Comment desinstaller internet security

bonsoir, j'ai copie les deux fichiers et maintenant j'en fait quoi ?

This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.
Ran as barbie on 14/02/2010 at 21:32:44.


Processes terminated by Rkill or while it was running:


C:\Users\barbie\AppData\Local\av.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Enigma Software Group\SpyHunter\Spyhunter3.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Users\barbie\Documents\Downloads\rkill.com


Rkill completed on 14/02/2010 at 21:32:48.

bonjour
le lien ne fonctionne pas quand je clic il ne s'execute pas

pas d'aiutre pc sous la main
existerait il un aytre logiciel ?? identique
hijackthis par exemple, j'ai reussi a avoir un rapport
merci de votre patience mais je suis debutante

j'ai lancé le programme qui a fonctionné, le scan est fait et tout mis en quarantaine
je fais quoi maintenant ??

je le trouve ou le rapport
je me repete mais desolé je suis debutante
merci

SUPERAntiSpyware Scan Log
https://www.superantispyware.com/

Generated 02/15/2010 at 04:44 PM

Application Version : 4.33.1000

Core Rules Database Version : 4585
Trace Rules Database Version: 2397

Scan type : Complete Scan
Total Scan Time : 00:49:36

Memory items scanned : 811
Memory threats detected : 1
Registry items scanned : 7767
Registry threats detected : 1
File items scanned : 40687
File threats detected : 138

Trojan.Agent/Gen-Rogue[AV]
C:\USERS\BARBIE\APPDATA\LOCAL\AV.EXE
C:\USERS\BARBIE\APPDATA\LOCAL\AV.EXE
C:\Windows\Prefetch\AV.EXE-C2FA347B.pf

Adware.Tracking Cookie
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\barbie@atdmt[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\barbie@bluestreak[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\barbie@pointroll[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\barbie@carrefourfr.solution.weborama[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\barbie@ad.yieldmanager[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\barbie@weborama[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\barbie@bs.serving-sys[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\barbie@t.bbtrack[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\barbie@serving-sys[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\barbie@tradedoubler[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\barbie@bouyguestelecom.solution.weborama[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\barbie@doubleclick[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\barbie@aimfar.solution.weborama[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\barbie@ads.vuze[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\barbie@smartadserver[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\barbie@content.yieldmanager[1].txt
C:\Users\barbie\AppData\Local\Temp\Low\Cookies\barbie@doubleclick[1].txt
C:\Users\barbie\AppData\Local\Temp\Low\Cookies\barbie@atdmt[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@doubleclick[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@ad.supertoinette[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@clickintext[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@ads.canalblog[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@clicksor[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@richmedia.yahoo[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@msnportal.112.2o7[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@ads.ad4game[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@adserver.aol[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@fr.classic.clickintext[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@smartadserver[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@simyofr.112.2o7[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@youporn[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@fr.cte.clickintext[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@lorealparis2010.solution.weborama[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@boursoramabanque.solution.weborama[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@affiliate.zantracker[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@socialmedia[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@ads.clickadserver[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@lorealprofessionnel2010.solution.weborama[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@statcounter[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@ads2.babyfrance[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@weboconnectiongroupe.solution.weborama[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@d2.advertserve[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@adtech[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@statse.webtrendslive[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@apmebf[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@click.mediadome[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@fr.partypoker[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@ads.128b[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@cltomedia[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@adviva[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@ero-advertising[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@ads.eorezo[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@www.smartadserver[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@weborama[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@adultadworld[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@microsoftinternetexplorer.112.2o7[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@ads.torrentmatrix[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@stats.canalblog[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@himedia.individuad[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@www.sexyavenue[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@carasexe[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@account.live[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@ads.youporn[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@i.o.d.cltomedia[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@bluestreak[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@media6degrees[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@mediaplex[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@virginmobile.solution.weborama[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@yadro[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@phoneandphone.122.2o7[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@ad.proxad[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@ad.zanox[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@click.superpaysys[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@ads.gamesbannernet[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@adcentriconline[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@bs.serving-sys[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@bizrate[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@fr.at.atwola[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@stats.conapt[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@xiti[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@zanox[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@ads.clicmanager[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@fl01.ct2.comclick[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@ad.yieldmanager[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@aimfar.solution.weborama[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@mondiale.sexy.carasexe[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@tracking.publicidees[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@advertstream[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@interflora2.solution.weborama[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@fastclick[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@www.googleadservices[11].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@www.googleadservices[10].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@serving-sys[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@cdn5.specificclick[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@www3.smartadserver[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@lfstmedia[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@t.bbtrack[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@dealtime[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@cetelem.solution.weborama[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@track.effiliation[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@track.effiliation[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@tracking.veille-referencement[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@ww57.smartadserver[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@tradedoubler[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@content.yieldmanager[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@bouyguestelecom.solution.weborama[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@partypoker[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@specificclick[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@content.yieldmanager[3].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@eas.apm.emediate[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@market1.the-adult-company[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@ads.fulldls[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@pointroll[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@rts.pgmediaserve[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@nissaneurope.112.2o7[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@nestlepurinafrance.solution.weborama[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@stats.searchtrack[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@1936.stats.stats[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@nestle.solution.weborama[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@adserver.seedpeer[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@247realmedia[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@www.googleadservices[6].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@atdmt[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@www.googleadservices[9].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@ad.wedoo[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@www.googleadservices[3].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@www.googleadservices[7].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@ttbdurex.solution.weborama[2].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@ads.bootcampmedia[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@advertising[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@www.googleadservices[8].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@clicktorrent[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@www.googleadservices[1].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@www.googleadservices[5].txt
C:\Users\barbie\AppData\Roaming\Microsoft\Windows\Cookies\Low\barbie@nextag[2].txt

Adware.MyWebSearch/FunWebProducts
HKCR\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239}

