Sujet Précédent Sujet Suivant

Virus beagle?

sebuuh Messages postés 28 Statut Membre -  
sebuuh Messages postés 28 Statut Membre -
Bonjour,

Voici plusieurs que mon PC présente tous les symptomes d'une infection par un virus du type Beagle, à savoir des fenêtres qui s'ouvrent avec ce message"... n'est pas une application win35..."

J'ai alors suivi les conseils de ce post:
https://www.commentcamarche.net/faq/9889-comment-supprimer-le-virus-beagle-bagle

Mais j'ai toujours le problème et je suis incapable de lancer certains programmes de mon PC....

QQn pour m'aider?

Voici le rapport Findykill:

############################## | FindyKill V5.031 |

# User : Sebastien (Administrateurs) # PC-DE-SEBASTIEN
# Update on 03/02/2010 by El Desaparecido
# Start at: 00:21:07 | 04/02/2010
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Contact : FindyKill.Contact@gmail.com

# AMD Phenom(tm) 8450 Triple-Core Processor
# Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6001 64-bit) # Service Pack 1
# Internet Explorer 8.0.6001.18882
# Windows Firewall Status : Disabled

# C:\ # Disque fixe local # 454,28 Go (56,14 Go free) [HP] # NTFS
# D:\ # Disque fixe local # 11,48 Go (1,54 Go free) [FACTORY_IMAGE] # NTFS
# E:\ # Disque CD-ROM
# F:\ # Disque amovible
# G:\ # Disque amovible
# H:\ # Disque amovible
# I:\ # Disque amovible
# J:\ # Disque CD-ROM
# K:\ # Disque amovible # 967,22 Mo (61,28 Mo free) [KEY SHUE] # FAT

############################## | Processus actifs |

C:\Windows\SysWOW64\runonce.exe
C:\Windows\SysWOW64\conime.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
C:\Program Files (x86)\Canal\Canal Widget\VOD\CanalPlus.VOD.exe
C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
C:\Windows\SysWOW64\svchost.exe
C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe

################## | C: |

Supprimé ! K:\autorun.inf

################## | C:\Windows |

################## | C:\Windows\Prefetch |

################## | C:\Windows\system32 |

################## | C:\Windows\system32\drivers |

################## | C:\Users\Sebastien\AppData\Roaming |

################## | Autres suppressions ... |

################## | Zip File ... |

################## | Temporary Internet Files |

################## | Registre |

################## | Etat |

# Mode sans echec : OK

# Affichage des fichiers cachés : OK

# Uac : OK

# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 2 ( Good = 2 | Bad = 4 )
# Wlansvc -> Start = 2 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# windefend -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )

################## | PEH |

################## | Upload |

Veuillez envoyer le fichier : C:\FindyKill_Upload_Me_PC-de-Sebastien.zip : https://www.ionos.fr/?affiliate_id=77097
Merci pour votre contribution .

################## | ! Fin du rapport # FindyKill V5.031 ! |
A voir également:

33 réponses

Précédent
  • 1
  • 2
Réponse 21 / 33
moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
ok arrêtes

je ferai des recherches ce soir sur ce PROPSYS.dll
0
Réponse 22 / 33
sebuuh Messages postés 28 Statut Membre
 
enfin combofix s'est lancé et.... message d'erreur:

error - win32 only

OS incompatible. Combofix ne fonctionne que pour windows 2000 et XP.
0
Réponse 23 / 33
moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
j'ai oublié...ton 64 bits pas compatible !

Desactive ton antivirus le temps de la manip ainsi que ton parefeu si présent(car il est detecté a tort comme infection)

▶ Télécharge et installe List&Kill'em et enregistre le sur ton bureau
http://sd-1.archive-host.com/membres/up/829108531491024/List_Killem_Install.exe
double clique ( clic droit "executer en tant qu'administrateur" pour Vista/Seven ) sur le raccourci sur ton bureau pour lancer l'installation

coche la case "creer une icone sur le bureau"

une fois terminée , clic sur "terminer" et le programme se lancer seul

choisis la langue puis choisis l'option 1 = Mode Recherche

▶ laisse travailler l'outil

à l'apparition de la fenetre blanche , c'est un peu long , c'est normal , le programme n'est pas bloqué.

un rapport du nom de catchme apparait sur ton bureau , ignore-le,ne le poste pas , mais ne le supprime pas pour l instant, le scan n'est pas fini.

▶ Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'ecran "COMPLETED"

tu peux supprimer le rapport catchme.log de ton bureau maintenant.

