security tool zhp diag telecharger et apres??

Question

Bonjour, 

j ai telecharger zhp diag quoi faire du rapport apres ????au secours


Configuration: Windows 7 / Internet Explorer 8.0

Utilisateur anonyme · Answer

Bonjour


En mode sans echec avec prise en charge réseau.

Poster le rapport de ZHPDiag
via ci-joint

@+

marguerite · Answer

c ou ci-joint???

marguerite · Answer

j'ai essayer sur ci-joint.fr mais ça me dit les fichiers avec extentions ne peuvent etre deposer

marguerite · Answer

http://www.cijoint.fr/cjlink.php?file=cj201009/cijq7LNqY1.txt  ça y es j ai réussi alors quelles solutions?

Utilisateur anonyme · Answer

Re

1- Utilsation de l'outil ZHPFix : 

* Copie  tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C ) 
-----------------------------------------------------------------------------------------------

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: Modified    
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: Modified    
O43 - CFD:Common File Directory ----D- C:\Program Files\Starware    
O64 - Services: CurCS - C:\DOCUME~1
icolas\LOCALS~1\Temp\ddxgb.sys - ddxgb (ddxgb)  .(.Pas de propriétaire - Pas de description.) - LEGACY_DDXGB     
MBRFix

-----------------------------------------------------------------------------------------------
Puis lance  ZHPFix depuis le raccourci du bureau. Sous Vista :Clic droit sur l'icône ZHPFix.exe  
 « Exécuter en tant qu'administrateur »
. 

* Une fois l'outil ZHPFix ouvert, clique sur le bouton [ H ] ( "coller les lignes Helper" ) . 

* Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaîtrent. 

Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

* Puis clique sur le bouton [ OK 

> À ce moment là, il apparaîtra au début de chaque ligne une petite case vide.  Ne touche plus à rien !  

!! Déconnecte toi, désactive tes défenses (anti-virus, anti-spyware ) et ferme bien toutes autres applications ( navigateurs compris ) !! 


* Clique sur le bouton [ Tous]. Vérifie que toutes les lignes soient bien cochées. 

* Enfin clique sur le bouton [ Nettoyer]. 


-> laisse travailler l'outil et ne touche à rien ... 


-> Si il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le ! 

Une fois terminé, un nouveau rapport s'affiche : poste le contenu de ce dernier dans ta prochaine réponse ... 

( ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ ZHPFixReport.txt ) 

Pense à réactiver tes défenses !...

A+

marguerite · Answer

Rapport de ZHPFix 1.12.32 par Nicolas Coolman, Update du 25/09/2010
Fichier d'export Registre : C:\ZHPExportRegistry-26-09-2010-13-40-42.txt
Run by Administrateur at 26/09/2010 13:40:43
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Contact : nicolascoolman@yahoo.fr

========== Clé(s) du Registre ==========
O64 - Services: CurCS - C:\DOCUME~1
icolas\LOCALS~1\Temp\ddxgb.sys - ddxgb (ddxgb) .(.Pas de propriétaire - Pas de description.) - LEGACY_DDXGB  => Clé supprimée avec succès

========== Elément(s) de donnée du Registre ==========
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: Modified  => Donnée supprimée avec succès
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: Modified  => Donnée supprimée avec succès

========== Dossier(s) ==========
C:\Program Files\Starware  => Supprimé et mis en quarantaine

========== Master Boot Record ==========
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll prosync1.sys atapi.sys pciide.sys 
kernel: MBR read successfully
user & kernel MBR OK 
 
Resultat après le fix :
Master Boot Record non infecté
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll prosync1.sys atapi.sys pciide.sys PCIIDEX.SYS 
kernel: MBR read successfully
user & kernel MBR OK 
 
Resultat après le fix :
Master Boot Record non infecté
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll prosync1.sys atapi.sys pciide.sys PCIIDEX.SYS 
kernel: MBR read successfully
user & kernel MBR OK 
 
Resultat après le fix :
Master Boot Record non infecté
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll prosync1.sys atapi.sys pciide.sys PCIIDEX.SYS 
kernel: MBR read successfully
user & kernel MBR OK 
 
Resultat après le fix :
Master Boot Record non infecté


========== Récapitulatif ==========
1 : Clé(s) du Registre
2 : Elément(s) de donnée du Registre
1 : Dossier(s)
                          1 : Master Boot Record


End of the scan

Utilisateur anonyme · Answer

Re

Poste moi un nouveau rapport ZHPDiag ;mais en mode normal;merci.

@+

marguerite · Answer

Rapport de ZHPFix 1.12.32 par Nicolas Coolman, Update du 25/09/2010
Fichier d'export Registre : C:\ZHPExportRegistry-26-09-2010-13-40-42.txt
Run by Administrateur at 26/09/2010 13:40:43
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Contact : nicolascoolman@yahoo.fr

========== Clé(s) du Registre ==========
O64 - Services: CurCS - C:\DOCUME~1
icolas\LOCALS~1\Temp\ddxgb.sys - ddxgb (ddxgb) .(.Pas de propriétaire - Pas de description.) - LEGACY_DDXGB  => Clé supprimée avec succès

========== Elément(s) de donnée du Registre ==========
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: Modified  => Donnée supprimée avec succès
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: Modified  => Donnée supprimée avec succès

========== Dossier(s) ==========
C:\Program Files\Starware  => Supprimé et mis en quarantaine

========== Master Boot Record ==========
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll prosync1.sys atapi.sys pciide.sys 
kernel: MBR read successfully
user & kernel MBR OK 
 
Resultat après le fix :
Master Boot Record non infecté
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll prosync1.sys atapi.sys pciide.sys PCIIDEX.SYS 
kernel: MBR read successfully
user & kernel MBR OK 
 
Resultat après le fix :
Master Boot Record non infecté
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll prosync1.sys atapi.sys pciide.sys PCIIDEX.SYS 
kernel: MBR read successfully
user & kernel MBR OK 
 
Resultat après le fix :
Master Boot Record non infecté
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll prosync1.sys atapi.sys pciide.sys PCIIDEX.SYS 
kernel: MBR read successfully
user & kernel MBR OK 
 
Resultat après le fix :
Master Boot Record non infecté


========== Récapitulatif ==========
1 : Clé(s) du Registre
2 : Elément(s) de donnée du Registre
1 : Dossier(s)
                          1 : Master Boot Record


End of the scan
fait deuis un autre ordi car en mode normal security toll m empeche d accader au rapport

Utilisateur anonyme · Answer

Tu t'es trompé de rapport c'est un ZHPDiag.txt que je veux et non un ZHPFix.txt

@+

marguerite · Answer

Rapport de ZHPFix 1.12.32 par Nicolas Coolman, Update du 25/09/2010
Fichier d'export Registre : C:\ZHPExportRegistry-26-09-2010-13-40-42.txt
Run by Administrateur at 26/09/2010 13:40:43
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Contact : nicolascoolman@yahoo.fr

========== Clé(s) du Registre ==========
O64 - Services: CurCS - C:\DOCUME~1
icolas\LOCALS~1\Temp\ddxgb.sys - ddxgb (ddxgb) .(.Pas de propriétaire - Pas de description.) - LEGACY_DDXGB  => Clé supprimée avec succès

========== Elément(s) de donnée du Registre ==========
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: Modified  => Donnée supprimée avec succès
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: Modified  => Donnée supprimée avec succès

========== Dossier(s) ==========
C:\Program Files\Starware  => Supprimé et mis en quarantaine

========== Master Boot Record ==========
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll prosync1.sys atapi.sys pciide.sys 
kernel: MBR read successfully
user & kernel MBR OK 
 
Resultat après le fix :
Master Boot Record non infecté
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll prosync1.sys atapi.sys pciide.sys PCIIDEX.SYS 
kernel: MBR read successfully
user & kernel MBR OK 
 
Resultat après le fix :
Master Boot Record non infecté
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll prosync1.sys atapi.sys pciide.sys PCIIDEX.SYS 
kernel: MBR read successfully
user & kernel MBR OK 
 
Resultat après le fix :
Master Boot Record non infecté
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll prosync1.sys atapi.sys pciide.sys PCIIDEX.SYS 
kernel: MBR read successfully
user & kernel MBR OK 
 
Resultat après le fix :
Master Boot Record non infecté


========== Récapitulatif ==========
1 : Clé(s) du Registre
2 : Elément(s) de donnée du Registre
1 : Dossier(s)
                          1 : Master Boot Record