Trojan.WinLoad32/System
C:\SYSTEM VOLUME INFORMATION\SYSTEMRESTORE\FRSTAGING\WINDOWS\WINSXS\AMD64_MICROSOFT-WINDOWS-B..ENVIRONMENT-WINDOWS_31BF3856AD364E35_6.0.6001.18027_NONE_C54894DC4531F892\WINLOAD.EXE

bonsoir, alors ca a l'aire d'avoir marché car je n'ai plus de message d'internet security
parcontre des que je veux ouvrir qque chose comme google, picasa .... il y a une feunetre "ouvrir avec" qui apparait systematiquement
que faire pour plus quelle s'affiche
et des que je clic sur la "X" ca ouvre la page demandee
sinon j'ai toujours une bagniere enbas a droite rouge avec une X qui dit que mon ordi a peut etre un probeleme
voila merci d'avance si vous pouvez faire qque chose pour moi

non ca cest fai t avec succes
mais j'ai bien peur que ca m'ait supprimer des programmes comme msn
et a cahque fois que je veux me connecter a a un programme une fenetre s'ouvre ou il est indiqué "ouvrir avec" internet exploreur recommandé
et si je clic ok ca n'ouvre pas mon programme demande

je n'arrive plus a le lancer je suis bloque par la fenetre intempestive "ouvrir avec" internet exploreur

Rapport de ZHPDiag v1.25.120 par Nicolas Coolman
Run by barbie at 18/02/2010 08:52:07
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

---\\ Web Browser
MSIE: Internet Explorer v8.0.6001.18882

---\\ System Information
Platform : Windows (TM) Vista Home Premium (6.0.6002)
Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2814 MB (70% free)
System drive C: has 52 GB (36%) free of 142 GB

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 52 Go of 142 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 142 Go of 142 Go)
E:\ CD-ROM drive (Not Inserted)
F:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)


---\\ Processus lancés
[MD5.69B16C7B7746BA5C642FC05B3561FC73] - (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe
[MD5.29BE51557A3E686B297BE273EB17CA67] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
[MD5.062F3DB9AFA9C3CE0DA52F28595C0C6D] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
[MD5.0D9F0763B213DF519012DF96F02E9633] - (.Hewlett-Packard - HpqSRmon.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
[MD5.318270684C812E88FE63DC4C3021FC2B] - (.ALWIL Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
[MD5.EE90A04DC33568E35D35300D7B2AC663] - (.Acer Incorporated - SMP Systray.) -- C:\Program Files (x86)\Packard Bell\SetUpMyPC\SmpSys.exe
[MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
[MD5.18B4B12358EFCF68D76812058A26181F] - (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
[MD5.8179A1283F8CCB779B91635517A02E20] - (.Shareaza Development Team - Shareaza Ultimate File Sharing.) -- C:\Program Files (x86)\Shareaza\Shareaza.exe
[MD5.BF9EAB227D409CE1E75C23BB10CF5DBC] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
[MD5.D2D23A999F3795DEC7EC439BE1933E95] - (.SUPERAntiSpyware.com - SUPERAntiSpyware Application.) -- C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe
[MD5.9E35FF7F943AE0FB89192BFE058B7FD4] - (.Microsoft Corporation - Volet Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
[MD5.E8FE4FCE23D2809BD88BCC1D0F8408CE] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
[MD5.CDA9F1373805AF88F6FA4F2064BBA24D] - (.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
[MD5.61D3B90C1600165110470502835FB646] - (.ALWIL Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
[MD5.8B7AC24E9C299FB1C3F519DF94E7E05F] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 175.4.) -- C:\Windows\system32\nvvsvc.exe
[MD5.875E4E0661F3A5994DF9E5E3A0A4F96B] - (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) -- C:\Windows\SysWOW64\IoctlSvc.exe
[MD5.40348DCEC0712ED42231C5F90A69A690] - (.Microsoft Corporation - Processus de l’autorité de sécurité locale.) -- C:\Windows\system32\lsass.exe
[MD5.271077B91D7AD1B616F8AFDFE8E3F981] - (.Microsoft Corporation - Microsoft SeaPort Search Enhancement Broker.) -- C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
[MD5.A9A27A8E257B45A604FDAD4F26FE7241] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe
[MD5.EADA445EAEDD1D7DF4C5EB42B3612729] - (.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\System32\spoolsv.exe
[MD5.A2AC37A1EEF83BD9E912B0EFCBEA06BD] - (.Microsoft Corporation - Indexeur Microsoft Windows Search.) -- C:\Windows\system32\SearchIndexer.exe


---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=userinit.exe
F2 - REG:system.ini: Shell=explorer.exe


---\\ Pages de démarrage d'Internet Explorer (R0)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = search.conduit.com?searchsource=10&ctid=ct2124320
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr


---\\ Pages de recherche d'Internet Explorer (R1)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch


---\\ Internet Explorer URLSearchHook (R3)
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)) -- C:\Windows\SysWOW64\ieframe.dll


---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} . (.Shareaza Development Team - Shareaza Web Download Hook.) -- C:\Program Files (x86)\Shareaza\RazaWebHook32.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\Program Files (x86)\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} . (.Ask.com - Ask.com Search Assistant.) -- C:\Program Files (x86)\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} . (.Ask.com - Ask Toolbar.) -- C:\Program Files (x86)\AskTBar\bar\1.bin\ASKTBAR.DLL
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll


---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} . (.Ask.com - Ask Toolbar.) -- C:\Program Files (x86)\AskTBar\bar\1.bin\ASKTBAR.DLL
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll


---\\ Applications démarrées automatiquement par le registre (O4)
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] . (.Hewlett-Packard - HpqSRmon.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [avast5] . (.ALWIL Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
O4 - HKCU\..\Run: [SmpcSys] . (.Acer Incorporated - SMP Systray.) -- C:\Program Files (x86)\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
O4 - HKCU\..\Run: [Shareaza] . (.Shareaza Development Team - Shareaza Ultimate File Sharing.) -- C:\Program Files (x86)\Shareaza\Shareaza.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] . (.SUPERAntiSpyware.com - SUPERAntiSpyware Application.) -- C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk . (.Hewlett-Packard Co. - HP Digital Imaging Monitor.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: OpenOffice.org 3.1.lnk . (.Pas de propriétaire - Pas de description.) -- C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe


---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} . (.not file.) -
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\favicon.ico
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~2\MICROS~1\Office12\REFBARH.ICO
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet Explorer.) -- C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll


---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll


---\\ Protocole additionnel et piratage de protocole (O18)
O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL


---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: !SASWinLogon . (.SUPERAntiSpyware.com - SUPERAntiSpyware WinLogon Processor.) -- C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll


---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\SysWOW64\webcheck.dll


---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll


---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: (AdobeActiveFileMonitor6.0) . (.Pas de propriétaire - Pas de description.) - C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: (avast! Antivirus) . (.ALWIL Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: (nvsvc) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\nvvsvc.exe
O23 - Service: (PLFlash DeviceIoControl Service) . (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) - C:\Windows\SysWOW64\IoctlSvc.exe
O23 - Service: C:\Windows\system32\samsrv.dll (SamSs) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\lsass.exe
O23 - Service: C:\Windows\system32\SLsvc.exe (slsvc) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\SLsvc.exe
O23 - Service: C:\Windows\system32\spoolsv.exe (Spooler) . (.Pas de propriétaire - Pas de description.) - C:\Windows\System32\spoolsv.exe


---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\User_Feed_Synchronization-{44DBB14F-45D8-45EB-8A9B-365275350F1B}.job


---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Mail 7 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11CF-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r12.) -- C:\Windows\SysWow64\Macromed\Flash\Flash10a.ocx


---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (AFD) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (cdrom) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\Drivers\dfsc.sys
O41 - Driver: (i8042prt) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS\i8042prt.sys
O41 - Driver: (kbdclass) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS\kbdclass.sys
O41 - Driver: (mouclass) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS\mouclass.sys
O41 - Driver: (NetBIOS) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS\netbios.sys
O41 - Driver: (netbt) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS\netbt.sys
O41 - Driver: (nsiproxy) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: (RasAcd) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS\rasacd.sys
O41 - Driver: (rdbss) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (RDPENCDD) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\drivers\rdpencdd.sys
O41 - Driver: (SASDIFSV) . (.SUPERAdBlocker.com and SUPERAntiSpyware.com - SASDIFSV.SYS.) - C:\Program Files (x86)\SUPERAntiSpyware\SASDIFSV.sys
O41 - Driver: (SASKUTIL) . (.SUPERAdBlocker.com and SUPERAntiSpyware.com - SASKUTIL.SYS.) - C:\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.sys
O41 - Driver: (TermDD) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (Wanarpv6) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS\wanarp.sys


---\\ Logiciels installés (O42)
O42 - Logiciel: AVS Update Manager 1.0 - (.Online Media Technologies Ltd..)
O42 - Logiciel: AVS Video Converter 6 - (.Online Media Technologies Ltd..)
O42 - Logiciel: AVS4YOU Software Navigator 1.3 - (.Online Media Technologies Ltd..)
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.)
O42 - Logiciel: Adobe Photoshop Elements 6.0 - (.Adobe Systems, Inc..)
O42 - Logiciel: Adobe Reader 9 - Français - (.Adobe Systems Incorporated.)
O42 - Logiciel: Ask Toolbar - (.Ask.com.)
O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.)
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.)
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..)
O42 - Logiciel: Google Update Helper - (.Google Inc..)
O42 - Logiciel: HP Update - (.Hewlett-Packard.)
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.)
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.)
O42 - Logiciel: Identity Card - (.Packard Bell.)
O42 - Logiciel: InfoCentre - (.Packard Bell.)
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.)
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.)
O42 - Logiciel: K-Lite Codec Pack 5.6.1 (Full) - (.Pas de propriétaire.)
O42 - Logiciel: MSVCRT - (.Microsoft.)
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.)
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.)
O42 - Logiciel: MetaBoli - (.Pas de propriétaire.)
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.)
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Office Live Add-in 1.3 - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.)
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Office Suite Activation Assistant - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.)
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.)
O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.)
O42 - Logiciel: Nero 8 Essentials - (.Nero AG.)
O42 - Logiciel: OpenOffice.org 3.1 - (.OpenOffice.org.)
O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.)
O42 - Logiciel: Packard Bell Customer Registration - (.Packard Bell.)
O42 - Logiciel: Packard Bell Recovery Management - (.Acer Incorporated.)
O42 - Logiciel: PackardBell ScreenSaver - (.PackardBell.)
O42 - Logiciel: Photorécit 3 pour Windows - (.Microsoft Corporation.)
O42 - Logiciel: Picasa 3 - (.Google, Inc..)
O42 - Logiciel: Quick Zip 4.60.019 - (.Joseph Leung.)
O42 - Logiciel: RealPlayer - (.RealNetworks.)
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..)
O42 - Logiciel: SUPERAntiSpyware Free Edition - (.SUPERAntiSpyware.com.)
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.)
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB973704) - (.Microsoft.)
O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB973593) - (.Microsoft.)
O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB957789) - (.Microsoft.)
O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.)
O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.)
O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB969613) - (.Microsoft.)
O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.)
O42 - Logiciel: SetUpMyPC - (.Packard Bell.)
O42 - Logiciel: Shareaza 2.5.1.0 - (.Shareaza Development Team.)
O42 - Logiciel: Skype web features - (.Skype Technologies S.A..)
O42 - Logiciel: Skype™ 4.1 - (.Skype Technologies S.A..)
O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.)
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.)
O42 - Logiciel: Update for Microsoft Office InfoPath 2007 (KB976416) - (.Microsoft.)
O42 - Logiciel: Update for Microsoft Office Word 2007 (KB974561) - (.Microsoft.)
O42 - Logiciel: Updator - (.Packard Bell.)
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.)
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.)
O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.)
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.)
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.)
O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.)
O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.)
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.)
O42 - Logiciel: avast! Free Antivirus - (.Alwil Software.)
O42 - Logiciel: neroxml - (.Nero AG.)
O42 - Logiciel: nutrical - (.Pas de propriétaire.)

bonsoir, je n'arrive pas a ouvrir ce dernier fichier!!!! vous n 'avez pas un equivalent ???
j'avais envie de formater mon ordi et tout recommencer !!!!!
qu'en pensez vous ????