0
sebuuh
 
List'em by g3n-h@ckm@n 1.2.2.0

User : Sebastien (Administrateurs)
Update on 03/02/2010 by g3n-h@ckm@n ::::: 16.30
Start at: 17:02:13 | 04/02/2010
Contact : https://forums.commentcamarche.net/forum/virus-securite-7

AMD Phenom(tm) 8450 Triple-Core Processor
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6001 64-bit) # Service Pack 1
Internet Explorer 8.0.6001.18882
Windows Firewall Status : Disabled

C:\ -> Disque fixe local | 454,28 Go (55,19 Go free) [HP] | NTFS
D:\ -> Disque fixe local | 11,48 Go (1,54 Go free) [FACTORY_IMAGE] | NTFS
E:\ -> Disque CD-ROM
F:\ -> Disque amovible
G:\ -> Disque amovible
H:\ -> Disque amovible
I:\ -> Disque amovible
J:\ -> Disque CD-ROM
K:\ -> Disque amovible | 967,22 Mo (61,31 Mo free) [KEY SHUE] | FAT

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
C:\Windows\SysWOW64\svchost.exe
C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
C:\hp\kbd\kbd.exe
C:\Windows\SysWOW64\conime.exe
C:\Program Files (x86)\List_Kill'em\List_Kill'em.scr
C:\Windows\SysWOW64\cmd.exe
C:\Users\Sebastien\AppData\Local\Temp\2DB4.tmp\pv.exe

======================
Keys "Run"
======================
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Sidebar REG_SZ C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
MsnMsgr REG_SZ "C:\Program Files (x86)\Windows Live\Messenger\MsnMsgr.Exe" /background
ehTray.exe REG_SZ C:\Windows\ehome\ehTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
hpsysdrv REG_SZ c:\hp\support\hpsysdrv.exe
KBD REG_SZ C:\HP\KBD\KbdStub.EXE
SunJavaUpdateSched REG_SZ "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"
HP Software Update REG_SZ c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
DT HPW REG_SZ "C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe" -HPW
Canal Widget REG_SZ "C:\Program Files (x86)\Canal\Canal Widget\Launcher.exe"
StartCCC REG_SZ "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
QuickTime Task REG_SZ "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
iTunesHelper REG_SZ "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
Adobe Reader Speed Launcher REG_SZ "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
Adobe ARM REG_SZ "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

=====================
Other Keys
=====================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
ConsentPromptBehaviorAdmin REG_DWORD 2 (0x2)
ConsentPromptBehaviorUser REG_DWORD 1 (0x1)
EnableInstallerDetection REG_DWORD 1 (0x1)
EnableLUA REG_DWORD 0 (0x0)
EnableSecureUIAPaths REG_DWORD 1 (0x1)
EnableVirtualization REG_DWORD 1 (0x1)
PromptOnSecureDesktop REG_DWORD 1 (0x1)
ValidateAdminCodeSignatures REG_DWORD 0 (0x0)
dontdisplaylastusername REG_DWORD 0 (0x0)
legalnoticecaption REG_SZ
legalnoticetext REG_SZ
scforceoption REG_DWORD 0 (0x0)
shutdownwithoutlogon REG_DWORD 1 (0x1)
undockwithoutlogon REG_DWORD 1 (0x1)
FilterAdministratorToken REG_DWORD 0 (0x0)
EnableUIADesktopToggle REG_DWORD 0 (0x0)
UacDisableNotify REG_DWORD 0 (0x0)

===============
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
NoDriveTypeAutoRun REG_DWORD 255 (0xff)
NoDriveAutoRun REG_DWORD 255 (0xff)
HonorAutoRunSetting REG_DWORD 0 (0x0)

===============
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
NoActiveDesktop REG_DWORD 1 (0x1)
ForceActiveDesktopOn REG_DWORD 0 (0x0)
NoActiveDesktopChanges REG_DWORD 0 (0x0)
NoDriveAutoRun REG_DWORD 255 (0xff)
NoDriveTypeAutoRun REG_DWORD 255 (0xff)
HonorAutoRunSetting REG_DWORD 0 (0x0)

===============
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
AppInit_DLLS REG_SZ

===============
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
Shell REG_SZ explorer.exe
Userinit REG_SZ C:\Windows\system32\userinit.exe,
VmApplet REG_SZ rundll32 shell32,Control_RunDLL "sysdm.cpl"
ReportBootOk REG_SZ 1
AutoRestartShell REG_DWORD 1 (0x1)
LegalNoticeCaption REG_SZ
LegalNoticeText REG_SZ
PowerdownAfterShutdown REG_SZ 0
ShutdownWithoutLogon REG_SZ 0
cachedlogonscount REG_SZ 10
forceunlocklogon REG_DWORD 0 (0x0)
passwordexpirywarning REG_DWORD 14 (0xe)
Background REG_SZ 0 0 0
DebugServerCommand REG_SZ no
WinStationsDisabled REG_SZ 0

===============

===============
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
0
Réponse 24 / 33
sebuuh
 
==============
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

===============
ActivX controls
===============
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\SapAcf
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{5D86DDB5-BDF9-441B-9E9E-D4730F4EE499}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}

