFEB272C1}
                      [16]: {3055259C-80B5-4840-B990-F8663DD086A4}
                      [17]: {30A8A61F-1003-4E35-9B9B-F30FBA4B5495}
                      [18]: {8AC32162-38D5-40B9-A90B-E985CA7CB7B6}
                      [19]: {8E3489E2-2CB7-4F77-BF3B-73297F94369B}
                      [20]: {9F2DFB2F-DDA1-4034-84FA-D008BDD93972}
                      [21]: {B90C7CE3-2A3E-4E5B-A1B0-E5B5BCF6CA8E}
                      [22]: {C6F1E87D-F3E1-4874-97EC-F87DAB6D6878}
                      [23]: {CA93C194-87EF-4A2C-B2DE-99F3AF4CD36A}
                      [24]: {D57D126D-B706-4ACB-A096-A12ED7A26AA5}
                      [25]: {D80D6ACB-FAFA-4DAA-9CE4-3AF04013C693}
                      [26]: {DC1D9193-DDFC-4108-9163-708FB7D6BDA7}
                      [27]: {E24359EB-38A9-41FC-B7AA-FFD26DD0DA47}
                      [28]: {F6701F19-C0ED-4BCF-8451-D51419A2E0CB}
                      [29]: {FD6BE019-4DB7-40D9-B377-F27BC2F8EA40}
                      [30]: {22A15D5A-3165-4970-86BE-A5D5661E77E1}
                      [31]: KB944036
                      [32]: 944036
                      [33]: 942567
                      [34]: KB905866
                      [35]: KB935509
                      [36]: KB937287
                      [37]: KB938371
                      [38]: KB938464
                      [39]: KB941693
                      [40]: KB946084
                      [41]: KB947562
                      [42]: KB947864
                      [43]: KB947880
                      [44]: KB948590
                      [45]: KB948609
                      [46]: KB948610
                      [47]: KB948881
                      [48]: KB949246
                      [49]: KB949247
                      [50]: KB950124
                      [51]: KB950125
                      [52]: KB950582
                      [53]: KB950759
                      [54]: KB950760
                      [55]: KB950762
                      [56]: KB950974
                      [57]: KB951066
                      [58]: KB951072
                      [59]: KB951376
                      [60]: KB951618
                      [61]: KB951698
                      [62]: KB951978
                      [63]: KB952004
                      [64]: KB952069
                      [65]: KB952287
                      [66]: KB952709
                      [67]: KB952714
                      [68]: KB953026
                      [69]: KB953155
                      [70]: KB953631
                      [71]: KB953689
                      [72]: KB953733
                      [73]: KB953838
                      [74]: KB953839
                      [75]: KB954154
                      [76]: KB954155
                      [77]: KB954366
                      [78]: KB954459
                      [79]: KB955020
                      [80]: KB955069
                      [81]: KB955302
                      [82]: KB955430
                      [83]: KB955839
                      [84]: KB956572
                      [85]: KB956744
                      [86]: KB956802
                      [87]: KB957097
                      [88]: KB957200
                      [89]: KB957321
                      [90]: KB957388
                      [91]: KB957526
                      [92]: KB958481
                      [93]: KB958483
                      [94]: KB958623
                      [95]: KB958624
                      [96]: KB958644
                      [97]: KB958687
                      [98]: KB958690
                      [99]: KB958869
                      [100]: KB959108
                      [101]: KB959130
                      [102]: KB959426
                      [103]: KB959772
                      [104]: KB960225
                      [105]: KB960544
                      [106]: KB960715
                      [107]: KB960803
                      [108]: KB961371
                      [109]: KB961501
                      [110]: KB963027
                      [111]: KB967632
                      [112]: KB967723
                      [113]: KB968389
                      [114]: KB968537
                      [115]: KB968816
                      [116]: KB969897
                      [117]: KB969898
                      [118]: KB970238
                      [119]: KB970653
                      [120]: KB970710
                      [121]: KB971486
                      [122]: KB971557
                      [123]: KB971657
                      [124]: KB971961
                      [125]: KB971961
                      [126]: KB972036
                      [127]: KB972260
                      [128]: KB973346
                      [129]: KB973507
                      [130]: KB973525
                      [131]: KB973540
                      [132]: KB973768
                      [133]: KB973874
                      [134]: KB974306
                      [135]: KB974455
                      [136]: KB974455
                      [137]: KB974469
                      [138]: KB974571
                      [139]: KB975467
                      [140]: KB975517
                      [141]: 940157
                      Carte(s) r‚seau: 2 carte(s) r‚seau install‚e(s).
                      [01]: Realtek RTL8168C(P)/8111C(P) Family PCI-E Gigabit Ethernet NIC (NDIS 6.0)
                      Nom de la connexionÿ: Connexion au r‚seau local
                      tatÿ: Support d‚connect‚
                      [02]: R‚seau local Broadcom 802.11b/g
                      Nom de la connexionÿ: Connexion r‚seau sans fil
                      DHCP activ‚ÿ: Oui
                      Serveur DHCPÿ: 192.168.0.1
                      Adresse(s) IP
                      [01]: 192.168.0.10
                      [02]: fe80::8912:9ea7:3b15:84b0