-----------\\ ToolBar S&D 1.2.9 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
x64-based PC ( Multiprocessor Free : Pentium(R) Dual-Core CPU E5200 @ 2.50GHz )
BIOS : Default System BIOS
USER : barbie ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:141 Go (Free:49 Go)
D:\ (Local Disk) - NTFS - Total:141 Go (Free:141 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)

"C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
Option : [2] ( 20/02/2010|11:05 )

[ UAC => 0 ]

internet exploreur me bloque, comme d'hab
je peux rien installer
ca me saoul

ca ne fonctionne pas non plus en mode sans echec
internet exploreur bloque l'acces au telechargement

List'em by g3n-h@ckm@n 1.2.5.3

User : barbie (Administrateurs)
Update on 19/02/2010 by g3n-h@ckm@n ::::: 13.15
Start at: 13:16:02 | 22/02/2010
Contact : https://forums.commentcamarche.net/forum/virus-securite-7

Pentium(R) Dual-Core CPU E5200 @ 2.50GHz
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 64-bit) # Service Pack 2
Internet Explorer 8.0.6001.18882
Windows Firewall Status : Disabled

C:\ -> Disque fixe local | 141,74 Go (53,59 Go free) [OS] | NTFS
D:\ -> Disque fixe local | 141,7 Go (141,6 Go free) [DATA] | NTFS
E:\ -> Disque CD-ROM
F:\ -> Disque amovible
G:\ -> Disque amovible
H:\ -> Disque amovible
I:\ -> Disque amovible

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
C:\Windows\system32\HidService.exe
C:\Windows\SysWOW64\svchost.exe
C:\Windows\SysWOW64\IoctlSvc.exe
C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Windows Live\Toolbar\wltuser.exe
C:\Program Files (x86)\List_Kill'em\List_Kill'em.scr
C:\Windows\SysWOW64\conime.exe
C:\Windows\SysWOW64\cmd.exe
C:\Users\barbie\AppData\Local\Temp\FCD6.tmp\pv.exe

======================
Keys "Run"
======================
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
WindowsWelcomeCenter REG_SZ rundll32.exe oobefldr.dll,ShowWelcomeCenter
SmpcSys REG_SZ C:\Program Files (x86)\Packard Bell\SetUpMyPC\SmpSys.exe
swg REG_SZ "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
msnmsgr REG_SZ "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
Shareaza REG_SZ "C:\Program Files (x86)\Shareaza\Shareaza.exe" -tray
Skype REG_SZ "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
WMPNSCFG REG_SZ C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
SUPERAntiSpyware REG_SZ C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Adobe Reader Speed Launcher REG_SZ "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
TkBellExe REG_SZ "C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
HP Software Update REG_SZ C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
hpqSRMon REG_SZ C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

=====================
Other Keys
=====================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
ConsentPromptBehaviorAdmin REG_DWORD 2 (0x2)
ConsentPromptBehaviorUser REG_DWORD 1 (0x1)
EnableInstallerDetection REG_DWORD 1 (0x1)
EnableLUA REG_DWORD 0 (0x0)
EnableSecureUIAPaths REG_DWORD 1 (0x1)
EnableVirtualization REG_DWORD 1 (0x1)
PromptOnSecureDesktop REG_DWORD 1 (0x1)
ValidateAdminCodeSignatures REG_DWORD 0 (0x0)
dontdisplaylastusername REG_DWORD 0 (0x0)
legalnoticecaption REG_SZ
legalnoticetext REG_SZ
scforceoption REG_DWORD 0 (0x0)
shutdownwithoutlogon REG_DWORD 1 (0x1)
undockwithoutlogon REG_DWORD 1 (0x1)
FilterAdministratorToken REG_DWORD 0 (0x0)
EnableUIADesktopToggle REG_DWORD 0 (0x0)

===============
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

===============
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
NoActiveDesktop REG_DWORD 1 (0x1)
NoActiveDesktopChanges REG_DWORD 1 (0x1)
ForceActiveDesktopOn REG_DWORD 0 (0x0)
BindDirectlyToPropertySetStorage REG_DWORD 0 (0x0)

===============
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
AppInit_DLLS REG_SZ

===============
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
Shell REG_SZ explorer.exe
Userinit REG_SZ userinit.exe
VmApplet REG_SZ rundll32 shell32,Control_RunDLL "sysdm.cpl"
ReportBootOk REG_SZ 1
AutoRestartShell REG_DWORD 1 (0x1)
LegalNoticeCaption REG_SZ
LegalNoticeText REG_SZ
PowerdownAfterShutdown REG_SZ 0
ShutdownWithoutLogon REG_SZ 0
cachedlogonscount REG_SZ 10
forceunlocklogon REG_DWORD 0 (0x0)
passwordexpirywarning REG_DWORD 14 (0xe)
Background REG_SZ 0 0 0
DebugServerCommand REG_SZ no
WinStationsDisabled REG_SZ 0

