Ordinateur très lent, virus?? Résolu

Question

Bonjour,

mon ordi est devenu très lent et parfois il lui faut même plusieurs minutes pour ouvrir des applications style photoshop et internet au même temps. Je craigne qu'il a y pas mal des virus. Y-a-t'il quelqu'un qui voudrais bien m'aider à le nettoyer. Merci d'avance.
lulu

config>Windows XP / Firefox 3.6.12</config

Utilisateur anonyme · Answer

bonjour,
* Télécharge ZHPDiag sur ton bureau :

https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/ 
ou : 
http://www.premiumorange.com/zeb-help-process/zhpdiag.html
ou : 
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
 
* Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin. 
* Clique sur l'icône représentant une loupe (« Lancer le diagnostic ») 
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette 
* Héberge le rapport ZHPDiag.txt sur Cijoint, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum :
http://www.cijoint.fr/
ou :
http://ww38.toofiles.com/fr/documents-upload.html

tuto zhpdiag :
http://www.premiumorange.com/zeb-help-process/zhpdiag.html

lulu1844 · Answer

Merciles gars,

voici le liens
http://www.cijoint.fr/cjlink.php?file=cj201011/cijwuJF8Pa.txt

Utilisateur anonyme · Answer

coucou valuu  :-)

*	Télécharge de AD-Remover sur ton Bureau. (Merci à C_XX)
http://www.teamxscript.org/adremoverTelechargement.html    ( Lien officiel )
https://www.androidworld.fr/ ( Miroir )
/!\ Ferme toutes applications en cours /!\ 

- Double-clique sur l'icône Ad-remover située sur ton Bureau. 
- Sur la page, clique sur le bouton « Nettoyer »
- Confirme lancement du scan
- Laisse travailler l'outil.
- Poste le rapport qui apparaît à la fin. 

(Le rapport est sauvegardé aussi sous C:\Ad-report(Scan/clean).Txt) 

(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

lulu1844 · Answer

Salut l'électricien,voici le rapport, et merci:

======= RAPPORT D'AD-REMOVER 2.0.0.2,B | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 07/11/10 à 01:00
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 17:11:03 le 08/11/2010, Mode normal

Microsoft Windows XP Édition familiale Service Pack 2 (X86) 
Propriétaire@PAPERINO-925292 ( ) 
 
============== ACTION(S) ==============


Fichier supprimé: C:\WINDOWS\system32\cont_snappyads-remove.exe
Dossier supprimé: C:\Program Files\AskSearch
Dossier supprimé: C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Conduit
Dossier supprimé: C:\Program Files\Conduit

(!) -- Fichiers temporaires supprimés.


-- Fichier ouvert: C:\Documents and Settings\Propriétaire\Application Data\Mozilla\FireFox\Profiles\h7kyh6p7.default\Prefs.js --
Ligne supprimée:  
Ligne supprimée:  
Ligne supprimée: user_pref("CT2438727.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER... 
Ligne supprimée: user_pref("CT2438727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT243... 
Ligne supprimée: user_pref("CT2720081.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER... 
Ligne supprimée: user_pref("CT2720081.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT272... 
Ligne supprimée: user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://www15.yoog.com/search.php?q="); 
Ligne supprimée: user_pref("browser.search.defaultenginename", "Yoog Search"); 
Ligne supprimée: user_pref("browser.search.defaulturl", "hxxp://www15.yoog.com/search.php?q="); 
Ligne supprimée: user_pref("browser.search.order.1", "Ask"); 
Ligne supprimée: user_pref("browser.search.selectedEngine", "Yoog Search"); 
Ligne supprimée: user_pref("extensions.snipit.chromeURL", "hxxp://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&g... 
Ligne supprimée: user_pref("keyword.URL", "hxxp://www15.yoog.com/search.php?q="); 
-- Fichier Fermé --
 