===============
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{26923b43-4d38-484f-9b9e-de460746276c}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3af36230-a269-11d1-b5bf-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA855-CC51-11CF-AAFA-00AA00B6015F}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{45ea75a0-a269-11d1-b5bf-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f645220-306d-11d2-995d-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5fd399c0-a70a-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{630b1da0-b465-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{73FA19D0-2D75-11D2-995D-00C04F98BBC9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7C028AF8-F614-47B3-82DA-BA94E41B1089}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4340}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4383}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9381D8F2-0288-11D0-9501-00AA00B911A5}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C9E9A340-D1F1-11D0-821E-444553540600}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D27CDB6E-AE6D-11CF-96B8-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{de5aed00-a4bf-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E92B03AB-B707-11d2-9CBD-0000F87A369E}

==============
BHO :
======
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]

================
Internet Explorer :
================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ https://www.msn.com/fr-fr

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

========
Services
========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]

Ndisuio : 0x3
EapHost : 0x2
Wlansvc : 0x2
SharedAccess : 0x2
windefend : 0x2
wuauserv : 0x2
wscsvc : 0x2

=========
Atapi.sys
=========

%%%% HASHDEEP-1.0
%%%% size,md5,sha256,filename
## Invoked from: C:\Users\Sebastien\AppData\Local\Temp\2DB4.tmp
## C:\> hashdeep C:\Windows\Sysnative\Drivers\atapi.sys
##
22584,1898fae8e07d97f2f6c2d5326c633fac,62142e7b720c0a7fad36577ee985b5793cb395574a3eca9f2af613c0f889d39c,C:\Windows\Sysnative\Drivers\atapi.sys

%%%% HASHDEEP-1.0
%%%% size,md5,sha256,filename
## Invoked from: C:\Users\Sebastien\AppData\Local\Temp\2DB4.tmp
## C:\> hashdeep C:\Windows\Sysnative\Drivers\atapi.sys
##
22584,1898fae8e07d97f2f6c2d5326c633fac,62142e7b720c0a7fad36577ee985b5793cb395574a3eca9f2af613c0f889d39c,C:\Windows\Sysnative\Drivers\atapi.sys

Sources
=======

C:\Windows\SoftwareDistribution\Download\61da130e21aad3387c2fa3ca1d469de3\amd64_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_3b423ca9d7090b1e\atapi.sys
C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_3956c39dd9e73fd2\atapi.sys

Référence :
==========

Win XP_32b : a64013e98426e1877cb653685c5c0009
Win XP_SP2_32b : CDFE4411A69C224BD1D11B2DA92DAC51
Win XP_SP3_32b : 9F3A2F5AA6875C72BF062C712CFA2674
Vista_32b : e03e8c99d15d0381e02743c36afc7c6f
Vista_SP1_32b : 2d9c903dc76a66813d350a562de40ed9
Vista_SP2_32b : 1F05B78AB91C9075565A9D8A4B880BC4
Vista_SP2_64b : 1898FAE8E07D97F2F6C2D5326C633FAC
Windows 7_32b : 80C40F7FDFC376E4C5FEEC28B41C119E
Windows 7_64b : 02062C0B390B7729EDC9E69C680A6F3C

=======
Drive :
=======

¤¤¤¤¤¤¤¤¤¤ Files/folders :

Present !! : C:\Windows\system32\x3daudio1_0.dll
Present !! : C:\Windows\system32\x3daudio1_1.dll
Present !! : C:\Windows\system32\X3DAudio1_2.dll
Present !! : C:\Windows\system32\X3DAudio1_3.dll
Present !! : C:\Windows\system32\X3DAudio1_4.dll
Present !! : C:\Windows\system32\X3DAudio1_5.dll
Present !! : C:\Windows\system32\X3DAudio1_6.dll
Present !! : C:\Windows\system32\XInput9_1_0.dll
Present !! : C:\Windows\System32\SET2EFD.tmp
Present !! : C:\Windows\System32\SET3180.tmp
Present !! : C:\Windows\SysWow64\x3daudio1_0.dll
Present !! : C:\Windows\SysWow64\x3daudio1_1.dll
Present !! : C:\Windows\SysWow64\X3DAudio1_2.dll
Present !! : C:\Windows\SysWow64\X3DAudio1_3.dll
Present !! : C:\Windows\SysWow64\X3DAudio1_4.dll
Present !! : C:\Windows\SysWow64\X3DAudio1_5.dll
Present !! : C:\Windows\SysWow64\X3DAudio1_6.dll
Present !! : C:\Windows\SysWow64\XInput9_1_0.dll
Present !! : C:\Windows\SysWoW64\SET2EFD.tmp
Present !! : C:\Windows\SysWoW64\SET3180.tmp
Present !! : C:\Windows\Sysnative\x3daudio1_0.dll
Present !! : C:\Windows\Sysnative\x3daudio1_1.dll
Present !! : C:\Windows\Sysnative\X3DAudio1_2.dll
Present !! : C:\Windows\Sysnative\X3DAudio1_3.dll
Present !! : C:\Windows\Sysnative\X3DAudio1_4.dll
Present !! : C:\Windows\Sysnative\X3DAudio1_5.dll
Present !! : C:\Windows\Sysnative\X3DAudio1_6.dll
Present !! : C:\Windows\Sysnative\XInput9_1_0.dll
Present !! : C:\Windows\Sysnative\SET29F3.tmp
Present !! : C:\Windows\Sysnative\SET2BDA.tmp
Present !! : C:\Windows\Sysnative\SET4761.tmp
Present !! : C:\Windows\Sysnative\SET87E8.tmp
Present !! : C:\Users\Sebastien\AppData\Roaming\8062615.tmp

