Problème easycleaner

Résolu
FredM33 Messages postés 199 Statut Membre -  
jfkpresident Messages postés 13877 Statut Contributeur sécurité -
Bonjour à tous,

Afin de nettoyer mon portable, j'ai téléchargé puis utilisé easycleaner.

Avant de lancer le nettoyage du registre, j'ai réalisé une sauvegarde comme indiqué.

Mon problème est le suivant :
Lorsque je démarre mon pc avec mon disque dur externe branché dessus, il ne passe pas la fenêtre bleue m'indiquant "Windows est en cours de démarrage".

Je le reboute donc, mais cette fois-ci en enlevant le disque dur et là cela démarre correctement.

Dois-je remettre l'ancienne config du registre ou ce problème peut se résoudre autrement ?

Merci d'avance de votre aide

Cordialement

FredM33
Configuration: Windows XP
Firefox 3.5.7

17 réponses

  1. jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
     
    Hello ;

    • Télécharge et install UsbFix par El Desaparecido , C_XX & Chimay8

    (!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectées sans les ouvrir

    • Double clic sur le raccourci UsbFix présent sur ton bureau .

    • Au menu principal choisis l'option " F " pour français et tape sur [entrée] .

    • Au second menu Choisis l'option " 1 " (recherche) et tape sur [entrée]

    • Laisse travailler l'outil.

    • Ensuite post le rapport UsbFix.txt qui apparaitra.

    • Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

    ( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

    • Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

    • Tuto : http://pagesperso-orange.fr/NosTools/usbfix.html
    0
  2. FredM33 Messages postés 199 Statut Membre 16
     
    Bonsoir JFKPrésident,
    Merci de ton aide, et voici le rapport :

    ############################## | UsbFix V6.092 |

    User : Frédéric Madorre (Administrateurs) # FREDMTOSHIBA
    Update on 07/02/2010 by El Desaparecido , C_XX & Chimay8
    Start at: 22:31:18 | 08/02/2010
    Website : http://pagesperso-orange.fr/NosTools/index.html
    Contact : FindyKill.Contact@gmail.com

    Intel(R) Celeron(R) M processor 1.50GHz
    Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
    Internet Explorer 8.0.6001.18702
    Windows Firewall Status : Enabled
    AV : AntiVir Desktop 9.0.1.32 [ Enabled | Updated ]

    C:\ -> Disque fixe local # 93,16 Go (31,65 Go free) # NTFS
    D:\ -> Disque CD-ROM
    E:\ -> Disque fixe local # 232,88 Go (89,23 Go free) [Disque Externe FredM] # NTFS

    ############################## | Processus actifs |

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\acs.exe
    C:\Program Files\Antivirus\Avira\AntiVir Desktop\sched.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Antivirus\a-squared Free\a2service.exe
    C:\Program Files\Antivirus\Avira\AntiVir Desktop\avguard.exe
    C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
    C:\WINDOWS\system32\DVDRAMSV.exe
    C:\Program Files\Drivers et codecs\Drivers\Java\bin\jqs.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Antivirus\Avira\AntiVir Desktop\avgnt.exe
    C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\system32\RAMASST.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\Program Files\IncrediMail\bin\IncMail.exe
    C:\Program Files\IncrediMail\bin\IMApp.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe

    ################## | Elements infectieux |

    E:\autorun.inf
    E:\autorun.inf

    ################## | Registre |

    ################## | Mountpoints2 |

    HKCU\..\..\Explorer\MountPoints2\{13c4ce48-f795-11dc-9bc3-0011f5efba4c}
    Shell\AutoRun\command =F:\start.exe
    Shell\iledefrance\command =F:\start.exe

    HKCU\..\..\Explorer\MountPoints2\{34191c66-a807-11dd-9cf1-0011f5efba4c}
    Shell\AutoRun\command =autorun.exe

    HKCU\..\..\Explorer\MountPoints2\{5c1accca-a992-11dd-9cf3-0011f5efba4c}
    Shell\AutoRun\command =
    Shell\iledefrance\command =

    HKCU\..\..\Explorer\MountPoints2\{840d57c4-975d-11db-993a-0011f5efba4c}
    Shell\AutoRun\command =F:\InstallTomTomHOME.exe

    HKCU\..\..\Explorer\MountPoints2\{92bd8448-4310-11de-9dd5-0011f5efba4c}
    Shell\Auto\command =G:\launcher.exe
    Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL launcher.exe

    HKCU\..\..\Explorer\MountPoints2\{a0ba300c-fc29-11dc-9bcb-0011f5efba4c}
    Shell\AutoRun\command =

    HKCU\..\..\Explorer\MountPoints2\{dd53f982-8105-11de-9e2e-0011f5efba4c}
    Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL strongkey.exe
    Shell\default\command =strongkey.exe

    HKCU\..\..\Explorer\MountPoints2\{f4cb8ff0-bbb6-11dd-9d0a-0011f5efba4c}
    Shell\AutoRun\command =

    ################## | Vaccin |

    (!) Cet ordinateur n'est pas vacciné !

    ################## | ! Fin du rapport # UsbFix V6.092 ! |

    0
  3. jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
     
    (!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectés sans les ouvrir

    • Double clic sur le raccourci UsbFix présent sur ton bureau

    • Au menu principal choisis l'option " F " pour français et tape sur [entrée] .

    • Au second menu Choisis l'option " 2 " ( Suppression ) et tape sur [entrée]

    • Ton bureau disparaitra et le pc redémarrera .

    • Au redémarrage , UsbFix scannera ton pc , laisse travailler l'outil.

    • Ensuite post le rapport UsbFix.txt qui apparaitra avec le bureau .

    • Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )

    ( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

    ==============

    Ensuite rebranche ton disque externe et redémarre le pc pour voir si il y a du mieux .
    0
  4. FredM33 Messages postés 199 Statut Membre 16
     
    je reviens avec un autre PC,

    Le portable est bloqué sur la page bleue "Windows est en cours de démarrage" .....

