Je suis piraté !!! A laide !!!

Question

Bonjour/Bonsoir comme le titre l'indique je suis piraté par une certain personne dont je connais pas l'identité j'ai essailler toute les façon de le bloquer mais non sans exception mais rien ne remarque la présence de ce pirate le forum est mon dernier recours j'espère que j'obtiendrai de laide 


Merci.




Configuration: Windows Vista / Internet Explorer 7.0

Karel7 · Accepted Answer

Salut,

Ok, fait un diagnostic pour voir ...

¤ Télécharge ZHPDiag (de Nicolas Coolman).
¤ Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.
¤ Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
¤ Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
¤ Rend toi sur Cijoint et indique l'emplacement du rapport à l'aide du bouton "Parcourir..." Ensuite Clique sur "Cliquez ici pour déposer le fichier"
¤ Un lien se ra généré, copie colle le dans ta prochaine réponse.

Bonne chance @+

Karel7 · Answer

comment vois tu que tu es piraté ?

Reborn17 · Answer

J'ai perdu 4 compt dofus , 2 compt metin 2 , 1 compt WOW et aussi mes 2 forum Monster hunter 3 et tous ce que je crée

Reborn17 · Answer

sil vous plait j'ai vraiment besoin d'aide :'(

Philippe · Answer

Bonjour,

Si tu as vraiment besoin d'aide, il faut suivre les indications:
https://forums.commentcamarche.net/forum/affich-19379169-je-suis-pirate-a-laide#3

A+Lusche Philippe

jfkpresident · Answer

Lu'

Et essaie d'utiliser le bouton vert "J'ai une réponse" pour ton prochain message -;)

PS: Coucou philippe ;)

Reborn17 · Answer

Sa marche pas lorsque je lance ZHPDiag sa me fait l'erreur suivant :  

Impossible d'exécuter le fichier :  
C:\Program Files\ZHPDiag\ZHPDiag.exe 

CreateProcess a échoué ; code 740. 
L'opération demandée nécessite une évélation.  

( PS : Je ne recoi pas les réponses dans ma boite mail mais j'ai pourtan surveillé le sujet pourquoi ? )

Reborn17 · Answer

Voila le lien : http://www.cijoint.fr/cj201010/cijYKhpVQI.txt

Reborn17 · Answer

Sa prend plus de 7 heur ?

Karel7 · Answer

Salut,

@Jacques-gache : Salut à toi, je ne me froisse pas, j'ai mit trop de temps :/
@Reborn7 : Vas y pour ce que t'a dit Jacques et poste le rapport, ensuite :

¤ Télécharge Malwarebytes Antimalware
¤¤¤> Tutoriel MBAM
¤ Fais la mise à jour du logiciel (elle se fait normalement à l'installation)
¤ Lance une analyse complète en cliquant sur "Exécuter un examen complet"
¤ Sélectionne les disques que tu veux analyser et clique sur "Lancer l'examen"
¤ L'analyse peut durer un bon moment.....
¤ Une fois l'analyse terminée, clique sur "OK" puis sur "Afficher les résultats"
¤ Vérifie que tout est bien coché et clique sur "Supprimer la sélection" => et ensuite sur "OK"
¤ Un rapport va s'ouvrir dans le bloc note... Fais un copié/collé du rapport dans ta prochaine réponse sur le forum

¤¤¤  Il se pourrait que certains fichiers devront être supprimés au redémarrage du PC... Fais le en cliquant sur "oui" à la question posée


Bonne chance @+

Reborn17 · Answer

Ok je ferai tous ce cette apres-midi.

Sinon pouvez vous me conseiller un antivirus gratui et bien car le délai de norton est fini et je peux pas en acheter un autre et pour antivir c'est périmer. Merci

Enrique.

Reborn17 · Answer

Je suis vraiment désoler de vous demande tant de chose mais pouvez vous me dire par étape ce que je doit faire merci.

Adultère · Answer

1)Télécharge MalwareByte's, Fais un scan du système COMPLET ! Supprime toute tes infections.
2) Fais un nettoyage de disque.
Et tu verras que ton pc ne sera plus piraté, et fonctionnera plus rapidement.

Karel7 · Answer

Salut Reborn7,

Suit cette procédure telle quelle :

¤ Télécharge AD-Remover (de C_XX) sur ton Bureau.
/!\ Déconnecte toi et ferme toutes les applications en cours /!\
¤ Double-clique sur l'icône AD-Remover
¤ Au menu principal, clique sur "Nettoyer"
¤ Confirme le lancement de l'analyse et laisse l'outil travailler
¤ Poste le rapport qui apparait à la fin (il est aussi sauvegardé sous C:\Ad-report-CLEAN.txt )

(CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

Ensuite :

¤ Télécharge Malwarebytes Antimalware
¤¤¤> Tutoriel MBAM
¤ Fais la mise à jour du logiciel (elle se fait normalement à l'installation)
¤ Lance une analyse complète en cliquant sur "Exécuter un examen complet"
¤ Sélectionne les disques que tu veux analyser et clique sur "Lancer l'examen"
¤ L'analyse peut durer un bon moment.....
¤ Une fois l'analyse terminée, clique sur "OK" puis sur "Afficher les résultats"
¤ Vérifie que tout est bien coché et clique sur "Supprimer la sélection" => et ensuite sur "OK"
¤ Un rapport va s'ouvrir dans le bloc note... Fais un copié/collé du rapport dans ta prochaine réponse sur le forum

¤¤¤  Il se pourrait que certains fichiers devront être supprimés au redémarrage du PC... Fais le en cliquant sur "oui" à la question posée


Bonne chance @+

Reborn17 · Answer

Ok je ferai sa soit se soir soit demain.

Merci pour tous les efort que vous fourniser pour m'aider.

nordin · Answer

Bonjour
Excusez   mon intervention
Un technicien c'est comme un médecin, a travers les symptômes  il chèche à découvrir la maladie or  @Reborn17  a parlé de tentative de piratage et non de toolbar&hotbar , il aurait peut être pu  expliquer un peu plus ce qu'il a amené a cette conclusion, peut etre victime d'usurpation d'identité ? un piratage de comptes ? Fuite de données ?...

 Désolé c'était simplement des questions que je me suis posé en lisant ce post

Bonne journée

Reborn17 · Answer

Déja voila le raport AD-R : 


======= RAPPORT D'AD-REMOVER 2.0.0.1,F | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par C_XX le 16/09/10 à 13:30
Contact: AdRemover.contact[AT]gmail.com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 15:37:32 le 09/10/2010, Mode normal

Microsoft® Windows Vista(TM) Édition Familiale Premium  Service Pack 2 (X86) 
nano@PC-DE-NANO (Hewlett-Packard HP Pavilion dv7 Notebook PC) 
 
============== ACTION(S) ==============


0,Dossier supprimé: C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
0,Fichier supprimé: C:\Windows\system32\Tasks\Scheduled Update for Ask Toolbar
0,Dossier supprimé: C:\ProgramData\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
0,Dossier supprimé: C:\Program Files\Ask.com
0,Dossier supprimé: C:\Users
ano\AppData\Local\AskToolbar
0,Dossier supprimé: C:\Users
ano\AppData\LocalLow\AskToolbar
0,Dossier supprimé: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ClickPotato
0,Dossier supprimé: C:\Users
ano\AppData\Roaming\ClickPotatoLite
0,Dossier supprimé: C:\Program Files\ClickPotatoLite
0,Dossier supprimé: C:\ProgramData\ClickPotatoLiteSA
0,Dossier supprimé: C:\Users
ano\AppData\LocalLow\Conduit
0,Dossier supprimé: C:\Program Files\Conduit
0,Dossier supprimé: C:\Users
ano\AppData\LocalLow\PriceGong
0,Dossier supprimé: C:\Program Files\PriceGong
0,Dossier supprimé: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShopperReports
0,Dossier supprimé: C:\Users
ano\AppData\Roaming\ShopperReports3
0,Dossier supprimé: C:\Users
ano\AppData\LocalLow\ShopperReports3
0,Dossier supprimé: C:\Program Files\ShopperReports3
0,Dossier supprimé: C:\ProgramData\Viewpoint
0,Dossier supprimé: C:\Program Files\Viewpoint
3,Fichier supprimé: C:\Windows\Installer\57f97.msi   

(!) -- Fichiers temporaires supprimés.