                      Nom de l'image PID Nom de la sessio Num‚ro de s Utilisation
                      ========================= ======== ================ =========== ============
                      System Idle Process 0 Services 0 24 Ko
                      System 4 Services 0 3ÿ112 Ko
                      smss.exe 444 Services 0 740 Ko
                      csrss.exe 580 Services 0 5ÿ992 Ko
                      wininit.exe 632 Services 0 3ÿ960 Ko
                      csrss.exe 644 Console 1 10ÿ252 Ko
                      services.exe 680 Services 0 7ÿ008 Ko
                      lsass.exe 696 Services 0 2ÿ864 Ko
                      lsm.exe 704 Services 0 4ÿ244 Ko
                      svchost.exe 860 Services 0 6ÿ112 Ko
                      winlogon.exe 876 Console 1 5ÿ592 Ko
                      nvvsvc.exe 928 Services 0 3ÿ424 Ko
                      svchost.exe 956 Services 0 6ÿ544 Ko
                      svchost.exe 992 Services 0 41ÿ676 Ko
                      svchost.exe 1056 Services 0 13ÿ316 Ko
                      svchost.exe 1084 Services 0 74ÿ804 Ko
                      svchost.exe 1116 Services 0 30ÿ748 Ko
                      stacsv.exe 1140 Services 0 6ÿ756 Ko
                      audiodg.exe 1260 Services 0 18ÿ468 Ko
                      svchost.exe 1460 Services 0 4ÿ828 Ko
                      SLsvc.exe 1480 Services 0 9ÿ980 Ko
                      svchost.exe 1544 Services 0 12ÿ600 Ko
                      hpservice.exe 1604 Services 0 4ÿ656 Ko
                      rundll32.exe 1624 Console 1 6ÿ604 Ko
                      svchost.exe 1712 Services 0 15ÿ544 Ko
                      aswUpdSv.exe 1848 Services 0 432 Ko
                      ashServ.exe 1860 Services 0 20ÿ208 Ko
                      wlanext.exe 1872 Services 0 5ÿ132 Ko
                      spoolsv.exe 456 Services 0 9ÿ200 Ko
                      svchost.exe 544 Services 0 16ÿ636 Ko
                      taskeng.exe 1916 Services 0 5ÿ760 Ko
                      dwm.exe 2056 Console 1 49ÿ632 Ko
                      taskeng.exe 2112 Console 1 11ÿ720 Ko
                      explorer.exe 2136 Console 1 36ÿ660 Ko
                      conime.exe 2428 Console 1 3ÿ392 Ko
                      AEstSrv.exe 2448 Services 0 1ÿ660 Ko
                      LSSrvc.exe 2616 Services 0 3ÿ756 Ko
                      MDM.EXE 2688 Services 0 4ÿ420 Ko
                      svchost.exe 2776 Services 0 5ÿ152 Ko
                      BLService.exe 2792 Services 0 3ÿ584 Ko
                      RichVideo.exe 2836 Services 0 3ÿ680 Ko
                      svchost.exe 2960 Services 0 6ÿ368 Ko
                      TVCapSvc.exe 2984 Services 0 14ÿ084 Ko
                      TVSched.exe 3032 Services 0 6ÿ544 Ko
                      svchost.exe 3048 Services 0 3ÿ996 Ko