End of the scan

marguerite · Answer

je n ai rien d autre....il faut faire comment aller ou pour avoir le rapport que tu cherche la j ai fait zhp diag....!!!
Rapport de ZHPDiag v1.26.67 par Nicolas Coolman, Update du 25/09/2010
Run by Administrateur at 26/09/2010 13:42:37
Web site :  http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Contact : nicolascoolman@yahoo.fr

---\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox (2.0.0.20)

---\ System Information
Platform : Microsoft Windows XP (5.1.2600) Service Pack 2
Processor: x86 Family 15 Model 79 Stepping 2, AuthenticAMD
Operating System: 32 Bits
Boot mode: Sans échec avec prise en charge du réseau (Fail-safe with network boot)
Total RAM: 767 MB (77% free)
System drive C: has 2 GB (3%) free of 71 GB

---\ Logged in mode
Computer Name: ACER-7989E0343A
User Name: Administrateur
All Users Names: SUPPORT_388945a0, sandrine, nicolas, HelpAssistant, ASPNET, Administrateur, 
Unselected Option:  O1,O45,O61,O62,O65,O82
Logged in as Administrator

---\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 71 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 70 Go of 72 Go)
E:\ CD-ROM drive (Not Inserted)
F:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)


---\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK


---\ Processus lancés
[MD5.7168960DA813D155C8FA11C5F382A6BE] - (.Symantec Corporation - Norton Security Scan.) -- C:\Program Files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.7.3.34\InstStub.exe   [634792]
[MD5.384D2C6B22C1F9AEC8B4DD5FB0E0A717] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe   [555008]


---\ Pages de recherche de Mozilla Firefox (M1)
M1 - SPR:Search Page Redirection - C:\Program Files\Mozilla FireFox\extensions\google-cjk@partners.mozilla.com
M1 - SPR:Search Page Redirection - C:\Program Files\Mozilla FireFox\extensions\google-gzfb@partners.mozilla.com
M1 - SPR:Search Page Redirection - C:\Program Files\Mozilla FireFox\extensions	alkback@mozilla.org


---\ Plugins de navigateurs Opera/Firefox(P1/P2)
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins
pdeploytk.dll
P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins
pnul32.dll
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.3.3".) -- C:\Program Files\Mozilla Firefox\Plugins
ppdf32.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin7.dll
P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.) -- C:\WINDOWS\system32\Adobe\Director
p32dsw.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.50826.0.) -- C:\Program Files\Microsoft Silverlight\4.0.50826.0
pctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8081.0709] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.29
pGoogleOneClick8.dll
P2 - FPN: [HKLM] [@viewpoint.com/VMP] - (.Pas de propriétaire - MetaStream 3 Plugin r4.) -- C:\Program Files\Viewpoint\Viewpoint Experience Technology
pViewpoint.dll


---\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"


---\ Pages de démarrage d'Internet Explorer (R0)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.acer.com/worldwide/selection.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp


---\ Pages de recherche d'Internet Explorer (R1)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ycomp/defaults/sp/*https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/toolbar/ie8/sidebar.html


---\ Internet Explorer URLSearchHook (R3)
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18928 (longhorn_ie8_gdr.100503-1700)) -- C:\WINDOWS\system32\ieframe.dll


---\ Browser Helper Objects de navigateur (O2)
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} . (.SEIKO EPSON CORPORATION - EPSON Web-To-Page.) -- C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll


---\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} . (.HiTRUST - eDStoolbar Module.) -- C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} . (.SEIKO EPSON CORPORATION - EPSON Web-To-Page.) -- C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll


---\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [ehTray] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe 
O4 - HKLM\..\Run: [LaunchApp] Alaunch 
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll 
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install 
O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\Windows\RTHDCPL.EXE 
O4 - HKLM\..\Run: [SkyTel] . (.Realtek Semiconductor Corp. - Realtek Voice  Manager.) -- C:\Windows\SkyTel.EXE 
O4 - HKLM\..\Run: [Alcmtr] . (.Realtek Semiconductor Corp. - Realtek Azalia Audio - Event Monitor.) -- C:\Windows\ALCMTR.EXE 
O4 - HKLM\..\Run: [ntiMUI] . (.Pas de propriétaire - Pas de description.) -- c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe 
O4 - HKLM\..\Run: [IMJPMIG8.1] . (.Microsoft Corporation - Microsoft IME.) -- C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe 
O4 - HKLM\..\Run: [IMEKRMIG6.1] . (.Microsoft Corporation - Microsoft Korean IME 2002.) -- C:\WINDOWS\ime\imkr6_1\IMEKRMIG.exe 
O4 - HKLM\..\Run: [MSPY2002] . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe 
O4 - HKLM\..\Run: [PHIME2002ASync] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe 
O4 - HKLM\..\Run: [PHIME2002A] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe 
O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32\NvMcTray.dll 
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jusched.exe 
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\SysMonitor.exe 
O4 - HKLM\..\Run: [eDataSecurity Loader] . (.HiTRUST - eDSloader.) -- C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 
O4 - HKLM\..\Run: [eRecoveryService] . (.Acer Inc. - eRecovery agent.) -- C:\Acer\Empowering Technology\eRecovery\eRAgent.exe 
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe (.not file.) 
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe 
O4 - HKLM\..\Run: [RealTray] . (.RealNetworks, Inc. - RealPlayer.) -- C:\Program Files\Real\RealPlayer\RealPlay.exe 
O4 - HKLM\..\Run: [Microsoft Works Update Detection] . (.Microsoft® Corporation - Détection Microsoft® Works Update.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe 
O4 - HKLM\..\Run: [LVCOMSX] . (.Labtec Inc. - LVCom Server.) -- C:\WINDOWS\system32\LVCOMSX.exe 
O4 - HKLM\..\Run: [SystrayORAHSS] . (.France Telecom SA - Pas de description.) -- C:\Program Files\Orange\Systray\SystrayApp.exe 
O4 - HKLM\..\Run: [ORAHSSSessionManager] . (.France Telecom SA - Pas de description.) -- C:\Program Files\Orange\SessionManager\SessionManager.exe 
O4 - HKLM\..\Run: [Google Desktop Search] . (.Google - Google Desktop.) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe 
O4 - HKLM\..\Run: [KernelFaultCheck] C:\WINDOWS\system32\dumprep 0 -k (.not file.) 
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe 
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe 
O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe 
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe 
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe 
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe 
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe 
O4 - HKUS\S-1-5-21-3728123497-3152027805-133935062-500\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe 
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Acer Empowering Technology.lnk . (.Acer Inc..)  -- C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Acer WLAN 11g USB Dongle.lnk . (.X-Micro Technology Corp..)  -- C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\WinZip Quick Pick.lnk . (.WinZip Computing, S.L..)  -- C:\Program Files\WinZip\WZQKPICK.EXE


---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Real\RealPlayer\eb_act.ico
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.not file.) - (.not file.)
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe


---\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll


---\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab


---\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{9E6173E0-76C9-4A26-BA49-90D42EF68435}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{9E6173E0-76C9-4A26-BA49-90D42EF68435}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{9E6173E0-76C9-4A26-BA49-90D42EF68435}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1


---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (.Google - Google Desktop.) - C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.dll


---\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll


---\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll


---\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Memory Check Service (AcerMemUsageCheckService) . (.Acer Inc. - Pas de description.) - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) . (.France Telecom SA - Pas de description.) - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - Pas de description.) - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 91.36.) - C:\WINDOWS\system32
vsvc32.exe


---\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) -  (.not file.)