    Est-ce que je reboute en retirant le Disque dur ?
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
     
    Tu as fait l'option 2 de UsbFix ? Tu as le rapport ?
    0
  7. FredM33 Messages postés 199 Statut Membre 16
     
    C'est à la suite de l'option 2 de Usbfix que le portable s'est éteind puis tente de se rallumer et bloque sur la page bleue...

    Donc pas de rapport pour l'instant
    0
  8. FredM33 Messages postés 199 Statut Membre 16
     
    j'ai donc retiré le DD externe et relancé le Portable : voici le rapport 2

    ############################## | UsbFix V6.092 |

    User : Frédéric Madorre (Administrateurs) # FREDMTOSHIBA
    Update on 07/02/2010 by El Desaparecido , C_XX & Chimay8
    Start at: 23:23:30 | 08/02/2010
    Website : http://pagesperso-orange.fr/NosTools/index.html
    Contact : FindyKill.Contact@gmail.com

    Intel(R) Celeron(R) M processor 1.50GHz
    Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
    Internet Explorer 8.0.6001.18702
    Windows Firewall Status : Enabled
    AV : AntiVir Desktop 9.0.1.32 [ Enabled | Updated ]

    C:\ -> Disque fixe local # 93,16 Go (31,61 Go free) # NTFS
    D:\ -> Disque CD-ROM
    E:\ -> Disque fixe local # 232,88 Go (89,23 Go free) [Disque Externe FredM] # NTFS

    ############################## | Processus actifs |

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\logonui.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\acs.exe
    C:\Program Files\Antivirus\Avira\AntiVir Desktop\sched.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Antivirus\a-squared Free\a2service.exe
    C:\Program Files\Antivirus\Avira\AntiVir Desktop\avguard.exe
    C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
    C:\WINDOWS\system32\DVDRAMSV.exe
    C:\Program Files\Drivers et codecs\Drivers\Java\bin\jqs.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\userinit.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\WINDOWS\System32\alg.exe

    ################## | Elements infectieux |

    Supprimé ! C:\Recycler\S-1-5-21-3117846246-626433616-840302518-1006
    Supprimé ! C:\Recycler\S-1-5-21-3117846246-626433616-840302518-500

    ################## | Registre |

    ################## | Mountpoints2 |

    Supprimé ! HKCU\...\Explorer\MountPoints2\{13c4ce48-f795-11dc-9bc3-0011f5efba4c}\Shell\AutoRun\Command
    Supprimé ! HKCU\...\Explorer\MountPoints2\{34191c66-a807-11dd-9cf1-0011f5efba4c}\Shell\AutoRun\Command
    Supprimé ! HKCU\...\Explorer\MountPoints2\{5c1accca-a992-11dd-9cf3-0011f5efba4c}\Shell\AutoRun\Command
    Supprimé ! HKCU\...\Explorer\MountPoints2\{840d57c4-975d-11db-993a-0011f5efba4c}\Shell\AutoRun\Command
    Supprimé ! HKCU\...\Explorer\MountPoints2\{92bd8448-4310-11de-9dd5-0011f5efba4c}\Shell\Auto\Command
    Supprimé ! HKCU\...\Explorer\MountPoints2\{a0ba300c-fc29-11dc-9bcb-0011f5efba4c}\Shell\AutoRun\Command
    Supprimé ! HKCU\...\Explorer\MountPoints2\{dd53f982-8105-11de-9e2e-0011f5efba4c}\Shell\AutoRun\Command
    Supprimé ! HKCU\...\Explorer\MountPoints2\{f4cb8ff0-bbb6-11dd-9d0a-0011f5efba4c}\Shell\AutoRun\Command

    ################## | Listing des fichiers présent |

    [08/02/2010 23:23|--a------|4028] C:\aaw7boot.log
    [09/12/2005 07:03|--a------|0] C:\AUTOEXEC.BAT
    [06/11/2009 10:20|-rahs----|216] C:\boot.ini
    [05/08/2004 12:00|-rahs----|4952] C:\Bootfont.bin
    [09/12/2005 07:03|--a------|0] C:\CONFIG.SYS
    [09/12/2005 07:03|-rahs----|0] C:\IO.SYS
    [09/12/2005 07:03|-rahs----|0] C:\MSDOS.SYS
    [05/08/2004 12:00|-rahs----|47564] C:\NTDETECT.COM
    [04/11/2009 19:26|-rahs----|252240] C:\ntldr
    [?|?|?] C:\pagefile.sys
    [08/02/2010 23:27|--a------|3600] C:\UsbFix.txt

    ################## | Vaccination |

    # C:\autorun.inf -> Dossier créé par UsbFix .

    ################## | Upload |

    Veuillez envoyer le fichier : C:\UsbFix_Upload_Me_FREDMTOSHIBA.zip : https://www.ionos.fr/?affiliate_id=77097
    Merci pour votre contribution .

    ################## | ! Fin du rapport # UsbFix V6.092 ! |

    0
  9. FredM33 Messages postés 199 Statut Membre 16
     
    Bonjour à tous,

    Je fais remonter mon problème non résolu en tête deliste pour solliciter votre aide.

    Merci d'avance

    FredM
    0
  10. jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
     
    Télécharge ZhpDiag en cliquant sur ce lien : https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

    Une fois le téléchargement achevé, double clique sur ZHPDiag.exe(clic droit ,"éxécuter en tant qu'administrateur" pour Vista).

    Une fois installé le programme s'ouvre automatiquement .

    Clique sur "options"(icone petit tournevis) puis cocher toutes les cases mis a part les 045 et 061 (décoché par défaut).

    Clique sur la loupe pour lancer l'analyse.

    A la fin de l'analyse, clique sur la "disquette" (enregistrer sous..) .

    Rend toi sur ce site : http://www.cijoint.fr/index.php

    Clique sur parcourir et sélectionne le fichier ZhpDiag.txt .

    Un lien va etre créer ,poste ce lien dans ta prochaine réponse.