1,Clé supprimée: HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{09325003-167C-483d-A4BA-8B3122ABB432}
3,Clé supprimée: HKLM\Software\Classes\AppID\{0D82ACD6-A652-4496-A298-2BDE705F4227}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{100EB1FD-D03E-47fd-81F3-EE91287F9465}
1,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{100EB1FD-D03E-47fd-81F3-EE91287F9465}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{100EB1FD-D03E-47fd-81F3-EE91287F9465}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{100EB1FD-D03E-47fd-81F3-EE91287F9465}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{20EA9658-6BC3-4599-A87D-6371FE9295FC}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{2721A8E5-BFDB-4562-9912-9E0531CA616C}
3,Clé supprimée: HKLM\Software\Classes\AppID\{7025E484-D4B0-441a-9F0B-69063BD679CE}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{396CFC12-932D-496b-A0A8-5D7201E105E1}
3,Clé supprimée: HKLM\Software\Classes\AppID\{A89256AD-EC17-4a83-BEF5-4B8BC4F39306}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{60DA826C-B1C6-4358-BDEC-4837CED45470}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{6DD76B7B-6423-4df0-9A07-84A6CAD973A0}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{74C22317-5B90-471f-9AD2-FEC049870A16}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{7F6CFB6A-9227-4bb8-B941-F2B067E76F51}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{A16AD1E9-F69A-45af-9462-B1C286708842}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE}
1,Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{AB0EE208-DF60-4fa7-A617-C4269760033E}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{C1089F63-7AFC-4538-B0EB-BEA0F4225A57}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{C9CCBB35-D123-4a31-AFFC-9B2933132116}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{CC7BD6F1-565C-47ce-A5BB-9C935E77B59D}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{CFC16189-8A92-4a29-A940-60248385F426}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
1,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{DEE758B4-C3FB-4a5b-9939-848B9C77A2FB}
3,Clé supprimée: HKLM\Software\Classes\AppID\{8258B35C-05B8-4c0e-9525-9BCCC70F8F2D}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{E12AEAB6-7D12-4c07-8E36-5892EFB4DAFB}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{E2F2C137-A782-4fb5-81AF-086156F5EB0A}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{F1D06C9F-51F0-4476-BEDE-5DDF91BE304E}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{F3A32DF2-7413-4fb1-B575-1AC920A17B76}
1,Clé supprimée: HKLM\Software\Classes\Interface\{17BF1E05-C0E8-413C-BD1F-A481EEA3B8E9}
1,Clé supprimée: HKLM\Software\Classes\Interface\{30B15818-E110-4527-9C05-46ACE5A3460D}
1,Clé supprimée: HKLM\Software\Classes\Interface\{618AAD04-921F-44C2-BE38-C0818AF69861}
1,Clé supprimée: HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
1,Clé supprimée: HKLM\Software\Classes\Interface\{83B2FE06-BA20-4F7D-96C6-6FC3A4E877D3}
1,Clé supprimée: HKLM\Software\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}
1,Clé supprimée: HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
1,Clé supprimée: HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
1,Clé supprimée: HKLM\Software\Classes\Interface\{AEBF09E2-0C15-43C8-99BF-928C645D98A0}
1,Clé supprimée: HKLM\Software\Classes\Interface\{B32966A2-F7C2-4362-A6CF-399EC8B44110}
1,Clé supprimée: HKLM\Software\Classes\Interface\{B5D2ED96-62F9-4C2C-956D-E425B1F67337}
1,Clé supprimée: HKLM\Software\Classes\Interface\{D3A412E8-1E4B-47D2-9B12-F88291F5AFBB}
1,Clé supprimée: HKLM\Software\Classes\TypeLib\{02AED140-2B62-4B49-8B3B-179020CC39B9}
1,Clé supprimée: HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
1,Clé supprimée: HKLM\Software\Classes\TypeLib\{573F4ABB-A1A2-44ED-9BA9-A8DAD40AAC46}
1,Clé supprimée: HKLM\Software\Classes\TypeLib\{5FE0CEAE-CB69-40AF-A323-40F94257DACB}
1,Clé supprimée: HKLM\Software\Classes\TypeLib\{ACC62306-9A63-4864-BD2F-C8825D2D7EA6}
1,Clé supprimée: HKLM\Software\Classes\TypeLib\{CDCA70D8-C6A6-49EE-9BED-7429D6C477A2}
1,Clé supprimée: HKLM\Software\Classes\TypeLib\{D136987F-E1C4-4CCC-A220-893DF03EC5DF}
1,Clé supprimée: HKLM\Software\Classes\TypeLib\{E343EDFC-1E6C-4CB5-AA29-E9C922641C80}
1,Clé supprimée: HKLM\Software\Classes\TypeLib\{F1A1892C-2A6C-4817-98B4-FF81443CBA20}
0,Clé supprimée: HKLM\Software\Classes\AxMetaStream.MetaStreamCtl
0,Clé supprimée: HKLM\Software\Classes\AxMetaStream.MetaStreamCtl.1
0,Clé supprimée: HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary
0,Clé supprimée: HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary.1
0,Clé supprimée: HKLM\Software\Classes\ClickPotatoLiteAx.Info
0,Clé supprimée: HKLM\Software\Classes\ClickPotatoLiteAx.Info.1
0,Clé supprimée: HKLM\Software\Classes\ClickPotatoLiteAX.UserProfiles
0,Clé supprimée: HKLM\Software\Classes\ClickPotatoLiteAX.UserProfiles.1
0,Clé supprimée: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd
0,Clé supprimée: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1
0,Clé supprimée: HKLM\Software\Classes\MenuButtonIE.ButtonIE
0,Clé supprimée: HKLM\Software\Classes\MenuButtonIE.ButtonIE.1
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.AsyncReporter
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.AsyncReporter.1
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.CntntDic
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.CntntDic.1
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.CntntDisp
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.CntntDisp.1
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.Dwnldr
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.Dwnldr.1
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.HbAx
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.HbAx.1
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.HbGuru
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.HbGuru.1
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.HbInfoBand
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.HbInfoBand.1
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.IEButton
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.IEButton.1
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.IEButtonA
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.IEButtonA.1
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.KOPFF
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.KOPFF.1
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.MozillaNvgtnTrpr
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.MozillaNvgtnTrpr.1
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.MozillaPSExecuter
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.MozillaPSExecuter.1
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.ReportData
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.ReportData.1
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.Reporter
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.Reporter.1
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.RprtCtrl
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.RprtCtrl.1
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.Scopes
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.Scopes.1
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.Stock
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.Stock.1
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.TriggerImmidiate
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.TriggerImmidiate.1
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.TriggerImmidiateOrRandomTS
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.TriggerImmidiateOrRandomTS.1
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.TriggerOnceInDay
0,Clé supprimée: HKLM\Software\Classes\ShopperReports.TriggerOnceInDay.1
0,Clé supprimée: HKLM\Software\Classes\Toolbar.CT2542115
0,Clé supprimée: HKLM\Software\Classes\AppID\BRNstIE.DLL
0,Clé supprimée: HKLM\Software\Classes\AppID\CmndFF.DLL
0,Clé supprimée: HKLM\Software\Classes\AppID\GenericAskToolbar.DLL
1,Clé supprimée: HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
0,Clé supprimée: HKLM\Software\Classes\AppID\MenuButtonIE.DLL
1,Clé supprimée: HKLM\Software\Classes\AppID\{11C27351-716B-4052-9361-E3B0A3F8221C}
0,Clé supprimée: HKLM\Software\Classes\AppID\mozillaps.dll
0,Clé supprimée: HKLM\Software\Classes\AppID\Pltfrm.DLL
0,Clé supprimée: HKLM\Software\Classes\AppID\PriceGongIE.DLL
1,Clé supprimée: HKLM\Software\Classes\AppID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}
0,Clé supprimée: HKLM\Software\ClickPotatoLite
0,Clé supprimée: HKLM\Software\Conduit
0,Clé supprimée: HKLM\Software\MetaStream
0,Clé supprimée: HKLM\Software\ShopperReports3
0,Clé supprimée: HKLM\Software\Viewpoint
0,Clé supprimée: HKCU\Software\Ask.com
0,Clé supprimée: HKCU\Software\AskToolbar
0,Clé supprimée: HKCU\Software\ClickPotatoLiteSA
0,Clé supprimée: HKCU\Software\ShopperReports3
0,Clé supprimée: HKCU\Software\AppDataLow\AskToolbarInfo
0,Clé supprimée: HKCU\Software\AppDataLow\Software\AskToolbar
0,Clé supprimée: HKCU\Software\AppDataLow\Software\Conduit
0,Clé supprimée: HKCU\Software\AppDataLow\Software\PriceGong
0,Clé supprimée: HKCU\Software\AppDataLow\Software\ShopperReports3
3,Clé supprimée: HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
3,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
3,Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1524F8F4-121E-4783-BA07-C26030268562}
3,Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
3,Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
3,Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{1524F8F4-121E-4783-BA07-C26030268562}
3,Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
3,Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
3,Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
0,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
0,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ClickpotatoliteSA
0,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\pricegong
0,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ShopperReportsSA
0,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer
0,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C5428486-50A0-4A02-9D20-520B59A9F9B2}
0,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C5428486-50A0-4A02-9D20-520B59A9F9B3}
0,Clé supprimée: HKLM\Software\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
0,Clé supprimée: HKLM\Software\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
0,Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Extensions\{c5428486-50a0-4a02-9d20-520b59a9f9b2}
0,Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Extensions\{c5428486-50a0-4a02-9d20-520b59a9f9b3}
0,Erreur suppression clé: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar (Error code: 1)

0,Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform|ShopperReports 3.0.489.0
0,Valeur supprimée: HKLM\Software\Mozilla\Firefox\Extensions|clickpotatolite@clickpotatolite.com
0,Valeur supprimée: HKLM\Software\Mozilla\Firefox\Extensions|Shopperreports@shopperreports.com
0,Valeur supprimée: HKCU\Software\Mozilla\Firefox\Extensions|{8a9386b4-e958-4c4c-adf4-8f26db3e4829}
0,Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{00000000-6E41-4FD3-8538-502F5495E5FC}
0,Valeur supprimée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{D4027C7F-154A-4066-A1AD-4243D8127440}
0,Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}


============== SCAN ADDITIONNEL ==============

** Internet Explorer Version [8.0.6001.18943] **

[HKCU\Software\Microsoft\Internet Explorer\Main] 
AutoHide: yes
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Search Asst: no

[HKLM\Software\Microsoft\Internet Explorer\Main] 
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Enable Browser Extensions: yes
Local Page: C:\Windows\System32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
Use Search Asst: no

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] 
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files\Ad-Remover\Quarantine: 125 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 15 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 09/10/2010 (16681 Octet(s)) 

