Sujet Précédent Sujet Suivant

Probleme explorateur windows sous vista

jéjé -  
 Utilisateur anonyme -
Help pour un novice de l'info,
voici mon probleme: mon explorateur windows ne repond plus, impossible d'acceder à mon disque dur!!! vista me demande de chercher une solution ou d'essayer de redemarer...mais rien ne se passe

j'ai déjà effectué quelques manip:
-lancer un scan avec F-secure
-lancer un scan avec SUPERAntiSpywar
-et utiliser CCleaner
ils ont détectés des fichiers infectés, que j'ai bien sur supprimés, j'ai rebooté mais le probleme est tjrs present!!!

Donc j'ai utilisé la derniere version de SmitfraudFix:
- (1) recherchej'ai esssayé de generer un rapport mais il ne se passe rien, la fenetre de SmitfraudFix disparait et plus rien...???
- (2) nettoyagej'ai redemaré en mode sans echecs et relancer SmitfraudFix pour un nettoyage et pareil il commence son analyse puis la fenetre disparait et il ne se passe plus rien!!!!????
voila ce qu'il affiche avant que la fenetre ne disparait (il y peut etre des erreurs dans ce texte):
Arret des processus...
chemin d'acces introuvable: C\windows\system32\drivers\etc
recherche VaCfix...
winsock2 Fix...
generic renos Fix...
supression des fichiers infectés...
Puis la fentre se ferme et plus rien

alors j'ai utilisé hijackthis pour essayer d'avoir un rapport d'analyse et le voilà (mais mes connaissances en info s'arrete là, je ne sais pas l'exploiter)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:23:14, on 06/12/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\Winamp\winampa.exe
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files (x86)\F-Secure\common\FSM32.EXE
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\F-Secure\FSGUI\fsguidll.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files (x86)\google\googletoolbar1.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files (x86)\google\googletoolbar1.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
O4 - HKLM\..\Run: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files (x86)\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files (x86)\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LaunchList] C:\Program Files (x86)\Pinnacle\Studio 11\LaunchList2.exe
O4 - HKCU\..\Run: [Neuf Media Center] "C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files (x86)\LimeWire\LimeWire.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Google Search - res://C:\Program Files (x86)\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Pages liées - res://C:\Program Files (x86)\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://C:\Program Files (x86)\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files (x86)\Google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files (x86)\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files (x86)\F-Secure\Common\FNRB32.EXE
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files (x86)\F-Secure\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files (x86)\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files (x86)\F-Secure\Common\FSMA32.EXE
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PCLEPCI - Pinnacle Systems GmbH - C:\Windows\SysWOW64\drivers\pclepci.sys
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
A voir également:

58 réponses

Précédent
Réponse 41 / 58
Utilisateur anonyme
 
On va voir un truc :

Desactive ton antivirus le temps de la manip ainsi que ton parefeu si présent

▶ Télécharge List&Kill'em et enregistre le sur ton bureau

▶ dezippe-le , (clic droit/ extraire.....)

Il ne necessite pas d'installation

▶ double clic (clic droit "executer en tant qu'administrateur" pour Vista) pour lancer le scan

choisis la langue puis choisis l'option 1 = Mode Recherche

▶ laisse travailler l'outil

un rapport du nom de catchme apparait sur ton bureau , ignore-le , mais ne le supprime pas pour l instant

▶ Poste le contenu du rapport qui s'ouvre
0
jéjé
 
c'est un peu long!!!

90% du scan
tests rootkits............patience.........
0
jéjé > jéjé
 
jvoulais te poser une autre question, ce n'est pas "trop dangereux" d'avoir poster tous mes rapports sur le forum?
0
Réponse 42 / 58
Utilisateur anonyme
 
Attend !
0
Réponse 43 / 58
Utilisateur anonyme
 
Non, pourquoi ? Il n'y a rien de confidentiel dans tous ça, t'inquiète !
0
jéjé
 
et voila monsieur

List'em by g3n-h@ckm@n 1.1.5.1

Thx to Chiquitine29.....& CCM team

User : jerome (Administrateurs) # PC-JEROME
Update on 11/12/2009 by g3n-h@ckm@n ::::: 20:30
Start at: 21:01:15 | 12/12/2009
Contact : g3n-h@ckm@n sur CCM

AMD Athlon(tm) 7550 Dual-Core Processor
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 64-bit) # Service Pack 2
Internet Explorer 8.0.6001.18865
Windows Firewall Status : Disabled
AV : F-Secure Client Security 7.12 7.12 [ (!) Disabled | Updated ]
FW : F-Secure Client Security 7.12[ Enabled ]7.12

C:\ -> Disque fixe local | 581,65 Go (491,13 Go free) [HP] | NTFS
D:\ -> Disque fixe local | 14,52 Go (2,04 Go free) [FACTORY_IMAGE] | NTFS
E:\ -> Disque CD-ROM
F:\ -> Disque amovible

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe 1152
C:\Windows\SysWOW64\svchost.exe 2060
C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe 2104
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe 2132
C:\Program Files (x86)\F-Secure\Anti-Virus\fsgk32st.exe 2172
C:\Program Files (x86)\F-Secure\common\FSM32.EXE 2224
C:\Program Files (x86)\F-Secure\Common\FSMA32.EXE 2296
C:\Program Files (x86)\Java\jre6\bin\jusched.exe 2324
C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe 2344
C:\Program Files (x86)\F-Secure\Anti-Virus\FSGK32.EXE 2356
C:\Program Files (x86)\F-Secure\Common\FSMB32.EXE 2444
C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe 2508
C:\Program Files (x86)\F-Secure\Common\FCH32.EXE 2484
C:\Program Files (x86)\F-Secure\Anti-Virus\fssm32.exe 872
C:\Program Files (x86)\F-Secure\Common\FAMEH32.EXE 3268
C:\Program Files (x86)\F-Secure\Anti-Virus\fsqh.exe 3280
C:\Program Files (x86)\F-Secure\FSAUA\program\fsaua.exe 3296
C:\Program Files (x86)\F-Secure\Common\FNRB32.EXE 3348
C:\Program Files (x86)\F-Secure\FWES\Program\fsdfwd.exe 3372
C:\Program Files (x86)\F-Secure\Common\FIH32.EXE 3400
C:\Program Files (x86)\F-Secure\FSGUI\fsguidll.exe 3668
C:\Program Files (x86)\F-Secure\Anti-Virus\fsav32.exe 1560
C:\Program Files (x86)\SFR\Media Center\httpd\httpd.exe 1516
C:\Program Files (x86)\SFR\Media Center\httpd\httpd.exe 3532
C:\Program Files (x86)\Internet Explorer\iexplore.exe 4284
C:\Program Files (x86)\Internet Explorer\iexplore.exe 4336
C:\Users\jerome\Desktop\List_Kill'em.scr 4760
C:\Windows\SysWOW64\conime.exe 2740
C:\Windows\SysWOW64\cmd.exe 4696
C:\Users\jerome\AppData\Local\Temp\5D1D.tmp\pv.exe 1956

======================
Keys "Run"
======================
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Sidebar REG_SZ C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
Neuf Media Center REG_SZ "C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
hpsysdrv REG_SZ c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
StartCCC REG_SZ "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
HP Software Update REG_SZ c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
Adobe Reader Speed Launcher REG_SZ "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
Adobe ARM REG_SZ "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
F-Secure Manager REG_SZ "C:\Program Files (x86)\F-Secure\Common\FSM32.EXE" /splash
F-Secure TNB REG_SZ "C:\Program Files (x86)\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
SunJavaUpdateSched REG_SZ "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

=====================
Other Keys
=====================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
ConsentPromptBehaviorAdmin REG_DWORD 2 (0x2)
ConsentPromptBehaviorUser REG_DWORD 1 (0x1)
EnableInstallerDetection REG_DWORD 1 (0x1)
EnableLUA REG_DWORD 1 (0x1)
EnableSecureUIAPaths REG_DWORD 1 (0x1)
EnableVirtualization REG_DWORD 1 (0x1)
PromptOnSecureDesktop REG_DWORD 1 (0x1)
ValidateAdminCodeSignatures REG_DWORD 0 (0x0)
dontdisplaylastusername REG_DWORD 0 (0x0)
legalnoticecaption REG_SZ
legalnoticetext REG_SZ
scforceoption REG_DWORD 0 (0x0)
shutdownwithoutlogon REG_DWORD 1 (0x1)
undockwithoutlogon REG_DWORD 1 (0x1)
FilterAdministratorToken REG_DWORD 0 (0x0)
EnableUIADesktopToggle REG_DWORD 0 (0x0)
HideFastUserSwitching REG_DWORD 0 (0x0)

===============
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

===============
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
NoActiveDesktop REG_DWORD 1 (0x1)
ForceActiveDesktopOn REG_DWORD 0 (0x0)
BindDirectlyToPropertySetStorage REG_DWORD 0 (0x0)
NoActiveDesktopChanges REG_DWORD 0 (0x0)

===============
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
AppInit_DLLS REG_SZ

===============
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]

===============
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} REG_SZ

===============
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

===============
BHO :
======
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

================
Internet Explorer :
================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ https://www.msn.com/fr-fr

========
Services
========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]