---\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\RegPowerClean.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\RPCReminder.job


---\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Personnalisation du navigateur - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS . (.Pas de propriétaire - Pas de description.) -- RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
O40 - ASIC: Viewpoint Media Player - {03F998B2-0E00-11D3-A498-00104B6EB52E} . (.Viewpoint Corporation - Viewpoint Media Player for Internet Explorer.) -- C:\Program Files\Viewpoint\Viewpoint Experience Technology\AxMetaStream_0305000D.dll
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\binegutils.dll
O40 - ASIC: Viewpoint Media Player - {1B00725B-C455-4DE6-BFB6-AD540AD427CD} . (.Viewpoint Corporation - Viewpoint Media Player for Internet Explorer.) -- C:\Program Files\Viewpoint\Viewpoint Experience Technology\AxMetaStream_0305000D.dll
O40 - ASIC: Media Center - {407408d4-94ed-4d86-ab69-a7f649d112ee} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\inf\mcdftreg.inf
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\wmp.inf
O40 - ASIC: Fax - {8b15971b-5355-4c82-8c07-7e181ea07608} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\fxsocm.inf
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r32.) -- C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx


---\ Pilotes lancés au démarrage (O41)
O41 - Driver: Pilote de processeur AMD (AmdK8) . (.Advanced Micro Devices - AMD Processor Driver.) - C:\Windows\system32\DRIVERS\AmdK8.sys
O41 - Driver: StarForce Protection Environment Driver v6 (prodrv06) . (.StarForce Technologies, Inc. - StarForce Protection Environment Driver.) - C:\WINDOWS\system32\drivers\prodrv06.sys


---\ Logiciels installés (O42)
O42 - Logiciel: Acer Empowering Technology - (.Acer.) [HKLM] -- {AB6097D9-D722-4987-BD9E-A076E2848EE2}
O42 - Logiciel: Acer WLAN 11g USB Dongle - (.ACER Inc..) [HKLM] -- InstallShield_{0CB98AC0-D691-4B21-AD3D-95982517021D}
O42 - Logiciel: Acer eDataSecurity Management - (.Acer.) [HKLM] -- {4AD13F68-CADA-4C6B-9759-C33753F89908}
O42 - Logiciel: Acer eDataSecurity Management 2.0.3077 - (.Acer.) [HKLM] -- InstallShield_{4AD13F68-CADA-4C6B-9759-C33753F89908}
O42 - Logiciel: Acer ePerformance Management - (.Acer.) [HKLM] -- {7057702F-6D71-4F30-8000-9E72BC771887}
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Reader 9.3.3 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A93000000001}
O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033}
O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
O42 - Logiciel: Camera RAW Plug-In for EPSON Creativity Suite - (.Pas de propriétaire.) [HKLM] -- {42EDF895-158C-484E-A7F2-42B90759F281}
O42 - Logiciel: EPSON Attach To Email - (.SEIKO EPSON.) [HKLM] -- InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}
O42 - Logiciel: EPSON Easy Photo Print - (.Pas de propriétaire.) [HKLM] -- {8A8F8391-4C2C-4BE1-A984-CD4A5A546467}
O42 - Logiciel: EPSON File Manager - (.Pas de propriétaire.) [HKLM] -- {46CBBDF8-55B5-40DB-B459-7B848394309C}
O42 - Logiciel: EPSON Logiciel imprimante - (.Pas de propriétaire.) [HKLM] -- EPSON Printer and Utilities
O42 - Logiciel: EPSON Scan - (.Pas de propriétaire.) [HKLM] -- EPSON Scanner
O42 - Logiciel: EPSON Scan Assistant - (.Pas de propriétaire.) [HKLM] -- {2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}
O42 - Logiciel: EPSON Stylus SX200_SX400_TX200_TX400 Manuel - (.Pas de propriétaire.) [HKLM] -- EPSON Stylus SX200_SX400_TX200_TX400 Guide d'utilisation
O42 - Logiciel: EPSON Stylus SX400 Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON Stylus SX400 Series
O42 - Logiciel: EPSON Web-To-Page - (.Pas de propriétaire.) [HKLM] -- {7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}
O42 - Logiciel: Extension de Windows Live Toolbar (Windows Live Toolbar) - (.Microsoft Corporation.) [HKLM] -- {0CA6047C-D28B-4295-834A-07C52BA20C2D}
O42 - Logiciel: FLV Player 1.3.3 - (.Pas de propriétaire.) [HKLM] -- FLVPlayer
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {B131E59D-202C-43C6-84C9-68F0C37541F1}
O42 - Logiciel: GemMaster Mystic - (.Pas de propriétaire.) [HKLM] -- 99A88D57-2C93-491B-87B8-E41A870FB6BE
O42 - Logiciel: Google Desktop - (.Google.) [HKLM] -- Google Desktop
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Hotfix for Windows Media Player 10 (KB903157) - (.Microsoft Corporation.) [HKLM] -- KB903157
O42 - Logiciel: Hotfix for Windows XP (KB915865) - (.Microsoft Corporation.) [HKLM] -- KB915865
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {46ABBC54-1872-4AA3-95E2-F2C063A63F31}
O42 - Logiciel: J2SE Runtime Environment 5.0 Update 6 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150060}
O42 - Logiciel: Java(TM) 6 Update 17 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216017FF}
O42 - Logiciel: Java(TM) 6 Update 2 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160020}
O42 - Logiciel: Joydesk Games Setup - Arcade - (.Joydesk Games.) [HKLM] -- {1081024D-45A4-4C23-9CE2-B7E1A13EF85F}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {E2DFE069-083E-4631-9B6C-43C48E991DE5}
O42 - Logiciel: MSN - (.Pas de propriétaire.) [HKLM] -- MSNINST
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: MSXML 4.0 SP2 (KB927978) - (.Microsoft Corporation.) [HKLM] -- {37477865-A3F1-4772-AD43-AAFC6BCFF99F}
O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: MSXML 6 Service Pack 2 (KB973686) - (.Microsoft Corporation.) [HKLM] -- {56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}
O42 - Logiciel: Microsoft .NET Framework 1.0 Hotfix (KB887998) - (.Microsoft Corporation.) [HKLM] -- KB887998
O42 - Logiciel: Microsoft .NET Framework 1.0 Hotfix (KB930494) - (.Microsoft Corporation.) [HKLM] -- KB930494
O42 - Logiciel: Microsoft .NET Framework 1.0 Hotfix (KB953295) - (.Microsoft Corporation.) [HKLM] -- KB953295
O42 - Logiciel: Microsoft .NET Framework 1.0 Hotfix (KB979904) - (.Microsoft Corporation.) [HKLM] -- KB979904
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1  (1033)
O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM] -- {9A394342-4A68-4EBA-85A6-55B559F4E700}
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB979906) - (.Pas de propriétaire.) [HKLM] -- M979906
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] -- IDNMitigationAPIs
O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping
O42 - Logiciel: Microsoft Office 2000 Premium - (.Microsoft Corporation.) [HKLM] -- {0000040C-78E1-11D2-B60F-006097C998E7}
O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Picture It! Photo 7.0 - (.Microsoft Corporation.) [HKLM] -- {369B36BE-3D64-4641-9AEA-808D436FE132}
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {06E6E30D-B498-442F-A943-07DE41D7F785}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5}
O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
O42 - Logiciel: Mozilla Firefox (2.0.0.20) - (.Mozilla.) [HKLM] -- Mozilla Firefox (2.0.0.20)
O42 - Logiciel: MyDSC2 - (.My Company Name.) [HKLM] -- {83d96ed0-98aa-4515-8ddc-816f3efdd104}
O42 - Logiciel: NTI Backup NOW! 4 - (.NewTech Infosystems.) [HKLM] -- InstallShield_{385979FE-DC4F-4140-8EAD-A59625000D72}
O42 - Logiciel: NTI CD & DVD-Maker - (.NewTech Infosystems.) [HKLM] -- InstallShield_{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}
O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: OCA Client history tool install - (.Microsoft Corporation.) [HKLM] -- OcaHistoryUpd
O42 - Logiciel: Orange - Logiciels Internet - (.Pas de propriétaire.) [HKLM] -- {ORAHSS}.UninstallSuite
O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
O42 - Logiciel: PIF DESIGNER - (.Pas de propriétaire.) [HKLM] -- {B90450DF-E781-46FD-B1F1-0C86DA40E443}
O42 - Logiciel: Package de pilotes Windows - AMD System  (04/06/2006 1.0.1.0) - (.AMD.) [HKLM] -- F3B506E1FDAEA4DC6669B53B2D3F0B68FBA20C2D
O42 - Logiciel: Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor  (05/27/2006 1.3.2.0) - (.Advanced Micro Devices.) [HKLM] -- 3BEF1AFDE8303306594E2ADA27520E6E700820AE
O42 - Logiciel: PhoTags Express  - (.Smith Micro Software, Inc..) [HKLM] -- PhoTagsExpress
O42 - Logiciel: PowerArchiver 2010 French - (.ConeXware, Inc..) [HKLM] -- {8B08683D-28F3-4784-9029-EBE66642A5DD}
O42 - Logiciel: PowerDVD - (.CyberLink Corporation.) [HKLM] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1}
O42 - Logiciel: Programme de gestion Camera de Labtec® - (.Pas de propriétaire.) [HKLM] -- QcDrv
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {C78EAC6F-7A73-452E-8134-DBB2165C5A68}
O42 - Logiciel: RealPlayer Basic - (.Pas de propriétaire.) [HKLM] -- RealPlayer 6.0
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: SAMSUNG CDMA Modem Driver Set - (.Pas de propriétaire.) [HKLM] -- SAMSUNG CDMA Modem
O42 - Logiciel: SAMSUNG Mobile Composite Device Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile Composite Device
O42 - Logiciel: SAMSUNG Mobile Modem Driver Set - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile Modem
O42 - Logiciel: SAMSUNG Mobile USB Modem 1.0 Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile USB Modem 1.0
O42 - Logiciel: SAMSUNG Mobile USB Modem Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile USB Modem
O42 - Logiciel: Samsung Mobile phone USB driver Software - (.Pas de propriétaire.) [HKLM] -- Samsung Mobile phone USB driver
O42 - Logiciel: Samsung PC Studio 3 - (.Samsung Electronics Co., Ltd..) [HKLM] -- {C4A4722E-79F9-417C-BD72-8D359A090C97}
O42 - Logiciel: Samsung PC Studio 3 USB Driver Installer - (.Samsung Electronics Co., Ltd..) [HKLM] -- {EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
O42 - Logiciel: Sonic Encoders - (.Sonic Solutions.) [HKLM] -- {9941F0AA-B903-4AF4-A055-83A9815CC011}
O42 - Logiciel: Starware 4.2.1.0 - (.Pas de propriétaire.) [HKLM] -- Starware
O42 - Logiciel: Super Point de Croix 2005 Deluxe - version d'évaluation - (.Pas de propriétaire.) [HKLM] -- {8988D51D-BAA3-4DA7-9C71-D95C4ABF8815}
O42 - Logiciel: Sélecteur d'installation de Microsoft Works Suite 2003 - (.Pas de propriétaire.) [HKLM] -- Works2003Setup
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: Viewpoint Media Player - (.Pas de propriétaire.) [HKLM] -- ViewpointMediaPlayer
O42 - Logiciel: WinZip 12.1 - (.WinZip Computing, S.L. .) [HKLM] -- {CD95F661-A5C4-44F5-A6AA-ECDD91C240B8}
O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC
O42 - Logiciel: Windows Installer 3.1 (KB893803) - (.Microsoft Corporation.) [HKLM] -- KB893803v2
O42 - Logiciel: Windows Internet Explorer 7 - (.Microsoft Corporation.) [HKLM] -- ie7
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3B4E636E-9D65-4D67-BA61-189800823F52}
O42 - Logiciel: Windows Live Contrôle parental - (.Microsoft Corporation.) [HKLM] -- {D5D81435-B8DE-4CAF-867F-7998F2B92CFC}
O42 - Logiciel: Windows Live Favorites pour Windows Live Toolbar - (.Microsoft Corporation.) [HKLM] -- {786C4AD1-DCBA-49A6-B0EF-B317A344BD66}
O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {770F1BEC-2871-4E70-B837-FB8525FFA3B1}
O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) [HKLM] -- {F7D27C70-90F5-49B9-B188-0A133C0CE353}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {4634B21A-CC07-4396-890C-2B8168661FEA}
O42 - Logiciel: Windows Media Format Runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows XP Media Center Edition 2005 KB908246 - (.Microsoft Corporation.) [HKLM] -- KB908246
O42 - Logiciel: Windows XP Media Center Edition 2005 KB914548 - (.Microsoft Corporation.) [HKLM] -- KB914548
O42 - Logiciel: Windows XP Media Center Edition 2005 KB973768 - (.Microsoft Corporation.) [HKLM] -- KB973768
O42 - Logiciel: Yahoo! Toolbar - (.Pas de propriétaire.) [HKLM] -- Yahoo! Companion
O42 - Logiciel: commercial - (.Default Company Name.) [HKLM] -- {38C65D12-79E3-49C0-B211-DE3BE0A7AB39}
O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule
O42 - Logiciel: livebox - (.SAGEM.) [HKLM] -- {17342E3B-0818-4A6F-BFF8-99476605ADD6}