===============

===============
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

===============
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

===============
ActivX controls
===============

===============
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{26923b43-4d38-484f-9b9e-de460746276c}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3af36230-a269-11d1-b5bf-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA855-CC51-11CF-AAFA-00AA00B6015F}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{45ea75a0-a269-11d1-b5bf-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f645220-306d-11d2-995d-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5fd399c0-a70a-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{630b1da0-b465-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7C028AF8-F614-47B3-82DA-BA94E41B1089}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4340}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4383}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9381D8F2-0288-11D0-9501-00AA00B911A5}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C9E9A340-D1F1-11D0-821E-444553540600}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D27CDB6E-AE6D-11CF-96B8-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{de5aed00-a4bf-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E92B03AB-B707-11d2-9CBD-0000F87A369E}

==============
BHO :
======
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{0EEDB912-C5FA-486F-8334-57288578C627}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9CB65201-89C4-402c-BA80-02D8C59F9B1D}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{FE063DB1-4EC0-403e-8DD8-394C54984B2C}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]

================
Internet Explorer :
================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ https://www.msn.com/fr-fr

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ search.conduit.com?searchsource=10&ctid=ct2124320

========
Services
========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]

Ndisuio : 0x3 ( OK = 3 )
EapHost : 0x3 ( OK = 2 )
Wlansvc : 0x3 ( OK = 2 )
SharedAccess : 0x4 ( OK = 2 )
windefend : 0x2 ( OK = 2 )
wuauserv : 0x2 ( OK = 2 )
wscsvc : 0x2 ( OK = 2 )

=========
Atapi.sys
=========

%%%% HASHDEEP-1.0
%%%% size,md5,sha256,filename
## Invoked from: C:\Users\barbie\AppData\Local\Temp\FCD6.tmp
## C:\> hashdeep C:\Windows\Sysnative\Drivers\atapi.sys
##
20952,e68d9b3a3905619732f7fe039466a623,74c0b29e54ef064660b9c756e03d5a7eb78f261eff768eb6e74d261fbd34340d,C:\Windows\Sysnative\Drivers\atapi.sys


Sources
=======

C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_3956c39dd9e73fd2\atapi.sys
C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_3b423ca9d7090b1e\atapi.sys

Référence :
==========

Win XP_32b : a64013e98426e1877cb653685c5c0009
Win XP_SP2_32b : CDFE4411A69C224BD1D11B2DA92DAC51
Win XP_SP3_32b : 9F3A2F5AA6875C72BF062C712CFA2674
Vista_32b : e03e8c99d15d0381e02743c36afc7c6f
Vista_SP1_32b : 2d9c903dc76a66813d350a562de40ed9
Vista_SP2_32b : 1F05B78AB91C9075565A9D8A4B880BC4
Vista_SP2_64b : 1898FAE8E07D97F2F6C2D5326C633FAC
Windows 7_32b : 80C40F7FDFC376E4C5FEEC28B41C119E
Windows 7_64b : 02062C0B390B7729EDC9E69C680A6F3C

=======
Drive :
=======


¤¤¤¤¤¤¤¤¤¤ Files/folders :

Present !! : C:\Program Files (x86)\Mozilla FireFox\Components\AskSearch.js
Present !! : C:\Program Files (x86)\temp
Present !! : C:\Users\barbie\Local Settings\Temp\alm.log
Present !! : C:\Users\barbie\Local Settings\Temp\amt.log
Present !! : C:\Users\barbie\LOCAL Settings\Temp\Avast-Antivirus-Gratuit-5.exe
Present !! : C:\Users\barbie\LOCAL Settings\Temp\GoogleChromeInstaller.exe
Present !! : C:\Users\barbie\LOCAL Settings\Temp\GoogleUpdate.exe579270
Present !! : C:\Users\barbie\LOCAL Settings\Temp\igraal.exe
Present !! : C:\Users\barbie\LOCAL Settings\Temp\kt_setup.exe
Present !! : C:\Users\barbie\LOCAL Settings\Temp\Messenger_Plus_Live.exe
Present !! : C:\Users\barbie\LOCAL Settings\Temp\msgA103.exe
Present !! : C:\Users\barbie\LOCAL Settings\Temp\MsgPlusUninstall.exe
Present !! : C:\Users\barbie\LOCAL Settings\Temp\SHSetup.exe
Present !! : C:\Users\barbie\LOCAL Settings\Temp\SSUPDATE.EXE
Present !! : C:\Users\barbie\LOCAL Settings\Temp\isconfig.dat
Present !! : C:\Users\barbie\LOCAL Settings\Temp\goopdate.dll579280
Present !! : C:\Users\barbie\LOCAL Settings\Temp\goopdateres_fr.dll57928f

¤¤¤¤¤¤¤¤¤¤ Keys :

Present !! : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges
Present !! : "HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}"
Present !! : "HKCU\software\microsoft\internet explorer\searchscopes\{CF739809-1C6C-47C0-85B9-569DBB141420}"
Present !! : "HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}"
Present !! : "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CB65201-89C4-402c-BA80-02D8C59F9B1D}"
Present !! : "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FE063DB1-4EC0-403e-8DD8-394C54984B2C}"
Present !! : HKCR\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239}
Present !! : HKCR\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}
Present !! : HKCR\secfile
Present !! : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}
Present !! : HKLM\Software\Classes\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239}
Present !! : HKLM\Software\Classes\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179}
Present !! : HKLM\Software\Classes\CLSID\{FE063DB1-4EC0-403e-8DD8-394C54984B2C}
Present !! : HKLM\Software\Classes\CLSID\{FE063DB9-4EC0-403e-8DD8-394C54984B2C}
Present !! : HKLM\Software\Classes\CLSID\{FE063DBB-4EC0-403e-8DD8-394C54984B2C}
Present !! : HKLM\Software\Classes\TypeLib\{937936AF-28CA-4973-B8AE-F250406149A2}

============

driver loading error catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-22 13:23:57
Windows 6.0.6002 Service Pack 2 WOW64 NTFS

scanning hidden files ...