Ndisuio : 0x3
EapHost : 0x3
Wlansvc : 0x2
SharedAccess : 0x3
windefend : 0x2
wuauserv : 0x2
wscsvc : 0x2

=========

=======
Drive :
=======


==========
Programs
==========

Adobe
ATI Technologies
BSPlayer
CCleaner
Common Files
Cyberlink
desktop.ini
F-Secure
Google
Hewlett-Packard
HP
InstallShield Installation Information
Internet Explorer
Java
Malwarebytes' Anti-Malware
Microsoft Office
Microsoft Silverlight
Microsoft Visual Studio
Microsoft Works
MSBuild
MSXML 4.0
Nero
Online Services
Panda Security
Photoreflex
Pinnacle
Python
Realtek
Reference Assemblies
SFR
SMINST
SUPERAntiSpyware
Temp
Trend Micro
Uninstall Information
Winamp
Windows Calendar
Windows Collaboration
Windows Defender
Windows Mail
Windows Media Player
Windows NT
Windows Photo Gallery
Windows Portable Devices
Windows Sidebar
WinRAR

¤¤¤¤¤¤¤¤¤¤ Files/folders :

C:\Windows\System32\404Fix.exe
C:\Windows\System32\dumphive.exe
C:\Windows\System32\EXPLORER.exe
C:\Windows\System32\EZUPBH~1.DLL
C:\Windows\System32\IEDFix.exe
C:\Windows\System32\Process.exe
C:\Windows\System32\regedit.exe
C:\Windows\System32\SrchSTS.exe
C:\Windows\System32\tmp.reg
C:\Windows\System32\VACFix.exe
C:\Windows\System32\VCCLSID.exe
C:\Windows\System32\WS2Fix.exe

¤¤¤¤¤¤¤¤¤¤ Keys :

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoActiveDesktopChanges"
HKCR\CLSID\{E54729E8-BB3D-4270-9D49-7389EA579090}
HKCR\ezUPBHook.ShellObj
HKCR\ezUPBHook.ShellObj.1
HKCR\TypeLib\{478CAB91-9E28-11D4-97FF-0050047D51FB}

=========
Rootkits
=========

driver loading error catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-12 21:03:06
Windows 6.0.6002 Service Pack 2 WOW64 NTFS

scanning hidden files ...