---\ HKCU & HKLM Software Keys
[HKCU\Software\ALWIL Software]
[HKCU\Software\Adobe]
[HKCU\Software\Classes]
[HKCU\Software\Cyberlink]
[HKCU\Software\Google]
[HKCU\Software\Intel]
[HKCU\Software\Lake]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Macromedia]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\Policies]
[HKCU\Software\PowerArchiverInt]
[HKCU\Software\Realtek]
[HKCU\Software\ZyDAS]
[HKLM\Software\ABBYY]
[HKLM\Software\ALWIL Software]
[HKLM\Software\AMD]
[HKLM\Software\ASPI32]
[HKLM\Software\Acer]
[HKLM\Software\Adobe]
[HKLM\Software\America Online]
[HKLM\Software\AppDataLow]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\BrowserChoice]
[HKLM\Software\C07ft5Y]
[HKLM\Software\C3 Developments]
[HKLM\Software\CA561B]
[HKLM\Software\CDDB]
[HKLM\Software\Caphyon]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\CyberLink]
[HKLM\Software\EPSON]
[HKLM\Software\FRANCE TELECOM]
[HKLM\Software\Freeze.com]
[HKLM\Software\FullCircle]
[HKLM\Software\GEAR Software]
[HKLM\Software\GTek]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\Lake]
[HKLM\Software\Licenses]
[HKLM\Software\LightScribe]
[HKLM\Software\Logitech]
[HKLM\Software\MCCI]
[HKLM\Software\Macromedia]
[HKLM\Software\MetaStream]
[HKLM\Software\Micro Application]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\My Company Name]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\NewTech Infosystems]
[HKLM\Software\Nico Mak Computing]
[HKLM\Software\Nival Interactive]
[HKLM\Software\Norton]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\PowerArchiverInt]
[HKLM\Software\Program Groups]
[HKLM\Software\Pure Networks]
[HKLM\Software\RealNetworks]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SQTech]
[HKLM\Software\Sagem]
[HKLM\Software\Samsung Electronics Co., Ltd.]
[HKLM\Software\Samsung]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Sonic]
[HKLM\Software\Symantec]
[HKLM\Software\TechCity]
[HKLM\Software\The Silicon Realms Toolworks]
[HKLM\Software\TomTom]
[HKLM\Software\Viewpoint]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Xing Technology Corp.]
[HKLM\Software\Yahoo]
[HKLM\Software\mozilla.org]
[HKLM\Software\muvee Technologies]


---\ Contenu des dossiers ProgramFiles/ProgramData (O43)
O43 - CFD:Common File Directory ----D- C:\Program Files\Acer WLAN 11g USB Dongle
O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe
O43 - CFD:Common File Directory ----D- C:\Program Files\Alwil Software
O43 - CFD:Common File Directory ----D- C:\Program Files\Apple Software Update
O43 - CFD:Common File Directory ----D- C:\Program Files\commercial
O43 - CFD:Common File Directory ----D- C:\Program Files\CyberLink
O43 - CFD:Common File Directory ----D- C:\Program Files\DIFX
O43 - CFD:Common File Directory ----D- C:\Program Files\eMule
O43 - CFD:Common File Directory ----D- C:\Program Files\epson
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers communs
O43 - CFD:Common File Directory ----D- C:\Program Files\FLVPlayer
O43 - CFD:Common File Directory ----D- C:\Program Files\Free Offers from Freeze.com
O43 - CFD:Common File Directory ----D- C:\Program Files\GemMasterFrench
O43 - CFD:Common File Directory ----D- C:\Program Files\Google
O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer
O43 - CFD:Common File Directory ----D- C:\Program Files\Java
O43 - CFD:Common File Directory ----D- C:\Program Files\Logitech
O43 - CFD:Common File Directory ----D- C:\Program Files\Ludi
O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger
O43 - CFD:Common File Directory ----D- C:\Program Files\Micro Application
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2
O43 - CFD:Common File Directory ----D- C:\Program Files\microsoft frontpage
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Picture It! 7
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Silverlight
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Sync Framework
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Visual Studio
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works Suite 2003
O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker
O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox
O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild
O43 - CFD:Common File Directory ----D- C:\Program Files\MSECache
O43 - CFD:Common File Directory ----D- C:\Program Files\MSN
O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Gaming Zone
O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0
O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 6.0
O43 - CFD:Common File Directory ----D- C:\Program Files\MyDSC2
O43 - CFD:Common File Directory ----D- C:\Program Files\NetMeeting
O43 - CFD:Common File Directory ----D- C:\Program Files\NewTech Infosystems
O43 - CFD:Common File Directory ----D- C:\Program Files\NortonInstaller
O43 - CFD:Common File Directory ----D- C:\Program Files\Oca History Tool
O43 - CFD:Common File Directory ----D- C:\Program Files\Online Services
O43 - CFD:Common File Directory ----D- C:\Program Files\Orange
O43 - CFD:Common File Directory ----D- C:\Program Files\Outlook Express
O43 - CFD:Common File Directory ----D- C:\Program Files\PhoTags Express
O43 - CFD:Common File Directory ----D- C:\Program Files\PowerArchiver
O43 - CFD:Common File Directory ----D- C:\Program Files\QuickTime
O43 - CFD:Common File Directory ----D- C:\Program Files\Real
O43 - CFD:Common File Directory ----D- C:\Program Files\Realtek
O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies
O43 - CFD:Common File Directory ----D- C:\Program Files\SAGEM
O43 - CFD:Common File Directory ----D- C:\Program Files\Samsung
O43 - CFD:Common File Directory ----D- C:\Program Files\Securitoo
O43 - CFD:Common File Directory ----D- C:\Program Files\Services en ligne
O43 - CFD:Common File Directory ----D- C:\Program Files\TomTom HOME
O43 - CFD:Common File Directory ----D- C:\Program Files\Viewpoint
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live Favorites
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live SkyDrive
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live Toolbar
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Plus
O43 - CFD:Common File Directory ----D- C:\Program Files\Winferno
O43 - CFD:Common File Directory ----D- C:\Program Files\WinZip
O43 - CFD:Common File Directory ----D- C:\Program Files\xerox
O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Adobe
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\AOL
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\aolback
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Designer
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\France Telecom
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\InstallShield
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Java
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\LightScribe
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Logitech
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Microsoft Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\MSSoap
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\muvee Technologies
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\NewTech Infosystems
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Nullsoft
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Real
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Services
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\SpeechEngines
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Symantec Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\System
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Windows Live
O43 - CFD:Common File Directory -SH-D- C:\Program Files\Fichiers Communs\WindowsLiveInstaller