¤¤¤¤¤¤¤¤¤¤ Keys :

Present !! : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges
Present !! : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools
Present !! : HKLM\Software\Classes\TypeLib\{937936AF-28CA-4973-B8AE-F250406149A2}

============

driver loading error catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-04 17:08:50
Windows 6.0.6001 Service Pack 1 WOW64 NTFS

scanning hidden files ...

IPC error: 2 Le fichier spécifié est introuvable.
C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 3616 bytes
C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 3616 bytes
C:\Windows\System32\ActiveDRV.txt 47 bytes
C:\Windows\System32\EventProviders
C:\Windows\System32\EventProviders\de-de
C:\Windows\System32\EventProviders\de-de\spcmsg.dll.mui 5632 bytes executable
C:\Windows\System32\EventProviders\en-us
C:\Windows\System32\EventProviders\en-us\spcmsg.dll.mui 5120 bytes executable
C:\Windows\System32\EventProviders\es-es
C:\Windows\System32\EventProviders\es-es\spcmsg.dll.mui 5632 bytes executable
C:\Windows\System32\EventProviders\fr-fr
C:\Windows\System32\EventProviders\fr-fr\spcmsg.dll.mui 5632 bytes executable
C:\Windows\System32\EventProviders\ja-jp
C:\Windows\System32\EventProviders\ja-jp\spcmsg.dll.mui 4608 bytes executable
C:\Windows\System32\EventProviders\spcmsg.dll 14336 bytes executable
C:\Windows\System32\LocalGroupAdminAdd.log 15 bytes
C:\Windows\System32\Local_LLU.log 49 bytes
C:\Windows\System32\amdpcom64.dll 53248 bytes executable
C:\Windows\System32\atiadlxx.dll 302592 bytes executable
C:\Windows\System32\atibtmon.exe 118784 bytes executable
C:\Windows\System32\aticalcl64.dll 39936 bytes executable
C:\Windows\System32\aticaldd64.dll 4634112 bytes executable
C:\Windows\System32\aticalrt64.dll 43008 bytes executable
C:\Windows\System32\Boot\fr-FR
C:\Windows\System32\brcoinst.dll 19456 bytes executable
C:\Windows\System32\catroot
C:\Windows\System32\catroot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}
C:\Windows\System32\catroot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\1.CAT 6978 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\1.CAT 10557 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\2.CAT 10557 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\GEARAspiWDMx64.cat 8430 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CaptureWizard-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 11055 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CaptureWizard-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 11925 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 260946 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 816142 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-LanguagePack-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ClipsInTheLibrary-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ClipsInTheLibrary-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9581 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Encoder-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 11039 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DesktopWindowManager-uDWM-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DFSR-ClientEdition-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9871 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DFSR-ClientEdition-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 10757 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Disk-Diagnosis-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9589 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Disk-Diagnosis-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 10169 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 8123 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GPUPipeline-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 8413 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-BRCpl-Premium-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9879 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 14551 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GPUPipeline-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 10749 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Indexing-Service-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 13689 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MediaPlayer-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 121675 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-SideShow-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 14543 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~en-US~6.0.6000.16386.cat 27351 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-CoreClientUAHP-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 38595 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-CoreClientUAHP-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 23493 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-Customization-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 8703 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-Customization-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9283 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-HomePremiumEdition~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 13343 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 65720 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 120148 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 58211 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 82524 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Indexing-Service-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 11933 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-LanguagePack~31bf3856ad364e35~amd64~fr-FR~8.0.6001.18702.cat 58700 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-Package-MiniLP~31bf3856ad364e35~amd64~en-US~8.0.6001.18702.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-Package-TopLevel~31bf3856ad364e35~amd64~~8.0.6001.18702.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-Package~31bf3856ad364e35~amd64~en-US~8.0.6001.18702.cat 7591 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-Package~31bf3856ad364e35~amd64~~8.0.6001.18702.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-RTM-Update~31bf3856ad364e35~amd64~en-US~8.0.6001.18702.cat 58700 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-RTM-Update~31bf3856ad364e35~amd64~~8.0.6001.18702.cat 388236 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-SP1-Update~31bf3856ad364e35~amd64~~8.0.6001.18702.cat 9347 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Links-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 8703 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Links-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 8123 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Format-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 21341 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Format-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 228341 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MediaCenter-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 24861 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MediaCenter-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 98375 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MediaPlayer-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 25465 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Basic-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 10177 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Basic-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 11329 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 11353 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 12215 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-SideShow-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 11643 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 53261 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 137938 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OpticalMediaDisc-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 10177 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OpticalMediaDisc-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 124242 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ParentalControls-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 21397 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ParentalControls-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 26053 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-AdhocMeetings-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-Full-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 16919 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-Full-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 22958 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 21349 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 28663 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-Foundation-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 12247 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-Foundation-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 12843 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-XPSServices-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 8413 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RasRip-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RasRip-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RDC-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 8413 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RDC-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9879 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RecDisc-SDP-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6001.18000.cat 13280 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RecDisc-SDP-Package~31bf3856ad364e35~amd64~~6.0.6001.18000.cat 18167 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RemoteAssistance-Package-Client~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 11957 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RemovableStorageManagement-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 12545 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RemovableStorageManagement-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 14027 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SampleContent-Movies-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 10733 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SampleContent-Music-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 14793 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ServicingBaseline-HomePremium-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 8703 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Shell-InboxGames-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 13971 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Shell-InboxGames-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 18353 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 10757 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 12803 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SimpleTCP-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SimpleTCP-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9291 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SNMP-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 14293 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SNMP-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 30879 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SystemRestore-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 12545 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SystemRestore-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 18638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-TabletPC-OC-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 28163 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Client-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Client-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9291 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Server-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 10177 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Server-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 11047 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-TFTP-Client-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-TFTP-Client-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-VistaServicePack-SysHiper-SP1-Package~31bf3856ad364e35~amd64~~6.0.6002.18005.cat 9918 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-VistaServicePack-UninstallRemoval-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6001.