IPC error: 2 Le fichier spécifié est introuvable.
C:\Windows\System32\$Acer$.cmd 23 bytes
C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 3216 bytes
C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 3216 bytes
C:\Windows\System32\EventProviders
C:\Windows\System32\EventProviders\de-de
C:\Windows\System32\EventProviders\de-de\spcmsg.dll.mui 5632 bytes executable
C:\Windows\System32\EventProviders\en-us
C:\Windows\System32\EventProviders\en-us\spcmsg.dll.mui 5120 bytes executable
C:\Windows\System32\EventProviders\es-es
C:\Windows\System32\EventProviders\es-es\spcmsg.dll.mui 5632 bytes executable
C:\Windows\System32\EventProviders\fr-fr
C:\Windows\System32\EventProviders\fr-fr\spcmsg.dll.mui 5632 bytes executable
C:\Windows\System32\EventProviders\ja-jp
C:\Windows\System32\EventProviders\ja-jp\spcmsg.dll.mui 4608 bytes executable
C:\Windows\System32\EventProviders\spcmsg.dll 14336 bytes executable
C:\Windows\System32\LocalGroupAdminAdd.log 15 bytes
C:\Windows\System32\Local_LLU.log 49 bytes
C:\Windows\System32\AERTAC64.dll 166400 bytes executable
C:\Windows\System32\AERTAR64.dll 67072 bytes executable
C:\Windows\System32\config\RegBack\COMPONENTS 51167232 bytes
C:\Windows\System32\config\RegBack\COMPONENTS.LOG1 262144 bytes
C:\Windows\System32\config\RegBack\COMPONENTS.LOG2 0 bytes
C:\Windows\System32\config\RegBack\COMPONENTS.OLD 51167232 bytes
C:\Windows\System32\config\RegBack\DEFAULT 233472 bytes
C:\Windows\System32\config\RegBack\DEFAULT.LOG1 262144 bytes
C:\Windows\System32\config\RegBack\DEFAULT.LOG2 0 bytes
C:\Windows\System32\config\RegBack\DEFAULT.OLD 233472 bytes
C:\Windows\System32\config\RegBack\SAM 57344 bytes
C:\Windows\System32\config\RegBack\SAM.LOG1 262144 bytes
C:\Windows\System32\config\RegBack\SAM.LOG2 0 bytes
C:\Windows\System32\config\RegBack\SAM.OLD 57344 bytes
C:\Windows\System32\config\RegBack\SECURITY 20480 bytes
C:\Windows\System32\config\RegBack\SECURITY.LOG1 262144 bytes
C:\Windows\System32\config\RegBack\SECURITY.LOG2 0 bytes
C:\Windows\System32\config\RegBack\SECURITY.OLD 20480 bytes
C:\Windows\System32\config\RegBack\SOFTWARE 66486272 bytes
C:\Windows\System32\config\RegBack\SOFTWARE.LOG1 262144 bytes
C:\Windows\System32\config\RegBack\SOFTWARE.LOG2 0 bytes
C:\Windows\System32\config\RegBack\SOFTWARE.OLD 66486272 bytes
C:\Windows\System32\config\RegBack\SYSTEM 20918272 bytes
C:\Windows\System32\config\RegBack\SYSTEM.LOG1 1048576 bytes
C:\Windows\System32\config\RegBack\SYSTEM.LOG2 0 bytes
C:\Windows\System32\config\RegBack\SYSTEM.OLD 20918272 bytes
C:\Windows\System32\config\BCD-Template 262144 bytes
C:\Windows\System32\config\BCD-Template.LOG 41984 bytes
C:\Windows\System32\config\BCD-Template.LOG1 0 bytes
C:\Windows\System32\config\BCD-Template.LOG2 0 bytes
C:\Windows\System32\config\COMPONENTS 51380224 bytes
C:\Windows\System32\config\COMPONENTS.LOG 1024 bytes
C:\Windows\System32\config\COMPONENTS.LOG1 262144 bytes
C:\Windows\System32\config\COMPONENTS.LOG2 0 bytes
C:\Windows\System32\config\COMPONENTS.SAV 26247168 bytes
C:\Windows\System32\config\DEFAULT 262144 bytes
C:\Windows\System32\config\DEFAULT.LOG 1024 bytes
C:\Windows\System32\config\DEFAULT.LOG1 262144 bytes
C:\Windows\System32\config\DEFAULT.LOG2 0 bytes
C:\Windows\System32\config\DEFAULT.SAV 110592 bytes
C:\Windows\System32\config\SAM 262144 bytes
C:\Windows\System32\config\SAM.LOG 1024 bytes
C:\Windows\System32\config\SAM.LOG1 262144 bytes
C:\Windows\System32\config\SAM.LOG2 0 bytes
C:\Windows\System32\config\SECURITY 262144 bytes
C:\Windows\System32\config\SECURITY.LOG 1024 bytes
C:\Windows\System32\config\SECURITY.LOG1 262144 bytes
C:\Windows\System32\config\SECURITY.LOG2 0 bytes
C:\Windows\System32\config\SECURITY.SAV 20480 bytes
C:\Windows\System32\config\SOFTWARE 66846720 bytes
C:\Windows\System32\config\SOFTWARE.LOG 1024 bytes
C:\Windows\System32\config\SOFTWARE.LOG1 262144 bytes
C:\Windows\System32\config\SOFTWARE.LOG2 0 bytes
C:\Windows\System32\config\SOFTWARE.SAV 19435520 bytes
C:\Windows\System32\config\SYSTEM.LOG 1024 bytes
C:\Windows\System32\config\SYSTEM.LOG1 262144 bytes
C:\Windows\System32\config\SYSTEM.LOG2 0 bytes
C:\Windows\System32\config\SYSTEM.SAV 1806336 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\d3d9caps64.dat 732 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\desktop.ini 6 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\GDIPFONTCACHEV1.DAT 71272 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog00.sqm 332 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog01.sqm 308 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog02.sqm 248 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog03.sqm 260 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog04.sqm 260 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog05.sqm 260 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog06.sqm 260 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog07.sqm 248 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog08.sqm 248 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog09.sqm 260 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog10.sqm 248 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog11.sqm 308 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog12.sqm 308 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog13.sqm 260 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog14.sqm 260 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog15.sqm 260 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog16.sqm 248 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog17.sqm 248 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog18.sqm 260 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog19.sqm 248 bytes
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FBHH10U7
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FBHH10U7\desktop.ini 67 bytes
C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Speech
C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Speech\Files
C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Speech\Files\UserLexicons
C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Speech\Files\UserLexicons\SP_CD0F61CF65A84E47826A20502FA272A3.dat 940 bytes
C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache
C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat 245760 bytes
C:\Windows\System32\config\systemprofile\Contacts
C:\Windows\System32\config\systemprofile\Contacts\desktop.ini 412 bytes
C:\Windows\System32\config\systemprofile\ntuser.dat{61ba1ebc-c7c3-11dc-b700-806e6f6e6963}.TM.blf 65536 bytes
C:\Windows\System32\config\systemprofile\ntuser.dat{61ba1ebc-c7c3-11dc-b700-806e6f6e6963}.TMContainer00000000000000000001.regtrans-ms 524288 bytes
C:\Windows\System32\config\systemprofile\ntuser.dat{61ba1ebc-c7c3-11dc-b700-806e6f6e6963}.TMContainer00000000000000000002.regtrans-ms 524288 bytes
C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.0.regtrans-ms 5242880 bytes
C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.1.regtrans-ms 5242880 bytes
C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.2.regtrans-ms 5242880 bytes
C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101A}.TxR.3.regtrans-ms 5242880 bytes
C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101A}.TxR.4.regtrans-ms 5242880 bytes
C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101A}.TxR.5.regtrans-ms 5242880 bytes
C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.blf 65536 bytes
C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TM.blf 65536 bytes
C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000001.regtrans-ms 524288 bytes
C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000002.regtrans-ms 524288 bytes
C:\Windows\System32\Boot\fr-FR
C:\Windows\System32\brcoinst.dll 19456 bytes executable
C:\Windows\System32\catroot
C:\Windows\System32\catroot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package-MiniLP~31bf3856ad364e35~amd64~ar-SA~6.0.6002.18156.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package-MiniLP~31bf3856ad364e35~amd64~bg-BG~6.0.6002.18156.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package-MiniLP~31bf3856ad364e35~amd64~cs-CZ~6.0.6002.18156.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package-MiniLP~31bf3856ad364e35~amd64~da-DK~6.0.6002.18156.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package-MiniLP~31bf3856ad364e35~amd64~de-DE~6.0.6002.18156.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package-MiniLP~31bf3856ad364e35~amd64~el-GR~6.0.6002.18156.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package-MiniLP~31bf3856ad364e35~amd64~en-US~6.0.6002.18156.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 260946 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 816142 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-LanguagePack-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ClipsInTheLibrary-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ClipsInTheLibrary-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9581 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Encoder-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 11039 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 14551 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Anytime-Upgrade-HomePremium-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 10169 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package-MiniLP~31bf3856ad364e35~amd64~es-ES~6.0.6002.18156.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package-MiniLP~31bf3856ad364e35~amd64~ja-JP~6.0.6002.18156.