---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.486E0B1BC94C346E5C352C295388C803] - 26/09/2010 - 12:41:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\CONFIG.NT   [3072]
O44 - LFC:[MD5.75FA327B31BBD3C5F445B6D6CFCD5E26] - 26/09/2010 - 12:41:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS
tbtlog.txt   [199662]
O44 - LFC:[MD5.00CFEAC16C30E1AA9273F0F388E0D3CE] - 26/09/2010 - 12:41:03 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log   [1333786]
O44 - LFC:[MD5.8FDA59BC54B638F3A3F12661D7AAF8EA] - 26/09/2010 - 12:40:41 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\ZHPExportRegistry-26-09-2010-13-40-41.txt   [27034]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 26/09/2010 - 11:05:43 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log   [0]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 26/09/2010 - 11:05:26 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat   [2048]
O44 - LFC:[MD5.23420EFA6D426480979A95F510304A40] - 26/09/2010 - 11:04:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\SchedLgU.Txt   [32346]
O44 - LFC:[MD5.8F1C75C0956451C232E35E1800F9953B] - 26/09/2010 - 11:04:24 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log   [216]
O44 - LFC:[MD5.193722B4021D589C89F5D67473F0A73B] - 26/09/2010 - 11:00:38 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log   [50]
O44 - LFC:[MD5.279CB28FAEB2960D6938696F09286C26] - 26/09/2010 - 10:26:32 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32
vapps.xml   [73451]
O44 - LFC:[MD5.5F6E9BEAF6DFC3B152DCFA2959BE4EEE] - 26/09/2010 - 09:57:37 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfh00C.dat   [512624]
O44 - LFC:[MD5.42DE38389B7BCC5E9975E87C5B2D506E] - 26/09/2010 - 09:57:36 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfc009.dat   [72182]
O44 - LFC:[MD5.CE91C099EC0AD8DDC37EF7D5ADBA3A08] - 26/09/2010 - 09:57:36 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfc00C.dat   [85984]
O44 - LFC:[MD5.A97552B532AA4465CDEA0B6C3EFCEC3E] - 26/09/2010 - 09:57:36 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfh009.dat   [442916]
O44 - LFC:[MD5.AD18EDA3E99CC13A1A635D0903AA2A05] - 26/09/2010 - 09:57:33 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\PerfStringBackup.INI   [1126282]
O44 - LFC:[MD5.30FE7CB11A43B34E0B74DAEAB1AAE66F] - 26/09/2010 - 09:24:24 ---A- . (.Pas de propriétaire - AVAST Software Setup Engine.) -- C:\setup_av_free_fre.exe   [42970312]
O44 - LFC:[MD5.F05C820FA10B227FE8BD283C8A92F40F] - 08/09/2010 - 15:26:43 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\win.ini   [659]


---\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll


---\ Export de clé d'application autorisée (ECAA) (O47)
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
O47 - AAKE:Key Export SP - "C:\Program Files\AOL 9.0\waol.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\AOL 9.0\waol.exe
O47 - AAKE:Key Export SP - "C:\Program Files\eMule\emule.exe" [Enabled] .(.https://www.emule-project.net/home/perl/general.cgi?l=1 - eMule.) (.not file.) -- C:\Program Files\eMule\emule.exe
O47 - AAKE:Key Export SP - "C:\Program Files\AOL 9.0a\waol.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\AOL 9.0a\waol.exe
O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) (.not file.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Fichiers communs\AOL\1168791529\ee\aolsoftware.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\Fichiers communs\AOL\1168791529\ee\aolsoftware.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [Disabled] .(.Google - Google Desktop.) (.not file.) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Shareaza\Shareaza.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\Shareaza\Shareaza.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Orange\Connectivity\ConnectivityManager.exe" [Enabled] .(.France Telecom SA - Pas de description.) (.not file.) -- C:\Program Files\Orange\Connectivity\ConnectivityManager.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) (.not file.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) (.not file.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Microsoft Corporation - Windows Live Sync.) (.not file.) -- C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
O47 - AAKE:Key Export DP - "C:\Program Files\AOL 9.0\waol.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\AOL 9.0\waol.exe
O47 - AAKE:Key Export DP - "C:\Program Files\AOL 9.0a\waol.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\AOL 9.0a\waol.exe
O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) (.not file.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) (.not file.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) (.not file.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Microsoft Corporation - Windows Live Sync.) (.not file.) -- C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe


---\ Déni du service (Local Security Authority) (LSA) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll


---\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d


---\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32	ssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"ir32_32.dll"="Indeo® video R3.2 by Intel" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"ir41_32.ax"="Indeo® video interactive R4.3 by Intel" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"iyvu9_32.dll"="Indeo® video Raw YVU9 by Intel" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\iyvu9_32.dll


---\ Microsoft Control Security Providers (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll


---\ Microsoft Windows Policies System (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
O55 - MWPS:[HKLM\...\Policies\System] - "InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme


---\ Microsoft Windows Policies Explorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1


---\ Liste des Drivers Système (SDL) (O58)
O58 - SDL:[MD5.FEFE7F885EA456194656C6A00EA16C93] - 18/06/2006 - 22:40:44 ---A- . (.Advanced Micro Devices - AMD Processor Driver.) -- C:\WINDOWS\system32\drivers\AmdK8.sys
O58 - SDL:[MD5.D880831279ED91F9A4190A2DB9539EA9]

Utilisateur anonyme · Answer

Re

C'est le bon mais;
pour me le transmettre clique sur ce lien : 

http://www.cijoint.fr/index.php

Clique sur Parcourir et cherche le fichier : Nom_complet_du_fichier
Clique sur Ouvrir. 

Clique sur "Cliquez ici pour déposer le fichier". 

Un lien de cette forme : 

http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt 

est ajouté dans la page. 

Copie ce lien dans ta réponse.

@+

marguerite · Answer

http://www.cijoint.fr/cjlink.php?file=cj201009/cijGQWJx3t.txt

Utilisateur anonyme · Answer

Re

Toujours dans ce mode sans echec:

Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe 
Ou ici : https://forospyware.com 
>Renomme le pour l'enregistrer sur ton bureau en  asdehi (tout simplement pour que l'infection ne le contre pas)
-> Double clique combofix.exe.(ou clic droit sous vista «  exécuter en tant que... » )
-> Tape sur la touche 1 (Yes) pour démarrer le scan. 
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse. 

NOTE : Le rapport se trouve également ici : C:\Combofix.txt 

 Avant d'utiliser ComboFix :  

->  Déconnecte toi d'Internet et referme les fenêtres de tous les programmes en cours.  

->  Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil. 

Une fois fait, sur ton bureau double-clic sur Combofix.exe ; (ou clic droit sous vista « exécuter en tant que... »)

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc. 


- Installe le console de récupération comme demandé ;utile en cas de plantage

- Attention Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programme. Risque de figer l'ordinateur 

- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire. 

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt) 

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet. 

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message. 