-- Fichier ouvert: C:\Documents and Settings\Propriétaire\Application Data\Mozilla\FireFox\Profiles\h7kyh6p7.default\User.js --
Ligne supprimée: user_pref("browser.search.selectedEngine", "Yoog Search"); 
Ligne supprimée: user_pref("keyword.URL", "hxxp://www15.yoog.com/search.php?q="); 
Ligne supprimée: user_pref("browser.search.defaultenginename", "Yoog Search"); 
Ligne supprimée: user_pref("browser.search.defaulturl", "hxxp://www15.yoog.com/search.php?q="); 
-- Fichier Fermé --
 

Clé supprimée: HKLM\Software\Classes\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
Clé supprimée: HKLM\Software\Classes\CLSID\{128A6C66-AC6A-4617-8268-AB7F47B7215E}
Clé supprimée: HKLM\Software\Classes\CLSID\{47C6C527-6204-4F91-849D-66E234DEE015}
Clé supprimée: HKLM\Software\Classes\CLSID\{622fd888-4e91-4d68-84d4-7262fd0811bf}
Clé supprimée: HKLM\Software\Classes\CLSID\{9461b922-3c5a-11d2-bf8b-00c04fb93661}
Clé supprimée: HKLM\Software\Classes\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
Clé supprimée: HKLM\Software\Classes\CLSID\{B791A095-A4AC-4312-8894-5B7E8FF5B3CD}
Clé supprimée: HKLM\Software\Classes\Interface\{4634804A-F0B0-4A74-A550-FC0EEF8A4362}
Clé supprimée: HKLM\Software\Classes\Interface\{4C07EA4F-5F52-4222-B170-4CD9ED33BAEA}
Clé supprimée: HKLM\Software\Classes\Interface\{C44FEFF4-EF0C-4CF7-83D0-92B4266A32B9}
Clé supprimée: HKLM\Software\Classes\Interface\{F131923C-381D-4E4C-A472-4A17118FD742}
Clé supprimée: HKLM\Software\Classes\TypeLib\{4B1C1E16-6B34-430E-B074-5928ECA4C150}
Clé supprimée: HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
Clé supprimée: HKLM\Software\Classes\TypeLib\{D2E5FA06-DCC7-46F9-BEFF-BFD06F69B9B2}
Clé supprimée: HKLM\Software\Classes\TypeLib\{ECA4E801-17AE-4863-9F5C-AF4047AABEE0}
Clé supprimée: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\cont_snappyads
Clé supprimée: HKLM\Software\Classes\AskIBar.PopSwatterBarButton
Clé supprimée: HKLM\Software\Classes\AskIBar.PopSwatterBarButton.1
Clé supprimée: HKLM\Software\Classes\AskIBar.PopSwatterSettingsControl
Clé supprimée: HKLM\Software\Classes\AskIBar.PopSwatterSettingsControl.1
Clé supprimée: HKLM\Software\Classes\AskToolBar.SettingsPlugin
Clé supprimée: HKLM\Software\Classes\AskToolBar.SettingsPlugin.1
Clé supprimée: HKLM\Software\Classes\Toolbar.CT2087302
Clé supprimée: HKLM\Software\Classes\Toolbar.CT2720081
Clé supprimée: HKLM\Software\AskBarDis
Clé supprimée: HKLM\Software\Conduit
Clé supprimée: HKLM\Software\SearchIn1Step
Clé supprimée: HKCU\Software\Ask.com
Clé supprimée: HKCU\Software\AskBarDis
Clé supprimée: HKCU\Software\AskToolbar
Clé supprimée: HKCU\Software\Conduit
Clé supprimée: HKCU\Software\AppDataLow\AskBarDis
Clé supprimée: HKCU\Software\AppDataLow\ea670f0f-e158-0708-c76a-7cdcd89fd151
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Dealio
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Snappyads Games Collection
Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{787A1FC0-0BF1-4431-99F7-E5EAED0C19EB}
Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E1833D08-8193-4ACD-A019-FE57185DAC6A}

Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{C94E154B-1459-4A47-966B-4B843BEFC7DB}


============== SCAN ADDITIONNEL ==============

** Mozilla Firefox Version [3.6.12 (fr)] **

-- C:\Documents and Settings\Propriétaire\Application Data\Mozilla\FireFox\Profiles\h7kyh6p7.default\Prefs.js --
browser.startup.homepage, hxxp://www.google.ch/
browser.startup.homepage_override.mstone, rv:1.9.2.12