                      SearchIndexer.exe 3072 Services 0 14ÿ544 Ko
                      rundll32.exe 2296 Console 1 5ÿ824 Ko
                      SynTPEnh.exe 1948 Console 1 7ÿ596 Ko
                      sttray.exe 1536 Console 1 13ÿ936 Ko
                      DVDAgent.exe 2216 Console 1 9ÿ100 Ko
                      TSMAgent.exe 2376 Console 1 8ÿ964 Ko
                      CLMLSvc.exe 2728 Console 1 13ÿ172 Ko
                      SmartMenu.exe 2740 Console 1 56ÿ444 Ko
                      MSASCui.exe 2920 Console 1 10ÿ484 Ko
                      QLBCTRL.exe 3116 Console 1 7ÿ984 Ko
                      jusched.exe 3168 Console 1 3ÿ944 Ko
                      hpwuSchd2.exe 3196 Console 1 2ÿ860 Ko
                      HPWAMain.exe 3112 Console 1 6ÿ620 Ko
                      ashDisp.exe 2896 Console 1 6ÿ252 Ko
                      GoogleQuickSearchBox.exe 3392 Console 1 18ÿ292 Ko
                      LightScribeControlPanel.e 3312 Console 1 9ÿ412 Ko
                      HPAdvisor.exe 1320 Console 1 2ÿ392 Ko
                      ehtray.exe 2284 Console 1 1ÿ548 Ko
                      msnmsgr.exe 2304 Console 1 25ÿ660 Ko
                      GoogleToolbarNotifier.exe 1380 Console 1 2ÿ220 Ko
                      ehmsas.exe 3416 Console 1 4ÿ228 Ko
                      hpqwmiex.exe 2936 Services 0 5ÿ088 Ko
                      WmiPrvSE.exe 3820 Services 0 6ÿ292 Ko
                      Com4QLBEx.exe 2360 Services 0 3ÿ724 Ko
                      WiFiMsg.exe 3244 Console 1 4ÿ936 Ko
                      PresentationFontCache.exe 4164 Services 0 15ÿ104 Ko
                      HpqToaster.exe 4364 Console 1 5ÿ644 Ko
                      SynTPHelper.exe 5596 Console 1 2ÿ556 Ko
                      HPHC_Service.exe 3176 Services 0 13ÿ216 Ko
                      wuauclt.exe 4624 Console 1 5ÿ184 Ko
                      cmd.exe 5308 Console 1 6ÿ288 Ko
                      notepad.exe 1676 Console 1 6ÿ500 Ko
                      iexplore.exe 4548 Console 1 20ÿ268 Ko
                      iexplore.exe 2788 Console 1 54ÿ580 Ko
                      Chess.exe 3760 Console 1 140ÿ752 Ko
                      iexplore.exe 2852 Console 1 25ÿ164 Ko
                      List_Killem[1].exe 5192 Console 1 6ÿ160 Ko
                      cmd.exe 4608 Console 1 2ÿ400 Ko
                      WmiPrvSE.exe 5364 Services 0 11ÿ840 Ko
                      WmiPrvSE.exe 5372 Services 0 5ÿ388 Ko
                      TrustedInstaller.exe 5260 Services 0 27ÿ188 Ko
                      tasklist.exe 5892 Console 1 4ÿ692 Ko
                      ======================
                      Cles de demarrage "Run"
                      ======================
                      Windows Registry Editor Version 5.00