/!\  Ne touche à rien tant que le scan n'est pas terminé.  /!\ : risque de figer l'ordinateur (plantage complet) 


::Si combofix détecte quelque chose et de demande a redémarrer tu acceptes


@+

marguerite · Answer

j arrive a analyser mais aucun rapport parce que cela eteint l ordi et quand cela redemmarre c'est en mode normal et security tool empeche le rapport de se faire

marguerite · Answer

ComboFix 10-09-25.07 - Administrateur 26/09/2010  15:17:38.2.1 - x86 NETWORK
Microsoft Windows XP Professionnel  5.1.2600.2.1252.33.1036.18.767.622 [GMT 2:00]
Lancé depuis: c:\documents and settings\Administrateur\Bureau\asdehi.exe
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings
icolas\Local Settings\Temp\_is10.exe
c:\documents and settings
icolas\Local Settings\Temp\_is2.exe
c:\documents and settings
icolas\Local Settings\Temp\_is3.exe
c:\documents and settings
icolas\Local Settings\Temp\_is68.tmp
c:\documents and settings
icolas\Local Settings\Temp\_is8.exe
c:\documents and settings
icolas\Local Settings\Temp\_is8.tmp
c:\documents and settings
icolas\Local Settings\Temp\_is81.exe
c:\documents and settings
icolas\Local Settings\Temp\_is84.exe
c:\documents and settings
icolas\Local Settings\Temp\_is8B.exe
c:\documents and settings
icolas\Local Settings\Temp\_is8C.exe
c:\documents and settings
icolas\Local Settings\Temp\{0E3E4E7E-1BE5-4833-808E-842320ABFCEE}\_Setup.dll
c:\documents and settings
icolas\Local Settings\Temp\{0E3E4E7E-1BE5-4833-808E-842320ABFCEE}\ISSetup.dll
c:\documents and settings
icolas\Local Settings\Temp\{1E1C996D-8D0A-4AF2-88A4-549D6A3A4CE5}\_Setup.dll
c:\documents and settings
icolas\Local Settings\Temp\{1E1C996D-8D0A-4AF2-88A4-549D6A3A4CE5}\ISSetup.dll
c:\documents and settings
icolas\Local Settings\Temp\{23EAF378-B2FD-45DB-B9D3-6E7A6A9A0AD3}\_Setup.dll
c:\documents and settings
icolas\Local Settings\Temp\{23EAF378-B2FD-45DB-B9D3-6E7A6A9A0AD3}\ISSetup.dll
c:\documents and settings
icolas\Local Settings\Temp\{5032F361-A23A-42F4-97FC-F326AAEE96F6}\_Setup.dll
c:\documents and settings
icolas\Local Settings\Temp\{5032F361-A23A-42F4-97FC-F326AAEE96F6}\ISSetup.dll
c:\documents and settings
icolas\Local Settings\Temp\{5BDD7FD1-B2A5-4CB1-AFBD-C579EAE160DE}\_Setup.dll
c:\documents and settings
icolas\Local Settings\Temp\{5BDD7FD1-B2A5-4CB1-AFBD-C579EAE160DE}\ISSetup.dll
c:\documents and settings
icolas\Local Settings\Temp\{7765A36D-32CA-4A4C-966C-E3CA3A08A07C}\_Setup.dll
c:\documents and settings
icolas\Local Settings\Temp\{7765A36D-32CA-4A4C-966C-E3CA3A08A07C}\ISSetup.dll
c:\documents and settings
icolas\Local Settings\Temp\{8653A737-C051-4C5B-ACE1-88C8847E29B0}\_Setup.dll
c:\documents and settings
icolas\Local Settings\Temp\{8653A737-C051-4C5B-ACE1-88C8847E29B0}\Disk1\_Setup.dll
c:\documents and settings
icolas\Local Settings\Temp\{8653A737-C051-4C5B-ACE1-88C8847E29B0}\Disk1\ISSetup.dll
c:\documents and settings
icolas\Local Settings\Temp\{8653A737-C051-4C5B-ACE1-88C8847E29B0}\Disk1\setup.exe
c:\documents and settings
icolas\Local Settings\Temp\{A1FA9093-476B-4F8F-847E-1987A380B9E6}\_Setup.dll
c:\documents and settings
icolas\Local Settings\Temp\{A1FA9093-476B-4F8F-847E-1987A380B9E6}\ISSetup.dll
c:\documents and settings
icolas\Local Settings\Temp\{E1816D1A-F4BB-491B-B47A-84FA675770C1}\_Setup.dll
c:\documents and settings
icolas\Local Settings\Temp\{E1816D1A-F4BB-491B-B47A-84FA675770C1}\ISSetup.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\.g2cln.exe
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\ATHnat3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\AUDP\audp3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\COMMONner3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\COMMONpcl3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\COMMONpmn3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\COMMONppr3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\COMMONput3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\COMMON	rdr3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\core3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\DBCMPEG\Dbc_hbrf.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\DBCMPEG\Dbc_hbrr.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\DRMDRVR\asctrm.sys
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\DRMDRVR\asctrm.vxd
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\embd3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\embedgui_fr.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\expb3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\FLASH\swff3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\FLASH\swfr3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\FREEealplay.exe
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\FREEpbasic.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\GIF\pxgf3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\GIF\pxgr3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\JPEG\pxjf3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\JPEG\pxjr3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\LACODECS\14_43260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\LACODECS\28_83260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\MinAimpan3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\MP3\mp3f3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\MP3\mp3r3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\MP3PL\mp3m3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\MULTICST\ppff3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup
ppl3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLAYER\pnmi3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLAYER\pset3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLAYERnms3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLAYERpap3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLAYERpde3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLAYERpun3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLAYER	webbrowse.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLINS\auth3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLINS\basc3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLINS\http3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLINS\memf3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLINS\meta3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLINS
tau3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLINS\plus3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLINSmff3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLINSn5a3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLINSupf3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLINSupr3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLINS\sdpp3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLINS\smlf3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLINS\smlr3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLINS\smmr3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLINS\smpl3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLSHARED\pndx5016.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLSHARED\pndx5032.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PLSHARED\prefscpl.cpl
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\pncrt.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\pnen3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PNG\pxpf3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\PNG\pxpr3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\pngu3266.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\pnrs3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\pnxr3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\psethvy_fr.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\RACODECS\atrc3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\RACODECS\cook3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\RACODECS\ddnt3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\RACODECS\dnet3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\RACODECS\dspr3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\RACODECS\sipr3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\RACODECS	okr3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetupare3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\REALPIX\pxcg3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\REALPIX\pxcj3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\REALPIX\pxcp3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\REALPIX\pxff3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\REALPIX\pxre3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\RJBVIZjbviz.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetupjbviz_fr.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetupmoc3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetupnath_fr.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetupnereg_fr.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetupnmsg_fr.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetupnuneng_fr.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetuppapp_fr.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetuppclsvc_fr.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetuppclutil_fr.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetuppdestpn_fr.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetuppmnpane_fr.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetuppplus_fr.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetupprp3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetuppsetpln.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetuppshellsearch.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetuppupgrd_fr.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\RTPLINStff3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\RTPLINStre3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\RVCODECS\drv13260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\RVCODECS\drv23260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\RVCODECS\drv33260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\RVCODECSnco3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\RVCODECSv103260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\RVCODECSv203260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\RVCODECSv303260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetupvre3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\sete3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\setu3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\SetupLoc\pngui_fr.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\SetupLocecsetpln_fr.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\SetupLocpsetpln_fr.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\SetupLoc\seteng_fr.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\stub3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\UPDATEnqu3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\UPDATEnuninst.exe
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\UPDATEpup3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\UPDATE\upgr3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\UPDATE\upgrdhlp.exe
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\upgrdhlp_fr.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\VIDP\vidp3260.dll
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\VIZ\Annabelle.rpv
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\VIZ\CosmicBelt.rpv
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\VIZ\Fire.rpv
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\VIZ\FreqBands.rpv
c:\documents and settings
icolas\Local Settings\Temp\~rnsetup\VIZ\Nebula.rpv
c:\documents and settings
icolas\Local Settings\Temp\0000021C
c:\documents and settings
icolas\Local Settings\Temp\00000226
c:\documents and settings
icolas\Local Settings\Temp\0000022A
c:\documents and settings
icolas\Local Settings\Temp\00000242
c:\documents and settings
icolas\Local Settings\Temp\00000255
c:\documents and settings
icolas\Local Settings\Temp\0000025C
c:\documents and settings
icolas\Local Settings\Temp\0000025E
c:\documents and settings
icolas\Local Settings\Temp\0000025F
c:\documents and settings
icolas\Local Settings\Temp\00000265
c:\documents and settings
icolas\Local Settings\Temp\000002BB
c:\documents and settings
icolas\Local Settings\Temp\000002D6
c:\documents and settings
icolas\Local Settings\Temp\000002E6
c:\documents and settings
icolas\Local Settings\Temp\00000347
c:\documents and settings
icolas\Local Settings\Temp\0000034B
c:\documents and settings
icolas\Local Settings\Temp\00000354
c:\documents and settings
icolas\Local Settings\Temp\00000377
c:\documents and settings
icolas\Local Settings\Temp\00000378
c:\documents and settings
icolas\Local Settings\Temp\0000037A
c:\documents and settings
icolas\Local Settings\Temp\00000389
c:\documents and settings
icolas\Local Settings\Temp\0000038D
c:\documents and settings
icolas\Local Settings\Temp\000003EA
c:\documents and settings
icolas\Local Settings\Temp\000003FA
c:\documents and settings
icolas\Local Settings\Temp\0000042D
c:\documents and settings
icolas\Local Settings\Temp\0000044C
c:\documents and settings
icolas\Local Settings\Temp\00000453
c:\documents and settings
icolas\Local Settings\Temp\00000457
c:\documents and settings
icolas\Local Settings\Temp\0000046D
c:\documents and settings
icolas\Local Settings\Temp\00000470
c:\documents and settings
icolas\Local Settings\Temp\0000047E
c:\documents and settings
icolas\Local Settings\Temp\00000483
c:\documents and settings
icolas\Local Settings\Temp\00000488
c:\documents and settings
icolas\Local Settings\Temp\00000491
c:\documents and settings
icolas\Local Settings\Temp\00000493
c:\documents and settings
icolas\Local Settings\Temp\00000498
c:\documents and settings
icolas\Local Settings\Temp\00000499
c:\documents and settings
icolas\Local Settings\Temp\000004A1
c:\documents and settings
icolas\Local Settings\Temp\000004A8
c:\documents and settings
icolas\Local Settings\Temp\000004AA
c:\documents and settings
icolas\Local Settings\Temp\000004AB
c:\documents and settings
icolas\Local Settings\Temp\000004AE
c:\documents and settings
icolas\Local Settings\Temp\000004B0
c:\documents and settings
icolas\Local Settings\Temp\000004B3
c:\documents and settings
icolas\Local Settings\Temp\000004B9
c:\documents and settings
icolas\Local Settings\Temp\000004CC
c:\documents and settings
icolas\Local Settings\Temp\000004CD
c:\documents and settings
icolas\Local Settings\Temp\000004D9
c:\documents and settings
icolas\Local Settings\Temp\000004DE
c:\documents and settings
icolas\Local Settings\Temp\000004E4
c:\documents and settings
icolas\Local Settings\Temp\000004EB
c:\documents and settings
icolas\Local Settings\Temp\000004FC
c:\documents and settings
icolas\Local Settings\Temp\AcsInstall.dll
c:\documents and settings
icolas\Local Settings\Temp\AdSigner\AS12749473920391331276993632963093.tmp
c:\documents and settings
icolas\Local Settings\Temp\AOLFirewallMgr.dll
c:\documents and settings
icolas\Local Settings\Temp\AOLInstallerfw.dll
c:\documents and settings
icolas\Local Settings\Temp\bye58.tmp\Disk1\setup.exe
c:\documents and settings
icolas\Local Settings\Temp\comver.dll
c:\documents and settings
icolas\Local Settings\Temp\ddxgb.sys
c:\documents and settings
icolas\Local Settings\Temp\epurcfrver20.dll
c:\documents and settings
icolas\Local Settings\Temp\GLF139.tmp
c:\documents and settings
icolas\Local Settings\Temp\GLF49.tmp
c:\documents and settings
icolas\Local Settings\Temp\ICD1.tmp\jinstall.exe
c:\documents and settings
icolas\Local Settings\Temp\install\Install.exe
c:\documents and settings
icolas\Local Settings\Temp\instph.dll
c:\documents and settings
icolas\Local Settings\Temp\isp1C2.tmp\_Setup.dll
c:\documents and settings
icolas\Local Settings\Temp\isp54.tmp\_Setup.dll
c:\documents and settings
icolas\Local Settings\Temp\IXP001.TMP\jdarcade_10947.exe
c:\documents and settings
icolas\Local Settings\Temp\ludiPluginLauncher.exe
c:\documents and settings
icolas\Local Settings\Temp\ludiPluginSetup.exe
c:\documents and settings
icolas\Local Settings\Temp
ss2D.tmp\NSIS_Picasa.dll
c:\documents and settings
icolas\Local Settings\Temp\progupd.dll
c:\documents and settings
icolas\Local Settings\Temp\QTInstallerHelper.dll
c:\documents and settings
icolas\Local Settings\Temp\set14A.tmp
c:\documents and settings
icolas\Local Settings\Temp\set150.tmp
c:\documents and settings
icolas\Local Settings\Temp\SET162.tmp
c:\documents and settings
icolas\Local Settings\Temp\Set164.tmp
c:\documents and settings
icolas\Local Settings\Temp\Set166.tmp
c:\documents and settings
icolas\Local Settings\Temp\SET169.tmp
c:\documents and settings
icolas\Local Settings\Temp\Set1BE.tmp
c:\documents and settings
icolas\Local Settings\Temp\set401.tmp
c:\documents and settings
icolas\Local Settings\Temp\Set402.tmp
c:\documents and settings
icolas\Local Settings\Temp\set5B.tmp
c:\documents and settings
icolas\Local Settings\Temp\set5D.tmp
c:\documents and settings
icolas\Local Settings\Temp\Set7.tmp
c:\documents and settings
icolas\Local Settings\Temp\SETA3.tmp
c:\documents and settings
icolas\Local Settings\Temp\SETA5.tmp
c:\documents and settings
icolas\Local Settings\Temp\SetBE.tmp
c:\documents and settings
icolas\Local Settings\Temp\setup_wm.exe
c:\documents and settings
icolas\Local Settings\Temp\SHFOLDER.DLL
c:\documents and settings
icolas\Local Settings\Temp\SIntf16.dll
c:\documents and settings
icolas\Local Settings\Temp\SIntf32.dll
c:\documents and settings
icolas\Local Settings\Temp\SIntfNT.dll
c:\documents and settings
icolas\Local Settings\Temp\TaoUSign\jseccapi.dll
c:\documents and settings
icolas\Local Settings\Temp\uninst.dll