========================================

** Internet Explorer Version [6.0.2900.2180] **

[HKCU\Software\Microsoft\Internet Explorer\Main] 
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Search Asst: no

[HKLM\Software\Microsoft\Internet Explorer\Main] 
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] 
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files\Ad-Remover\Quarantine: 9 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 15 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 08/11/2010 (5546 Octet(s)) 

Fin à: 17:15:28, 08/11/2010 
 
============== E.O.F ==============

Utilisateur anonyme · Answer

relance ADr, clique sur désinstaller,

repasse un autre zhpdiag,
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette 
* Héberge le rapport ZHPDiag.txt sur Cijoint, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum : 
http://www.cijoint.fr/ 
ou : 
http://ww38.toofiles.com/fr/documents-upload.html

lulu1844 · Answer

Le voici:

http://www.cijoint.fr/cjlink.php?file=cj201011/cijZxJkxzO.txt

Utilisateur anonyme · Answer

je suis aussi rapide qu'un électron  :P

coucou à valuu quand même  :-)


*	Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag en cliquant sur l'écusson vert) 
Clique sur l'icone représentant la lettre H (« coller les lignes Helper ») 
Copie/colle les lignes suivantes en gras et place les dans ZHPFix : 

---------------------------------------------------------- 

O20 - Winlogon Notify: 8176c9517 . (.Pas de propriÃ©taire - Pas de description.) -- C:\WINDOWS\System32\dmloader32.dll (.not file.)  
O43 - CFD:Common File Directory ----D- C:\Program Files\SearchIn1Step   

---------------------------------------------------------- 

- Clique sur « Tous », puis sur « Nettoyer » 
- Copie/colle la totalité du rapport dans ta prochaine réponse
Tuto :
http://www.premiumorange.com/zeb-help-process/zhpfix.html



*		/!\Avertissement :
Ce logiciel n'est à utiliser que prescrit par un helper qualifié.
Ne pas utiliser en dehors de ce cas de figure : dangereux! 



	
&#9658; Télécharges ComboFix à partir de ce lien et enregistres le sur ton bureau :
https://forum.pcastuces.com/combofix_renomme_au_telechargement-f31s22.htm 
ou ici :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe 
A lire 
https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix 

Avant d'utiliser ComboFix :
 
&#9658; ferme les fenêtres de tous les programmes en cours.
 
&#9658; Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil. 
Une fois fait, sur ton bureau double-clic sur Combofix.exe. 

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.
 
- il se peut que Combofix ait besoin de se connecter à internet pour trouver les mises à jour, donc il faut l'autoriser.

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.
 
- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire. 
- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt) 
&#9658; Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet. 
&#9658; Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

lulu1844 · Answer

Coucou
Là j'ai un blanc, il n'y a pas de bouton H et je ne sait pas ou coller le texte en gras.

Par contre dans l'Aide de ZHPFix il disent:

Drag and drop
Une fois ZHPFix lancé, il est possible de faire glisser un fichier texte (extension .txt) et de le déposer dans la zone de saisie. Dès lors il n'est pas nécessaire d'utiliser le bouton "H".

mais ou est la zone de saisie??

Merci pour ta patience
lulu1844

lulu1844 · Answer

Enfin, voici le rapport:

ComboFix 10-11-07.A2 - Propriétaire 09.11.2010  12:24:52.1.2 - x86
Microsoft Windows XP Édition familiale  5.1.2600.2.1252.41.1036.18.1023.420 [GMT 1:00]
Lancé depuis: c:\documents and settings\Propriétaire\Bureau\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Outdated) {AD166499-45F9-482A-A743-FDD3350758C7}
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\spool\prtprocs\w32x86\CNMPP8S.DLL

.
(((((((((((((((((((((((((((((   Fichiers créés du 2010-10-09 au 2010-11-09  ))))))))))))))))))))))))))))))))))))
.