Fin à: 15:48:13, 09/10/2010 
 
============== E.O.F ==============

Reborn17 · Answer

Et voila le raport Malwarebytes Antimalware : 


Malwarebytes' Anti-Malware 1.46 
www.malwarebytes.org 

Version de la base de données: 4785 

Windows 6.0.6002 Service Pack 2 
Internet Explorer 8.0.6001.18943 

09/10/2010 20:00:04 
mbam-log-2010-10-09 (20-00-04).txt 

Type d'examen: Examen complet (C:\|D:\|E:\|) 
Elément(s) analysé(s): 385711 
Temps écoulé: 4 heure(s), 0 minute(s), 16 seconde(s) 

Processus mémoire infecté(s): 0 
Module(s) mémoire infecté(s): 0 
Clé(s) du Registre infectée(s): 24 
Valeur(s) du Registre infectée(s): 1 
Elément(s) de données du Registre infecté(s): 0 
Dossier(s) infecté(s): 0 
Fichier(s) infecté(s): 10 

Processus mémoire infecté(s): 
(Aucun élément nuisible détecté) 

Module(s) mémoire infecté(s): 
(Aucun élément nuisible détecté) 

Clé(s) du Registre infectée(s): 
HKEY_CLASSES_ROOT\Interface\{21ba420e-161c-413a-b21e-4e42ae1f4226} (Adware.ClickPotato) -> Quarantined and deleted successfully. 
HKEY_CLASSES_ROOT\Interface\{453db0c5-f41c-4d97-8dd6-cc72ecd5f699} (Adware.ClickPotato) -> Quarantined and deleted successfully. 
HKEY_CLASSES_ROOT\Interface\{4afc07d0-59bb-46b8-b097-1a46e88eef71} (Adware.ClickPotato) -> Quarantined and deleted successfully. 
HKEY_CLASSES_ROOT\Interface\{6511ce4c-4722-40d0-ad3d-4afa2f50978a} (Adware.ClickPotato) -> Quarantined and deleted successfully. 
HKEY_CLASSES_ROOT\Interface\{65a16874-2ed0-460e-a547-5fe2ec3a13a7} (Adware.ShopperReports) -> Quarantined and deleted successfully. 
HKEY_CLASSES_ROOT\Interface\{71e02280-5212-45c3-b174-4d5a35da254f} (Adware.ShopperReports) -> Quarantined and deleted successfully. 
HKEY_CLASSES_ROOT\Interface\{9bec9b38-bf39-4899-806e-a1c5dfeb60a2} (Adware.ShopperReports) -> Quarantined and deleted successfully. 
HKEY_CLASSES_ROOT\Interface\{b86d82bf-d39f-439a-a07c-43eddc6f6ea6} (Adware.ClickPotato) -> Quarantined and deleted successfully. 
HKEY_CLASSES_ROOT\Interface\{d8560ac2-21b5-4c1a-bdd4-bd12bc83b082} (Adware.ShopperReports) -> Quarantined and deleted successfully. 
HKEY_CLASSES_ROOT\Interface\{da6305b9-0869-4235-8c1d-533a65e639e5} (Adware.ClickPotato) -> Quarantined and deleted successfully. 
HKEY_CLASSES_ROOT\Interface\{e25da6d6-c365-46cf-abaf-dc5893135d7a} (Adware.ShopperReports) -> Quarantined and deleted successfully. 
HKEY_CLASSES_ROOT\Interface\{e6961c59-cfce-4ccd-b794-bc78db98413a} (Adware.ShopperReports) -> Quarantined and deleted successfully. 
HKEY_CLASSES_ROOT\Interface\{f8b4ec8a-2407-4be0-aee2-0f430d65a90d} (Adware.ClickPotato) -> Quarantined and deleted successfully. 
HKEY_CLASSES_ROOT\CLSID\{1602f07d-8bf3-4c08-bdd6-dddb1c48aedc} (Adware.ClickPotato) -> Quarantined and deleted successfully. 
HKEY_CLASSES_ROOT\CLSID\{ac6d819e-aa8f-4418-a3bb-d165c1b18bb5} (Adware.ClickPotato) -> Quarantined and deleted successfully. 
HKEY_CLASSES_ROOT\Typelib\{c55ca95c-324b-451c-b2d2-6e895aa75fec} (Adware.ClickPotato) -> Quarantined and deleted successfully. 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b58926d6-cfb0-45d2-9c28-4b5a0f0368ae} (Adware.ClickPotato) -> Quarantined and deleted successfully. 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a078f691-9c07-4af2-bf43-35e79eecf8b7} (Adware.Softomate) -> Quarantined and deleted successfully. 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1602f07d-8bf3-4c08-bdd6-dddb1c48aedc} (Adware.ClickPotato) -> Quarantined and deleted successfully. 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ac6d819e-aa8f-4418-a3bb-d165c1b18bb5} (Adware.ClickPotato) -> Quarantined and deleted successfully. 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{b58926d6-cfb0-45d2-9c28-4b5a0f0368ae} (Adware.ClickPotato) -> Quarantined and deleted successfully. 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{69725738-cd68-4f36-8d02-8c43722ee5da} (Adware.Hotbar) -> Quarantined and deleted successfully. 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{89f88394-3828-4d03-a0cf-8203604c3da6} (Adware.Hotbar) -> Quarantined and deleted successfully. 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{d4233f04-1789-483c-a137-731e8f113dd5} (Adware.Hotbar) -> Quarantined and deleted successfully. 

Valeur(s) du Registre infectée(s): 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform\srs_it_e8790577b3765b5433aa96 (Malware.Trace) -> Quarantined and deleted successfully. 

Elément(s) de données du Registre infecté(s): 
(Aucun élément nuisible détecté) 

Dossier(s) infecté(s): 
(Aucun élément nuisible détecté) 

Fichier(s) infecté(s): 
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.489.0\BRNstIE.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully. 
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.489.0\CmndFF.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully. 
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.489.0\CntntCntr.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully. 
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.489.0\mozillaps.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully. 
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.489.0\Pltfrm.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully. 
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.489.0\ShopperReports.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully. 
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.489.0\ShopperReportsUninstaller.exe.vir (Adware.ShopperReports) -> Quarantined and deleted successfully. 
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.489.0\firefox\firefoxtoolbar\extensions\components\BRNstFF.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully. 
C:\Users
ano\AppData\Local\Temp
sw4363.tmp\questdns.exe (Adware.QuestDns) -> Quarantined and deleted successfully. 
C:\Users\Public\Music\Sample Music\QuickTime_Update_KB097465.exe (Malware.Ackantta) -> Quarantined and deleted successfully.

Reborn17 · Answer

Et maintenan je fait quoi ?

Reborn17 · Answer

Mais pourquoi utiliser 2 logiciel diferent quel sont les diference entre les logiciel ?

Reborn17 · Answer

Voila le lien : http://www.cijoint.fr/cj201010/cijuvxH7ZL.txt

Reborn17 · Answer

Désoler pour ce retard mais voila le raport OTM : 

========== FILES ==========
File/Folder C:\Program Files\PriceGong not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1631550F-191D-4826-B069-D9439253D926}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1631550F-191D-4826-B069-D9439253D926}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1631550F-191D-4826-B069-D9439253D926}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1631550F-191D-4826-B069-D9439253D926}\ not found.
Registry key HKEY_CURRENT_USER\Software\AppDataLow\Toolbar\ deleted successfully.
========== COMMANDS ==========
 
OTM by OldTimer - Version 3.1.16.1 log created on 10132010_204316




Le raport SEAF :