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package-MiniLP~31bf3856ad364e35~amd64~pt-PT~6.0.6002.18156.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package-TopLevel~31bf3856ad364e35~amd64~~6.0.6002.18156.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DFSR-ClientEdition-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9871 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DFSR-ClientEdition-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 10757 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DGT-Package-MiniLP~31bf3856ad364e35~amd64~fr-FR~7.0.6002.18107.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DGT-Package-TopLevel~31bf3856ad364e35~amd64~~7.0.6002.18107.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DGT-Package~31bf3856ad364e35~amd64~fr-FR~7.0.6002.18107.cat 14036 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DGT-Package~31bf3856ad364e35~amd64~~7.0.6002.18107.cat 64493 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Disk-Diagnosis-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9589 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Disk-Diagnosis-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 10169 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 8123 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GPUPipeline-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 8413 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GPUPipeline-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 10749 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-CoreClientUAHP-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 23493 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-Customization-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 8703 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-Customization-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9283 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-HomePremiumEdition~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 13343 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 65720 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 120148 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 58211 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Indexing-Service-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 11933 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Indexing-Service-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 13689 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-LanguagePack~31bf3856ad364e35~amd64~fr-FR~8.0.6001.18702.cat 58700 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-Package-MiniLP~31bf3856ad364e35~amd64~en-US~8.0.6001.18702.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-Package-TopLevel~31bf3856ad364e35~amd64~~8.0.6001.18702.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-Package~31bf3856ad364e35~amd64~en-US~8.0.6001.18702.cat 7591 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-Package~31bf3856ad364e35~amd64~~8.0.6001.18702.cat 7576 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-8-RTM-Update~31bf3856ad364e35~amd64~en-US~8.0.6001.18702.cat 58700 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~de-DE~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~el-GR~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~en-US~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~es-ES~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~et-EE~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~fi-FI~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~he-IL~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~hr-HR~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~hu-HU~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~it-IT~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~ja-JP~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~ko-KR~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~lv-LV~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~nb-NO~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~nl-NL~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~pl-PL~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~pt-BR~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~pt-PT~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~ru-RU~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~sk-SK~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~sl-SI~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~sr-LATN-CS~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~sv-SE~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~th-TH~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~tr-TR~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~uk-UA~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~zh-CN~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~zh-HK~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~zh-TW~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-TopLevel~31bf3856ad364e35~amd64~~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~ar-SA~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~cs-CZ~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~da-DK~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~de-DE~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~el-GR~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~en-US~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~es-ES~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~et-EE~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~fr-FR~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~he-IL~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~hr-HR~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~hu-HU~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~it-IT~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~ja-JP~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~ko-KR~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~lv-LV~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~nb-NO~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~nl-NL~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~pl-PL~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~pt-BR~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~pt-PT~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~ro-RO~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~fr-FR~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~lt-LT~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~ro-RO~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~tk-TM~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~bg-BG~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~fi-FI~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~sk-SK~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~sl-SI~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~sr-LATN-CS~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~sv-SE~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~th-TH~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~tk-TM~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~tr-TR~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~zh-CN~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~zh-HK~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~zh-TW~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~~6.1.1000.18273.cat 84331 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Format-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 21341 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Format-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 228341 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MediaCenter-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 24861 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MediaPlayer-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 25465 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MediaPlayer-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 121675 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Basic-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 10177 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Basic-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 11329 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 11353 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 12215 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-SideShow-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 11643 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Help-AnytimeUpgrade-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Help-AnytimeUpgrade-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 8703 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MovieMaker-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 12239 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MovieMaker-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 17773 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MSMQ-Client-Home-Premium-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 11329 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MSMQ-Client-Home-Premium-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 28985 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~en-US~6.0.6000.16386.cat 27351 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 137938 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OpticalMediaDisc-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 10177 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OpticalMediaDisc-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 