                      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                      "LightScribe Control Panel"="C:\\Program Files\\Common Files\\LightScribe\\LightScribeControlPanel.exe -hidden"
                      "HPAdvisor"="C:\\Program Files\\Hewlett-Packard\\HP Advisor\\HPAdvisor.exe autorun=AUTORUN"
                      "ehTray.exe"="C:\\Windows\\ehome\\ehTray.exe"
                      "msnmsgr"="\"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe\" /background"
                      "swg"="\"C:\\Program Files\\Google\\GoogleToolbarNotifier\\GoogleToolbarNotifier.exe\""

                      Windows Registry Editor Version 5.00

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                      "NvCplDaemon"="RUNDLL32.EXE C:\\Windows\\system32\\NvCpl.dll,NvStartup"
                      "NvMediaCenter"="RUNDLL32.EXE C:\\Windows\\system32\\NvMcTray.dll,NvTaskbarInit"
                      "SynTPEnh"="C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe"
                      "SysTrayApp"=hex(2):25,00,50,00,72,00,6f,00,67,00,72,00,61,00,6d,00,46,00,69,\
                      00,6c,00,65,00,73,00,25,00,5c,00,49,00,44,00,54,00,5c,00,57,00,44,00,4d,00,\
                      5c,00,73,00,74,00,74,00,72,00,61,00,79,00,2e,00,65,00,78,00,65,00,00,00
                      "DVDAgent"="\"C:\\Program Files\\Hewlett-Packard\\Media\\DVD\\DVDAgent.exe\""
                      "TSMAgent"="\"C:\\Program Files\\Hewlett-Packard\\TouchSmart\\Media\\TSMAgent.exe\""
                      "CLMLServer for HP TouchSmart"="\"C:\\Program Files\\Hewlett-Packard\\TouchSmart\\Media\\Kernel\\CLML\\CLMLSvc.exe\""
                      "TVAgent"="\"C:\\Program Files\\Hewlett-Packard\\Media\\TV\\TVAgent.exe\""
                      "UCam_Menu"="\"C:\\Program Files\\Hewlett-Packard\\Media\\Webcam\\MUITransfer\\MUIStartMenu.exe\" \"C:\\Program Files\\Hewlett-Packard\\Media\\Webcam\" update \"Software\\Hewlett-Packard\\Media\\Webcam\""
                      "SmartMenu"=hex(2):25,00,50,00,72,00,6f,00,67,00,72,00,61,00,6d,00,46,00,69,00,\
                      6c,00,65,00,73,00,25,00,5c,00,48,00,65,00,77,00,6c,00,65,00,74,00,74,00,2d,\
                      00,50,00,61,00,63,00,6b,00,61,00,72,00,64,00,5c,00,48,00,50,00,20,00,4d,00,\
                      65,00,64,00,69,00,61,00,53,00,6d,00,61,00,72,00,74,00,5c,00,53,00,6d,00,61,\
                      00,72,00,74,00,4d,00,65,00,6e,00,75,00,2e,00,65,00,78,00,65,00,00,00
                      "UpdateLBPShortCut"="\"C:\\Program Files\\CyberLink\\LabelPrint\\MUITransfer\\MUIStartMenu.exe\" \"C:\\Program Files\\CyberLink\\LabelPrint\" UpdateWithCreateOnce \"Software\\CyberLink\\LabelPrint\\2.5\""
                      "UpdatePSTShortCut"="\"C:\\Program Files\\CyberLink\\DVD Suite\\MUITransfer\\MUIStartMenu.exe\" \"C:\\Program Files\\CyberLink\\DVD Suite\" UpdateWithCreateOnce \"Software\\CyberLink\\PowerStarter\""
                      "Windows Defender"=hex(2):25,00,50,00,72,00,6f,00,67,00,72,00,61,00,6d,00,46,\
                      00,69,00,6c,00,65,00,73,00,25,00,5c,00,57,00,69,00,6e,00,64,00,6f,00,77,00,\
                      73,00,20,00,44,00,65,00,66,00,65,00,6e,00,64,00,65,00,72,00,5c,00,4d,00,53,\
                      00,41,00,53,00,43,00,75,00,69,00,2e,00,65,00,78,00,65,00,20,00,2d,00,68,00,\
                      69,00,64,00,65,00,00,00
                      "QlbCtrl.exe"="C:\\Program Files\\Hewlett-Packard\\HP Quick Launch Buttons\\QlbCtrl.exe /Start"
                      "Adobe Reader Speed Launcher"="\"C:\\Program Files\\Adobe\\Reader 9.0\\Reader\\Reader_sl.exe\""
                      "UpdateP2GoShortCut"="\"C:\\Program Files\\CyberLink\\Power2Go\\MUITransfer\\MUIStartMenu.exe\" \"C:\\Program Files\\CyberLink\\Power2Go\" UpdateWithCreateOnce \"SOFTWARE\\CyberLink\\Power2Go\\6.0\""
                      "UpdatePDIRShortCut"="\"C:\\Program Files\\CyberLink\\PowerDirector\\MUITransfer\\MUIStartMenu.exe\" \"C:\\Program Files\\CyberLink\\PowerDirector\" UpdateWithCreateOnce \"SOFTWARE\\CyberLink\\PowerDirector\\7.0\""
                      "SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0_07\\bin\\jusched.exe\""
                      "HP Health Check Scheduler"="c:\\Program Files\\Hewlett-Packard\\HP Health Check\\HPHC_Scheduler.exe"
                      "HP Software Update"="C:\\Program Files\\Hp\\HP Software Update\\HPWuSchd2.exe"
                      "hpWirelessAssistant"="C:\\Program Files\\Hewlett-Packard\\HP Wireless Assistant\\HPWAMain.exe"
                      "avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
                      "Google Quick Search Box"="\"C:\\Program Files\\Google\\Quick Search Box\\GoogleQuickSearchBox.exe\" /autorun"