1. ========================= SEAF 1.0.0.9 - C_XX
2. 
3. Commencé à: 21:02:11 le 13/10/2010
4. 
5. Valeur(s) recherchée(s):
6. wmplayer.exe
7. 
8. (!) --- Calcul du Hash "MD5"
9. (!) --- Informations supplémentaires
10. (!) --- Recherche registre
11. 
12. ====== Fichier(s) (TC: Date de création, TM: Date de modification, DA, Dernier accès) ======
13. 
14. 
15. "C:\Program Files\Windows Media Player\fr-FR\wmplayer.exe.mui" [ ----A---- | 12 Ko ]
16. TC: 10/06/2008,12:08:19 | TM: 10/06/2008,12:08:19 | DA: 10/06/2008,12:08:19
17. 
18. Hash MD5: 148EA1AB7539FCB9272EC67AFB249484
19. 
20. CompanyName: Microsoft Corporation
21. ProductName: Système d'exploitation Microsoft® Windows®
22. InternalName: wmplayer.exe
23. OriginalFileName: wmplayer.exe.mui
24. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
25. ProductVersion: 11.0.6000.6324
26. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
27. 
28. =========================
29. 
30. 
31. "C:\Program Files\Windows Media Player\wmplayer.exe" [ ----A---- | 169 Ko ]
32. TC: 26/06/2010,19:59:24 | TM: 15/07/2009,14:39:31 | DA: 26/06/2010,19:59:24
33. 
34. Hash MD5: 8583971D160FF96B220BB87FB0B9521D
35. 
36. CompanyName: Microsoft Corporation
37. ProductName: Système d'exploitation Microsoft® Windows®
38. InternalName: wmplayer.exe
39. OriginalFileName: wmplayer.exe.mui
40. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
41. ProductVersion: 11.0.6000.6324
42. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
43. 
44. =========================
45. 
46. 
47. "C:\WINDOWS\Prefetch\WMPLAYER.EXE-9DE758AE.pf" [ ----A---- | 71 Ko ]
48. TC: 30/09/2010,18:54:43 | TM: 13/10/2010,15:01:56 | DA: 30/09/2010,18:54:43
49. 
50. Hash MD5: 1D31F682F3B289FEBA2E90678BFE95A7
51. 
52. 
53. =========================
54. 
55. 
56. "C:\WINDOWS\SoftwareDistribution\Download\5379e2e7b4a18994f0296313f618cada\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_6.0.6001.18528_fr-fr_c5f101fed4a3e810\wmplayer.exe.mui" [ ----A---- | 12 Ko ]
57. TC: 13/10/2010,19:14:24 | TM: 10/09/2010,20:33:03 | DA: 13/10/2010,19:14:24
58. 
59. Hash MD5: 42A78023B83B98BAED5561704ED56207
60. 
61. CompanyName: Microsoft Corporation
62. ProductName: Système d'exploitation Microsoft® Windows®
63. InternalName: wmplayer.exe
64. OriginalFileName: wmplayer.exe.mui
65. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
66. ProductVersion: 11.0.6001.7010
67. FileVersion: 11.0.6001.7010 (vistasp1_gdr.100910-0521)
68. 
69. =========================
70. 
71. 
72. "C:\WINDOWS\SoftwareDistribution\Download\5379e2e7b4a18994f0296313f618cada\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_6.0.6001.22762_fr-fr_c6495f43ede75cbb\wmplayer.exe.mui" [ ----A---- | 12 Ko ]
73. TC: 13/10/2010,19:14:24 | TM: 13/09/2010,18:15:20 | DA: 13/10/2010,19:14:24
74. 
75. Hash MD5: B8DD74B0D944D97F4E54D67DAA83EE95
76. 
77. CompanyName: Microsoft Corporation
78. ProductName: Système d'exploitation Microsoft® Windows®
79. InternalName: wmplayer.exe
80. OriginalFileName: wmplayer.exe.mui
81. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
82. ProductVersion: 11.0.6001.7118
83. FileVersion: 11.0.6001.7118 (vistasp1_ldr.100913-0337)
84. 
85. =========================
86. 
87. 
88. "C:\WINDOWS\SoftwareDistribution\Download\5379e2e7b4a18994f0296313f618cada\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_6.0.6002.18311_fr-fr_c7db43b2d1c86d09\wmplayer.exe.mui" [ ----A---- | 12 Ko ]
89. TC: 13/10/2010,19:14:24 | TM: 13/09/2010,17:56:53 | DA: 13/10/2010,19:14:24
90. 
91. Hash MD5: 2FA02017EFF9142A3996D51AA85787EE
92. 
93. CompanyName: Microsoft Corporation
94. ProductName: Système d'exploitation Microsoft® Windows®
95. InternalName: wmplayer.exe
96. OriginalFileName: wmplayer.exe.mui
97. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
98. ProductVersion: 11.0.6002.18311
99. FileVersion: 11.0.6002.18311 (vistasp2_gdr.100913-0337)
100. 
101. =========================
102. 
103. 
104. "C:\WINDOWS\SoftwareDistribution\Download\5379e2e7b4a18994f0296313f618cada\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_6.0.6002.22486_fr-fr_c81e327beb1a4f1d\wmplayer.exe.mui" [ ----A---- | 12 Ko ]
105. TC: 13/10/2010,19:14:24 | TM: 13/09/2010,22:01:12 | DA: 13/10/2010,19:14:24
106. 
107. Hash MD5: 493C6BD28A4204A4CEB1D314489F9FF5
108. 
109. CompanyName: Microsoft Corporation
110. ProductName: Système d'exploitation Microsoft® Windows®
111. InternalName: wmplayer.exe
112. OriginalFileName: wmplayer.exe.mui
113. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
114. ProductVersion: 11.0.6002.22486
115. FileVersion: 11.0.6002.22486 (vistasp2_ldr.100913-0337)
116. 
117. =========================
118. 
119. 
120. "C:\WINDOWS\SoftwareDistribution\Download\5379e2e7b4a18994f0296313f618cada\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18528_none_0b5c2f154f22adf2\wmplayer.exe" [ ----A---- | 169 Ko ]
121. TC: 13/10/2010,19:14:25 | TM: 10/09/2010,18:35:48 | DA: 13/10/2010,19:14:25
122. 
123. Hash MD5: B5D2610D34142F287DF13130665F0B94
124. 
125. CompanyName: Microsoft Corporation
126. ProductName: Système d'exploitation Microsoft® Windows®
127. InternalName: wmplayer.exe
128. OriginalFileName: wmplayer.exe.mui
129. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
130. ProductVersion: 11.0.6000.6324
131. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
132. 
133. =========================
134. 
135. 
136. "C:\WINDOWS\SoftwareDistribution\Download\5379e2e7b4a18994f0296313f618cada\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22762_none_0bb48c5a6866229d\wmplayer.exe" [ ----A---- | 169 Ko ]
137. TC: 13/10/2010,19:14:25 | TM: 13/09/2010,16:44:52 | DA: 13/10/2010,19:14:25
138. 
139. Hash MD5: 283511A489843408B7E23304FBDB3366
140. 
141. CompanyName: Microsoft Corporation
142. ProductName: Système d'exploitation Microsoft® Windows®
143. InternalName: wmplayer.exe
144. OriginalFileName: wmplayer.exe.mui
145. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
146. ProductVersion: 11.0.6000.6324
147. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
148. 
149. =========================
150. 
151. 
152. "C:\WINDOWS\SoftwareDistribution\Download\5379e2e7b4a18994f0296313f618cada\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18311_none_0d4670c94c4732eb\wmplayer.exe" [ ----A---- | 169 Ko ]
153. TC: 13/10/2010,19:14:25 | TM: 13/09/2010,15:56:02 | DA: 13/10/2010,19:14:25
154. 
155. Hash MD5: 2D821AFA5A1A9CA7F9F997A1AAD09E72
156. 
157. CompanyName: Microsoft Corporation
158. ProductName: Système d'exploitation Microsoft® Windows®
159. InternalName: wmplayer.exe
160. OriginalFileName: wmplayer.exe.mui
161. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
162. ProductVersion: 11.0.6000.6324
163. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
164. 
165. =========================
166. 
167. 
168. "C:\WINDOWS\SoftwareDistribution\Download\5379e2e7b4a18994f0296313f618cada\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22486_none_0d895f92659914ff\wmplayer.exe" [ ----A---- | 169 Ko ]
169. TC: 13/10/2010,19:14:25 | TM: 13/09/2010,17:59:02 | DA: 13/10/2010,19:14:25
170. 
171. Hash MD5: 1163C9DC7B707E3373E695304953C127
172. 
173. CompanyName: Microsoft Corporation
174. ProductName: Système d'exploitation Microsoft® Windows®
175. InternalName: wmplayer.exe
176. OriginalFileName: wmplayer.exe.mui
177. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
178. ProductVersion: 11.0.6000.6324
179. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
180. 
181. =========================
182. 
183. 
184. "C:\WINDOWS\winsxs\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_c3c7d40cd7afe2df\wmplayer.exe.mui" [ ----A---- | 12 Ko ]
185. TC: 10/06/2008,12:08:19 | TM: 10/06/2008,12:08:19 | DA: 10/06/2008,12:08:19
186. 
187. Hash MD5: 148EA1AB7539FCB9272EC67AFB249484
188. 
189. CompanyName: Microsoft Corporation
190. ProductName: Système d'exploitation Microsoft® Windows®
191. InternalName: wmplayer.exe
192. OriginalFileName: wmplayer.exe.mui
193. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
194. ProductVersion: 11.0.6000.6324
195. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
196. 
197. =========================
198. 
199. 
200. "C:\WINDOWS\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16885_none_09320a57522f812d\wmplayer.exe" [ ----A---- | 169 Ko ]
201. TC: 26/06/2010,19:59:27 | TM: 14/07/2009,13:10:52 | DA: 26/06/2010,19:59:27
202. 
203. Hash MD5: 1EE36A2703DB00B9235786DCCCFC8300
204. 
205. CompanyName: Microsoft Corporation
206. ProductName: Système d'exploitation Microsoft® Windows®
207. InternalName: wmplayer.exe
208. OriginalFileName: wmplayer.exe.mui
209. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
210. ProductVersion: 11.0.6000.6324
211. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
212. 
213. =========================
214. 
215. 
216. "C:\WINDOWS\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.21083_none_09b97eb06b4f218b\wmplayer.exe" [ ----A---- | 169 Ko ]
217. TC: 26/06/2010,19:59:27 | TM: 15/07/2009,14:53:40 | DA: 26/06/2010,19:59:27
218. 
219. Hash MD5: 4D0B159E6EAD023BA40A187F52BC727F
220. 
221. CompanyName: Microsoft Corporation
222. ProductName: Système d'exploitation Microsoft® Windows®
223. InternalName: wmplayer.exe
224. OriginalFileName: wmplayer.exe.mui
225. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
226. ProductVersion: 11.0.6000.6324
227. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
228. 
229. =========================
230. 
231. 
232. "C:\WINDOWS\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18000_none_0b69c31f4f19b995\wmplayer.exe" [ ----A---- | 169 Ko ]
233. TC: 21/01/2008,04:25:17 | TM: 21/01/2008,04:25:17 | DA: 21/01/2008,04:25:17
234. 
235. Hash MD5: BE70DDF93F5E8CA9DA13CBC6F849808C
236. 
237. CompanyName: Microsoft Corporation
238. ProductName: Système d'exploitation Microsoft® Windows®
239. InternalName: wmplayer.exe
240. OriginalFileName: wmplayer.exe.mui
241. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
242. ProductVersion: 11.0.6000.6324
243. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
244. 
245. =========================
246. 
247. 
248. "C:\WINDOWS\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18289_none_0b1c4a254f52777a\wmplayer.exe" [ ----A---- | 169 Ko ]
249. TC: 26/06/2010,19:59:23 | TM: 14/07/2009,12:59:24 | DA: 26/06/2010,19:59:23
250. 
251. Hash MD5: 7F56AA7CBD4FBD20D532C47E0BB3F55A
252. 
253. CompanyName: Microsoft Corporation
254. ProductName: Système d'exploitation Microsoft® Windows®
255. InternalName: wmplayer.exe
256. OriginalFileName: wmplayer.exe.mui
257. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
258. ProductVersion: 11.0.6000.6324
259. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
260. 
261. =========================
262. 
263. 
264. "C:\WINDOWS\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22470_none_0ba7b6286870146b\wmplayer.exe" [ ----A---- | 169 Ko ]
265. TC: 26/06/2010,19:59:24 | TM: 15/07/2009,15:06:03 | DA: 26/06/2010,19:59:24
266. 
267. Hash MD5: 8D50C3EA6D7DC220DAA34D4962778C4D
268. 
269. CompanyName: Microsoft Corporation
270. ProductName: Système d'exploitation Microsoft® Windows®
271. InternalName: wmplayer.exe
272. OriginalFileName: wmplayer.exe.mui
273. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
274. ProductVersion: 11.0.6000.6324
275. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
276. 
277. =========================
278. 
279. 
280. "C:\WINDOWS\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18005_none_0d553c2b4c3b84e1\wmplayer.exe" [ ----A---- | 169 Ko ]
281. TC: 27/06/2010,17:12:58 | TM: 11/04/2009,08:28:16 | DA: 27/06/2010,17:12:58
282. 
283. Hash MD5: 9CE523BDED3BE1D49DB8396C97B32A44
284. 
285. CompanyName: Microsoft Corporation
286. ProductName: Système d'exploitation Microsoft® Windows®
287. InternalName: wmplayer.exe
288. OriginalFileName: wmplayer.exe.mui
289. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
290. ProductVersion: 11.0.6000.6324
291. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
292. 
293. =========================
294. 
295. 
296. "C:\WINDOWS\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18065_none_0d145ca34c6c2c87\wmplayer.exe" [ ----A---- | 169 Ko ]
297. TC: 26/06/2010,19:59:24 | TM: 15/07/2009,14:39:31 | DA: 26/06/2010,19:59:24
298. 
299. Hash MD5: 8583971D160FF96B220BB87FB0B9521D
300. 
301. CompanyName: Microsoft Corporation
302. ProductName: Système d'exploitation Microsoft® Windows®
303. InternalName: wmplayer.exe
304. OriginalFileName: wmplayer.exe.mui
305. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
306. ProductVersion: 11.0.6000.6324
307. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
308. 
309. =========================
310. 
311. 
312. "C:\WINDOWS\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22172_none_0d9028a465949c3d\wmplayer.exe" [ ----A---- | 169 Ko ]
313. TC: 26/06/2010,19:59:24 | TM: 15/07/2009,14:46:11 | DA: 26/06/2010,19:59:24
314. 
315. Hash MD5: 2221073046740FF58E7714A90D97EB55
316. 
317. CompanyName: Microsoft Corporation
318. ProductName: Système d'exploitation Microsoft® Windows®
319. InternalName: wmplayer.exe
320. OriginalFileName: wmplayer.exe.mui
321. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
322. ProductVersion: 11.0.6000.6324
323. FileVersion: 11.0.6000.6324 (vista_rtm.061101-2205)
324. 
325. =========================
326. 
327. 
328. 
329. ====== Entrée(s) du registre ======
330. 
331. 
332. [HKLM\Software\Classes\AIFFFile\shell\open\command]
333. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
334. 
335. [HKLM\Software\Classes\AIFFFile\shell\play\command]
336. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
337. 
338. [HKLM\Software\Classes\AppID\wmplayer.exe]
339. 
340. [HKLM\Software\Classes\Applications\wmplayer.exe]
341. 
342. [HKLM\Software\Classes\ASFFile\shell\open\command]
343. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:7 /Open "%L"" (REG_EXPAND_SZ)
344. 
345. [HKLM\Software\Classes\ASFFile\shell\play\command]
346. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:7 /Play "%L"" (REG_EXPAND_SZ)
347. 
348. [HKLM\Software\Classes\ASXFile\shell\open\command]
349. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
350. 
351. [HKLM\Software\Classes\ASXFile\shell\play\command]
352. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
353. 
354. [HKLM\Software\Classes\AUFile\shell\open\command]
355. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
356. 
357. [HKLM\Software\Classes\AUFile\shell\play\command]
358. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
359. 
360. [HKLM\Software\Classes\AVIFile\shell\open\command]
361. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:8 /Open "%L"" (REG_EXPAND_SZ)
362. 
363. [HKLM\Software\Classes\AVIFile\shell\play\command]
364. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:8 /Play "%L"" (REG_EXPAND_SZ)
365. 
366. [HKLM\Software\Classes\cdafile\shell\open\command]
367. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
368. 
369. [HKLM\Software\Classes\cdafile\shell\play\command]
370. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
371. 
372. [HKLM\Software\Classes\m3ufile\shell\open\command]
373. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "%L"" (REG_EXPAND_SZ)
374. 
375. [HKLM\Software\Classes\m3ufile\shell\play\command]
376. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:6 /Play "%L"" (REG_EXPAND_SZ)
377. 
378. [HKLM\Software\Classes\MIDFile\shell\open\command]
379. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
380. 
381. [HKLM\Software\Classes\MIDFile\shell\play\command]
382. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
383. 
384. [HKLM\Software\Classes\mp3file\shell\open\command]
385. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "%L"" (REG_EXPAND_SZ)
386. 
387. [HKLM\Software\Classes\mp3file\shell\play\command]
388. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:6 /Play "%L"" (REG_EXPAND_SZ)
389. 
390. [HKLM\Software\Classes\mpegfile\shell\open\command]
391. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:9 /Open "%L"" (REG_EXPAND_SZ)
392. 
393. [HKLM\Software\Classes\mpegfile\shell\play\command]
394. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:9 /Play "%L"" (REG_EXPAND_SZ)
395. 
396. [HKLM\Software\Classes\NetworkExplorerPlugins\urn:schemas-upnp-org:device:MediaRenderer:1\shell\Open Media Sharing\command]
397. ""="C:\Program Files\Windows Media Player\wmplayer.exe /WMPNSSLaunch" (REG_EXPAND_SZ)
398. 
399. [HKLM\Software\Classes\NetworkExplorerPlugins\urn:schemas-upnp-org:device:MediaServer:1\shell\Open Media Player\command]
400. ""="C:\Program Files\Windows Media Player\wmplayer.exe" (REG_EXPAND_SZ)
401. 
402. [HKLM\Software\Classes\SoundRec\shell\open\command]
403. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
404. 
405. [HKLM\Software\Classes\SoundRec\shell\play\command]
406. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
407. 
408. [HKLM\Software\Classes\SystemFileAssociations\audio\OpenWithList\WMPlayer.exe]
409. 
410. [HKLM\Software\Classes\SystemFileAssociations\video\OpenWithList\WMPlayer.exe]
411. 
412. [HKLM\Software\Classes\WAXFile\shell\open\command]
413. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
414. 
415. [HKLM\Software\Classes\WAXFile\shell\play\command]
416. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
417. 
418. [HKLM\Software\Classes\wmafile\shell\open\command]
419. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:5 /Open "%L"" (REG_EXPAND_SZ)
420. 
421. [HKLM\Software\Classes\wmafile\shell\play\command]
422. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:5 /Play "%L"" (REG_EXPAND_SZ)
423. 
424. [HKLM\Software\Classes\WMDFile\shell\open\command]
425. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /WMPackage:"%L"" (REG_EXPAND_SZ)
426. 
427. [HKLM\Software\Classes\WMP.AudioCD\Shell\Play\command]
428. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:3 /device:AudioCD "%L"" (REG_EXPAND_SZ)
429. 
430. [HKLM\Software\Classes\WMP.BurnCD\Shell\Burn\Command]
431. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:3 /Task:CDWrite /Device:"%L" " (REG_EXPAND_SZ)
432. 
433. [HKLM\Software\Classes\WMP.BurnDVD\Shell\Burn\Command]
434. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:3 /Task:DVDWrite /Device:"%L" " (REG_EXPAND_SZ)
435. 
436. [HKLM\Software\Classes\WMP.DVD\Shell\Play\command]
437. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:4 /device:DVD "%L"" (REG_EXPAND_SZ)
438. 
439. [HKLM\Software\Classes\WMP.DVR-MSFile\shell\open\command]
440. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
441. 
442. [HKLM\Software\Classes\WMP.DVR-MSFile\shell\play\command]
443. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
444. 
445. [HKLM\Software\Classes\WMP.RipCD\Shell\Rip\Command]
446. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:3 /RipAudioCD "%L" " (REG_EXPAND_SZ)
447. 
448. [HKLM\Software\Classes\WMP.VCD\Shell\Play\command]
449. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:4 /device:VCD "%L"" (REG_EXPAND_SZ)
450. 
451. [HKLM\Software\Classes\WMP11.AssocFile.AIFF\shell\open\command]
452. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
453. 
454. [HKLM\Software\Classes\WMP11.AssocFile.AIFF\shell\play\command]
455. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
456. 
457. [HKLM\Software\Classes\WMP11.AssocFile.ASF\shell\open\command]
458. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:7 /Open "%L"" (REG_EXPAND_SZ)
459. 
460. [HKLM\Software\Classes\WMP11.AssocFile.ASF\shell\play\command]
461. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:7 /Play "%L"" (REG_EXPAND_SZ)
462. 
463. [HKLM\Software\Classes\WMP11.AssocFile.ASX\shell\open\command]
464. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
465. 
466. [HKLM\Software\Classes\WMP11.AssocFile.ASX\shell\play\command]
467. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
468. 
469. [HKLM\Software\Classes\WMP11.AssocFile.AU\shell\open\command]
470. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
471. 
472. [HKLM\Software\Classes\WMP11.AssocFile.AU\shell\play\command]
473. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
474. 
475. [HKLM\Software\Classes\WMP11.AssocFile.AVI\shell\open\command]
476. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:8 /Open "%L"" (REG_EXPAND_SZ)
477. 
478. [HKLM\Software\Classes\WMP11.AssocFile.AVI\shell\play\command]
479. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:8 /Play "%L"" (REG_EXPAND_SZ)
480. 
481. [HKLM\Software\Classes\WMP11.AssocFile.CDA\shell\open\command]
482. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
483. 
484. [HKLM\Software\Classes\WMP11.AssocFile.CDA\shell\play\command]
485. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
486. 
487. [HKLM\Software\Classes\WMP11.AssocFile.m3u\shell\open\command]
488. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "%L"" (REG_EXPAND_SZ)
489. 
490. [HKLM\Software\Classes\WMP11.AssocFile.m3u\shell\play\command]
491. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:6 /Play "%L"" (REG_EXPAND_SZ)
492. 
493. [HKLM\Software\Classes\WMP11.AssocFile.MIDI\shell\open\command]
494. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
495. 
496. [HKLM\Software\Classes\WMP11.AssocFile.MIDI\shell\play\command]
497. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
498. 
499. [HKLM\Software\Classes\WMP11.AssocFile.MP3\shell\open\command]
500. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "%L"" (REG_EXPAND_SZ)
501. 
502. [HKLM\Software\Classes\WMP11.AssocFile.MP3\shell\play\command]
503. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:6 /Play "%L"" (REG_EXPAND_SZ)
504. 
505. [HKLM\Software\Classes\WMP11.AssocFile.MPEG\shell\open\command]
506. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:9 /Open "%L"" (REG_EXPAND_SZ)
507. 
508. [HKLM\Software\Classes\WMP11.AssocFile.MPEG\shell\play\command]
509. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:9 /Play "%L"" (REG_EXPAND_SZ)
510. 
511. [HKLM\Software\Classes\WMP11.AssocFile.WAV\shell\open\command]
512. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
513. 
514. [HKLM\Software\Classes\WMP11.AssocFile.WAV\shell\play\command]
515. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
516. 
517. [HKLM\Software\Classes\WMP11.AssocFile.WAX\shell\open\command]
518. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
519. 
520. [HKLM\Software\Classes\WMP11.AssocFile.WAX\shell\play\command]
521. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