    0
  11. FredM33 Messages postés 199 Statut Membre 16
     
    Merci jfkpresident de reprendre la main,

    Voici le lien :
    http://www.cijoint.fr/cjlink.php?file=cj201002/cijpwfY2Es.txt

    0
  12. jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
     
    Pas d'infections a l'horizon donc ce serait plutot un probleme lié a la BDR .
    0
  13. FredM33 Messages postés 199 Statut Membre 16
     
    Ok, la BDR ??? (merci de m'éclairer), mais le problème de la page bleue avec le disque dur branché est apparu après avoir nettoyer le PC (registre) avec easycleaner. Je pense donc logiquement (mais pas sur du tout) que le problème vient de là.

    Est-ce que easycleaner n'a pas supprimé une clé de registre .... ?

    Merci
    0
  14. FredM33 Messages postés 199 Statut Membre 16
     
    Pour info, voici la liste des clés supprimées par easycleaner. Faut-il en "retablir" avec le programme?
    Merci

    Racine Clé du Registre Nom Données
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\Folders C:\WINDOWS\winsxs\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\
    HKEY_LOCAL_MACHINE Software\Microsoft\Transaction Server\Setup(OCM) Source Path C:\$WIN_NT$.~LS
    HKEY_LOCAL_MACHINE Software\Microsoft\MSDTC\Setup Source Path C:\$WIN_NT$.~LS
    HKEY_LOCAL_MACHINE Software\Microsoft\COM3\Setup Source Path C:\$WIN_NT$.~LS
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC} InstallSource c:\10046143b75a7d02ba\
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6E8A266FCD4F2A1409E1C8110F44DBCE\InstallProperties InstallSource c:\10046143b75a7d02ba\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\6E8A266FCD4F2A1409E1C8110F44DBCE\SourceList\Net 1 c:\10046143b75a7d02ba\
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E} InstallSource c:\4f7fba1f3c90bc5c7bbcff528816faff\
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\56A968A049C8C7F45A7C79D2C3C8DEE9\InstallProperties InstallSource c:\4f7fba1f3c90bc5c7bbcff528816faff\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\56A968A049C8C7F45A7C79D2C3C8DEE9\SourceList\Net 1 c:\4f7fba1f3c90bc5c7bbcff528816faff\
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{C04E32E0-0416-434D-AFB9-6969D703A9EF} InstallSource c:\66af403e0d000ca5cbf702f8529367\
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0E23E40C6140D434FA9B96967D309AFE\InstallProperties InstallSource c:\66af403e0d000ca5cbf702f8529367\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\0E23E40C6140D434FA9B96967D309AFE\SourceList\Net 1 c:\66af403e0d000ca5cbf702f8529367\
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{B508B3F1-A24A-32C0-B310-85786919EF28} InstallSource c:\6dfd0d117667317025f8538f0e08\wcu\dotnetframework\dotnetfx20\
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1F3B805BA42A0C233B0158879691FE82\InstallProperties InstallSource c:\6dfd0d117667317025f8538f0e08\wcu\dotnetframework\dotnetfx20\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\1F3B805BA42A0C233B0158879691FE82\SourceList\Net 1 c:\6dfd0d117667317025f8538f0e08\wcu\dotnetframework\dotnetfx20\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\E44F9CA57C603E144A467371A79B01D5\SourceList\Net 1 c:\6dfd0d117667317025f8538f0e08\wcu\dotnetframework\dotnetfx20\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\DF36C10937666A74B9F51BE3E3FB4A07\SourceList\Net 1 c:\6dfd0d117667317025f8538f0e08\wcu\dotnetframework\dotnetfx20\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\DEC4EC3C0B64E7047A30A738AA0EA263\SourceList\Net 1 c:\6dfd0d117667317025f8538f0e08\wcu\dotnetframework\dotnetfx20\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\CCA0F521CF3DB204D869726F4ED6005D\SourceList\Net 1 c:\6dfd0d117667317025f8538f0e08\wcu\dotnetframework\dotnetfx20\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\80F86D540A652144BBF04829EB79A87C\SourceList\Net 1 c:\6dfd0d117667317025f8538f0e08\wcu\dotnetframework\dotnetfx20\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\7A0DC8558450022488EF10CC4177FD16\SourceList\Net 1 c:\6dfd0d117667317025f8538f0e08\wcu\dotnetframework\dotnetfx20\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\6073E3C7DBF896147962A074BF9F3DA2\SourceList\Net 1 c:\6dfd0d117667317025f8538f0e08\wcu\dotnetframework\dotnetfx20\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\2BD48EBD497144248995B927C08AB9D4\SourceList\Net 1 c:\6dfd0d117667317025f8538f0e08\wcu\dotnetframework\dotnetfx20\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\1363E86FDE860794D8778BF18EA36A1A\SourceList\Net 1 c:\6dfd0d117667317025f8538f0e08\wcu\dotnetframework\dotnetfx20\
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\DivXNetworks\DivX4Windows Log File Name C:\divx.log
    HKEY_CURRENT_USER Software\DivXNetworks\DivX4Windows Log File Name C:\divx.log
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Audacity\Audacity\Directories TempDir C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\audacity_1_2_temp
    HKEY_CURRENT_USER Software\Audacity\Audacity\Directories TempDir C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\audacity_1_2_temp
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{99A505F6-1B6E-444A-8035-ECD2BB077B03}\2.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Excel8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{8BFAA986-244C-4491-ABB8-441C623B079C}\1.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Excel8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{689CDCF7-7AAA-49B1-B308-7B38CA4DC8E0}\1.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Excel8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{66DD7244-E158-4FD0-8F83-EF60335C4E3A}\2.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Excel8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{599F4D39-E9EE-41A8-B9F2-728C70D68A4C}\1.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Excel8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{45F21081-AC40-4045-AF69-7182375E0266}\2.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Excel8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{3BDF2680-234C-4000-9EBE-44D56D0A9182}\2.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Excel8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{2A367BB7-954C-422E-87B8-DFA5FF2A0CF5}\2.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Excel8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{1EE5ABFD-FAD3-43F7-8C36-61CE30DEB518}\2.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Excel8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{10407933-EC3D-4399-A906-AEE5F70E11F6}\1.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Excel8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{99A505F6-1B6E-444A-8035-ECD2BB077B03}\2.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Excel8.0\MSForms.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{66DD7244-E158-4FD0-8F83-EF60335C4E3A}\2.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Excel8.0\MSForms.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{45F21081-AC40-4045-AF69-7182375E0266}\2.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Excel8.0\MSForms.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{3BDF2680-234C-4000-9EBE-44D56D0A9182}\2.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Excel8.0\MSForms.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{2A367BB7-954C-422E-87B8-DFA5FF2A0CF5}\2.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Excel8.0\MSForms.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{1EE5ABFD-FAD3-43F7-8C36-61CE30DEB518}\2.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Excel8.0\MSForms.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{8BFAA986-244C-4491-ABB8-441C623B079C}\1.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Excel8.0\ShockwaveFlashObjects.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{689CDCF7-7AAA-49B1-B308-7B38CA4DC8E0}\1.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Excel8.0\ShockwaveFlashObjects.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{599F4D39-E9EE-41A8-B9F2-728C70D68A4C}\1.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Excel8.0\ShockwaveFlashObjects.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{10407933-EC3D-4399-A906-AEE5F70E11F6}\1.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Excel8.0\ShockwaveFlashObjects.exd