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]
                      @=""

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
                      "Installed"="1"
                      @=""

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
                      "NoChange"="1"
                      "Installed"="1"
                      @=""

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
                      "Installed"="1"
                      @=""

                      =====================
                      cles additionnelles
                      =====================
                      Windows Registry Editor Version 5.00

                      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
                      "ConsentPromptBehaviorAdmin"=dword:00000002
                      "ConsentPromptBehaviorUser"=dword:00000001
                      "EnableInstallerDetection"=dword:00000001
                      "EnableLUA"=dword:00000001
                      "EnableSecureUIAPaths"=dword:00000001
                      "EnableVirtualization"=dword:00000001
                      "PromptOnSecureDesktop"=dword:00000001
                      "ValidateAdminCodeSignatures"=dword:00000000
                      "dontdisplaylastusername"=dword:00000000
                      "legalnoticecaption"=""
                      "legalnoticetext"=""
                      "scforceoption"=dword:00000000
                      "shutdownwithoutlogon"=dword:00000001
                      "undockwithoutlogon"=dword:00000001
                      "FilterAdministratorToken"=dword:00000001
                      "EnableUIADesktopToggle"=dword:00000000

                      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\UIPI]

                      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\UIPI\Clipboard]

                      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\UIPI\Clipboard\ExceptionFormats]
                      "CF_TEXT"=dword:00000001
                      "CF_BITMAP"=dword:00000002
                      "CF_OEMTEXT"=dword:00000007
                      "CF_DIB"=dword:00000008
                      "CF_PALETTE"=dword:00000009
                      "CF_UNICODETEXT"=dword:0000000d
                      "CF_DIBV5"=dword:00000011

                      ===============
                      ===============
                      Windows Registry Editor Version 5.00

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
                      "WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"

                      ======
                      BHO :
                      ======
                      Windows Registry Editor Version 5.00

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
                      @="AcroIEHelperStub"
                      "NoExplorer"=dword:00000001

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
                      @=""

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
                      "NoExplorer"=dword:00000001

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7C554162-8CB7-45A4-B8F4-8EA1C75885F9}]
                      @="AOL Toolbar BHO"

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
                      @="Google Dictionary Compression sdch"
                      "NoExplorer"=dword:00000001

                      ==========================

                      ===============
                      Path : C:\Program Files\Internet Explorer;;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Program Files\CyberLink\Power2Go
                      ===============
                      ¤¤¤¤¤¤¤¤¤¤ Fichiers et dossiers presents :

                      C:\ProgramData\Application Data\Microsoft\Network\Downloader\qmgr0.dat
                      C:\ProgramData\Application Data\Microsoft\Network\Downloader\qmgr1.dat

                      ¤¤¤¤¤¤¤¤¤¤ Clés de registre Presentes :

                      ¤¤¤¤¤¤¤¤¤¤ C:\Windows\Prefetch :