IPC error: 2 Le fichier spécifié est introuvable.
C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 3744 bytes
C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 3744 bytes
C:\Windows\System32\ActiveDRV.txt 47 bytes
C:\Windows\System32\EventProviders
C:\Windows\System32\EventProviders\de-de
C:\Windows\System32\EventProviders\de-de\spcmsg.dll.mui 5632 bytes executable
C:\Windows\System32\EventProviders\en-us
C:\Windows\System32\EventProviders\en-us\spcmsg.dll.mui 5120 bytes executable
C:\Windows\System32\EventProviders\es-es
C:\Windows\System32\EventProviders\es-es\spcmsg.dll.mui 5632 bytes executable
C:\Windows\System32\EventProviders\fr-fr
C:\Windows\System32\EventProviders\fr-fr\spcmsg.dll.mui 5632 bytes executable
C:\Windows\System32\EventProviders\ja-jp
C:\Windows\System32\EventProviders\ja-jp\spcmsg.dll.mui 4608 bytes executable
C:\Windows\System32\EventProviders\spcmsg.dll 14336 bytes executable
C:\Windows\System32\LocalGroupAdminAdd.log 15 bytes
C:\Windows\System32\Local_LLU.log 49 bytes
C:\Windows\System32\AERTAC64.dll 163840 bytes executable
C:\Windows\System32\AERTAR64.dll 67072 bytes executable
C:\Windows\System32\amdpcom64.dll 52224 bytes executable
C:\Windows\System32\Ati2evxx.dll 317952 bytes executable
C:\Windows\System32\Ati2evxx.exe 949248 bytes executable
C:\Windows\System32\atiadlxx.dll 162304 bytes executable
C:\Windows\System32\ATIDEMGX.dll 442368 bytes executable
C:\Windows\System32\atidxx64.dll 3189760 bytes executable
C:\Windows\System32\atiedu64.dll 59392 bytes executable
C:\Windows\System32\atiicdxx.dat 180720 bytes
C:\Windows\System32\atimuixx.dll 11776 bytes executable
C:\Windows\System32\Boot\fr-FR
C:\Windows\System32\brcoinst.dll 19456 bytes executable
C:\Windows\System32\catroot
C:\Windows\System32\catroot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CaptureWizard-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 11055 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CaptureWizard-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 11925 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 260946 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 816142 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-LanguagePack-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ClipsInTheLibrary-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ClipsInTheLibrary-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9581 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Encoder-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 11039 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DesktopWindowManager-uDWM-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DFSR-ClientEdition-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9871 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DFSR-ClientEdition-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 10757 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DGT-Package-MiniLP~31bf3856ad364e35~amd64~fr-FR~7.0.6002.18107.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DGT-Package-TopLevel~31bf3856ad364e35~amd64~~7.0.6002.18107.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DGT-Package~31bf3856ad364e35~amd64~fr-FR~7.0.6002.18107.cat 14036 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DGT-Package~31bf3856ad364e35~amd64~~7.0.6002.18107.cat 64493 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Disk-Diagnosis-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9589 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Disk-Diagnosis-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 10169 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 8123 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GPUPipeline-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 8413 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package-MiniLP~31bf3856ad364e35~amd64~en-US~6.0.6002.18156.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package-MiniLP~31bf3856ad364e35~amd64~it-IT~6.0.6002.18156.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package-MiniLP~31bf3856ad364e35~amd64~pt-BR~6.0.6002.18156.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package-MiniLP~31bf3856ad364e35~amd64~th-TH~6.0.6002.18156.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package~31bf3856ad364e35~amd64~de-DE~6.0.6002.18156.cat 10508 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package~31bf3856ad364e35~amd64~hr-HR~6.0.6002.18156.cat 10508 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package~31bf3856ad364e35~amd64~nl-NL~6.0.6002.18156.cat 10508 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package~31bf3856ad364e35~amd64~sr-LATN-CS~6.0.6002.18156.cat 10508 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-CoreClientUAHP-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 38595 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-CoreClientUAHP-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 23493 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-Customization-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 8703 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-Customization-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9283 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-HomePremiumEdition~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 13343 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 65720 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 120148 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 58211 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 82524 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Indexing-Service-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 11933 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-LanguagePack~31bf3856ad364e35~amd64~fr-FR~8.0.6001.18702.cat 58700 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-Package-MiniLP~31bf3856ad364e35~amd64~en-US~8.0.6001.18702.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-Package-TopLevel~31bf3856ad364e35~amd64~~8.0.6001.18702.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-Package~31bf3856ad364e35~amd64~en-US~8.0.6001.18702.cat 7591 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-Package~31bf3856ad364e35~amd64~~8.0.6001.18702.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-RTM-Update~31bf3856ad364e35~amd64~en-US~8.0.6001.18702.cat 58700 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-RTM-Update~31bf3856ad364e35~amd64~~8.0.6001.18702.cat 388236 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-SP1-Update~31bf3856ad364e35~amd64~~8.0.6001.18702.cat 9347 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Links-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 8703 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Links-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 8123 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Format-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 21341 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Format-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 228341 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MediaCenter-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 24861 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MediaCenter-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 98375 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MediaPlayer-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 25465 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Basic-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 10177 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Basic-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 11329 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 11353 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 12215 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-SideShow-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 11643 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 53261 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 137938 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OpticalMediaDisc-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 10177 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OpticalMediaDisc-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 124242 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ParentalControls-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 21397 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ParentalControls-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 26053 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-AdhocMeetings-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-Full-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 16919 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-Full-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 22958 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 21349 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 28663 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-Foundation-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 12247 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-Foundation-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 12843 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-XPSServices-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 8413 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RasRip-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RasRip-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RDC-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 8413 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RDC-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9879 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RecDisc-SDP-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6001.18000.cat 13280 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RecDisc-SDP-Package~31bf3856ad364e35~amd64~~6.0.6001.18000.cat 18167 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RemoteAssistance-Package-Client~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 11957 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RemovableStorageManagement-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 12545 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RemovableStorageManagement-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 14027 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SampleContent-Movies-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 10733 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SampleContent-Music-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 14793 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ServicingBaseline-HomePremium-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 8703 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Shell-InboxGames-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 13971 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Shell-InboxGames-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 18353 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 10757 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 12803 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SimpleTCP-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SimpleTCP-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9291 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SNMP-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 14293 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SNMP-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 30879 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SystemRestore-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 12545 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SystemRestore-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 18638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-TabletPC-OC-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 28163 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Client-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Client-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9291 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Server-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 10177 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Server-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 11047 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-TFTP-Client-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-TFTP-Client-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-UIRibbon-Package-MUI-MiniLP~31bf3856ad364e35~amd64~fr-FR~7.0.6002.18108.cat 7591 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-UIRibbon-Package-MUI~31bf3856ad364e35~amd64~fr-FR~7.0.6002.18108.cat 10508 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-UIRibbon-Package-TopLevel~31bf3856ad364e35~amd64~~7.0.6002.18108.cat 7591 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-UIRibbon-Package~31bf3856ad364e35~amd64~~7.0.6002.18108.cat 12838 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-VistaServicePack-SysHiper-SP1-Package~31bf3856ad364e35~amd64~~6.0.6002.18005.cat 9918 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-VistaServicePack-UninstallRemoval-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6001.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-VistaServicePack-UninstallRemoval-Package~31bf3856ad364e35~amd64~~6.0.6001.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Networking-MPSSVC-Rules-HomePremiumEdition-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 14503 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat 6106074 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntexe.cat 221046 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat 1052954 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntph.cat 1139256 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntprint.cat 17534 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem10.cat 8542 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem11.cat 10735 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem12.cat 10806 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem13.cat 8542 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem14.cat 10701 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem15.cat 8176 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_12_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15328 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_12_for_KB948465~31bf3856ad364e35~amd64~fr-FR~6.0.1.18005.cat 42143 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_12_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 9338 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_12_for_KB972036~31bf3856ad364e35~amd64~~6.0.2.0.cat 26637 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_12_for_KB973917~31bf3856ad364e35~amd64~~6.0.1.2.cat 9324 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_130_for_KB972145~31bf3856ad364e35~amd64~~6.0.1.5.cat 23253 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_131_for_KB972145~31bf3856ad364e35~amd64~~6.0.1.5.cat 12026 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_13_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_13_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12104 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_13_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 19452 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_13_for_KB948465~31bf3856ad364e35~amd64~fr-FR~6.0.1.18005.cat 13171 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_13_for_KB973917~31bf3856ad364e35~amd64~~6.0.1.2.cat 13447 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_140_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 9658 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_143_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 18001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_144_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 10849 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_14_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12684 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB948465~31bf3856ad364e35~amd64~fr-FR~6.0.1.18005.cat 59341 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 33180 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB950582~31bf3856ad364e35~amd64~~6.0.1.1.cat 12106 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB958483~31bf3856ad364e35~amd64~~6.0.1.2.cat 27261 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB958623~31bf3856ad364e35~amd64~~6.0.1.1.cat 10265 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB973917~31bf3856ad364e35~amd64~~6.0.1.2.cat 10515 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_17_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_17_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 101163 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_19_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12394 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_19_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12692 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_19_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15328 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_19_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 11384 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_19_for_KB970430~31bf3856ad364e35~amd64~~6.0.1.6.cat 9658 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB905866~31bf3856ad364e35~amd64~~6.0.36.0.cat 10834 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12410 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-XPSServices-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 10161 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RemoteAssistance-Package-Client~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 14019 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Sidebar-Killbits-SDP-Package~31bf3856ad364e35~amd64~~6.0.6001.18000.cat 11218 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-TabletPC-OC-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 73416 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-VistaSP1CEIP-Package~31bf3856ad364e35~amd64~~6.0.6001.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem16.cat 8604 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem34.cat 8164 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem52.cat 10913 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_20_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_20_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 13140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_210_for_KB970430~31bf3856ad364e35~amd64~~6.0.1.6.cat 10834 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_218_for_KB970430~31bf3856ad364e35~amd64~~6.0.1.6.cat 9658 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_21_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_21_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_21_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 13588 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_21_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 10216 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_229_for_KB972145~31bf3856ad364e35~amd64~~6.0.1.5.cat 16150 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_22_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_22_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 43050 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_22_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12684 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_22_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15328 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_22_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 10804 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_22_for_KB972145~31bf3856ad364e35~amd64~~6.0.1.5.cat 27362 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_239_for_KB972145~31bf3856ad364e35~amd64~~6.0.1.5.cat 27377 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_23_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_23_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12402 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_23_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_24_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 15296 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_24_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_24_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_25_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_25_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 17452 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_25_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12104 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_25_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 15656 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12394 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15328 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 169076 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 20434 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB973917~31bf3856ad364e35~amd64~~6.0.1.2.cat 14623 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_277_for_KB970653~31bf3856ad364e35~amd64~~6.0.1.0.cat 10500 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_277_for_KB976098~31bf3856ad364e35~amd64~~6.0.1.1.cat 10515 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_27_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_29_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 28908 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_29_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_29_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 13588 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_29_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 17986 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_29_for_KB973917~31bf3856ad364e35~amd64~~6.0.1.2.cat 10500 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11814 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 11806 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_31_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 13588 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_320_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 7917 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_321_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 7917 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_322_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 7917 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_32_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_32_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 43428 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_32_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 15632 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_32_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_35_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12104 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_35_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11508 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_35_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_35_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 44552 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_36_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_36_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_36_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 19048 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_36_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_36_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 16763 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_39_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 19514 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_39_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11508 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_39_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_39_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 14316 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB905866~31bf3856ad364e35~amd64~~6.0.36.0.cat 10834 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12394 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_41_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15328 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_41_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 33259 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11814 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 27046 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 170036 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB949246~31bf3856ad364e35~amd64~~6.0.6001.3053.cat 205495 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB950582~31bf3856ad364e35~amd64~~6.0.1.1.cat 87382 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB958623~31bf3856ad364e35~amd64~~6.0.1.1.cat 85541 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_43_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_17_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12104 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_189_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 7917 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_19_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 36800 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB951376~31bf3856ad364e35~amd64~~6.0.1.1.cat 14184 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB954459~31bf3856ad364e35~amd64~~6.0.1.2.cat 14764 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB959130~31bf3856ad364e35~amd64~~6.0.1.0.cat 11731 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB970710~31bf3856ad364e35~amd64~~6.0.1.1.cat 19646 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB973874~31bf3856ad364e35~amd64~~8.0.1.0.cat 10510 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_20_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 370521 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_23_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 16196 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_27_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 20272 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-BRCpl-Premium-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9879 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-AdhocMeetings-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 13423 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_29_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_41_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 53684 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_60_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 22863 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB950124_client_1~31bf3856ad364e35~amd64~~6.0.1.0.cat 10640 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB957095~31bf3856ad364e35~amd64~~6.0.1.0.cat 10640 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB971657_client_2~31bf3856ad364e35~amd64~~6.0.1.0.cat 7902 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_46_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 225446 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_46_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_46_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 12270 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_47_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_47_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 112912 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_47_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15328 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_47_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 13140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_47_for_KB952154~31bf3856ad364e35~amd64~~6.0.2.0.cat 11518 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_48_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_50_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 15608 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_50_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_50_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 10216 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_51_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_51_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 14730 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_51_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_51_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 30234 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_52_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_52_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 24452 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_52_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 32083 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_52_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 98263 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_53_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_53_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_53_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 36211 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_54_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_54_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 103913 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_54_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 10640 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_55_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 10640 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_55_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 14646 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_56_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_56_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 12858 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 15946 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 12882 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB952154~31bf3856ad364e35~amd64~~6.0.2.0.cat 11518 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_58_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_58_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 25064 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_58_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 13736 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_59_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_59_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 15358 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_59_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 17860 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB905866~31bf3856ad364e35~amd64~~6.0.36.0.cat 10834 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_60_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 10804 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_61_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 22688 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_62_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 13280 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_62_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 10812 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_64_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 15358 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_64_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 11376 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_65_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 10796 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_66_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12676 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_67_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12104 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_67_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 9918 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_68_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 15664 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_68_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 18690 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_69_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 14198 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_69_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 14018 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12700 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB947562~31bf3856ad364e35~amd64~~6.0.1.1.cat 26428 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB948465~31bf3856ad364e35~amd64~fr-FR~6.0.1.18005.cat 13486 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 11921 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB949246~31bf3856ad364e35~amd64~~6.0.6001.3053.cat 205495 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB949247~31bf3856ad364e35~amd64~~6.0.6001.2123.cat 83187 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB952069~31bf3856ad364e35~amd64~~6.0.1.0.cat 100342 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB954366~31bf3856ad364e35~amd64~~6.0.1.3.cat 29360 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB956572~31bf3856ad364e35~amd64~~6.0.1.5.cat 35665 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB957388~31bf3856ad364e35~amd64~~6.0.1.2.cat 30451 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB961371~31bf3856ad364e35~amd64~~6.0.1.4.cat 10834 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_82_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 11806 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_83_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 13562 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_83_for_KB958483~31bf3856ad364e35~amd64~~6.0.1.2.cat 10845 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_84_for_KB952154~31bf3856ad364e35~amd64~~6.0.2.0.cat 11518 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_84_for_KB958481~31bf3856ad364e35~amd64~~6.0.1.0.cat 15723 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_87_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 10514 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_88_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 12882 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_89_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 22823 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04
0
Réponse 44 / 58
Utilisateur anonyme
 
Pas beau^^ On avait pas fini !!!
▶ Relance List&Kill'em comme tu as fait pour l'option 1 (soit en clic droit pour vista),

mais cette fois-ci :

▶ choisis l'option 2 = Mode Destruction

laisse travailler l'outil.

en fin de scan un rapport s'ouvre

▶ colle le contenu dans ta reponse
0
jéjé
 
voilà

Kill'em by g3n-h@ckm@n 1.1.5.1

User : jerome (Administrateurs) # PC-JEROME
Update on 11/12/2009 by g3n-h@ckm@n ::::: 20:30
Start at: 21:23:39 | 12/12/2009
Contact : g3n-h@ckm@n sur CCM