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Macromedia\FlashPlayerUpdate Path C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\FlashPlayerUpdate.exe
    HKEY_CURRENT_USER Software\Macromedia\FlashPlayerUpdate Path C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\FlashPlayerUpdate.exe
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\Office\9.0\PowerPoint\Recent File List File2 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\IM\BeauxMontages.ppt
    HKEY_CURRENT_USER Software\Microsoft\Office\9.0\PowerPoint\Recent File List File2 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\IM\BeauxMontages.ppt
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\Office\9.0\PowerPoint\Recent File List File8 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\IM\Célébrités+ou-.ppt
    HKEY_CURRENT_USER Software\Microsoft\Office\9.0\PowerPoint\Recent File List File8 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\IM\Célébrités+ou-.ppt
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\Office\9.0\PowerPoint\Recent File List File9 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\IM\Grizzly.ppt
    HKEY_CURRENT_USER Software\Microsoft\Office\9.0\PowerPoint\Recent File List File9 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\IM\Grizzly.ppt
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\Office\9.0\PowerPoint\Recent File List File1 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\IM\SciencesNaturellesQCM.ppt
    HKEY_CURRENT_USER Software\Microsoft\Office\9.0\PowerPoint\Recent File List File1 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\IM\SciencesNaturellesQCM.ppt
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\MediaPlayer\Player\RecentFileList File4 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\IM\SeulMoyenDeSurvie.wmv
    HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Player\RecentFileList File4 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\IM\SeulMoyenDeSurvie.wmv
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\Office\9.0\PowerPoint\Recent File List File7 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\IM\VoeuxRatatouille.ppt
    HKEY_CURRENT_USER Software\Microsoft\Office\9.0\PowerPoint\Recent File List File7 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\IM\VoeuxRatatouille.ppt
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{1A655D51-1423-48A3-B748-8F5A0BE294C8} InstallSource C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\IXP000.TMP\
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\15D556A132413A847B84F8A5B02E498C\InstallProperties InstallSource C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\IXP000.TMP\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\15D556A132413A847B84F8A5B02E498C\SourceList\Net 1 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\IXP000.TMP\
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\MSNMessenger\PerPassportSettings\3610546166\SoundEvents\MSNMSGR_Buzz Path C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\MessengerCache/Sounds\3mU0S4MY1E35XTrPBAsexI4mPZw=
    HKEY_CURRENT_USER Software\Microsoft\MSNMessenger\PerPassportSettings\3610546166\SoundEvents\MSNMSGR_Buzz Path C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\MessengerCache/Sounds\3mU0S4MY1E35XTrPBAsexI4mPZw=
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\MSNMessenger\PerPassportSettings\3610546166\SoundEvents\MSNMSGR_NewMail Path C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\MessengerCache/Sounds\xRs1yQ7Dd9oDoj6V6rcguBDrsPA=
    HKEY_CURRENT_USER Software\Microsoft\MSNMessenger\PerPassportSettings\3610546166\SoundEvents\MSNMSGR_NewMail Path C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\MessengerCache/Sounds\xRs1yQ7Dd9oDoj6V6rcguBDrsPA=
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{56C049BE-79E9-4502-BEA7-9754A3E60F9B} InstallSource C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\NERO14688\Redist\
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-3117846246-626433616-840302518-1006\Products\EB940C659E972054EB7A79453A6EF0B9\InstallProperties InstallSource C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\NERO14688\Redist\
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\Installer\Products\EB940C659E972054EB7A79453A6EF0B9\SourceList\Net 1 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\NERO14688\Redist\
    HKEY_CURRENT_USER Software\Microsoft\Installer\Products\EB940C659E972054EB7A79453A6EF0B9\SourceList\Net 1 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\NERO14688\Redist\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\821752B295B088A4FAFDEB215E5F9B1A\SourceList\Net 1 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\pftA.tmp\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\821752B295B088A4FAFDEB215E5F9B0A\SourceList\Net 1 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\pftE.tmp\
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{681728BB-1ED8-4419-95E9-C6F5F1D57079}\1.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\PPT10.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{681728BB-1ED8-4419-95E9-C6F5F1D57079}\1.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\PPT10.0\ShockwaveFlashObjects.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{CA8BE750-CCFD-4568-9084-A2D1D48403BE}\1.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\PPT8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{CA8BE750-CCFD-4568-9084-A2D1D48403BE}\1.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\PPT8.0\ShockwaveFlashObjects.exd
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\PerfVis\Recent File List File1 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Rar$EX03.078\TRACE_BOOT+DRIVERS_1_1.BIN
    HKEY_CURRENT_USER Software\Microsoft\PerfVis\Recent File List File1 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Rar$EX03.078\TRACE_BOOT+DRIVERS_1_1.BIN
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\PerfVis\Recent File List File3 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Rar$EX04.453\TRACE_BOOT+DRIVERS_1_1.BIN
    HKEY_CURRENT_USER Software\Microsoft\PerfVis\Recent File List File3 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Rar$EX04.453\TRACE_BOOT+DRIVERS_1_1.BIN
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\PerfVis\Recent File List File2 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Rar$EX06.375\TRACE_BOOT+DRIVERS_1_1.BIN