2010-11-08 15:26 . 2010-11-09 10:34	--------	d-----w-	c:\program files\ZHPDiag
2010-10-20 14:37 . 2010-11-08 15:50	--------	d-----w-	c:\documents and settings\Propriétaire\Local Settings\Application Data\Deployment
2010-10-14 07:46 . 2010-10-14 07:46	--------	d-----w-	c:\program files\iPod
2010-10-14 07:46 . 2010-10-14 07:47	--------	d-----w-	c:\documents and settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-10-10 14:51 . 2010-10-10 14:51	--------	d-----w-	c:\documents and settings\Propriétaire\Local Settings\Application Data\Temp

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-11-04 12:20 . 2009-07-14 07:18	126856	----a-w-	c:\windows\system32\drivers\avipbb.sys
2010-11-04 12:20 . 2009-07-14 07:18	60936	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2010-09-08 09:17 . 2010-09-08 09:17	94208	----a-w-	c:\windows\system32\QuickTimeVR.qtx
2010-09-08 09:17 . 2010-09-08 09:17	69632	----a-w-	c:\windows\system32\QuickTime.qts
1999-06-21 04:10 . 2008-02-07 14:28	989176	-c--a-w-	c:\program files\BDEADMIN.EXE
1999-06-21 04:10 . 2008-02-07 14:28	647168	-c--a-w-	c:\program files\IDDAO32.DLL
1999-06-21 04:10 . 2008-02-07 14:28	601600	-c--a-w-	c:\program files\IDDA3532.DLL
1999-06-21 04:10 . 2008-02-07 14:28	589312	-c--a-w-	c:\program files\IDAPI32.DLL
1999-06-21 04:10 . 2008-02-07 14:28	465408	-c--a-w-	c:\program files\IDSQL32.DLL
1999-06-21 04:10 . 2008-02-07 14:28	435712	-c--a-w-	c:\program files\IDODBC32.DLL
1999-06-21 04:10 . 2008-02-07 14:28	422400	-c--a-w-	c:\program files\IDQBE32.DLL
1999-06-21 04:10 . 2008-02-07 14:28	167936	-c--a-w-	c:\program files\IDDR32.DLL
1999-06-21 04:10 . 2008-02-07 14:28	139264	-c--a-w-	c:\program files\IDBAT32.DLL
1999-06-21 04:10 . 2008-02-07 14:28	116736	-c--a-w-	c:\program files\IDR20009.DLL
1999-06-21 04:10 . 2008-02-07 14:28	116224	-c--a-w-	c:\program files\IDASCI32.DLL
1999-06-21 04:10 . 2008-02-07 14:28	45568	-c--a-w-	c:\program files\BLW32.DLL
1999-06-21 04:10 . 2008-02-07 14:28	454144	-c--a-w-	c:\program files\IDDBAS32.DLL
1999-06-21 04:10 . 2008-02-07 14:28	255488	-c--a-w-	c:\program files\IDPDX32.DLL
1999-06-21 04:10 . 2008-02-07 14:28	101376	-c--a-w-	c:\program files\bantam.dll
.

------- Sigcheck -------

[-] 2004-08-05 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\system32\drivers\atapi.sys

[-] 2004-08-05 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\asyncmac.sys
[-] 2004-08-05 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\system32\drivers\asyncmac.sys

[-] 2004-08-05 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\dllcache\beep.sys
[-] 2004-08-05 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\drivers\beep.sys

[-] 2004-08-05 . E798705E8DC7FAB596EF6BFDF167E007 . 25216 . . [5.1.2600.2180] . . c:\windows\system32\drivers\kbdclass.sys

[-] 2004-08-05 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\system32\dllcache
dis.sys
[-] 2004-08-05 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\system32\drivers
dis.sys

[-] 2004-08-05 . B78BE402C3F63DD55521F73876951CDD . 574592 . . [5.1.2600.2180] . . c:\windows\system32\dllcache
tfs.sys
[-] 2004-08-05 . B78BE402C3F63DD55521F73876951CDD . 574592 . . [5.1.2600.2180] . . c:\windows\system32\drivers
tfs.sys

[-] 2004-08-05 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\dllcache
ull.sys
[-] 2004-08-05 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\drivers
ull.sys