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-VistaServicePack-UninstallRemoval-Package~31bf3856ad364e35~amd64~~6.0.6001.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Networking-MPSSVC-Rules-HomePremiumEdition-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 14503 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat 6106074 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntexe.cat 221046 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat 1052954 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntph.cat 1139256 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntprint.cat 19168 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem10.cat 8176 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem11.cat 8097 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem12.cat 8097 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem13.cat 8168 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem14.cat 10806 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem15.cat 8097 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_12_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15618 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_12_for_KB948465~31bf3856ad364e35~amd64~fr-FR~6.0.1.18005.cat 42143 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_12_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 9338 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_12_for_KB972036~31bf3856ad364e35~amd64~~6.0.2.0.cat 26637 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_12_for_KB973917~31bf3856ad364e35~amd64~~6.0.1.2.cat 9324 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_130_for_KB972145~31bf3856ad364e35~amd64~~6.0.1.5.cat 23253 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_131_for_KB972145~31bf3856ad364e35~amd64~~6.0.1.5.cat 12026 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_13_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_13_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12104 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_13_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 19742 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_13_for_KB948465~31bf3856ad364e35~amd64~fr-FR~6.0.1.18005.cat 13171 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_13_for_KB973917~31bf3856ad364e35~amd64~~6.0.1.2.cat 13447 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_140_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 9658 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_143_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 18001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_144_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 10849 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_14_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12684 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24430 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB948465~31bf3856ad364e35~amd64~fr-FR~6.0.1.18005.cat 59341 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 33180 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB950582~31bf3856ad364e35~amd64~~6.0.1.1.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB958483~31bf3856ad364e35~amd64~~6.0.1.2.cat 27261 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB958623~31bf3856ad364e35~amd64~~6.0.1.1.cat 10555 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB973917~31bf3856ad364e35~amd64~~6.0.1.2.cat 10515 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_17_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_17_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 101163 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_17_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12104 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_17_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 13878 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_17_for_KB948465~31bf3856ad364e35~amd64~fr-FR~6.0.1.18005.cat 127001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_17_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 268575 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_185_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 26968 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_186_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 19178 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_187_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 10849 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_19_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12394 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_19_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12692 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_19_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15618 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_19_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 11384 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_19_for_KB970430~31bf3856ad364e35~amd64~~6.0.1.6.cat 9658 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB905866~31bf3856ad364e35~amd64~~6.0.37.0.cat 10849 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12410 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 36800 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB937287~31bf3856ad364e35~amd64~~6.0.1.18000.cat 37077 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-XPSServices-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 10161 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RemoteAssistance-Package-Client~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 14019 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Sidebar-Killbits-SDP-Package~31bf3856ad364e35~amd64~~6.0.6001.18000.cat 11218 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-TabletPC-OC-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 73416 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-VistaSP1CEIP-Package~31bf3856ad364e35~amd64~~6.0.6001.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem16.cat 8172 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem34.cat 8168 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem51.CAT 673711 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem9.cat 10701 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_20_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24430 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_20_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 13140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_210_for_KB970430~31bf3856ad364e35~amd64~~6.0.1.6.cat 10834 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_218_for_KB970430~31bf3856ad364e35~amd64~~6.0.1.6.cat 9658 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_21_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_21_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_21_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 13878 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_21_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 10216 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_229_for_KB972145~31bf3856ad364e35~amd64~~6.0.1.5.cat 16150 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_22_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_22_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 43050 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_22_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12684 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_22_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15618 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_22_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 10804 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_22_for_KB972145~31bf3856ad364e35~amd64~~6.0.1.5.cat 27362 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_239_for_KB972145~31bf3856ad364e35~amd64~~6.0.1.5.cat 27377 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_23_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_23_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12402 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_23_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24430 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_24_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 15296 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_24_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_24_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24430 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_25_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_25_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 17452 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_25_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12104 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_25_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24430 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 15656 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12394 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15618 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 169076 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 20434 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB973917~31bf3856ad364e35~amd64~~6.0.1.2.cat 14623 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_277_for_KB970653~31bf3856ad364e35~amd64~~6.0.1.0.cat 10500 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_277_for_KB976098~31bf3856ad364e35~amd64~~6.0.1.1.cat 10515 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_27_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_29_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 28908 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_29_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_29_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 13878 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_29_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 17986 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_29_for_KB973917~31bf3856ad364e35~amd64~~6.0.1.2.cat 10500 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11814 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 11806 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 23986 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_31_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 13878 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_320_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 7917 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_321_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 7917 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_322_for_KB967723~31bf3856ad364e35~amd64~~6.0.1.7.cat 7917 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_32_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_32_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 43428 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_32_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 