    HKEY_CURRENT_USER Software\Microsoft\PerfVis\Recent File List File2 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Rar$EX06.375\TRACE_BOOT+DRIVERS_1_1.BIN
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{0001040C-78E1-11D2-B60F-006097C998E7} InstallSource C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Rar$EX13.4656\
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C04010001E872D116BF00006799C897E\InstallProperties InstallSource C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Rar$EX13.4656\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\C04010001E872D116BF00006799C897E\SourceList\Net 1 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Rar$EX13.4656\
    HKEY_LOCAL_MACHINE Software\Microsoft\ClipArt Gallery\5.0\ConcurrentDatabases\Themes 2\Office 2000 Section1Path1 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Rar$EX13.4656\PFiles\Common\MSShared\Clipart\themes1\
    HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE40.UserAgent InstallINFFile C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\RGI1.tmp
    HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE.HKCUZoneInfo InstallINFFile C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\RGI2.tmp
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{D7D66D48-6FFF-47EE-A91C-98D32DE8E129}\2.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\VBE
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{C1FF6995-4208-4018-9483-1F402E112E5D}\2.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\VBE
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{52C9A45F-4752-4E7E-A911-DECBB70ED652}\2.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\VBE
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{D7D66D48-6FFF-47EE-A91C-98D32DE8E129}\2.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\VBE\MSForms.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{C1FF6995-4208-4018-9483-1F402E112E5D}\2.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\VBE\MSForms.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{52C9A45F-4752-4E7E-A911-DECBB70ED652}\2.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\VBE\MSForms.exd
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\FrontPage WecErrorLog C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\wecerr.txt
    HKEY_CURRENT_USER Software\Microsoft\FrontPage WecErrorLog C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\wecerr.txt
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{FCFBBC13-0E26-4369-92BC-5587522D1078}\1.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{E235ACFD-2FD1-4527-B303-F3C34068B158}\2.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{90C36977-F754-470E-9E07-20C9939808FD}\1.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{76B467C5-70D9-4DE7-A775-9E075F19C936}\2.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{6BDB48A1-B74C-46A6-89AF-56C9C95E9373}\2.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{64C82601-6E35-4CD2-A360-D951DEF07554}\1.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{6305B804-FC2F-4779-A4B2-6C82FE79301A}\1.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{61D7E0D9-4249-43A7-9AAB-E6DD3289358E}\2.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{58AD4C20-1F22-4EEF-9F02-1F0353A8A607}\2.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{4960BCB8-0F0D-4D3F-B5D3-3645A0A6ACC2}\1.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{44EEBF73-0640-4DE2-B7C8-4333E090EDA7}\2.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{3664D8CE-8A40-45FC-978D-061E8D457D34}\2.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{1B30B25D-1D19-4193-BFDF-D1149D488D71}\2.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{148F4A30-DDBE-499A-8177-35B21D7C0287}\2.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{0CD2C2C2-CDB9-4B83-97D3-0A92F95F05D6}\2.0\HELPDIR C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{90C36977-F754-470E-9E07-20C9939808FD}\1.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0\MARQUEELib.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{4960BCB8-0F0D-4D3F-B5D3-3645A0A6ACC2}\1.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0\MARQUEELib.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{E235ACFD-2FD1-4527-B303-F3C34068B158}\2.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0\MSForms.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{76B467C5-70D9-4DE7-A775-9E075F19C936}\2.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0\MSForms.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{6BDB48A1-B74C-46A6-89AF-56C9C95E9373}\2.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0\MSForms.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{61D7E0D9-4249-43A7-9AAB-E6DD3289358E}\2.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0\MSForms.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{58AD4C20-1F22-4EEF-9F02-1F0353A8A607}\2.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0\MSForms.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{44EEBF73-0640-4DE2-B7C8-4333E090EDA7}\2.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0\MSForms.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{3664D8CE-8A40-45FC-978D-061E8D457D34}\2.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0\MSForms.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{1B30B25D-1D19-4193-BFDF-D1149D488D71}\2.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0\MSForms.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{148F4A30-DDBE-499A-8177-35B21D7C0287}\2.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0\MSForms.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{0CD2C2C2-CDB9-4B83-97D3-0A92F95F05D6}\2.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0\MSForms.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{FCFBBC13-0E26-4369-92BC-5587522D1078}\1.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0\ShockwaveFlashObjects.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{64C82601-6E35-4CD2-A360-D951DEF07554}\1.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0\ShockwaveFlashObjects.exd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{6305B804-FC2F-4779-A4B2-6C82FE79301A}\1.0\0\win32 C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\Word8.0\ShockwaveFlashObjects.exd
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{CE325D55-FCAF-4273-BB79-069BB8747270} InstallSource C:\DOCUME~1\FRDRIC~1\MESDOC~1\TomTom\HOME\DOWNLO~1\DOWNLO~1\V1_5_1~1.EXE
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\7FCDE114D557E4147AB4D3DC56385F98\SourceList\Net 1 C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\3574AFE896173CC42AB8A061348B3AB9\SourceList\Net 1 C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} InstallSource C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\IXP000.TMP\
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{9A394342-4A68-4EBA-85A6-55B559F4E700} InstallSource C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\IXP000.TMP\
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DDE7F2BCF1D91C3409CFF425AE1E271A\InstallProperties InstallSource C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\IXP000.TMP\