                      ACROBROKER.EXE-8BC3F433.pf
                      ACRORD32.EXE-C2658FE9.pf
                      ADOBEUPDATERINSTALLMGR.EXE-7ED33E6C.pf
                      ADOBE_UPDATER.EXE-4F7CC76E.pf
                      AgAppLaunch.db
                      AgCx_SC1.db
                      AgCx_SC1.db.trx
                      AgCx_SC2.db
                      AgGlFaultHistory.db
                      AgGlFgAppHistory.db
                      AgGlGlobalHistory.db
                      AgGlUAD_P_S-1-5-21-141956504-1609116901-2229170771-1000.db
                      AgGlUAD_S-1-5-21-141956504-1609116901-2229170771-1000.db
                      AgRobust.db
                      AOLTBSERVER.EXE-2F1E4D28.pf
                      ASHAVAST.EXE-C2026BF7.pf
                      ASHCHEST.EXE-B7CFB89F.pf
                      ASHMAISV.EXE-6E148274.pf
                      ASHSIMPL.EXE-42006B25.pf
                      AVAST.SETUP-84A5483F.pf
                      BCDEDIT.EXE-23D6A12E.pf
                      CHROME_INSTALLER.EXE-9613DED8.pf
                      CHROME_UPDATER.EXE-50BDE863.pf
                      CLEANMGR.EXE-B508FB28.pf
                      COM4QLBEX.EXE-6F9FBD83.pf
                      CONIME.EXE-B273009A.pf
                      CONSENT.EXE-65F6206D.pf
                      CONTROL.EXE-9459D5A0.pf
                      CSC.EXE-4EF173D0.pf
                      CSRSS.EXE-8C04D631.pf
                      CVTRES.EXE-419E4E46.pf
                      DEFRAG.EXE-738093E8.pf
                      DFRGNTFS.EXE-4F838A89.pf
                      DLLHOST.EXE-6202E8F2.pf
                      DLLHOST.EXE-71214090.pf
                      DLLHOST.EXE-893DDF55.pf
                      DRVINST.EXE-5F8E77CD.pf
                      DWM.EXE-AEABE78B.pf
                      EHMSAS.EXE-6BE9D904.pf
                      EXCEL.EXE-1D21A632.pf
                      EXPAND.EXE-209E13CB.pf
                      EXPLORER.EXE-7A3328DA.pf
                      FLASHUTIL10C.EXE-5DFF7861.pf
                      GETPRESTILE.EXE-BA07CB50.pf
                      GOOGLECRASHHANDLER.EXE-8B62872D.pf
                      GOOGLETOOLBARNOTIFIER.EXE-B3E65CF6.pf
                      GOOGLETOOLBARUSER_32.EXE-6E5896AD.pf
                      GOOGLEUPDATE.EXE-8973CEDD.pf
                      GOOGLEUPDATER.EXE-746F6782.pf
                      GOOGLEUPDATERSERVICE.EXE-600E0B48.pf
                      HELPPANE.EXE-D1016F9E.pf
                      HIDDATA.EXE-98129A0B.pf
                      HPHC_SCHEDULER.EXE-B0CCDC1E.pf
                      HPHC_SERVICE.EXE-B8B935C8.pf
                      HPQTOASTER.EXE-3B718527.pf
                      HPQWMIEX.EXE-47BFC017.pf
                      IEUSER.EXE-D895AB54.pf
                      IEXPLORE.EXE-1B894AFB.pf
                      INFOCARD.EXE-0C9B4CAB.pf
                      Layout.ini
                      LOGONUI.EXE-1BEE4A84.pf
                      LSASS.EXE-8DBFE3B9.pf
                      LSM.EXE-20DE9C3F.pf
                      MFPMP.EXE-73140A33.pf
                      MOBSYNC.EXE-D8BC6ED2.pf
                      MOVIEMK.EXE-417EFE91.pf
                      MPAS-D.EXE-C74E749D.pf
                      MPAS-FE_BD.EXE-DBA6D8E1.pf
                      MPCMDRUN.EXE-BB72ED6F.pf
                      MPSIGSTUB.EXE-0A1AFB7D.pf
                      MPSIGSTUB.EXE-8A9BC905.pf