[-] 2004-08-13 . 4092C56967175F009DC8458DC434358E . 359040 . . [5.1.2600.2505] . . c:\windows\system32\dllcache	cpip.sys
[-] 2004-08-13 . 4092C56967175F009DC8458DC434358E . 359040 . . [5.1.2600.2505] . . c:\windows\system32\drivers	cpip.sys
[-] 2004-08-05 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB884020$	cpip.sys

[-] 2004-08-05 . CE9DC7CC6D75515EE62CA341473EC5F3 . 77312 . . [5.1.2600.2180] . . c:\windows\system32\browser.dll
[-] 2004-08-05 . CE9DC7CC6D75515EE62CA341473EC5F3 . 77312 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\browser.dll

[-] 2004-08-05 . 9F3744A5C6F49291A7A685040A013399 . 13312 . . [5.1.2600.2180] . . c:\windows\system32\lsass.exe
[-] 2004-08-05 . 9F3744A5C6F49291A7A685040A013399 . 13312 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\lsass.exe

[-] 2004-08-05 . 624CF700BBFD8BE4097AAA146E6BD363 . 198144 . . [5.1.2600.2180] . . c:\windows\system32
etman.dll
[-] 2004-08-05 . 624CF700BBFD8BE4097AAA146E6BD363 . 198144 . . [5.1.2600.2180] . . c:\windows\system32\dllcache
etman.dll

[-] 2004-08-05 . 87424817F82CF6A7F55DAC01A20111A3 . 382464 . . [6.6.2600.2180] . . c:\windows\system32\qmgr.dll
[-] 2004-08-05 . 87424817F82CF6A7F55DAC01A20111A3 . 382464 . . [6.6.2600.2180] . . c:\windows\system32\dllcache\qmgr.dll

[-] 2004-08-05 . 2477917B158327410E615C582A3A4C0B . 395776 . . [5.1.2600.2180] . . c:\windows\system32pcss.dll
[-] 2004-08-05 . 2477917B158327410E615C582A3A4C0B . 395776 . . [5.1.2600.2180] . . c:\windows\system32\dllcachepcss.dll

[-] 2004-08-05 . 732E0B1ABAACE15D80EC19056B0A2AF9 . 108544 . . [5.1.2600.2180] . . c:\windows\system32\services.exe
[-] 2004-08-05 . 732E0B1ABAACE15D80EC19056B0A2AF9 . 108544 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\services.exe

[-] 2004-08-05 . B4EF928E4FAD79364A80ACBA6D999934 . 57856 . . [5.1.2600.2180] . . c:\windows\system32\spoolsv.exe
[-] 2004-08-05 . B4EF928E4FAD79364A80ACBA6D999934 . 57856 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\spoolsv.exe

[-] 2004-08-25 . 40E2E5E9B8E7C28B144B5B8D53E7BDD0 . 506880 . . [5.1.2600.2508] . . c:\windows\system32\winlogon.exe
[-] 2004-08-25 . 40E2E5E9B8E7C28B144B5B8D53E7BDD0 . 506880 . . [5.1.2600.2508] . . c:\windows\system32\dllcache\winlogon.exe
[-] 2004-08-05 . D2DE785AEAB0BB8CA4C14A8A199DBE4E . 506368 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB883529$\winlogon.exe

[-] 2004-08-05 . A53B48B5AB9A5DA76ED247D61B0B0ADD . 611328 . . [5.82] . . c:\windows\system32\comctl32.dll
[-] 2004-08-05 . A53B48B5AB9A5DA76ED247D61B0B0ADD . 611328 . . [5.82] . . c:\windows\system32\dllcache\comctl32.dll
[-] 2004-08-05 . AEF3D788DBF40C7C4D204EA45EB0C505 . 921088 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll
[-] 2004-08-05 . 97668958194B82F5B88EABC88ACA5AE1 . 1050624 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll

[-] 2004-08-05 . BDDF3723D95DC28D78B1E93119E0E6AB . 60416 . . [5.1.2600.2180] . . c:\windows\system32\cryptsvc.dll
[-] 2004-08-05 . BDDF3723D95DC28D78B1E93119E0E6AB . 60416 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\cryptsvc.dll