AMD Athlon(tm) 7550 Dual-Core Processor
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 64-bit) # Service Pack 2
Internet Explorer 8.0.6001.18865
Windows Firewall Status : Disabled
AV : F-Secure Client Security 7.12 7.12 [ (!) Disabled | Updated ]
FW : F-Secure Client Security 7.12[ Enabled ]7.12

C:\ -> Disque fixe local | 581,65 Go (491,12 Go free) [HP] | NTFS
D:\ -> Disque fixe local | 14,52 Go (2,04 Go free) [FACTORY_IMAGE] | NTFS
E:\ -> Disque CD-ROM
F:\ -> Disque amovible


¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe 1152
C:\Windows\SysWOW64\svchost.exe 2060
C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe 2104
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe 2132
C:\Program Files (x86)\F-Secure\Anti-Virus\fsgk32st.exe 2172
C:\Program Files (x86)\F-Secure\common\FSM32.EXE 2224
C:\Program Files (x86)\F-Secure\Common\FSMA32.EXE 2296
C:\Program Files (x86)\Java\jre6\bin\jusched.exe 2324
C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe 2344
C:\Program Files (x86)\F-Secure\Anti-Virus\FSGK32.EXE 2356
C:\Program Files (x86)\F-Secure\Common\FSMB32.EXE 2444
C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe 2508
C:\Program Files (x86)\F-Secure\Common\FCH32.EXE 2484
C:\Program Files (x86)\F-Secure\Anti-Virus\fssm32.exe 872
C:\Program Files (x86)\F-Secure\Common\FAMEH32.EXE 3268
C:\Program Files (x86)\F-Secure\Anti-Virus\fsqh.exe 3280
C:\Program Files (x86)\F-Secure\FSAUA\program\fsaua.exe 3296
C:\Program Files (x86)\F-Secure\Common\FNRB32.EXE 3348
C:\Program Files (x86)\F-Secure\FWES\Program\fsdfwd.exe 3372
C:\Program Files (x86)\F-Secure\Common\FIH32.EXE 3400
C:\Program Files (x86)\F-Secure\FSGUI\fsguidll.exe 3668
C:\Program Files (x86)\F-Secure\Anti-Virus\fsav32.exe 1560
C:\Program Files (x86)\SFR\Media Center\httpd\httpd.exe 1516
C:\Program Files (x86)\SFR\Media Center\httpd\httpd.exe 3532
C:\Windows\SysWOW64\conime.exe 2740
C:\Windows\SysWow64\Macromed\Flash\FlashUtil10a.exe 4264
C:\Users\jerome\Desktop\List_Kill'em.scr 1536
C:\Windows\SysWOW64\cmd.exe 692
C:\Users\jerome\AppData\Local\Temp\406.tmp\pv.exe 1048

Detections :
==========


¤¤¤¤¤¤¤¤¤¤ Files/folders :

"C:\Windows\system32\404Fix.exe"
"C:\Windows\system32\dumphive.exe"
"C:\Windows\System32\EXPLORER.exe"
"C:\Windows\SYSTEM32\EZUPBH~1.DLL"
"C:\Windows\system32\IEDFix.exe"
"C:\Windows\system32\Process.exe"
"C:\Windows\system32\regedit.exe"
"C:\Windows\system32\SrchSTS.exe"
"C:\Windows\system32\tmp.reg"
"C:\Windows\system32\VACFix.exe"
"C:\Windows\system32\VCCLSID.exe"
"C:\Windows\system32\WS2Fix.exe"
C:\Users\jerome\LOCAL Settings\Temp\SSUPDATE.EXE


¤¤¤¤¤¤¤¤¤¤ Files/folders deleted :

Quarantine :

404Fix.exe.Kill'em
dumphive.exe.Kill'em
EZUPBH~1.DLL.Kill'em
IEDFix.exe.Kill'em
Process.exe.Kill'em
SrchSTS.exe.Kill'em
SSUPDATE.EXE.Kill'em
tmp.reg.Kill'em
VACFix.exe.Kill'em
VCCLSID.exe.Kill'em
WS2Fix.exe.Kill'em

==============
host file OK !
==============

========
Registry
========
Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges
Deleted : HKCR\CLSID\{E54729E8-BB3D-4270-9D49-7389EA579090}
Deleted : HKCR\ezUPBHook.ShellObj
Deleted : HKCR\ezUPBHook.ShellObj.1
Deleted : HKCR\TypeLib\{478CAB91-9E28-11D4-97FF-0050047D51FB}

============
Disk Cleaned
============

================
Prefetch cleaned
================



¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 45 / 58
Utilisateur anonyme
 
L'ordi va encore mieux ?
0
jéjé
 
pas de changement apparant, ça a l'air normal
0
Réponse 46 / 58
Utilisateur anonyme
 
Refait l'option 1 de Kill'em et montre le rapport
0
jéjé
 
le scan tourne...

j'ai remarqué un petit souci, j'ai un compte gmail et à chaque fois que je vais voir mes mail l'option ActiveX est désactivé, je suis obligé de faire outils/option internet/sécurité et de réactivé les zones au niveau par defaut est-ce normal? il n'y aurait pas moyen de fixer ce parametre une fois pour toute
0
Réponse 47 / 58
Utilisateur anonyme
 
Bon, je vais au lit !
Fais ça stp :

Télécharge Dr.Web CureIt tsur ton Bureau:
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe

Installe-le.
==> branche les USB et Disque dur externes .

Déconnecte toi physiquement d'Internet.

Double clique sur drweb-cureit.exe et autorise l'exécution du scan rapide. Cette étape scanne les fichiers résidants en mémoire. Si l'outil trouve quelque chose, clique sur le bouton Yes quand il demande si tu veux réaprer (cure it). Ce scan est rapide.

* Quand le scan rapide est terminé, il faut changer les réglages par défauts.
* Clique sur le menu Options >> Changer la configuration;
* Clique sur Actions
* Change chaque item sous Objets and Malware en Rapport.
* Ensuite, il faut sélectionner les partitions à scanner.
* Choisis l'option Tous. Un point rouge désigne les disques sélectionnés.
* Clique sur la flèche verte sur la droite, et le scan débutera..
* Clique sur Non pour tous si l'outil demande si tu veux nettoyer/déplacer les fichiers.
* A la fin du scan, du menu principal de l'outil, au haut à gauche, clique sur le menu Fichier et choisis Enregistrer le rapportt
* Sauvegarde le rapport sur ton Bureau. Ce dernier se nommera DrWeb.csv.
* Ferme Dr.Web Cureit

Poste le rapport dans ta réponse.

==

Courage, beaucoup de travail et le scan de Dr Web Cure It peut être long.
0
jéjé
 
rapport kill'em

List'em by g3n-h@ckm@n 1.1.5.1

Thx to Chiquitine29.....& CCM team

User : jerome (Administrateurs) # PC-JEROME
Update on 11/12/2009 by g3n-h@ckm@n ::::: 20:30
Start at: 21:33:56 | 12/12/2009
Contact : g3n-h@ckm@n sur CCM

AMD Athlon(tm) 7550 Dual-Core Processor
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 64-bit) # Service Pack 2
Internet Explorer 8.0.6001.18865
Windows Firewall Status : Disabled
AV : F-Secure Client Security 7.12 7.12 [ (!) Disabled | Updated ]
FW : F-Secure Client Security 7.12[ Enabled ]7.12

C:\ -> Disque fixe local | 581,65 Go (491,12 Go free) [HP] | NTFS
D:\ -> Disque fixe local | 14,52 Go (2,04 Go free) [FACTORY_IMAGE] | NTFS
E:\ -> Disque CD-ROM
F:\ -> Disque amovible

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe 1152
C:\Windows\SysWOW64\svchost.exe 2060
C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe 2104
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe 2132
C:\Program Files (x86)\F-Secure\Anti-Virus\fsgk32st.exe 2172
C:\Program Files (x86)\F-Secure\common\FSM32.EXE 2224
C:\Program Files (x86)\F-Secure\Common\FSMA32.EXE 2296
C:\Program Files (x86)\Java\jre6\bin\jusched.exe 2324
C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe 2344
C:\Program Files (x86)\F-Secure\Anti-Virus\FSGK32.EXE 2356
C:\Program Files (x86)\F-Secure\Common\FSMB32.EXE 2444
C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe 2508
C:\Program Files (x86)\F-Secure\Common\FCH32.EXE 2484
C:\Program Files (x86)\F-Secure\Anti-Virus\fssm32.exe 872
C:\Program Files (x86)\F-Secure\Common\FAMEH32.EXE 3268
C:\Program Files (x86)\F-Secure\Anti-Virus\fsqh.exe 3280
C:\Program Files (x86)\F-Secure\FSAUA\program\fsaua.exe 3296
C:\Program Files (x86)\F-Secure\Common\FNRB32.EXE 3348
C:\Program Files (x86)\F-Secure\FWES\Program\fsdfwd.exe 3372
C:\Program Files (x86)\F-Secure\Common\FIH32.EXE 3400
C:\Program Files (x86)\F-Secure\FSGUI\fsguidll.exe 3668
C:\Program Files (x86)\F-Secure\Anti-Virus\fsav32.exe 1560
C:\Program Files (x86)\SFR\Media Center\httpd\httpd.exe 1516
C:\Program Files (x86)\SFR\Media Center\httpd\httpd.exe 3532
C:\Windows\SysWOW64\conime.exe 2740
C:\Program Files (x86)\Internet Explorer\iexplore.exe 644
C:\Program Files (x86)\Internet Explorer\iexplore.exe 4468
C:\Windows\SysWow64\Macromed\Flash\FlashUtil10a.exe 2244
C:\Users\jerome\Desktop\List_Kill'em.scr 1136
C:\Windows\SysWOW64\cmd.exe 4360
C:\Users\jerome\AppData\Local\Temp\78E7.tmp\pv.exe 3716