15632 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_32_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24430 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_33_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_33_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 13868 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_33_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15618 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_33_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 22968 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_34_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_34_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 16872 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_34_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 28344 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_34_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15618 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_35_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12104 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_35_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11508 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_35_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24430 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_35_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 44552 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_36_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_36_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_36_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 19048 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_36_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24430 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_36_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 16763 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_37_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_37_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 13878 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_37_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 18722 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_38_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_38_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 13304 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_38_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_38_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24430 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_38_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 24288 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_39_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 19514 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_39_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11508 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_39_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24430 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_39_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 14316 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB905866~31bf3856ad364e35~amd64~~6.0.37.0.cat 10849 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12394 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 17769 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB948465~31bf3856ad364e35~amd64~fr-FR~6.0.1.18005.cat 57502 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 10216 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB948531~31bf3856ad364e35~amd64~~6.0.1.0.cat 13870 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB948610~31bf3856ad364e35~amd64~~6.0.6001.2123.cat 105799 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB948881~31bf3856ad364e35~amd64~~6.0.1.1.cat 12380 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB950762~31bf3856ad364e35~amd64~~6.0.1.0.cat 15038 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_41_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15618 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_41_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 33259 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11814 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 27046 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24430 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 170036 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB949246~31bf3856ad364e35~amd64~~6.0.6001.3053.cat 205495 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB950582~31bf3856ad364e35~amd64~~6.0.1.1.cat 87672 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_42_for_KB958623~31bf3856ad364e35~amd64~~6.0.1.1.cat 85831 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_43_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_43_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 23494 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_43_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15618 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_43_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 10788 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_43_for_KB949247~31bf3856ad364e35~amd64~~6.0.6001.2123.cat 120063 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_188_for_KB951072~31bf3856ad364e35~amd64~~6.0.2.0.cat 14764 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_19_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB947880~31bf3856ad364e35~amd64~~6.0.1.0.cat 14732 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB954154~31bf3856ad364e35~amd64~~6.0.1.0.cat 25021 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB957388~31bf3856ad364e35~amd64~~6.0.1.2.cat 17273 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB967190~31bf3856ad364e35~amd64~~6.0.1.0.cat 14539 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB972636~31bf3856ad364e35~amd64~~8.0.1.0.cat 10510 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_20_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 370521 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_23_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 16196 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_26_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_27_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 20272 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_29_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB938464~31bf3856ad364e35~amd64~~6.0.1.5.cat 112977 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-AdhocMeetings-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 13423 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB953733~31bf3856ad364e35~amd64~~6.0.1.0.cat 20322 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_46_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_74_for_KB955839~31bf3856ad364e35~amd64~~6.0.1.0.cat 12923 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB951376_client_0~31bf3856ad364e35~amd64~~6.0.1.1.cat 10930 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB958644~31bf3856ad364e35~amd64~~6.0.1.0.cat 9089 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB973507_client_1~31bf3856ad364e35~amd64~~6.0.1.1.cat 7917 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_46_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 225446 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_46_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24430 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_46_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 12270 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_47_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_47_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 112912 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_47_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15618 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_47_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 13140 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_48_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_48_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 372143 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_48_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 12974 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_48_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24430 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_48_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 13430 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_50_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 15608 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_50_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24430 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_50_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 10216 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_51_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_51_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 14730 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_51_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24430 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_51_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 30234 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_52_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_52_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 24452 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_52_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 32373 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_52_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 98263 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_53_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_53_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_53_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 36501 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_54_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_54_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 103913 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_54_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 10930 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_55_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 10930 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_55_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 14646 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_56_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_56_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 12858 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 15946 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_57_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 12882 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_58_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_58_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 25064 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_58_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 13736 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_59_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_59_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 15358 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_59_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 17860 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB905866~31bf3856ad364e35~amd64~~6.0.37.0.cat 10849 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_60_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.cat 10804 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_61_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 22688 bytes
C:\
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 25 / 33
moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
as tu la fin du rapport