[-] 2004-08-05 12:00 . BBA1D0A306ABE68A13F58FDBE97E9AF4 . 243200 . . [2001.12.4414.258] . . c:\windows\system32\es.dll
[-] 2004-08-05 12:00 . BBA1D0A306ABE68A13F58FDBE97E9AF4 . 243200 . . [2001.12.4414.258] . . c:\windows\system32\dllcache\es.dll

[-] 2004-08-05 . 39EE5FAF56260EBB8D77A08F525EBBB4 . 110080 . . [5.1.2600.2180] . . c:\windows\system32\imm32.dll
[-] 2004-08-05 . 39EE5FAF56260EBB8D77A08F525EBBB4 . 110080 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\imm32.dll

[-] 2004-08-05 . 7830E20C74611281B1BDAE5888CD50F5 . 1048576 . . [5.1.2600.2180] . . c:\windows\system32\kernel32.dll
[-] 2004-08-05 . 7830E20C74611281B1BDAE5888CD50F5 . 1048576 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\kernel32.dll

[-] 2004-08-05 . 9D21BC0235494F2B403026A1D3619E00 . 18944 . . [5.1.2600.2180] . . c:\windows\system32\linkinfo.dll
[-] 2004-08-05 . 9D21BC0235494F2B403026A1D3619E00 . 18944 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\linkinfo.dll

[-] 2004-08-05 . 8C97E0E3DAA99659D4F4B44CC1F282A6 . 22016 . . [5.1.2600.2180] . . c:\windows\system32\lpk.dll
[-] 2004-08-05 . 8C97E0E3DAA99659D4F4B44CC1F282A6 . 22016 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\lpk.dll

[-] 2004-09-29 . 938732076F87CDD3B6CFF39942A3A29F . 3004928 . . [6.00.2900.2523] . . c:\windows\system32\mshtml.dll
[-] 2004-09-29 . 938732076F87CDD3B6CFF39942A3A29F . 3004928 . . [6.00.2900.2523] . . c:\windows\system32\dllcache\mshtml.dll
[-] 2004-09-29 . 3AA5C0340D3A5F544072221634EC53CD . 3004928 . . [6.00.2900.2524] . . c:\windows\$hf_mig$\KB834707\SP2QFE\mshtml.dll
[-] 2004-08-05 . 3FE8D0C4C2F3B928192BD06DCEE34B32 . 3003392 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB834707$\mshtml.dll

[-] 2004-08-05 . 351B1AD22FD0EC70D889766E0B4F72ED . 343040 . . [7.0.2600.2180] . . c:\windows\system32\msvcrt.dll
[-] 2004-08-05 . 351B1AD22FD0EC70D889766E0B4F72ED . 343040 . . [7.0.2600.2180] . . c:\windows\system32\dllcache\msvcrt.dll
[-] 2004-08-05 . 4200BE3808F6406DBE45A7B88DAE5035 . 322560 . . [7.0.2600.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll
[-] 2004-08-05 . 5C53FCABF891ECDC7156544E5B03FE71 . 343040 . . [7.0.2600.2180] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll

[-] 2004-08-05 . CCDD3433F3C3BD0D8502B38FD155B2F0 . 247808 . . [5.1.2600.2180] . . c:\windows\system32\mswsock.dll
[-] 2004-08-05 . CCDD3433F3C3BD0D8502B38FD155B2F0 . 247808 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\mswsock.dll

[-] 2004-08-05 . FAF07FDCDE76000621A28D19F8E2E8EB . 407040 . . [5.1.2600.2180] . . c:\windows\system32
etlogon.dll
[-] 2004-08-05 . FAF07FDCDE76000621A28D19F8E2E8EB . 407040 . . [5.1.2600.2180] . . c:\windows\system32\dllcache
etlogon.dll

[-] 2004-08-05 . 36F32A5A83DF734E022734D93860A9A4 . 2150400 . . [5.1.2600.2180] . . c:\windows\system32
toskrnl.exe