======================
Keys "Run"
======================
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Sidebar REG_SZ C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
Neuf Media Center REG_SZ "C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
hpsysdrv REG_SZ c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
StartCCC REG_SZ "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
HP Software Update REG_SZ c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
Adobe Reader Speed Launcher REG_SZ "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
Adobe ARM REG_SZ "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
F-Secure Manager REG_SZ "C:\Program Files (x86)\F-Secure\Common\FSM32.EXE" /splash
F-Secure TNB REG_SZ "C:\Program Files (x86)\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
SunJavaUpdateSched REG_SZ "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

=====================
Other Keys
=====================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
ConsentPromptBehaviorAdmin REG_DWORD 2 (0x2)
ConsentPromptBehaviorUser REG_DWORD 1 (0x1)
EnableInstallerDetection REG_DWORD 1 (0x1)
EnableLUA REG_DWORD 1 (0x1)
EnableSecureUIAPaths REG_DWORD 1 (0x1)
EnableVirtualization REG_DWORD 1 (0x1)
PromptOnSecureDesktop REG_DWORD 1 (0x1)
ValidateAdminCodeSignatures REG_DWORD 0 (0x0)
dontdisplaylastusername REG_DWORD 0 (0x0)
legalnoticecaption REG_SZ
legalnoticetext REG_SZ
scforceoption REG_DWORD 0 (0x0)
shutdownwithoutlogon REG_DWORD 1 (0x1)
undockwithoutlogon REG_DWORD 1 (0x1)
FilterAdministratorToken REG_DWORD 0 (0x0)
EnableUIADesktopToggle REG_DWORD 0 (0x0)
HideFastUserSwitching REG_DWORD 0 (0x0)

===============
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

===============
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
NoActiveDesktop REG_DWORD 1 (0x1)
ForceActiveDesktopOn REG_DWORD 0 (0x0)
BindDirectlyToPropertySetStorage REG_DWORD 0 (0x0)

===============
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
AppInit_DLLS REG_SZ

===============
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]

===============
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} REG_SZ

===============
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

===============
BHO :
======
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

================
Internet Explorer :
================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ https://www.msn.com/fr-fr

========
Services
========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]

Ndisuio : 0x3
EapHost : 0x3
Wlansvc : 0x2
SharedAccess : 0x3
windefend : 0x2
wuauserv : 0x2
wscsvc : 0x2

=========

=======
Drive :
=======


==========
Programs
==========

Adobe
ATI Technologies
BSPlayer
CCleaner
Common Files
Cyberlink
desktop.ini
F-Secure
Google
Hewlett-Packard
HP
InstallShield Installation Information
Internet Explorer
Java
Malwarebytes' Anti-Malware
Microsoft Office
Microsoft Silverlight
Microsoft Visual Studio
Microsoft Works
MSBuild
MSXML 4.0
Nero
Online Services
Panda Security
Photoreflex
Pinnacle
Python
Realtek
Reference Assemblies
SFR
SMINST
SUPERAntiSpyware
Temp
Trend Micro
Uninstall Information
Winamp
Windows Calendar
Windows Collaboration
Windows Defender
Windows Mail
Windows Media Player
Windows NT
Windows Photo Gallery
Windows Portable Devices
Windows Sidebar
WinRAR

¤¤¤¤¤¤¤¤¤¤ Files/folders :

C:\Windows\System32\EXPLORER.exe
C:\Windows\System32\regedit.exe

¤¤¤¤¤¤¤¤¤¤ Keys :


=========
Rootkits
=========

driver loading error catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-12 21:35:49
Windows 6.0.6002 Service Pack 2 WOW64 NTFS

scanning hidden files ...