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\243493A986A4ABE4586A555B954F7E00\InstallProperties InstallSource C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\IXP000.TMP\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\DDE7F2BCF1D91C3409CFF425AE1E271A\SourceList\Net 1 C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\IXP000.TMP\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\243493A986A4ABE4586A555B954F7E00\SourceList\Net 1 C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\IXP000.TMP\
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{37477865-A3F1-4772-AD43-AAFC6BCFF99F} InstallSource c:\ed953bb1dd4f9039c08483fdd9e4\
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\568774731F3A2774DA34AACFB6FC9FF9\InstallProperties InstallSource c:\ed953bb1dd4f9039c08483fdd9e4\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\568774731F3A2774DA34AACFB6FC9FF9\SourceList\Net 1 c:\ed953bb1dd4f9039c08483fdd9e4\
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\DivXNetworks\DivX4Windows MV File Name C:\mvinfo.bin
    HKEY_CURRENT_USER Software\DivXNetworks\DivX4Windows MV File Name C:\mvinfo.bin
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\DivXNetworks\DivX4Windows Nth Pass debug file name C:\newrc.txt
    HKEY_CURRENT_USER Software\DivXNetworks\DivX4Windows Nth Pass debug file name C:\newrc.txt
    HKEY_LOCAL_MACHINE Software\Classes\CorelPrintHouse.WritingTools.4\1,4\PathToIcon Text C:\PROGRA~1\DRIVER~1\PRINTH~1\wtspi80.ico
    HKEY_LOCAL_MACHINE Software\Classes\CorelPrintHouse.WritingTools.4\1,2\PathToIcon Text C:\PROGRA~1\DRIVER~1\PRINTH~1\wtthi80.ico
    HKEY_LOCAL_MACHINE Software\Classes\CLSID\{1B02BDDF-F6D2-4B36-ABBA-AD49EBC876A5}\InprocServer32 C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGSC8~1.DLL
    HKEY_LOCAL_MACHINE Software\Classes\Software\Microsoft\Multimedia\Components\Informational\playback_skins\Files\File0 C:\PROGRA~1\WINDOW~2\Skins\Compact.wmz
    HKEY_LOCAL_MACHINE Software\Classes\Software\Microsoft\Multimedia\Components\Informational\playback_skins\Files\File1 C:\PROGRA~1\WINDOW~2\Skins\Revert.wmz
    HKEY_USERS S-1-5-20\Software\Microsoft\MediaPlayer\Setup\CreatedLinks AppName C:\PROGRA~1\WINDOW~2\wmplayer.exe
    HKEY_USERS S-1-5-19\Software\Microsoft\MediaPlayer\Setup\CreatedLinks AppName C:\PROGRA~1\WINDOW~2\wmplayer.exe
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{0456ebd7-5f67-4ab6-852e-63781e3f389c} InstallSource C:\Sysprep\
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\Installer\Products\7dbe654076f56ba458e23687e1f383c9\SourceList\Net 1 C:\Sysprep\
    HKEY_CURRENT_USER Software\Microsoft\Installer\Products\7dbe654076f56ba458e23687e1f383c9\SourceList\Net 1 C:\Sysprep\
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\DivXNetworks\DivX4Windows MP4 File Name C:\test.divx
    HKEY_CURRENT_USER Software\DivXNetworks\DivX4Windows MP4 File Name C:\test.divx
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\81 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\80 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\79 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\78 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\77 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\76 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\75 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\74 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\73 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\72 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\71 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\70 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\69 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\68 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\67 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\66 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\65 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\64 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\63 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\62 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\61 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\60 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\59 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\58 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\57 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\56 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\55 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB933566-IE7\Filelist\54 Location c:\windows\$hf_mig$\KB933566-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\79 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\78 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\77 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\76 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\75 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\74 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\73 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\72 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\71 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\70 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\69 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\68 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\67 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\66 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\65 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\64 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\63 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\62 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\61 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\60 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\59 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\58 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\57 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\56 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\55 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\54 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\53 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB937143-IE7\Filelist\52 Location c:\windows\$hf_mig$\KB937143-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB938127-IE7\Filelist\2 Location c:\windows\$hf_mig$\KB938127-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\85 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\84 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\83 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\82 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\81 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\80 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\79 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\78 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\77 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\76 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\75 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\74 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\73 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\72 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\71 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\70 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\69 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\68 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\67 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\66 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\65 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\64 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\63 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\62 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\61 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\60 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\59 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\58 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\57 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Updates\Windows XP\SP0\KB939653-IE7\Filelist\56 Location c:\windows\$hf_mig$\KB939653-IE7\SP2QFE