522. 
523. [HKLM\Software\Classes\WMP11.AssocFile.WMA\shell\open\command]
524. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:5 /Open "%L"" (REG_EXPAND_SZ)
525. 
526. [HKLM\Software\Classes\WMP11.AssocFile.WMA\shell\play\command]
527. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:5 /Play "%L"" (REG_EXPAND_SZ)
528. 
529. [HKLM\Software\Classes\WMP11.AssocFile.WMD\shell\open\command]
530. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /WMPackage:"%L"" (REG_EXPAND_SZ)
531. 
532. [HKLM\Software\Classes\WMP11.AssocFile.WMS\shell\open\command]
533. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /layout:"%L"" (REG_EXPAND_SZ)
534. 
535. [HKLM\Software\Classes\WMP11.AssocFile.WMV\shell\open\command]
536. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:7 /Open "%L"" (REG_EXPAND_SZ)
537. 
538. [HKLM\Software\Classes\WMP11.AssocFile.WMV\shell\play\command]
539. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:7 /Play "%L"" (REG_EXPAND_SZ)
540. 
541. [HKLM\Software\Classes\WMP11.AssocFile.WMZ\shell\open\command]
542. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /layout:"%L"" (REG_EXPAND_SZ)
543. 
544. [HKLM\Software\Classes\WMP11.AssocFile.WPL\shell\open\command]
545. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
546. 
547. [HKLM\Software\Classes\WMP11.AssocFile.WPL\shell\play\command]
548. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
549. 
550. [HKLM\Software\Classes\WMP11.AssocFile.WVX\shell\open\command]
551. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
552. 
553. [HKLM\Software\Classes\WMP11.AssocFile.WVX\shell\play\command]
554. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
555. 
556. [HKLM\Software\Classes\WMP11.AssocProtocol.MMS\shell\open\command]
557. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" "%L"" (REG_EXPAND_SZ)
558. 
559. [HKLM\Software\Classes\WMSFile\shell\open\command]
560. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /layout:"%L"" (REG_EXPAND_SZ)
561. 
562. [HKLM\Software\Classes\WMVFile\shell\open\command]
563. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:7 /Open "%L"" (REG_EXPAND_SZ)
564. 
565. [HKLM\Software\Classes\WMVFile\shell\play\command]
566. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:7 /Play "%L"" (REG_EXPAND_SZ)
567. 
568. [HKLM\Software\Classes\WMZFile\shell\open\command]
569. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /layout:"%L"" (REG_EXPAND_SZ)
570. 
571. [HKLM\Software\Classes\WPLFile\shell\open\command]
572. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
573. 
574. [HKLM\Software\Classes\WPLFile\shell\play\command]
575. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
576. 
577. [HKLM\Software\Classes\WVXFile\shell\open\command]
578. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"" (REG_EXPAND_SZ)
579. 
580. [HKLM\Software\Classes\WVXFile\shell\play\command]
581. ""=""%ProgramFiles%\Windows Media Player\wmplayer.exe" /Play "%L"" (REG_EXPAND_SZ)
582. 
583. [HKLM\Software\Clients\Media\Windows Media Player\shell\open\command]
584. ""="%ProgramFiles%\Windows Media Player\wmplayer.exe" (REG_EXPAND_SZ)
585. 
586. [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6bf52a52-394a-11d3-b153-00c04f79faa6}]
587. "AppName"="wmplayer.exe" (REG_SZ)
588. 
589. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ADDON_MANAGEMENT]
590. "wmplayer.exe"="1" (REG_DWORD)
591. 
592. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BEHAVIORS]
593. "wmplayer.exe"="1" (REG_DWORD)
594. 
595. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]
596. "wmplayer.exe"="1" (REG_DWORD)
597. 
598. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]
599. "wmplayer.exe"="1" (REG_DWORD)
600. 
601. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]
602. "wmplayer.exe"="1" (REG_DWORD)
603. 
604. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MIME_HANDLING]
605. "wmplayer.exe"="1" (REG_DWORD)
606. 
607. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MIME_SNIFFING]
608. "wmplayer.exe"="1" (REG_DWORD)
609. 
610. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_OBJECT_CACHING]
611. "wmplayer.exe"="1" (REG_DWORD)
612. 
613. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]
614. "wmplayer.exe"="1" (REG_DWORD)
615. 
616. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]
617. "wmplayer.exe"="1" (REG_DWORD)
618. 
619. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]
620. "wmplayer.exe"="1" (REG_DWORD)
621. 
622. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]
623. "wmplayer.exe"="1" (REG_DWORD)
624. 
625. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SECURITYBAND]
626. "wmplayer.exe"="1" (REG_DWORD)
627. 
628. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]
629. "wmplayer.exe"="1" (REG_DWORD)
630. 
631. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]
632. "wmplayer.exe"="1" (REG_DWORD)
633. 
634. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]
635. "wmplayer.exe"="1" (REG_DWORD)
636. 
637. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]
638. "wmplayer.exe"="1" (REG_DWORD)
639. 
640. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ZONE_ELEVATION]
641. "wmplayer.exe"="1" (REG_DWORD)
642. 
643. [HKLM\Software\Microsoft\MediaPlayer\Setup\Installed Versions]
644. "wmplayer.exe"="" (REG_BINARY)
645. 
646. [HKLM\Software\Microsoft\Multimedia\DirectXMedia]
647. ".Prog"=""%ProgramFiles%\Windows Media Player\wmplayer.exe"" (REG_EXPAND_SZ)
648. 
649. [HKLM\Software\Microsoft\Multimedia\DirectXMedia]
650. "OCX.ocx"=""%ProgramFiles%\Windows Media Player\wmplayer.exe"" (REG_EXPAND_SZ)
651. 
652. [HKLM\Software\Microsoft\Multimedia\WMPlayer]
653. "Player.Path"="%ProgramFiles%\Windows Media Player\wmplayer.exe" (REG_EXPAND_SZ)
654. 
655. [HKLM\Software\Microsoft\Multimedia\WMPlayer]
656. "Player.Name"="wmplayer.exe" (REG_SZ)
657. 
658. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Devices\AudioCD]
659. "ReplaceApps"="wmplayer.exe" (REG_SZ)
660. 
661. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Devices\DVD]
662. "ReplaceApps"="wmplayer.exe|dvdplay.exe" (REG_SZ)
663. 
664. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.aif]
665. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
666. 
667. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.aifc]
668. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
669. 
670. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.aiff]
671. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
672. 
673. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.asf]
674. "ReplaceApps"="wmplayer.exe" (REG_SZ)
675. 
676. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.asx]
677. "ReplaceApps"="wmplayer.exe" (REG_SZ)
678. 
679. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.au]
680. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
681. 
682. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.avi]
683. "ReplaceApps"="wmplayer.exe" (REG_SZ)
684. 
685. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.cda]
686. "ReplaceApps"="wmplayer.exe" (REG_SZ)
687. 
688. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.dvr-ms]
689. "ReplaceApps"="wmplayer.exe" (REG_SZ)
690. 
691. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.m1v]
692. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
693. 
694. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.m2v]
695. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
696. 
697. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.m3u]
698. "ReplaceApps"="wmplayer.exe" (REG_SZ)
699. 
700. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.mid]
701. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
702. 
703. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.midi]
704. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
705. 
706. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.mod]
707. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
708. 
709. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.mp2]
710. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
711. 
712. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.mp2v]
713. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
714. 
715. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.mp3]
716. "ReplaceApps"="wmplayer.exe" (REG_SZ)
717. 
718. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.mpa]
719. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
720. 
721. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.mpe]
722. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
723. 
724. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.mpeg]
725. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
726. 
727. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.mpg]
728. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
729. 
730. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.mpv2]
731. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
732. 
733. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.rmi]
734. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
735. 
736. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.snd]
737. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
738. 
739. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wav]
740. "ReplaceApps"="wmplayer.exe" (REG_SZ)
741. 
742. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wax]
743. "ReplaceApps"="wmplayer.exe" (REG_SZ)
744. 
745. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wm]
746. "ReplaceApps"="wmplayer.exe" (REG_SZ)
747. 
748. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wma]
749. "ReplaceApps"="wmplayer.exe" (REG_SZ)
750. 
751. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wmd]
752. "ReplaceApps"="wmplayer.exe" (REG_SZ)
753. 
754. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wms]
755. "ReplaceApps"="wmplayer.exe" (REG_SZ)
756. 
757. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wmv]
758. "ReplaceApps"="wmplayer.exe" (REG_SZ)
759. 
760. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wmx]
761. "ReplaceApps"="wmplayer.exe" (REG_SZ)
762. 
763. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wmz]
764. "ReplaceApps"="wmplayer.exe" (REG_SZ)
765. 
766. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wpl]
767. "ReplaceApps"="wmplayer.exe" (REG_SZ)
768. 
769. [HKLM\Software\Microsoft\Multimedia\WMPlayer\Extensions\.wvx]
770. "ReplaceApps"="wmplayer.exe" (REG_SZ)
771. 
772. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\application/vnd.ms-wpl]
773. "ReplaceApps"="wmplayer.exe" (REG_SZ)
774. 
775. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-mplayer2]
776. "ReplaceApps"="wmplayer.exe" (REG_SZ)
777. 
778. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-ms-wmd]
779. "ReplaceApps"="wmplayer.exe" (REG_SZ)
780. 
781. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-ms-wmz]
782. "ReplaceApps"="wmplayer.exe" (REG_SZ)
783. 
784. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/aiff]
785. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
786. 
787. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/basic]
788. "ReplaceApps"="wmplayer.exe" (REG_SZ)
789. 
790. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mid]
791. "ReplaceApps"="wmplayer.exe" (REG_SZ)
792. 
793. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/midi]
794. "ReplaceApps"="wmplayer.exe" (REG_SZ)
795. 
796. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mp3]
797. "ReplaceApps"="wmplayer.exe" (REG_SZ)
798. 
799. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpeg]
800. "ReplaceApps"="wmplayer.exe" (REG_SZ)
801. 
802. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpegurl]
803. "ReplaceApps"="wmplayer.exe" (REG_SZ)
804. 
805. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpg]
806. "ReplaceApps"="wmplayer.exe" (REG_SZ)
807. 
808. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/wav]
809. "ReplaceApps"="wmplayer.exe" (REG_SZ)
810. 
811. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-aiff]
812. "ReplaceApps"="wmplayer.exe|iexplore.exe" (REG_SZ)
813. 
814. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mid]
815. "ReplaceApps"="wmplayer.exe" (REG_SZ)
816. 
817. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-midi]
818. "ReplaceApps"="wmplayer.exe" (REG_SZ)
819. 
820. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mp3]
821. "ReplaceApps"="wmplayer.exe" (REG_SZ)
822. 
823. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpeg]
824. "ReplaceApps"="wmplayer.exe" (REG_SZ)
825. 
826. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpegurl]
827. "ReplaceApps"="wmplayer.exe" (REG_SZ)
828. 
829. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpg]
830. "ReplaceApps"="wmplayer.exe" (REG_SZ)
831. 
832. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-ms-wax]
833. "ReplaceApps"="wmplayer.exe" (REG_SZ)
834. 
835. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-ms-wma]
836. "ReplaceApps"="wmplayer.exe" (REG_SZ)
837. 
838. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-wav]
839. "ReplaceApps"="wmplayer.exe" (REG_SZ)
840. 
841. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\midi/mid]
842. "ReplaceApps"="wmplayer.exe" (REG_SZ)
843. 
844. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\unknown]
845. "ReplaceApps"="wmplayer.exe" (REG_SZ)
846. 
847. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/avi]
848. "ReplaceApps"="wmplayer.exe" (REG_SZ)
849. 
850. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/mpeg]
851. "ReplaceApps"="wmplayer.exe" (REG_SZ)
852. 
853. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/mpg]
854. "ReplaceApps"="wmplayer.exe" (REG_SZ)
855. 
856. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/msvideo]
857. "ReplaceApps"="wmplayer.exe" (REG_SZ)
858. 
859. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-mpeg]
860. "ReplaceApps"="wmplayer.exe" (REG_SZ)
861. 
862. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-mpeg2a]
863. "ReplaceApps"="wmplayer.exe" (REG_SZ)
864. 
865. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-asf]
866. "ReplaceApps"="wmplayer.exe" (REG_SZ)
867. 
868. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-asf-plugin]
869. "ReplaceApps"="wmplayer.exe" (REG_SZ)
870. 
871. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wm]
872. "ReplaceApps"="wmplayer.exe" (REG_SZ)
873. 
874. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wmv]
875. "ReplaceApps"="wmplayer.exe" (REG_SZ)
876. 
877. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wmx]
878. "ReplaceApps"="wmplayer.exe" (REG_SZ)
879. 
880. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wvx]
881. "ReplaceApps"="wmplayer.exe" (REG_SZ)
882. 
883. [HKLM\Software\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-msvideo]
884. "ReplaceApps"="wmplayer.exe" (REG_SZ)
885. 
886. [HKLM\Software\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\wmplayer.exe]
887. 
888. [HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\mplayer2.exe]
889. ""="%ProgramFiles%\Windows Media Player\wmplayer.exe" (REG_EXPAND_SZ)
890. 
891. [HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\wmplayer.exe]
892. 
893. [HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival]
894. "DefaultIcon"="%ProgramFiles%\Windows Media Player\wmplayer.exe,0" (REG_EXPAND_SZ)
895. 
896. [HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival]
897. "DefaultIcon"="%ProgramFiles%\Windows Media Player\wmplayer.exe,0" (REG_EXPAND_SZ)
898. 
899. [HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\AutoplayHandlers\Handlers\MSPlayMediaOnArrival]
900. "DefaultIcon"="%ProgramFiles%\Windows Media Player\wmplayer.exe,0" (REG_EXPAND_SZ)
901. 
902. [HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\AutoplayHandlers\Handlers\MSPlaySuperVideoCDMovieOnArrival]
903. "DefaultIcon"="%ProgramFiles%\Windows Media Player\wmplayer.exe,0" (REG_EXPAND_SZ)
904. 
905. [HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\AutoplayHandlers\Handlers\MSPlayVideoCDMovieOnArrival]
906. "DefaultIcon"="%ProgramFiles%\Windows Media Player\wmplayer.exe,0" (REG_EXPAND_SZ)
907. 
908. [HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival]
909. "DefaultIcon"="%ProgramFiles%\Windows Media Player\wmplayer.exe,0" (REG_EXPAND_SZ)
910. 
911. [HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\AutoplayHandlers\Handlers\MSWMDMHandler]
912. "DefaultIcon"="%ProgramFiles%\Windows Media Player\wmplayer.exe,0" (REG_EXPAND_SZ)
913. 
914. [HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival]
915. "DefaultIcon"="%ProgramFiles%\Windows Media Player\wmplayer.exe,0" (REG_EXPAND_SZ)
916. 
917. [HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\AutoplayHandlers\Handlers\MSWMPBurnDataDVDArrival]
918. "DefaultIcon"="%ProgramFiles%\Windows Media Player\wmplayer.exe,0" (REG_EXPAND_SZ)
919. 
920. [HKLM\Software\Microsoft\Windows\CurrentVersion\Parental Controls\HTTPExemptions]
921. "C:\Program Files\Windows Media Player\wmplayer.exe"="C:\Program Files\Windows Media Player\wmplayer.exe" (REG_SZ)
922. 
923. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_c3c7d40cd7afe2df]
924. "f!wmplayer.exe.mui"="wmplayer.exe.mui" (REG_BINARY)
925. 
926. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16885_none_09320a57522f812d]
927. "f!wmplayer.exe"="wmplayer.exe" (REG_BINARY)
928. 
929. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.21083_none_09b97eb06b4f218b]
930. "f!wmplayer.exe"="wmplayer.exe" (REG_BINARY)
931. 
932. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18000_none_0b69c31f4f19b995]
933. "f!wmplayer.exe"="wmplayer.exe" (REG_BINARY)
934. 
935. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18289_none_0b1c4a254f52777a]
936. "f!wmplayer.exe"="wmplayer.exe" (REG_BINARY)
937. 
938. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22470_none_0ba7b6286870146b]
939. "f!wmplayer.exe"="wmplayer.exe" (REG_BINARY)
940. 
941. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18005_none_0d553c2b4c3b84e1]
942. "f!wmplayer.exe"="wmplayer.exe" (REG_BINARY)
943. 
944. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18065_none_0d145ca34c6c2c87]
945. "f!wmplayer.exe"="wmplayer.exe" (REG_BINARY)
946. 
947. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22172_none_0d9028a465949c3d]
948. "f!wmplayer.exe"="wmplayer.exe" (REG_BINARY)
949. 
950. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_fr-fr_4da8aaa1ff39f44f\f256!wmplayer.exe.mui]
951. 
952. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_fr-fr_4da8aaa1ff39f44f\v!6.0.6001.18528\UnstagedFiles]
953. "wmplayer.exe.mui"="" (REG_BINARY)
954. 
955. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_fr-fr_4da8aaa1ff39f44f\v!6.0.6001.22762\UnstagedFiles]
956. "wmplayer.exe.mui"="" (REG_BINARY)
957. 
958. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_fr-fr_4da8aaa1ff39f44f\v!6.0.6002.18311\UnstagedFiles]
959. "wmplayer.exe.mui"="" (REG_BINARY)
960. 
961. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-m..ayer-core.resources_31bf3856ad364e35_fr-fr_4da8aaa1ff39f44f\v!6.0.6002.22486\UnstagedFiles]
962. "wmplayer.exe.mui"="" (REG_BINARY)
963. 
964. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_none_4614e31b7fd688fd\f256!wmplayer.exe]
965. 
966. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_none_4614e31b7fd688fd\v!6.0.6000.16386\UnstagedFiles]
967. "wmplayer.exe"="" (REG_BINARY)
968. 
969. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_none_4614e31b7fd688fd\v!6.0.6001.18528\UnstagedFiles]
970. "wmplayer.exe"="" (REG_BINARY)
971. 
972. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_none_4614e31b7fd688fd\v!6.0.6001.22762\UnstagedFiles]
973. "wmplayer.exe"="" (REG_BINARY)
974. 
975. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_none_4614e31b7fd688fd\v!6.0.6002.18311\UnstagedFiles]
976. "wmplayer.exe"="" (REG_BINARY)
977. 
978. [HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_none_4614e31b7fd688fd\v!6.0.6002.22486\UnstagedFiles]
979. "wmplayer.exe"="" (REG_BINARY)
980. 
981. [HKLM\System\ControlSet001\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000]
982. "_WmPlayer.exe:D3DOGL_67207556"="" (REG_BINARY)
983. 
984. [HKLM\System\ControlSet001\Control\Video\{33903231-5528-449B-BCFF-33971DBDBF7B}\0000]
985. "_WmPlayer.exe:D3DOGL_67207556"="" (REG_BINARY)
986. 
987. [HKLM\System\ControlSet001\Control\Video\{33903231-5528-449B-BCFF-33971DBDBF7B}\0001]
988. "_WmPlayer.exe:D3DOGL_67207556"="" (REG_BINARY)
989. 
990. [HKLM\System\ControlSet001\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules]
991. "WMP-In-UDP"="v2.0|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Private|Profile=Public|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31003|Desc=@FirewallAPI.dll,-31006|EmbedCtxt=@FirewallAPI.dll,-31002|Edge=FALSE|" (REG_SZ)
992. 
993. [HKLM\System\ControlSet001\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules]
994. "WMP-Out-UDP"="v2.0|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|Profile=Private|Profile=Public|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31007|Desc=@FirewallAPI.dll,-31010|EmbedCtxt=@FirewallAPI.dll,-31002|Edge=FALSE|" (REG_SZ)
995. 
996. [HKLM\System\ControlSet001\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules]
997. "WMP-Out-TCP"="v2.0|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|Profile=Private|Profile=Public|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31011|Desc=@FirewallAPI.dll,-31014|EmbedCtxt=@FirewallAPI.dll,-31002|Edge=FALSE|" (REG_SZ)
998. 
999. [HKLM\System\ControlSet001\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules]
1000. "WMPNSS-WMP-In-UDP-NoScope"="v2.0|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31293|Desc=@FirewallAPI.dll,-31296|EmbedCtxt=@FirewallAPI.dll,-31252|Edge=FALSE|" (REG_SZ)
1001. 
1002. [HKLM\System\ControlSet001\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules]
1003. "WMPNSS-WMP-Out-UDP-NoScope"="v2.0|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31297|Desc=@FirewallAPI.dll,-31300|EmbedCtxt=@FirewallAPI.dll,-31252|Edge=FALSE|" (REG_SZ)
1004. 
1005. [HKLM\System\ControlSet001\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules]
1006. "WMPNSS-WMP-Out-TCP-NoScope"="v2.0|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31301|Desc=@FirewallAPI.dll,-31304|EmbedCtxt=@FirewallAPI.dll,-31252|Edge=FALSE|" (REG_SZ)
1007. 
1008. [HKLM\System\ControlSet001\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules]
1009. "WMPNSS-WMP-In-UDP"="v2.0|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%ProgramF