IPC error: 2 Le fichier spécifié est introuvable.
C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 3744 bytes
C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 3744 bytes
C:\Windows\System32\ActiveDRV.txt 47 bytes
C:\Windows\System32\EventProviders
C:\Windows\System32\EventProviders\de-de
C:\Windows\System32\EventProviders\de-de\spcmsg.dll.mui 5632 bytes executable
C:\Windows\System32\EventProviders\en-us
C:\Windows\System32\EventProviders\en-us\spcmsg.dll.mui 5120 bytes executable
C:\Windows\System32\EventProviders\es-es
C:\Windows\System32\EventProviders\es-es\spcmsg.dll.mui 5632 bytes executable
C:\Windows\System32\EventProviders\fr-fr
C:\Windows\System32\EventProviders\fr-fr\spcmsg.dll.mui 5632 bytes executable
C:\Windows\System32\EventProviders\ja-jp
C:\Windows\System32\EventProviders\ja-jp\spcmsg.dll.mui 4608 bytes executable
C:\Windows\System32\EventProviders\spcmsg.dll 14336 bytes executable
C:\Windows\System32\LocalGroupAdminAdd.log 15 bytes
C:\Windows\System32\Local_LLU.log 49 bytes
C:\Windows\System32\AERTAC64.dll 163840 bytes executable
C:\Windows\System32\AERTAR64.dll 67072 bytes executable
C:\Windows\System32\amdpcom64.dll 52224 bytes executable
C:\Windows\System32\Ati2evxx.dll 317952 bytes executable
C:\Windows\System32\Ati2evxx.exe 949248 bytes executable
C:\Windows\System32\atiadlxx.dll 162304 bytes executable
C:\Windows\System32\ATIDEMGX.dll 442368 bytes executable
C:\Windows\System32\atidxx64.dll 3189760 bytes executable
C:\Windows\System32\atiedu64.dll 59392 bytes executable
C:\Windows\System32\atiicdxx.dat 180720 bytes
C:\Windows\System32\atimuixx.dll 11776 bytes executable
C:\Windows\System32\Boot\fr-FR
C:\Windows\System32\brcoinst.dll 19456 bytes executable
C:\Windows\System32\catroot
C:\Windows\System32\catroot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CaptureWizard-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 11055 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CaptureWizard-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 11925 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 260946 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 816142 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-LanguagePack-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ClipsInTheLibrary-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ClipsInTheLibrary-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9581 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Encoder-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 11039 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DesktopWindowManager-uDWM-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DFSR-ClientEdition-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9871 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DFSR-ClientEdition-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 10757 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DGT-Package-MiniLP~31bf3856ad364e35~amd64~fr-FR~7.0.6002.18107.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DGT-Package-TopLevel~31bf3856ad364e35~amd64~~7.0.6002.18107.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DGT-Package~31bf3856ad364e35~amd64~fr-FR~7.0.6002.18107.cat 14036 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DGT-Package~31bf3856ad364e35~amd64~~7.0.6002.18107.cat 64493 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Disk-Diagnosis-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9589 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Disk-Diagnosis-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 10169 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 8123 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GPUPipeline-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 8413 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package-MiniLP~31bf3856ad364e35~amd64~en-US~6.0.6002.18156.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package-MiniLP~31bf3856ad364e35~amd64~it-IT~6.0.6002.18156.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package-MiniLP~31bf3856ad364e35~amd64~pt-BR~6.0.6002.18156.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package-MiniLP~31bf3856ad364e35~amd64~th-TH~6.0.6002.18156.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package~31bf3856ad364e35~amd64~de-DE~6.0.6002.18156.cat 10508 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package~31bf3856ad364e35~amd64~hr-HR~6.0.6002.18156.cat 10508 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package~31bf3856ad364e35~amd64~nl-NL~6.0.6002.18156.cat 10508 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package~31bf3856ad364e35~amd64~sr-LATN-CS~6.0.6002.18156.cat 10508 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-CoreClientUAHP-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 38595 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-CoreClientUAHP-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 23493 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-Customization-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 8703 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-Customization-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9283 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-HomePremiumEdition~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 13343 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 65720 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 120148 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 58211 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 82524 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Indexing-Service-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 11933 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-LanguagePack~31bf3856ad364e35~amd64~fr-FR~8.0.6001.18702.cat 58700 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-Package-MiniLP~31bf3856ad364e35~amd64~en-US~8.0.6001.18702.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-Package-TopLevel~31bf3856ad364e35~amd64~~8.0.6001.18702.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-Package~31bf3856ad364e35~amd64~en-US~8.0.6001.18702.cat 7591 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-Package~31bf3856ad364e35~amd64~~8.0.6001.18702.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-RTM-Update~31bf3856ad364e35~amd64~en-US~8.0.6001.18702.cat 58700 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-RTM-Update~31bf3856ad364e35~amd64~~8.0.6001.18702.cat 388236 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-SP1-Update~31bf3856ad364e35~amd64~~8.0.6001.18702.cat 9347 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Links-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 8703 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Links-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 8123 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Format-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 21341 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Format-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 228341 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MediaCenter-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 24861 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MediaCenter-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 98375 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MediaPlayer-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 25465 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Basic-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 10177 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Basic-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 11329 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 11353 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 12215 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-SideShow-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 11643 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 53261 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 137938 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OpticalMediaDisc-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 10177 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OpticalMediaDisc-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 124242 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ParentalControls-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 21397 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ParentalControls-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 26053 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-AdhocMeetings-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-Full-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 16919 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-Full-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 22958 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 21349 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 28663 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-Foundation-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 12247 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-Foundation-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 12843 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-XPSServices-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 8413 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RasRip-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RasRip-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RDC-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 8413 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RDC-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9879 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RecDisc-SDP-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6001.18000.cat 13280 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RecDisc-SDP-Package~31bf3856ad364e35~amd64~~6.0.6001.18000.cat 18167 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RemoteAssistance-Package-Client~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 11957 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RemovableStorageManagement-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 12545 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RemovableStorageManagement-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 14027 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SampleContent-Movies-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 10733 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SampleContent-Music-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 14793 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ServicingBaseline-HomePremium-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 8703 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Shell-InboxGames-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 13971 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Shell-InboxGames-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 18353 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 10757 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 12803 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SimpleTCP-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SimpleTCP-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9291 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SNMP-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 14293 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SNMP-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 30879 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SystemRestore-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 12545 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SystemRestore-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 18638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-TabletPC-OC-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 28163 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Client-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Client-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9291 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Server-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 10177 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Server-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 11047 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-TFTP-Client-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-TFTP-Client-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-UIRibbon-Package-MUI-MiniLP~31bf3856ad364e35~amd64~fr-FR~7.0.6002.18108.cat 7591 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-UIRibbon-Package-MUI~31bf3856ad364e35~amd64~fr-FR~7.0.6002.18108.cat 10508 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-UIRibbon-Package-TopLevel~31bf3856ad364e35~amd64~~7.0.6002.18108.cat 7591 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-UIRibbon-Package~31bf3856ad364e35~amd64~~7.0.6002.18108.cat 12838 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-VistaServicePack-SysHiper-SP1-Package~31bf3856ad364e35~amd64~~6.0.6002.18005.cat 9918 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-VistaServicePack-UninstallRemoval-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6001.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-VistaServicePack-UninstallRemoval-Package~31bf3856ad364e35~amd64~~6.0.6001.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Networking-MPSSVC-Rules-HomePremiumEdition-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 14503 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat 6106074 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntexe.cat 221046 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat 1052954 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntph.cat 1139256 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntprint.cat 17534 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem10.cat 8542 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem11.cat 10735 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem12.cat 10806 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem13.cat 8542 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem14.cat 10701 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem15.cat 8176 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_12_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15328 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_12_for_KB948465~31bf3856ad364e35~amd64~fr-FR~6.0.1.18005.cat 42143 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_12_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 9338 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_12_for_KB972036~31bf3856ad364e35~amd64~~6.0.2.0.cat 26637 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_12_for_KB973917~31bf3856ad364e35~amd64~~6.0.1.2.cat 9324 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_130_for_KB972145~31bf3856ad364e35~amd64~~6.0.1.5.cat 23253 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_131_for_KB972145~31bf3856ad364e35~amd64~~6.0.1.5.cat 12026 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_13_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_13_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12104 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_13_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 19452 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_13_for_KB948465~31bf3856ad364e35~amd64~fr-FR~6.0.1.18005.cat 13171 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_13_for_KB973917~31bf3856ad364e35~amd64~~6.0.1.2.cat 13447 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_140_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 9658 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_143_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 18001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_144_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 10849 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_14_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12684 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB948465~31bf3856ad364e35~amd64~fr-FR~6.0.1.18005.cat 59341 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 33180 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB950582~31bf3856ad364e35~amd64~~6.0.1.1.cat 12106 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB958483~31bf3856ad364e35~amd64~~6.0.1.2.cat 27261 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB958623~31bf3856ad364e35~amd64~~6.0.1.1.cat 10265 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB973917~31bf3856ad364e35~amd64~~6.0.1.2.cat 10515 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_17_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_17_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 101163 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_19_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12394 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_19_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12692 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_19_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15328 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_19_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 11384 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_19_for_KB970430~31bf3856ad364e35~amd64~~6.0.1.6.cat 9658 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB905866~31bf3856ad364e35~amd64~~6.0.36.0.cat 10834 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12410 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-XPSServices-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 10161 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RemoteAssistance-Package-Client~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 14019 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Sidebar-Killbits-SDP-Package~31bf3856ad364e35~amd64~~6.0.6001.18000.cat 11218 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-TabletPC-OC-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 73416 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-VistaSP1CEIP-Package~31bf3856ad364e35~amd64~~6.0.6001.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem16.cat 8604 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem34.cat 8164 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem52.cat 10913 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_20_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_20_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 13140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_210_for_KB970430~31bf3856ad364e35~amd64~~6.0.1.6.cat 10834 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_218_for_KB970430~31bf3856ad364e35~amd64~~6.0.1.6.cat 9658 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_21_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_21_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_21_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 13588 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_21_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 10216 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_229_for_KB972145~31bf3856ad364e35~amd64~~6.0.1.5.cat 16150 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_22_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_22_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 43050 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_22_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12684 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_22_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15328 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_22_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 10804 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_22_for_KB972145~31bf3856ad364e35~amd64~~6.0.1.5.cat 27362 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_239_for_KB972145~31bf3856ad364e35~amd64~~6.0.1.5.cat 27377 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_23_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_23_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12402 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_23_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_24_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 15296 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_24_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_24_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_25_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_25_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 17452 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_25_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12104 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_25_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 15656 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12394 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15328 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 169076 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 20434 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB973917~31bf3856ad364e35~amd64~~6.0.1.2.cat 14623 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_277_for_KB970653~31bf3856ad364e35~amd64~~6.0.1.0.cat 10500 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_277_for_KB976098~31bf3856ad364e35~amd64~~6.0.1.1.cat 10515 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_27_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_29_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 28908 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_29_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_29_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 13588 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_29_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 17986 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_29_for_KB973917~31bf3856ad364e35~amd64~~6.0.1.2.cat 10500 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11814 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 11806 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_31_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 13588 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_320_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 7917 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_321_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 7917 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_322_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 7917 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_32_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_32_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 43428 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_32_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 15632 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_32_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_35_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12104 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_35_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11508 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_35_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_35_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 44552 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_36_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_36_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_36_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 19048 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_36_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_36_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 16763 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_39_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 19514 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_39_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11508 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_39_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_39_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 14316 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB905866~31bf3856ad364e35~amd64~~6.0.36.0.cat 10834 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12394 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_41_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15328 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_41_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 33259 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11814 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 27046 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 170036 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB949246~31bf3856ad364e35~amd64~~6.0.6001.3053.cat 205495 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB950582~31bf3856ad364e35~amd64~~6.0.1.1.cat 87382 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB958623~31bf3856ad364e35~amd64~~6.0.1.1.cat 85541 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_43_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_17_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12104 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_189_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 7917 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_19_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 36800 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB951376~31bf3856ad364e35~amd64~~6.0.1.1.cat 14184 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB954459~31bf3856ad364e35~amd64~~6.0.1.2.cat 14764 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB959130~31bf3856ad364e35~amd64~~6.0.1.0.cat 11731 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB970710~31bf3856ad364e35~amd64~~6.0.1.1.cat 19646 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB973874~31bf3856ad364e35~amd64~~8.0.1.0.cat 10510 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_20_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 370521 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_23_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 16196 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_27_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 20272 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-BRCpl-Premium-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9879 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-AdhocMeetings-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 13423 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_29_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_41_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 53684 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_60_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 22863 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB950124_client_1~31bf3856ad364e35~amd64~~6.0.1.0.cat 10640 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB957095~31bf3856ad364e35~amd64~~6.0.1.0.cat 10640 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB971657_client_2~31bf3856ad364e35~amd64~~6.0.1.0.cat 7902 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_46_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 225446 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_46_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_46_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 12270 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_47_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_47_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 112912 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_47_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15328 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_47_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 13140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_47_for_KB952154~31bf3856ad364e35~amd64~~6.0.2.0.cat 11518 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_48_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_50_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 15608 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_50_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_50_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 10216 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_51_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_51_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 14730 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_51_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_51_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 30234 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_52_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_52_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 24452 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_52_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 32083 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_52_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 98263 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_53_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_53_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_53_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 36211 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_54_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_54_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 103913 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_54_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 10640 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_55_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 10640 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_55_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 14646 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_56_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_56_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 12858 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 15946 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 12882 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB952154~31bf3856ad364e35~amd64~~6.0.2.0.cat 11518 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_58_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_58_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 25064 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_58_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 13736 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_59_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_59_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 15358 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_59_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 17860 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB905866~31bf3856ad364e35~amd64~~6.0.36.0.cat 10834 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_60_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 10804 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_61_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 22688 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_62_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 13280 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_62_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 10812 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_64_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 15358 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_64_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 11376 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_65_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 10796 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_66_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12676 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_67_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12104 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_67_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 9918 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_68_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 15664 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_68_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 18690 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_69_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 14198 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_69_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 14018 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12700 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB947562~31bf3856ad364e35~amd64~~6.0.1.1.cat 26428 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB948465~31bf3856ad364e35~amd64~fr-FR~6.0.1.18005.cat 13486 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 11921 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB949246~31bf3856ad364e35~amd64~~6.0.6001.3053.cat 205495 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB949247~31bf3856ad364e35~amd64~~6.0.6001.2123.cat 83187 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB952069~31bf3856ad364e35~amd64~~6.0.1.0.cat 100342 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB954366~31bf3856ad364e35~amd64~~6.0.1.3.cat 29360 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB956572~31bf3856ad364e35~amd64~~6.0.1.5.cat 35665 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB957388~31bf3856ad364e35~amd64~~6.0.1.2.cat 30451 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB961371~31bf3856ad364e35~amd64~~6.0.1.4.cat 10834 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_82_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 11806 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_83_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 13562 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_83_for_KB958483~31bf3856ad364e35~amd64~~6.0.1.2.cat 10845 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_84_for_KB952154~31bf3856ad364e35~amd64~~6.0.2.0.cat 11518 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_84_for_KB958481~31bf3856ad364e35~amd64~~6.0.1.0.cat 15723 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_87_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 10514 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_88_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 12882 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_89_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 22823 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 15004 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 17479 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB948465~31bf3856ad364e35~amd64~fr-FR~6.0.1.18005.cat 11392 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 11400 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB948610~31bf3856ad364e35~amd64~~6.0.6001.2123.cat 68239 bytes
C:\W
0
Réponse 48 / 58
Utilisateur anonyme
 