.
(((((((((((((((((((((((((((((   Fichiers créés du 2010-08-26 au 2010-09-26  ))))))))))))))))))))))))))))))))))))
.

2010-09-26 09:33 . 2010-09-26 12:24	--------	d-----w-	c:\program files\ZHPDiag
2010-09-26 09:21 . 2010-09-26 09:21	--------	d-sh--w-	c:\documents and settings\Administrateur\PrivacIE
2010-09-26 09:20 . 2010-09-26 09:20	--------	d-sh--w-	c:\documents and settings\Administrateur\IETldCache
2010-09-26 08:24 . 2010-09-26 12:02	42970312	----a-w-	C:\setup_av_free_fre.exe
2010-09-13 15:52 . 2008-02-12 11:26	35840	----a-w-	c:\documents and settings\All Users\Application Data\EPSON\EPSON Stylus SX400 Series\Language\040c.E_H9E0G7.DLL

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-26 11:36 . 2010-06-12 14:14	--------	d-----w-	c:\documents and settings\All Users\Application Data\Norton
2010-09-26 11:36 . 2007-01-08 13:47	--------	d-----w-	c:\program files\Fichiers communs\Symantec Shared
2010-09-26 08:57 . 2006-08-11 17:43	512624	----a-w-	c:\windows\system32\perfh00C.dat
2010-09-26 08:57 . 2006-08-11 17:43	85984	----a-w-	c:\windows\system32\perfc00C.dat
2010-09-08 17:11 . 2007-01-08 18:53	--------	d-----w-	c:\program files\eMule
2010-09-06 01:00 . 2009-03-23 13:28	--------	d-----w-	c:\program files\Microsoft Silverlight
2010-08-27 12:54 . 2007-04-30 07:24	--------	d-----w-	c:\program files\Fichiers communs\Adobe
2010-08-27 12:43 . 2010-02-08 14:11	--------	d-----w-	c:\program files\PowerArchiver
2010-06-23 14:01 . 2009-01-16 22:01	119808	----a-w-	c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
2009-01-16 21:13 . 2007-05-21 14:33	67688	-c--a-w-	c:\program files\mozilla firefox\components\jar50.dll
2009-01-16 21:13 . 2007-05-21 14:33	54368	-c--a-w-	c:\program files\mozilla firefox\components\jsd3250.dll
2009-01-16 21:13 . 2007-05-21 14:33	34944	-c--a-w-	c:\program files\mozilla firefox\components\myspell.dll
2009-01-16 21:13 . 2007-05-21 14:33	46712	-c--a-w-	c:\program files\mozilla firefox\components\spellchk.dll
2009-01-16 21:13 . 2007-05-21 14:33	172136	-c--a-w-	c:\program files\mozilla firefox\components\xpinstal.dll
.