on a enfin trouvé quelque chose de valable...
0
Réponse 26 / 33
sebuuh Messages postés 28 Statut Membre
 
le rapport est vraiment enorme .
Y'a un moyne autre que le copier coller?
0
Réponse 27 / 33
moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
Rend toi sur Cjoint : http://www.cijoint.fr/

Clique sur "Parcourir " dans la partie " Joindre un fichier[...] "

Sélectionne le rapport

Clique ensuite sur "Créer le lien cjoint " et copie/colle le dans ton prochain message

mais je ne pourrai le consulter que ce soir (d'où je suis je ne peux pas)

...............

en suivant

▶ Relance List&Kill'em (clic droit "exécuter en tant qu'administrateur" pour Vista/Seven) avec le raccourci sur ton bureau ,

mais cette fois-ci :

▶ choisis l'option 2 = Mode Suppression

laisse travailler l'outil.

en fin de scan un rapport s'ouvre

▶ colle le contenu dans ta reponse

Tu peux le désinstaller ensuite

et là postes le ici (il doit être plus court)
0
Réponse 28 / 33
sebuuh Messages postés 28 Statut Membre
 
je lance l'option 2
0
Réponse 29 / 33
sebuuh Messages postés 28 Statut Membre
 
et voila:

Kill'em by g3n-h@ckm@n 1.2.2.0

User : Sebastien (Administrateurs)
Update on 03/02/2010 by g3n-h@ckm@n ::::: 16.30
Start at: 18:03:13 | 04/02/2010
Contact : https://forums.commentcamarche.net/forum/virus-securite-7

AMD Phenom(tm) 8450 Triple-Core Processor
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6001 64-bit) # Service Pack 1
Internet Explorer 8.0.6001.18882
Windows Firewall Status : Disabled

C:\ -> Disque fixe local | 454,28 Go (55,16 Go free) [HP] | NTFS
D:\ -> Disque fixe local | 11,48 Go (1,54 Go free) [FACTORY_IMAGE] | NTFS
E:\ -> Disque CD-ROM
F:\ -> Disque amovible
G:\ -> Disque amovible
H:\ -> Disque amovible
I:\ -> Disque amovible
J:\ -> Disque CD-ROM
K:\ -> Disque amovible | 967,22 Mo (61,31 Mo free) [KEY SHUE] | FAT

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
C:\Windows\SysWOW64\svchost.exe
C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
C:\hp\kbd\kbd.exe
C:\Windows\SysWOW64\conime.exe
C:\Program Files (x86)\Windows Live\Toolbar\wltuser.exe
C:\Users\Sebastien\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files (x86)\List_Kill'em\List_Kill'em.scr
C:\Windows\SysWOW64\cmd.exe
C:\Users\Sebastien\AppData\Local\Temp\FB31.tmp\ERUNT.EXE
C:\Users\Sebastien\AppData\Local\Temp\FB31.tmp\pv.exe

Detections :
==========

¤¤¤¤¤¤¤¤¤¤ Files/folders :

Quarantined & Deleted !! : C:\Windows\system32\x3daudio1_0.dll
Quarantined & Deleted !! : C:\Windows\system32\x3daudio1_1.dll
Quarantined & Deleted !! : C:\Windows\system32\X3DAudio1_2.dll
Quarantined & Deleted !! : C:\Windows\system32\X3DAudio1_3.dll
Quarantined & Deleted !! : C:\Windows\system32\X3DAudio1_4.dll
Quarantined & Deleted !! : C:\Windows\system32\X3DAudio1_5.dll
Quarantined & Deleted !! : C:\Windows\system32\X3DAudio1_6.dll
Quarantined & Deleted !! : C:\Windows\system32\XInput9_1_0.dll
Quarantined & Deleted !! : C:\Windows\System32\SET2EFD.tmp
Quarantined & Deleted !! : C:\Windows\System32\SET3180.tmp
Quarantined & Deleted !! : C:\Windows\SysWow64\XInput9_1_0.dll
Quarantined & Deleted !! : C:\Windows\Sysnative\x3daudio1_0.dll
Quarantined & Deleted !! : C:\Windows\Sysnative\x3daudio1_1.dll
Quarantined & Deleted !! : C:\Windows\Sysnative\X3DAudio1_2.dll
Quarantined & Deleted !! : C:\Windows\Sysnative\X3DAudio1_3.dll
Quarantined & Deleted !! : C:\Windows\Sysnative\X3DAudio1_4.dll
Quarantined & Deleted !! : C:\Windows\Sysnative\X3DAudio1_5.dll
Quarantined & Deleted !! : C:\Windows\Sysnative\X3DAudio1_6.dll
Quarantined & Deleted !! : C:\Windows\Sysnative\XInput9_1_0.dll
Quarantined & Deleted !! : C:\Windows\Sysnative\SET29F3.tmp
Quarantined & Deleted !! : C:\Windows\Sysnative\SET2BDA.tmp
Quarantined & Deleted !! : C:\Windows\Sysnative\SET4761.tmp
Quarantined & Deleted !! : C:\Windows\Sysnative\SET87E8.tmp
Quarantined & Deleted !! : C:\Users\Sebastien\AppData\Roaming\8062615.tmp
Quarantined & Deleted !! : C:\Users\Sebastien\LOCAL Settings\Temp\8BD54F3E-DD19-4a69-93D8-5C6A5BBBE20E.exe