Bonjour,
Fais ça si ce n'est pas déjà fais : https://forums.commentcamarche.net/forum/affich-15494650-probleme-explorateur-windows-sous-vista?page=3#95
0
Réponse 49 / 58
Utilisateur anonyme
 
J'ai rien dit !
0
jéjé
 
salut,

voilà le scan complet de Dr.web

DesactivUac.exe C:\Documents and Settings\jerome\Desktop\sécurité Probablement MULDROP.Trojan
DesactivUac.exe C:\Users\jerome\Desktop\sécurité Probablement MULDROP.Trojan
0
Réponse 50 / 58
Utilisateur anonyme
 
Ce n'est rien,

On recommence,
Télécharge Random's System Information Tool (RSIT) : http://images.malwareremoval.com/random/RSIT.exe par random/random et sauvegarde-le sur ton Bureau.

Important (Sous Vista)

tu dois exécuter RSIT avec les droits d'administrateur, pour cela Clic droit sur RSIT et "Lances en tant qu'administrateur"

==> Double-clique sur RSIT.exe afin de lancer RSIT.
==> Clique sur Continue à l'écran Disclaimer.
==> Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.
==>Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.

==> Poste le contenu des deux rapports ==> log.txt (<==qui sera affiché) ainsi que de info.txt (<==qui sera réduit dans la Barre des Tâches).

Note : Les deux rapports sont également sauvegardés %systemroot%\rsit
0
jéjé
 
les voilà

Logfile of random's system information tool 1.06 (written by random/random)
Run by jerome at 2009-12-13 09:38:30
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
System drive C: has 501 GB (84%) free of 596 GB
Total RAM: 4094 MB (40% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:38:36, on 13/12/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe
C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\F-Secure\common\FSM32.EXE
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\F-Secure\FSGUI\fsguidll.exe
C:\Program Files (x86)\SFR\Media Center\httpd\httpd.exe
C:\Program Files (x86)\SFR\Media Center\httpd\httpd.exe
C:\Windows\SysWOW64\conime.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWow64\Macromed\Flash\FlashUtil10a.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\jerome\Desktop\RSIT.exe
C:\Program Files (x86)\trend micro\jerome.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files (x86)\google\googletoolbar1.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files (x86)\google\googletoolbar1.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
O4 - HKLM\..\Run: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files (x86)\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files (x86)\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Neuf Media Center] "C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Google Search - res://C:\Program Files (x86)\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Pages liées - res://C:\Program Files (x86)\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://C:\Program Files (x86)\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files (x86)\Google\GoogleToolbar1.dll/cmcache.html
O13 - Gopher Prefix:
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files (x86)\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files (x86)\F-Secure\Common\FNRB32.EXE
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files (x86)\F-Secure\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files (x86)\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files (x86)\F-Secure\Common\FSMA32.EXE
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Unknown owner - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PCLEPCI - Pinnacle Systems GmbH - C:\Windows\SysWOW64\drivers\pclepci.sys
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
0
Réponse 51 / 58
Utilisateur anonyme
 
Bon, je vais a un match de hand fais ça :

1Double-clique sur OTMoveIt.exe pour le lancer.
Assure toi que la case Unregister Dll's and Ocx's soit bien cochée
copie la liste qui se trouve en gras ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.
C:\Windows\system32\IEDFix.C.exe
C:\Windows\system32\Agent.OMZ.Fix.exe
C:\Windows\system32\o4Patch.exe

Et fait MoveIt!

Montre le rapport

2. Fais un scan complet de ton antivirus F-Secure et montre le rapport !

Je reviens vers 14H, a+
0
jéjé
 
ok à cet aprem
0
jéjé > jéjé
 
OTM ok

C:\Windows\system32\IEDFix.C.exe moved successfully.
C:\Windows\system32\Agent.OMZ.Fix.exe moved successfully.
C:\Windows\system32\o4Patch.exe moved successfully.

Created on 12/13/2009 10:10:26
0
jéjé > jéjé
 
rapport F-Secure

Rapport d'analyse
dimanche 13 décembre 2009 10:12:14 - 10:57:06
Nom de l'ordinateur: PC-JEROME
Type d'analyse: Effectuer une analyse complète de l'ordinateur
Cible : C:\ D:\ + système


--------------------------------------------------------------------------------

Résultat
Aucun antiprogramme détecté




--------------------------------------------------------------------------------

Statistiques
Analysés:
Fichiers: 85772
Non analysés: 15
Résultat:
Virus: 0
Spyware: 0
Eléments suspects: 0
Programme à risque: 0
Actions:
Nettoyés: 0
Renommés: 0
Supprimés: 0
Quarantaine: 0
Echec: 0
Secteurs d'amorçage:
Analysés: 3
Infectés: 0
Eléments suspects: 0
Nettoyés: 0
Fichiers non analysés:
Erreur d'ouverture du fichier (cliquez ici pour plus d'infos) C:\PAGEFILE.SYS
Erreur d'ouverture du fichier (cliquez ici pour plus d'infos) C:\WINDOWS\TASKS\PCDRSCHEDULEDMAINTENANCE.JOB
Erreur d'ouverture du fichier (cliquez ici pour plus d'infos) C:\WINDOWS\SYSTEM32\SYSPREP\PANTHER\DIAGERR.XML
Erreur d'ouverture du fichier (cliquez ici pour plus d'infos) C:\WINDOWS\SYSTEM32\SYSPREP\PANTHER\DIAGWRN.XML
Erreur d'ouverture du fichier (cliquez ici pour plus d'infos) C:\WINDOWS\SYSTEM32\CATROOT2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\CATDB
Erreur d'ouverture du fichier (cliquez ici pour plus d'infos) C:\WINDOWS\SYSTEM32\CATROOT2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\CATDB
Erreur d'ouverture du fichier (cliquez ici pour plus d'infos) C:\WINDOWS\PANTHER\UNATTENDGC\DIAGERR.XML
Erreur d'ouverture du fichier (cliquez ici pour plus d'infos) C:\WINDOWS\PANTHER\UNATTENDGC\DIAGWRN.XML
L'analyse de C:\Users\jerome\Documents\divers\logiciels\F-Secure Anti-Virus+serial\F-Secure Anti-Virus 7.exe a été interrompue. [F-Secure AVP]
Impossible d'ouvrir le fichier dans l'archive C:\USERS\JEROME\APPDATA\ROAMING\LIMEWIRE\MOZILLA-PROFILE\CACHE\_CACHE_001_.
Impossible d'ouvrir le fichier dans l'archive C:\USERS\JEROME\APPDATA\ROAMING\LIMEWIRE\MOZILLA-PROFILE\CACHE\_CACHE_002_.
Impossible d'ouvrir le fichier dans l'archive C:\USERS\JEROME\APPDATA\ROAMING\LIMEWIRE\MOZILLA-PROFILE\CACHE\_CACHE_003_.
Erreur d'ouverture du fichier (cliquez ici pour plus d'infos) C:\USERS\JEROME\APPDATA\LOCAL\MICROSOFT\WINDOWS DEFENDER\FILETRACKER\{1FC7659B-B0DD-4D41-A5CA-49BA8C88C5E6}
Erreur d'ouverture du fichier (cliquez ici pour plus d'infos) C:\USERS\JEROME\APPDATA\LOCAL\MICROSOFT\WINDOWS DEFENDER\FILETRACKER\{2530A966-3EC4-463F-97F7-7CE94884D74B}
Impossible d'ouvrir le fichier dans l'archive _0E7ECA2285A84F308A7168FC357C3E0A.