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Internet Settings\Url History Directory C:\WINDOWS\History
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\56A968A049C8C7F45A7C79D2C3C8DEE9 ProductIcon c:\WINDOWS\Installer\{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}\ARPIco
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\D7314F9862C648A4DB8BE2A5B47BE100 ProductIcon C:\WINDOWS\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\1D034B0FAA6BD374B960AAD30DF10D8B ProductIcon C:\WINDOWS\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9AD75C6970AA8CF4089B95C6DC849917 DDE7F2BCF1D91C3409CFF425AE1E271A C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M886903\M886903Uninstall.msp
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB194CBE43BB96243B19DDD3638B96EF DDE7F2BCF1D91C3409CFF425AE1E271A C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Active Setup Temp Folders Folder C:\WINDOWS\msdownld.tmp|?:\msdownld.tmp
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows NT\CurrentVersion\SeCEdit TemplateUsed C:\WINDOWS\SEC17CB.tmp
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_790a60e8\Codebases\U_Service Pack 3 URL C:\WINDOWS\ServicePackFiles\i386/comctl.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_790a60e8 Codebase C:\WINDOWS\ServicePackFiles\i386/comctl.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ef752e68\Codebases\U_KB923191 URL C:\WINDOWS\ServicePackFiles\i386/comctl.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ef752e68 Codebase C:\WINDOWS\ServicePackFiles\i386/comctl.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\Codebases\U_Service Pack 3 URL C:\WINDOWS\ServicePackFiles\i386/controls.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83 Codebase C:\WINDOWS\ServicePackFiles\i386/controls.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\Codebases\U_KB923191 URL C:\WINDOWS\ServicePackFiles\i386/controls.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03 Codebase C:\WINDOWS\ServicePackFiles\i386/controls.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_0e037a8a\Codebases\U_Service Pack 3 URL C:\WINDOWS\ServicePackFiles\i386/default.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_0e037a8a Codebase C:\WINDOWS\ServicePackFiles\i386/default.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_bcc9a281\Codebases\U_Service Pack 3 URL C:\WINDOWS\ServicePackFiles\i386/default.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_bcc9a281 Codebase C:\WINDOWS\ServicePackFiles\i386/default.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_cf59288d\Codebases\U_Service Pack 3 URL C:\WINDOWS\ServicePackFiles\i386/dxmrtp.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_cf59288d Codebase C:\WINDOWS\ServicePackFiles\i386/dxmrtp.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\Codebases\U_Service Pack 3 URL C:\WINDOWS\ServicePackFiles\i386/dxmrtp.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7 Codebase C:\WINDOWS\ServicePackFiles\i386/dxmrtp.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_fe7c593f\Codebases\U_KB958869 URL C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_fe7c593f Codebase C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_ed7ce46c\Codebases\U_Service Pack 3 URL C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_ed7ce46c Codebase C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.3352_x-ww_8f7724e8\Codebases\U_KB938464 URL C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.3352_x-ww_8f7724e8 Codebase C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\Codebases\U_KB958869 URL C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df Codebase C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\Codebases\U_Service Pack 3 URL C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c Codebase C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.3352_x-ww_81af8e88\Codebases\U_KB938464 URL C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.3352_x-ww_81af8e88 Codebase C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_5cd6c02b\Codebases\U_Service Pack 3 URL C:\WINDOWS\ServicePackFiles\i386/mswincrt.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_5cd6c02b Codebase C:\WINDOWS\ServicePackFiles\i386/mswincrt.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\Codebases\U_Service Pack 3 URL C:\WINDOWS\ServicePackFiles\i386/mswincrt.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63 Codebase C:\WINDOWS\ServicePackFiles\i386/mswincrt.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_5.2.2.3_x-ww_5f924d7b\Codebases\U_Service Pack 3 URL C:\WINDOWS\ServicePackFiles\i386/rtcdll.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_5.2.2.3_x-ww_5f924d7b Codebase C:\WINDOWS\ServicePackFiles\i386/rtcdll.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\Codebases\U_Service Pack 3 URL C:\WINDOWS\ServicePackFiles\i386/rtcdll.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95 Codebase C:\WINDOWS\ServicePackFiles\i386/rtcdll.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_fr_457ebf3d\Codebases\U_Service Pack 3 URL C:\WINDOWS\ServicePackFiles\i386/rtcres.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_fr_457ebf3d Codebase C:\WINDOWS\ServicePackFiles\i386/rtcres.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_d7ea3c6f\Codebases\U_Service Pack 3 URL C:\WINDOWS\ServicePackFiles\i386/vcrtl.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_d7ea3c6f\Codebases\U_KB924667 URL C:\WINDOWS\ServicePackFiles\i386/vcrtl.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_d7ea3c6f Codebase C:\WINDOWS\ServicePackFiles\i386/vcrtl.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\Codebases\U_Service Pack 3 URL C:\WINDOWS\ServicePackFiles\i386/vcrtl.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\Codebases\U_KB924667 URL C:\WINDOWS\ServicePackFiles\i386/vcrtl.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a Codebase C:\WINDOWS\ServicePackFiles\i386/vcrtl.man
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8} InstallSource C:\WINDOWS\SoftwareDistribution\Download\c7521dc9f7251d48337eb3bfee9e2b2a\img\
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1D034B0FAA6BD374B960AAD30DF10D8B\InstallProperties InstallSource C:\WINDOWS\SoftwareDistribution\Download\c7521dc9f7251d48337eb3bfee9e2b2a\img\
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\EventCache\WU CurrentCacheFile C:\WINDOWS\SoftwareDistribution\EventCache\{7E4149BF-7A35-473F-8CFF-08FFD9D9B20C}.bin
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\EventCache\Sus CurrentCacheFile C:\WINDOWS\SoftwareDistribution\EventCache\{BF2CF861-79CD-46AA-91D5-38BC849F3E18}.bin
    HKEY_LOCAL_MACHINE Software\Microsoft\Internet Explorer\Main Local Page C:\WINDOWS\system32\blank.htm