(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"="Alaunch" [X]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-09-29 67584]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-07-11 7626752]
"nwiz"="nwiz.exe" [2006-07-11 1519616]
"RTHDCPL"="RTHDCPL.EXE" [2006-06-01 16208384]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"ntiMUI"="c:\program files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe" [2005-05-11 45056]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-10 208952]
"IMEKRMIG6.1"="c:\windows\ime\imkr6_1\IMEKRMIG.EXE" [2004-08-10 44032]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-10 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-07-11 86016]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2010-03-23 149280]
"Acer Empowering Technology Monitor"="c:\windows\system32\SysMonitor.exe" [2006-04-18 49152]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2006-03-17 345088]
"eRecoveryService"="c:\acer\Empowering Technology\eRecovery\eRAgent.exe" [2006-06-01 413696]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-05-26 413696]
"RealTray"="c:\program files\Real\RealPlayer\RealPlay.exe" [2008-07-08 26112]
"Microsoft Works Update Detection"="c:\program files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe" [2002-07-18 28672]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2004-12-14 221184]
"SystrayORAHSS"="c:\program files\Orange\Systray\SystrayApp.exe" [2007-09-25 94208]
"ORAHSSSessionManager"="c:\program files\Orange\SessionManager\SessionManager.exe" [2007-09-25 102400]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2010-06-23 30192]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]
"Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-10 15360]

c:\documents and settings\All Users\Menu D'marrer\Programmes\D'marrage\
Acer Empowering Technology.lnk - c:\acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe [2007-1-8 45056]
Acer WLAN 11g USB Dongle.lnk - c:\program files\Acer WLAN 11g USB Dongle\ZDWlan.exe [2005-11-16 745472]
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2009-7-13 525640]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe"=
"c:\Program Files\eMule\emule.exe"=
"%windir%\Network Diagnostic\xpnetdiag.exe"=
"c:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe"=
"c:\Program Files\Orange\Connectivity\ConnectivityManager.exe"=
"c:\Program Files\Windows Live\Messenger\wlcsdk.exe"=
"c:\Program Files\Windows Live\Messenger\msnmsgr.exe"=
"c:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"=

S2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [31/01/2010 20:23 135664]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [17/01/2009 00:01 30192]
.
Contenu du dossier 'Tâches planifiées'

2010-09-20 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

2010-09-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-31 18:23]

2010-09-26 c:\windows\Tasks\RegPowerClean.job
- c:\program files\Winferno\RegistryPowerCleaner\RegPowerClean.exe [2009-11-19 13:48]

2010-09-26 c:\windows\Tasks\RPCReminder.job
- c:\program files\Winferno\RegistryPowerCleaner\RPCReminder.exe [2009-11-19 13:34]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://global.acer.com
FF - ProfilePath - c:\documents and settings
icolas\Application Data\Mozilla\Firefox\Profiles
1t6yetn.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - component: c:\progra~1\MOZILL~1\extensions	alkback@mozilla.org\components\qfaservices.dll
FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- PARAMETRES FIREFOX ----
FF - user.js: general.useragent.extra.ludi - LUDI2

.
- - - - ORPHELINS SUPPRIMES - - - -

HKLM-Run-AOLDialer - c:\program files\Fichiers communs\AOL\ACS\AOLDial.exe
AddRemove-Yahoo! Companion - c:\progra~1\Yahoo!\Common\UNYT_W~1.EXE
AddRemove-Yahoo! Toolbar - c:\progra~1\Yahoo!\Common\UNYT_W~1.EXE



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-09-26 15:23
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ... 

Recherche d'éléments en démarrage automatique cachés ... 

Recherche de fichiers cachés ... 

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-3728123497-3152027805-133935062-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
   d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,66,d6,02,a0,e1,0c,89,44,9d,b0,79,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
   d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,66,d6,02,a0,e1,0c,89,44,9d,b0,79,\
.
Heure de fin: 2010-09-26  15:25:09
ComboFix-quarantined-files.txt  2010-09-26 13:25
ComboFix2.txt  2010-09-26 13:07

Avant-CF: 3 138 248 704 octets libres
Après-CF: 3 087 052 800 octets libres

- - End Of File - - B66C39502554EB4CFB5661E1924833EB

marguerite · Answer

http://www.cijoint.fr/cjlink.php?file=cj201009/cijFPkC7dK.txt

Utilisateur anonyme · Answer

Re

Rends toi sur ce site : 

https://www.virustotal.com/gui/ 

 Clique sur " parcourir ", cherche un fichier à la fois :

Clique sur Send File. 

C:\setup_av_free_fre.exe

Un rapport va s'élaborer ligne à ligne. 

 Attends la fin. Il doit comprendre la taille du fichier envoyé. 

 Sauvegarde le rapport avec le bloc-notes. 

 Copie le dans ta réponse et fait le pour chaque fichier ; merci 

(!) Si Virus Total indique que le fichier a déjà été analysé, cliquer sur le bouton. Ré analyser le fichier maintenant


@+

marguerite · Answer

tu me dis de le faire pour chaque fichier !!! mais les fichiers d ou?

marguerite · Answer

virus total me dit que C:\setup_av_free_fre.exe est tros gros qu il ne peut pas le prendre

Utilisateur anonyme · Answer

re

Ok;

1)Il te faire de la place sur ton lecteur C:
Un minimum de 10% est nécessaire à Windows pour tourner à l'aise.

2)fait Windows update >>XP SP3

3)Mise à jour Java:
Pour java utilises javaRa https://www.commentcamarche.net/faq/15645-supprimer-les-anciennes-versions-de-java-avec-javara    

 et un autre tutoriel javaRa http://www.libellules.ch/dotclear/index.php?post/2008/07/13/2689-javara

Décompresse le fichier sur le Bureau (Clic droit > Extraire tout). 
* Double-cliques ou clic droit sous Vista  sur le répertoire JavaRa. 
* Puis double-cliques sur le fichier JavaRa.exe (le exe peut ne pas s'afficher). 
* Choisis Français puis cliques sur Select. 
* Cliques sur Recherche de mises à jour. 
* Sélectionne Mettre à jour via jucheck.exe puis clique sur Rechercher. 
* Autorises le processus à se connecter s'il le demande, cliques sur Installer et suis les instructions d'installation qui prennent quelques minutes. 
* L'installation est terminée, reviens à l'écran de JavaRa et cliques sur Effacer les anciennes versions. 
* Cliques sur Oui pour confirmer. Laisses travailler et cliques ensuite sur OK, puis une deuxième fois sur OK. 
* Un rapport va s'ouvrir. Postes-le dans ta prochaine réponse. 
* Ferme l'application. 

Note : le rapport se trouve aussi dans C:\ sous le nom JavaRa.log.


Et ce n'est pas fini...

@+

marguerite · Answer

c'est ou windows update???

marguerite · Answer

oui ça j ai trouver mais j ai pas trouver update >> XP SP3

marguerite · Answer

JavaRa 1.16 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sun Sep 26 19:19:30 2010

Found and removed: C:\Program Files\Java\jre1.5.0_06

Found and removed: C:\Program Files\Java\jre1.6.0_02

Found and removed: Software\JavaSoft\Java2D\1.5.0_06

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510006

Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510006

Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510006

Found and removed: SOFTWARE\Classes\JavaPlugin.150_06

Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalled.1.5.0.0

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_06

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_06

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510006

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510006

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150060}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610002

Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610002

Found and removed: SOFTWARE\Classes\JavaPlugin.160_02

Found and removed: SOFTWARE\Classes\JavaPlugin.160_17

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_02

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_17

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_02

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_17

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610002

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610002

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610002

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160020}

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.5.0_06

Found and removed: Software\Classes\JavaPlugin.160_02

Found and removed: Software\Classes\JavaPlugin.160_17

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Java\jre1.5.0_06\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Java\jre1.6.0_02\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Java\jre1.6.0_02\bin\

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_17

Found and removed: Software\JavaSoft\Java2D\1.6.0_02

Found and removed: Software\JavaSoft\Java Runtime Environment\1.6.0_02

Found and removed: Software\JavaSoft\Java Runtime Environment\1.6.0_17

Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610002

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}

------------------------------------

Finished reporting.

Security tool zhp diag telecharger et apres??

24 réponses

Discussions similaires

Newsletters