[-] 2004-08-05 . B02E4DDBE0E98F42F3B61292DDB3A104 . 17408 . . [6.00.2900.2180] . . c:\windows\system32\powrprof.dll
[-] 2004-08-05 . B02E4DDBE0E98F42F3B61292DDB3A104 . 17408 . . [6.00.2900.2180] . . c:\windows\system32\dllcache\powrprof.dll

[-] 2004-08-05 . DEC0397F35D027874804EC72979D03CC . 186368 . . [5.1.2600.2180] . . c:\windows\system32\scecli.dll
[-] 2004-08-05 . DEC0397F35D027874804EC72979D03CC . 186368 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\scecli.dll

[-] 2004-08-05 . 94559DE281DADCB58E6A3919C7EAC0B4 . 5120 . . [5.1.2600.2180] . . c:\windows\system32\sfc.dll
[-] 2004-08-05 . 94559DE281DADCB58E6A3919C7EAC0B4 . 5120 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\sfc.dll

[-] 2004-08-05 . 1BD6C2F707A275CB7C16FD99FE0F31CA . 14336 . . [5.1.2600.2180] . . c:\windows\system32\svchost.exe
[-] 2004-08-05 . 1BD6C2F707A275CB7C16FD99FE0F31CA . 14336 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\svchost.exe

[-] 2004-08-05 . 2490CAE37DB8B6EC55E7A9415473D0AB . 246272 . . [5.1.2600.2180] . . c:\windows\system32	apisrv.dll
[-] 2004-08-05 . 2490CAE37DB8B6EC55E7A9415473D0AB . 246272 . . [5.1.2600.2180] . . c:\windows\system32\dllcache	apisrv.dll

[-] 2004-08-05 . E46FB493E3B33704F0715020CF52106B . 578048 . . [5.1.2600.2180] . . c:\windows\system32\user32.dll
[-] 2004-08-05 . E46FB493E3B33704F0715020CF52106B . 578048 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\user32.dll

[-] 2004-08-05 . D6D65EA32B190401B57EDB6706F29669 . 25088 . . [5.1.2600.2180] . . c:\windows\system32\userinit.exe
[-] 2004-08-05 . D6D65EA32B190401B57EDB6706F29669 . 25088 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\userinit.exe

[-] 2004-09-29 . A1F5B2FC31EF3986BCA19F72DDE0B922 . 660992 . . [6.00.2900.2518] . . c:\windows\system32\wininet.dll
[-] 2004-09-29 . A1F5B2FC31EF3986BCA19F72DDE0B922 . 660992 . . [6.00.2900.2518] . . c:\windows\system32\dllcache\wininet.dll
[-] 2004-09-29 . 61CDCAB341ADE3482101DA90FCC793AC . 660992 . . [6.00.2900.2518] . . c:\windows\$hf_mig$\KB834707\SP2QFE\wininet.dll
[-] 2004-08-05 . 58FE94EF42E074F4CAD8BF02E70E6478 . 660480 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB834707$\wininet.dll

[-] 2004-08-05 . BC41F51A39D3B255805FDB759B7814AE . 82944 . . [5.1.2600.2180] . . c:\windows\system32\ws2_32.dll
[-] 2004-08-05 . BC41F51A39D3B255805FDB759B7814AE . 82944 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\ws2_32.dll

[-] 2004-08-05 . CB99D66483437E06286D4401A151D4E4 . 19968 . . [5.1.2600.2180] . . c:\windows\system32\ws2help.dll
[-] 2004-08-05 . CB99D66483437E06286D4401A151D4E4 . 19968 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\ws2help.dll

[-] 2004-08-05 . 4C33E5B9A6197B6ED215F6CFBA0A2DAA . 1036288 . . [6.00.2900.2180] . . c:\windows\explorer.exe
[-] 2004-08-05 . 4C33E5B9A6197B6ED215F6CFBA0A2DAA . 1036288 . . [6.00.2900.2180] . . c:\windows\system32\dllcache\explorer.exe

[-] 2004-08-05 . A2AD7FCB806A2035F506664883F45B32 . 1281024 . . [5.1.2600.2180] . . c:\windows\system32\ole32.dll
[-] 2004-08-05 . A2AD7FCB806A2035F506664883F45B32 . 1281024 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\ole32.dll