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\Internet Explorer\Main Local Page C:\WINDOWS\system32\blank.htm
    HKEY_CURRENT_USER Software\Microsoft\Internet Explorer\Main Local Page C:\WINDOWS\system32\blank.htm
    HKEY_LOCAL_MACHINE Software\Classes\CLSID\{5A8371A3-0C6D-487b-B3C8-46D785C4C940}\InProcServer32 C:\WINDOWS\system32\eapahost.dll
    HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\WMPlayer\Groups\Video\DVR-MS RequiredFile C:\WINDOWS\system32\enable.dvd
    HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\WMPlayer\Groups\Video\DVD RequiredFile C:\WINDOWS\system32\enable.dvd
    HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\MPlayer2\Groups\Video\DVR-MS RequiredFile C:\WINDOWS\system32\enable.dvd
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.0\0\win32 C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx\2
    HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{57A0E746-3863-4D20-A811-950C84F1DB9B}\1.1\0\win32 C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx\2
    HKEY_LOCAL_MACHINE Software\Classes\CLSID\{CC2C83A6-9BE4-11D0-98E7-00C04FC2CAF5}\InprocServer32 SystemDB C:\WINDOWS\system32\system.mdw
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows Media Device Manager Log.Filename C:\WINDOWS\system32\Wmdm.log
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} InstallSource C:\WINDOWS\TEMP\IXP000.TMP\
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9F2FDFE0D6387BE43AD230B83D1FBFA2\InstallProperties InstallSource C:\WINDOWS\TEMP\IXP000.TMP\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\9F2FDFE0D6387BE43AD230B83D1FBFA2\SourceList\Net 1 C:\WINDOWS\TEMP\IXP000.TMP\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\A2A49AADD8A2B3D4D98B65BFCEDE80D2\SourceList\Net 1 C:\WINDOWS\TEMP\ZNWB4\
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\DivXNetworks\DivX4Windows YUV Dir Name C:\yuv
    HKEY_CURRENT_USER Software\DivXNetworks\DivX4Windows YUV Dir Name C:\yuv
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Malwarebytes' Anti-Malware selectedrives C:\|E:\|
    HKEY_CURRENT_USER Software\Malwarebytes' Anti-Malware selectedrives C:\|E:\|
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\DB02133076F1F0442B22E93C48AEEC8D\SourceList\Net 1 e:\1917ac23d860ee5ddbb7\
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f4cb8ff0-bbb6-11dd-9d0a-0011f5efba4c}\_Autorun\DefaultIcon E:\AUTORUN\WDLOGO.ICO
    HKEY_CURRENT_USER Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f4cb8ff0-bbb6-11dd-9d0a-0011f5efba4c}\_Autorun\DefaultIcon E:\AUTORUN\WDLOGO.ICO
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{9A25302D-30C0-39D9-BD6F-21E6EC160475} InstallSource e:\b88c0c2a3eb8fbbfd0\
    HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D20352A90C039D93DBF6126ECE614057\InstallProperties InstallSource e:\b88c0c2a3eb8fbbfd0\
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\D20352A90C039D93DBF6126ECE614057\SourceList\Net 1 e:\b88c0c2a3eb8fbbfd0\
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5c1accca-a992-11dd-9cf3-0011f5efba4c}\_Autorun\DefaultIcon E:\dist/chocolat.data/favicon.ico
    HKEY_CURRENT_USER Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5c1accca-a992-11dd-9cf3-0011f5efba4c}\_Autorun\DefaultIcon E:\dist/chocolat.data/favicon.ico
    HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\8D81D36F6C56F404CB6CCB6111055157\SourceList\Net 1 e:\eb91941ab188dc667232719b\
    HKEY_LOCAL_MACHINE Software\Microsoft\Shared Tools\MSConfig\startupreg\ASuite command E:\Framakey\asuite\asuite.exe
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a0ba300c-fc29-11dc-9bcb-0011f5efba4c}\_Autorun\DefaultIcon E:\JDSecure\Windows\JDSecure31.exe
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a0ba300c-fc29-11dc-9bcb-0011f5efba4c}\Shell\AutoRun\command E:\JDSecure\Windows\JDSecure31.exe
    HKEY_CURRENT_USER Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a0ba300c-fc29-11dc-9bcb-0011f5efba4c}\_Autorun\DefaultIcon E:\JDSecure\Windows\JDSecure31.exe
    HKEY_CURRENT_USER Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a0ba300c-fc29-11dc-9bcb-0011f5efba4c}\Shell\AutoRun\command E:\JDSecure\Windows\JDSecure31.exe
    HKEY_LOCAL_MACHINE Software\Classes\CLSID\{0041494D-5032-4472-6F70-546172676574}\LocalServer32 E:\LiberKey\Apps\AIMP\App\AIMP\AIMP2.exe
    HKEY_LOCAL_MACHINE Software\Clients\StartMenuInternet\FirefoxLKL.exe\shell\open\command E:\LiberKey\Apps\Firefox\FirefoxLKL.exe
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5c1accca-a992-11dd-9cf3-0011f5efba4c}\Shell\iledefrance\command E:\start.exe
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5c1accca-a992-11dd-9cf3-0011f5efba4c}\Shell\AutoRun\command E:\start.exe
    HKEY_CURRENT_USER Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5c1accca-a992-11dd-9cf3-0011f5efba4c}\Shell\iledefrance\command E:\start.exe
    HKEY_CURRENT_USER Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5c1accca-a992-11dd-9cf3-0011f5efba4c}\Shell\AutoRun\command E:\start.exe
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f4cb8ff0-bbb6-11dd-9d0a-0011f5efba4c}\Shell\AutoRun\command E:\WDSetup.exe
    HKEY_CURRENT_USER Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f4cb8ff0-bbb6-11dd-9d0a-0011f5efba4c}\Shell\AutoRun\command E:\WDSetup.exe
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\is-D0M55.tmp\mbam-setup.tmp Setup/Uninstall
    HKEY_CURRENT_USER Software\Microsoft\Windows\ShellNoRoam\MUICache C:\DOCUME~1\FRDRIC~1\LOCALS~1\Temp\is-D0M55.tmp\mbam-setup.tmp Setup/Uninstall
    HKEY_USERS S-1-5-18\Software\Netscape\Netscape Navigator\User Trusted External Applications C:\PROGRA~1\WINDOW~2\wmplayer.exe Yes
    HKEY_USERS S-1-5-21-3117846246-626433616-840302518-1006\Software\Netscape\Netscape Navigator\User Trusted External Applications C:\PROGRA~1\WINDOW~2\wmplayer.exe Yes
    HKEY_USERS S-1-5-20\Software\Netscape\Netscape Navigator\User Trusted External Applications C:\PROGRA~1\WINDOW~2\wmplayer.exe Yes
    HKEY_USERS S-1-5-19\Software\Netscape\Netscape Navigator\User Trusted External Applications C:\PROGRA~1\WINDOW~2\wmplayer.exe Yes
    HKEY_USERS .DEFAULT\Software\Netscape\Netscape Navigator\User Trusted External Applications C:\PROGRA~1\WINDOW~2\wmplayer.exe Yes
    HKEY_CURRENT_USER Software\Netscape\Netscape Navigator\User Trusted External Applications C:\PROGRA~1\WINDOW~2\wmplayer.exe Yes

    0
  15. jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
     
    Ouaahh ,la liste est longue ...Je regarde ça et te donne un réponse demain .

    0
  16. FredM33 Messages postés 199 Statut Membre 16
     
    Ok, merci et à demain.
    Bonne soirée
    FredM
    0
  17. FredM33 Messages postés 199 Statut Membre 16
     
    Bonjour,
    Sans rien avoir touché depuis, le portable s'allume normalement et avec le disque dur externe branché dessus en permanence.
    Donc est revenu "à la normal". Ah l'informatique...........

    Encore merci à jfkpresident pour ton aide.

    FredM
    0
  18. jfkpresident Messages postés 13877 Statut Contributeur sécurité 1 175
     
    Tant mieux ^^

    De plus que je t'avais oublié :(

    Désinstalle UsbFix en le lançant puis choisis l'option 6 ,supprimes également ZhpDiag .

    Met a jour ta console java au passage : https://www.java.com/fr/download/manual.jsp

    @+

    0