124242 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ParentalControls-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 21397 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ParentalControls-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 26053 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-AdhocMeetings-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-AdhocMeetings-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 13423 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-Full-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 22958 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 21349 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 28663 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-Foundation-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 12247 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-Foundation-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 12843 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-XPSServices-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 8413 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-XPSServices-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 10161 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RasRip-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RDC-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 8413 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RDC-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9879 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RecDisc-SDP-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6001.18000.cat 13280 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RecDisc-SDP-Package~31bf3856ad364e35~amd64~~6.0.6001.18000.cat 18167 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RemoteAssistance-Package-Client~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 11957 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RemoteAssistance-Package-Client~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 14019 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~ru-RU~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~uk-UA~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MediaCenter-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 98375 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-SideShow-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 14543 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 53261 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-Full-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 16919 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RasRip-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AutomationAPI-Package~31bf3856ad364e35~amd64~es-ES~6.0.6002.18156.cat 10508 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package-MiniLP~31bf3856ad364e35~amd64~da-DK~6.1.1000.18273.cat 10638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Center-TV-Pack-Package~31bf3856ad364e35~amd64~lt-LT~6.1.1000.18273.cat 24444 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RemovableStorageManagement-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 12545 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_19_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 15328 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB957097~31bf3856ad364e35~amd64~~6.0.1.0.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_48_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 99216 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB952287_client_0~31bf3856ad364e35~amd64~~6.0.1.0.cat 10640 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB958215_client~31bf3856ad364e35~amd64~~6.0.1.0.cat 8799 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB973879~31bf3856ad364e35~amd64~~6.0.2.0.cat 7917 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-RemovableStorageManagement-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 14027 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SampleContent-Movies-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 10733 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SampleContent-Music-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 14793 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ServicingBaseline-HomePremium-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 8703 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Shell-InboxGames-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 13971 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Shell-InboxGames-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 18353 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Shell-PremiumInboxGames-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 10757 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Sidebar-Killbits-SDP-Package~31bf3856ad364e35~amd64~~6.0.6001.18000.cat 11218 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SimpleTCP-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SimpleTCP-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9291 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SNMP-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 14293 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SNMP-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 30879 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SystemRestore-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 12545 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SystemRestore-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 18638 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-TabletPC-OC-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 28163 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Client-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Client-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9291 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Server-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 10177 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Telnet-Server-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 11047 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-TFTP-Client-Package~31bf3856ad364e35~amd64~fr-FR~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-TFTP-Client-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 9001 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-UIRibbon-Package-MUI-MiniLP~31bf3856ad364e35~amd64~fr-FR~7.0.6002.18108.cat 7591 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-UIRibbon-Package-MUI~31bf3856ad364e35~amd64~fr-FR~7.0.6002.18108.cat 10508 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-UIRibbon-Package-TopLevel~31bf3856ad364e35~amd64~~7.0.6002.18108.cat 7591 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-UIRibbon-Package~31bf3856ad364e35~amd64~~7.0.6002.18108.cat 12838 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-VistaServicePack-SysHiper-SP1-Package~31bf3856ad364e35~amd64~~6.0.6002.18005.cat 9918 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Networking-MPSSVC-Rules-HomePremiumEdition-Package~31bf3856ad364e35~amd64~~6.0.6000.16386.cat 14503 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat 6106074 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntexe.cat 221046 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat 1052954 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntph.cat 1139256 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntprint.cat 17534 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem10.CAT 406403 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem11.CAT 13599 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem12.CAT 767818 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem13.CAT 9874 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem14.CAT 18549 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem16.CAT 76708 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem2.CAT 24994 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_11_for_KB936330~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_11_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 15044 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_11_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 13588 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_11_for_KB948465~31bf3856ad364e35~amd64~fr-FR~6.0.1.18005.cat 21976 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_11_for_KB968389~31bf3856ad364e35~amd64~~6.0.1.3.cat 26841 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_11_for_KB972036~31bf3856ad364e35~amd64~~6.0.2.0.cat 16086 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_11_for_KB972145~31bf3856ad364e35~amd64~~6.0.1.5.cat 16165 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_11_for_KB973565~31bf3856ad364e35~amd64~~6.0.1.0.cat 12009 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_11_for_KB975467~31bf3856ad364e35~amd64~~6.0.1.0.cat 20992 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_121_for_KB970430~31bf3856ad364e35~amd64~~6.0.1.6.cat 9658 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_12_for_KB935509~31bf3856ad364e35~amd64~~6.0.1.9.cat 12396 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_12_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 11516 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_14_for_KB937286~31bf3856ad364e35~amd64~fr-FR~6.0.1.18000.cat 12692 bytes
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_14_for_KB938371~31bf3856ad364e35~amd64~~6.0.2.27.cat 24140 bytes
C:\Windows\S