--------------------------------------------------------------------------------

Options
Version des définitions:
Virus: 2009-12-13_03
Spyware: 2009-12-13_03
Moteurs d'analyse :
F-Secure AVP: 7.00.171, 2009-12-13
F-Secure Libra: 2.04.05, 2009-12-12
F-Secure Orion: 1.02.41, 2009-12-13
F-Secure Draco: 1.01.00, 2009-06-17
Options d'analyse :
Analyser les fichiers définis : COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML ANI AVB BAT CEO CMD JOB JPG LSP MAP MHT MIF PHP POT SWF WMF NWS TAR TGZ ZIP JAR ARJ LZH TAR TGZ GZ CAB RAR BZ2 HQX
Analyser le contenu des archives
Actions:
Virus: Interroger après analyse
Spyware: Interroger après analyse

--------------------------------------------------------------------------------

Erreur d'informations
Une erreur "Impossible d'ouvrir le fichier" s'est produite :
Le message d'erreur "Impossible d'ouvrir le fichier" signifie que le moteur d'analyse n'a pas pu ouvrir de fichier et que ce dernier n'a pas pu être analysé. Vous pouvez généralement ignorer ce message d'erreur car il peut être dû à de nombreuses causes autres qu'une menace de sécurité, notamment :
Le fichier est un fichier système. Par principe, les fichiers système sont protégés par le système d'exploitation. Dans ce cas, ignorez le message.
Vous n'êtes pas autorisé à lire le fichier. Pour analyser le fichier, connectez-vous avec un compte utilisateur disposant des autorisations suffisantes (le compte administrateur de l'ordinateur par exemple) et réexécutez l'analyse.
Le fichier était utilisé par une application pendant la tentative d'analyse. Pour l'analyser, fermez toutes les applications et réessayez.
0
Réponse 52 / 58
Utilisateur anonyme
 
Bon, reprend le fix (List&Kill'em)

▶ Relance List&Kill'em comme tu as fait pour l'option 1 (soit en clic droit pour vista),

mais cette fois-ci :

▶ choisis l'option 2 = Mode Destruction

laisse travailler l'outil.

en fin de scan un rapport s'ouvre

▶ colle le contenu dans ta réponse
0
jéjé
 
rapport kill'em

Kill'em by g3n-h@ckm@n 1.1.5.1

User : jerome (Administrateurs) # PC-JEROME
Update on 11/12/2009 by g3n-h@ckm@n ::::: 20:30
Start at: 15:26:22 | 13/12/2009
Contact : g3n-h@ckm@n sur CCM

AMD Athlon(tm) 7550 Dual-Core Processor
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 64-bit) # Service Pack 2
Internet Explorer 8.0.6001.18865
Windows Firewall Status : Disabled
AV : F-Secure Client Security 7.12 7.12 [ Enabled | Updated ]
FW : F-Secure Client Security 7.12[ Enabled ]7.12

C:\ -> Disque fixe local | 581,65 Go (489,77 Go free) [HP] | NTFS
D:\ -> Disque fixe local | 14,52 Go (2,04 Go free) [FACTORY_IMAGE] | NTFS
E:\ -> Disque CD-ROM
F:\ -> Disque amovible


¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

C:\Windows\SysWOW64\svchost.exe 304
C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe 2080
C:\Program Files (x86)\F-Secure\Anti-Virus\fsgk32st.exe 2120
C:\Program Files (x86)\F-Secure\Common\FSMA32.EXE 2204
C:\Program Files (x86)\F-Secure\Anti-Virus\FSGK32.EXE 2212
C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe 2232
C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe 2308
C:\Program Files (x86)\F-Secure\Common\FSMB32.EXE 2356
C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe 2660
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe 2724
C:\Program Files (x86)\F-Secure\common\FSM32.EXE 2780
C:\Program Files (x86)\Java\jre6\bin\jusched.exe 2836
C:\Program Files (x86)\F-Secure\Anti-Virus\fssm32.exe 2528
C:\Program Files (x86)\F-Secure\Common\FCH32.EXE 2656
C:\Program Files (x86)\F-Secure\Common\FAMEH32.EXE 3100
C:\Program Files (x86)\F-Secure\Common\FNRB32.EXE 3120
C:\Program Files (x86)\F-Secure\Anti-Virus\fsqh.exe 3136
C:\Program Files (x86)\F-Secure\FSAUA\program\fsaua.exe 3156
C:\Program Files (x86)\F-Secure\Common\FIH32.EXE 3192
C:\Program Files (x86)\F-Secure\FWES\Program\fsdfwd.exe 3228
C:\Program Files (x86)\F-Secure\FSGUI\fsguidll.exe 3492
C:\Program Files (x86)\F-Secure\Anti-Virus\fsav32.exe 3332
C:\Program Files (x86)\SFR\Media Center\httpd\httpd.exe 4248
C:\Program Files (x86)\SFR\Media Center\httpd\httpd.exe 4288
C:\Windows\SysWow64\Macromed\Flash\FlashUtil10a.exe 884
C:\Users\jerome\Desktop\List_Kill'em.scr 1252
C:\Windows\SysWOW64\conime.exe 840
C:\Windows\SysWOW64\cmd.exe 1160
C:\Users\jerome\AppData\Local\Temp\CAEE.tmp\pv.exe 1372

Detections :
==========


¤¤¤¤¤¤¤¤¤¤ Files/folders :

"C:\Windows\System32\EXPLORER.exe"
"C:\Windows\system32\regedit.exe"


¤¤¤¤¤¤¤¤¤¤ Files/folders deleted :

Quarantine :


==============
host file OK !
==============

========
Registry
========

============
Disk Cleaned
============

================
Prefetch cleaned
================



¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
0
Réponse 53 / 58
Utilisateur anonyme
 
Ok, c'est beau, refait un RSIT stp
0
jéjé
 
rsit

Logfile of random's system information tool 1.06 (written by random/random)
Run by jerome at 2009-12-13 15:37:25
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
System drive C: has 502 GB (84%) free of 596 GB
Total RAM: 4094 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:37:26, on 13/12/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe
C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\F-Secure\common\FSM32.EXE
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\F-Secure\FSGUI\fsguidll.exe
C:\Program Files (x86)\SFR\Media Center\httpd\httpd.exe
C:\Program Files (x86)\SFR\Media Center\httpd\httpd.exe
C:\Windows\SysWow64\Macromed\Flash\FlashUtil10a.exe
C:\Windows\SysWOW64\conime.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\jerome\Desktop\RSIT.exe
C:\Program Files (x86)\trend micro\jerome.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/...
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files (x86)\google\googletoolbar1.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files (x86)\google\googletoolbar1.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
O4 - HKLM\..\Run: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files (x86)\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files (x86)\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Neuf Media Center] "C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Google Search - res://C:\Program Files (x86)\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Pages liées - res://C:\Program Files (x86)\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://C:\Program Files (x86)\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files (x86)\Google\GoogleToolbar1.dll/cmcache.html
O13 - Gopher Prefix:
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files (x86)\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files (x86)\F-Secure\Common\FNRB32.EXE
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files (x86)\F-Secure\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files (x86)\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files (x86)\F-Secure\Common\FSMA32.EXE
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Unknown owner - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PCLEPCI - Pinnacle Systems GmbH - C:\Windows\SysWOW64\drivers\pclepci.sys
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
0
Réponse 54 / 58
Utilisateur anonyme
 
Refait un ToolsCleaner2 Recherche et Suppression et montre le rapport !
0
jéjé
 
et voilà

[ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\Rsit: trouvé !
C:\Program Files (x86)\Trend Micro\HijackThis.exe: trouvé !
C:\Program Files (x86)\Trend Micro\hijackthis.log: trouvé !
C:\Users\jerome\AppData\Local\Temp\CAEE.tmp\catchme.exe: trouvé !
C:\Users\jerome\AppData\Local\Temp\CAEE.tmp\mbr.exe: trouvé !
C:\Users\jerome\Desktop\Rsit.exe: trouvé !
C:\Users\jerome\Desktop\catchme.log: trouvé !

---------------------------------
--> Suppression:

C:\Program Files (x86)\Trend Micro\HijackThis.exe: supprimé !
C:\Users\jerome\AppData\Local\Temp\CAEE.tmp\catchme.exe: supprimé !
C:\Program Files (x86)\Trend Micro\hijackthis.log: supprimé !
C:\Users\jerome\AppData\Local\Temp\CAEE.tmp\mbr.exe: supprimé !
C:\Users\jerome\Desktop\Rsit.exe: supprimé !
C:\Users\jerome\Desktop\catchme.log: supprimé !
C:\Rsit: supprimé !
0
Réponse 55 / 58
Utilisateur anonyme
 
Là, par contre, c'est vraiment niquel, fais du Cleaner et du nettoyage de registre pour que ton ordi soit bien !
0
jéjé
 
et après ça c'est bon? plus rien? c'est cool
0
Réponse 56 / 58
Utilisateur anonyme
 
Oui, cette fois, c'est bon, ton pc est rapide ??
0
jéjé
 
plus rapide il me semble mais surtout il re-fonctionne correctement grace à toi!!! MERCI

faut-il que je garde sur mon bureau tous les outils qu'on a utilisés??
0
Réponse 57 / 58
Utilisateur anonyme
 
Supprime les tous a part Cleaner-Fix.bat que tu pourra utiliser pour supprimer tes Temp !
0
jéjé
 
OK MERCI BEAUCOUP
0
Réponse 58 / 58
Utilisateur anonyme
 
Je suis en train de faire un site sur l'informatique avec un forum, si tu as un autre prob, tu posteras la bas

Mon site : http://windows-and-co.franceserv.com/
0
jéjé
 
Ca roule
jgarde ton site sous l'coude
bon fin de we à toi
0