jfkpresident · Answer

Pour essayer de faire avancer les choses :

Rends toi sur ce site :

https://www.virustotal.com/gui/

Clique sur parcourir et cherche ce fichier : C:\Program Files\FreeTime\FormatFactory\FormatFactory.exe  

Clique sur Send File.

Un rapport va s'élaborer ligne à ligne.

Attends la fin. Il doit comprendre la taille du fichier envoyé.

Sauvegarde le rapport avec le bloc-note.

Copie le dans ta réponse. 

================

Ensuite relance Zhpdiag mais ce coup ci ,clique sur "options" (petit tournevis vert) et coche la case 082 (CKF) et colle le nouveau rapport .

jfkpresident · Answer

pourquoi format factorie ( en + je vien de le télécharger a 11h44 ) ...

Je n'ai aucunes dates d'inscrite sur le rapport.

Maintenant j'essaie de t'aider ...A toi de voir si tu veux continuer ou aller voir ailleurs .

Par ailleurs : http://virus-com.com/viruscom/viruscom_95499.html

jfkpresident · Answer

Il est possible que ce soit un "Backdoor" qui ouvre une porte et donc l'acces a ton pc ...Il se peut qu'il soit également assimiler ou creer a partir d'un autre fichier infecté ou driver infecté ...

Maintenant si tu pouvais faire les manips ,on avancerait peut etre un peu :)

Reborn17 · Answer

J'ai petetre trouver un indice : 

Lorsque le pirate ma contacter avec MSN petetre qu'il a fait des manip pour obtenir mon adresse IP et ce connecter a mon bureau avec le logiciel qui est instaler dans windows

jfkpresident · Answer

Il vient ce rapport ZhpDiag ??

Reborn17 · Answer

Voila le lien du raport :  

http://www.cijoint.fr/cj201010/cij7PIKgIS.txt

jfkpresident · Answer

Télécharge ATF Cleaner par Atribune:
 http://www.atribune.org/ccount/click.php?id=1
 Double-clique ATF-Cleaner.exe afin de lancer le programme.
 Sous l'onglet Main, choisis : Select All
 Clique sur le bouton Empty Selected
 Si tu utilises le navigateur Firefox :
 Clique Firefox au haut et choisis : Select All
 Clique le bouton Empty Selected
 NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.
 Si tu utilises le navigateur Opera :
 Clique Opera au haut et choisis : Select All
 Clique le bouton Empty Selected
 NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.
 Clique Exit, du menu prinicipal, afin de fermer le programme.
 Pour obtenir du Support technique, double-clique l'adresse électronique située au bas de chacun des menus.

Reborn17 · Answer

Télécharge ATF Cleaner par Atribune: 
http://www.atribune.org/ccount/click.php?id=1 
Double-clique ATF-Cleaner.exe afin de lancer le programme. 
Sous l'onglet Main, choisis : Select All 
Clique sur le bouton Empty Selected 
Si tu utilises le navigateur Firefox : 
Clique Firefox au haut et choisis : Select All 
Clique le bouton Empty Selected 
NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite. 
Si tu utilises le navigateur Opera : 
Clique Opera au haut et choisis : Select All 
Clique le bouton Empty Selected 
NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite. 
Clique Exit, du menu prinicipal, afin de fermer le programme. 
Pour obtenir du Support technique, double-clique l'adresse électronique située au bas de chacun des menus. 


Mais pourquoi tu menvoie pas mail petetre que quelqu'un d'autre auras besoin de ca plus tard...

jfkpresident · Answer

Mais pourquoi tu menvoie pas mail petetre que quelqu'un d'autre auras besoin de ca plus tard...

Rien compris a ta phrase ?!

Reborn17 · Answer

Je télécharge Kaspersky et j'annalise ensuite je fait votre truk .


PS : vraiment désoler car j'ai pas vu que tu avai mis le truk avec ATF Cleaner ici car je navai pas cliquer sur " afficher tous les comentaire encor désoler...

Je suis piraté !!! A laide !!!

32 réponses

Discussions similaires

Newsletters