==============
host file OK !
==============

========
Registry
========
Deleted : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges
Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools
Deleted : HKLM\Software\Classes\TypeLib\{937936AF-28CA-4973-B8AE-F250406149A2}
¤¤¤¤¤¤¤¤¤¤ Services fonctionnels

Ndisuio : Start = 3
EapHost -> Start = 2
Wlansvc -> Start = 2
SharedAccess -> Start = 2
windefend -> Start = 2
wuauserv -> Start = 2
wscsvc -> Start = 2

============
Disk Cleaned
============

================
Prefetch cleaned
================

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
0
Réponse 30 / 33
moment de grace Messages postés 30049 Statut Contributeur sécurité 2 274
 
tu pourras entre deux faire ceci pour le premier rapport killem

Rend toi sur Cjoint : http://www.cijoint.fr/

Clique sur "Parcourir " dans la partie " Joindre un fichier[...] "

Sélectionne le rapport

Clique ensuite sur "Créer le lien cjoint " et copie/colle le dans ton prochain message

....................

constates tu des améliorations ?

je crains que du rookit soit present mais faut trouver un outil compatible et efficace

▶ Téléchargez Dr.Web CureIt! sur ton Bureau :
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe

▶ Double-cliquez sur drweb-cureit.exe et cliquez sur Commencer le scan.
▶ Ce scan rapide permet l'analyse des processus chargés en mémoire; s'il trouve des processus infectés, cliquez sur le bouton Oui pour Tout à l'invite.
▶ Lorsque le scan rapide est terminé, cliquez sur Options > Changer la configuration.
▶ Choisissez l'onglet Scanner, et décochez Analyse heuristique.
▶ De retour à la fenêtre principale : choisissez Analyse complète.
▶ Cliquez la flèche verte sur la droite et le scan débutera. Une publicité apparaît quelquefois, fermez-la.
▶ Cliquez Oui pour Tout si un fichier est détecté.
▶ A la fin du scan, si des infections sont trouvées, cliquez sur Tout sélectionner, puis sur Désinfecter. Si la désinfection est impossible, cliquez sur Quarantaine.
▶ Au menu principal de l'outil, en haut à gauche, cliquez sur le menu Fichier et choisissez Enregistrer le rapport.
▶ Sauvegardez le rapport sur votre Bureau. Ce dernier se nommera DrWeb.csv.
▶ Fermez Dr.Web CureIt!
▶ Redémarrez votre ordinateur (très important) car certains fichiers peuvent être déplacés/réparés au redémarrage.
▶ Postez (Copiez/Collez) le contenu du rapport de l'outil Dr.Web dans un bloc note

Ensuite :

▶ Rendez-vous à cette adresse d'hébergement gratuit : http://www.cijoint.fr/
▶ Cliquez sur parcourir, chercher rapport DrWeb.txt puis sur cliquez ici pour déposer le fichier
▶ Une fois le lien crée, faite un clique droit dessus et copier l'adresse du lien pour venir le coller dans votre réponse

0
Réponse 31 / 33
sebuuh Messages postés 28 Statut Membre
 
Je n'ai pas d'amelioration apparente.

Je lance drweb et je post les liens vers cijoint.

Un de mes pb aussi est que je dois passer par mon portable pour télécharger tous les logiciels que tu me demande car dès que je souhaite enregistrer le fichier sur ce PC je n'ai rien qui se lance tout comme lorsque je fais "parcourir" sur le site cijoint.fr.

Je fais ça rapidement
0
Réponse 32 / 33
sebuuh Messages postés 28 Statut Membre
 
Ci dessous le premier rapport list'em:

http://www.cijoint.fr/cjlink.php?file=cj201002/cijpVHCmqN.doc
0
Réponse 33 / 33
sebuuh Messages postés 28 Statut Membre
 
l'analyse drweb est vraiment longue....
Je laisse tombé pour ce soir et je relancerai l'analyse dimanche en fin d'apres-midi.

Merci bcp pour ton aide aujourd'hui Moment de grâce
0

Discussions similaires

Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
Désinstaller Softonic
Diguimette -
lilidurhone -

5 réponses
virus Artemis!
mabiche37 -
Malekal_morte- -

14 réponses
Message Apple virus !!
Souclik67 -
MPMP10 -

3 réponses