                      MPSIGSTUB.EXE-8F7A0195.pf
                      MPSIGSTUB.EXE-BA978B63.pf
                      MPSIGSTUB.EXE-E9224E42.pf
                      MPSIGSTUB.EXE-F65FE5CB.pf
                      MPSIGSTUB.EXE-FE5289DC.pf
                      MSCORSVW.EXE-C735E247.pf
                      MSIEXEC.EXE-B5AFA339.pf
                      MSOHTMED.EXE-972D2D6A.pf
                      NTOSBOOT-B00DFAAD.pf
                      OSE.EXE-3816C9F4.pf
                      PfSvPerfStats.bin
                      POQEXEC.EXE-CFF63269.pf
                      POWERPNT.EXE-43D2F8F0.pf
                      PRESENTATIONFONTCACHE.EXE-42767AE9.pf
                      PRESENTATIONSETTINGS.EXE-6F4C5E34.pf
                      ReadyBoot
                      RUNDLL32.EXE-125BFE46.pf
                      RUNDLL32.EXE-3D7E8C2C.pf
                      RUNDLL32.EXE-3E6C7B7C.pf
                      RUNDLL32.EXE-5F5D438E.pf
                      RUNDLL32.EXE-725B0D4A.pf
                      RUNDLL32.EXE-77E72774.pf
                      RUNDLL32.EXE-7FC41602.pf
                      RUNDLL32.EXE-905D47B9.pf
                      RUNDLL32.EXE-91BE06AE.pf
                      RUNDLL32.EXE-972A23BB.pf
                      RUNDLL32.EXE-9BC1A08C.pf
                      RUNDLL32.EXE-A1425507.pf
                      RUNDLL32.EXE-A320BF66.pf
                      RUNDLL32.EXE-AA7FDE40.pf
                      RUNDLL32.EXE-AE54A408.pf
                      RUNDLL32.EXE-AED43546.pf
                      RUNDLL32.EXE-B67679EB.pf
                      RUNDLL32.EXE-C223ED53.pf
                      RUNDLL32.EXE-CE557EE2.pf
                      RUNDLL32.EXE-DAC62FEE.pf
                      RUNDLL32.EXE-F452D79D.pf
                      SCHTASKS.EXE-2DE769BF.pf
                      SEARCHFILTERHOST.EXE-AA7A1FDD.pf
                      SEARCHPROTOCOLHOST.EXE-AFAD3EF9.pf
                      SEARCHWITHGOOGLEUPDATE.EXE-31AF979B.pf
                      SETUP.EXE-0F44C525.pf
                      SETUP.EXE-52337E28.pf
                      SETUP.EXE-ABB6444E.pf
                      SETUP_WM.EXE-4A6000A5.pf
                      SMARTMENU.EXE-A8B33E5C.pf
                      SMSS.EXE-1DCD0EB1.pf
                      SNDVOL.EXE-783DCB11.pf
                      SORT.EXE-CDAF7663.pf
                      SSVAGENT.EXE-249F29DE.pf
                      SSVAGENT.EXE-C26271B1.pf
                      SVCHOST.EXE-8FD92526.pf
                      SYNTPHELPER.EXE-4B6F43CF.pf
                      TASKENG.EXE-5BAF290C.pf
                      TRUSTEDINSTALLER.EXE-031B6478.pf
                      USERINIT.EXE-F39AB672.pf
                      VERCLSID.EXE-4D95F5A7.pf
                      VLC.EXE-CE8E9BE1.pf
                      VSSVC.EXE-04D079CC.pf
                      WERCON.EXE-FE5CD389.pf
                      WERFAULT.EXE-B7E27BE5.pf
                      WERMGR.EXE-2A1BCBC7.pf
                      WININIT.EXE-65FCAECD.pf
                      WINWORD.EXE-138CEB57.pf
                      WLCOMM.EXE-648065CA.pf
                      WLLOGINPROXY.EXE-E9051163.pf
                      WMIADAP.EXE-369DF1CD.pf
                      WMIPRVSE.EXE-43972D0F.pf
                      WMPLAYER.EXE-9DE758AE.pf
                      WUAUCLT.EXE-830BCC14.pf
                      WUDFHOST.EXE-81420B07.pf

                      ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