[-] 2004-08-05 . 6469C53F4D16FA6055CCA265BC03DB66 . 171008 . . [5.1.2600.2180] . . c:\windows\system32\srsvc.dll
[-] 2004-08-05 . 6469C53F4D16FA6055CCA265BC03DB66 . 171008 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\srsvc.dll

[-] 2004-08-05 . 54CDDAD404557ED98433D6ECBFC92691 . 13824 . . [5.1.2600.2180] . . c:\windows\system32\wscntfy.exe
[-] 2004-08-05 . 54CDDAD404557ED98433D6ECBFC92691 . 13824 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\wscntfy.exe

[-] 2004-08-05 . 21056AEF44322C3E2DD5391B6AEFA75A . 129536 . . [5.1.2600.2180] . . c:\windows\system32\xmlprov.dll
[-] 2004-08-05 . 21056AEF44322C3E2DD5391B6AEFA75A . 129536 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\xmlprov.dll

[-] 2004-08-05 . 21E83876A6287F15538EF187D286FE11 . 55808 . . [5.1.2600.2180] . . c:\windows\system32\eventlog.dll
[-] 2004-08-05 . 21E83876A6287F15538EF187D286FE11 . 55808 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\eventlog.dll

[-] 2004-08-05 . ACF04FB3448D2C2CD3A851C138EC8AB6 . 1548288 . . [5.1.2600.2180] . . c:\windows\system32\sfcfiles.dll
[-] 2004-08-05 . ACF04FB3448D2C2CD3A851C138EC8AB6 . 1548288 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\sfcfiles.dll

[-] 2004-08-05 . 5584247B568C2E53934873F4B655FE6A . 15360 . . [5.1.2600.2180] . . c:\windows\system32\ctfmon.exe
[-] 2004-08-05 . 5584247B568C2E53934873F4B655FE6A . 15360 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\ctfmon.exe

[-] 2004-08-05 . B590E69A45AE8FCBF7DDADE89CCE3588 . 135168 . . [6.00.2900.2180] . . c:\windows\system32\shsvcs.dll
[-] 2004-08-05 . B590E69A45AE8FCBF7DDADE89CCE3588 . 135168 . . [6.00.2900.2180] . . c:\windows\system32\dllcache\shsvcs.dll

[-] 2004-08-05 . 345D02087F5696749C6120359B1E2988 . 59904 . . [5.1.2600.2180] . . c:\windows\system32egsvc.dll
[-] 2004-08-05 . 345D02087F5696749C6120359B1E2988 . 59904 . . [5.1.2600.2180] . . c:\windows\system32\dllcacheegsvc.dll

[-] 2004-08-05 . 4612EC6DAF695B87A2529FCBB95B75DE . 193024 . . [5.1.2600.2180] . . c:\windows\system32\schedsvc.dll
[-] 2004-08-05 . 4612EC6DAF695B87A2529FCBB95B75DE . 193024 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\schedsvc.dll

[-] 2004-08-05 . B636478A2569AE69CAF003254022A742 . 71680 . . [5.1.2600.2180] . . c:\windows\system32\ssdpsrv.dll
[-] 2004-08-05 . B636478A2569AE69CAF003254022A742 . 71680 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\ssdpsrv.dll

[-] 2004-08-05 . 7D521B8CF926459E270D18C559323815 . 297984 . . [5.1.2600.2180] . . c:\windows\system32	ermsrv.dll
[-] 2004-08-05 . 7D521B8CF926459E270D18C559323815 . 297984 . . [5.1.2600.2180] . . c:\windows\system32\dllcache	ermsrv.dll

[-] 2004-08-05 . E4ABC1212B70BB03D35E60681C447210 . 12032 . . [5.1.2600.0] . . c:\windows\system32\dllcache\acpiec.sys
[-] 2004-08-05 . E4ABC1212B70BB03D35E60681C447210 . 12032 . . [5.1.2600.0] . . c:\windows\system32\drivers\acpiec.sys

[-] 2004-08-03 21:39 . 841F385C6CFAF66B58FBD898722BB4F0 . 142464 . . [5.1.2601.2078] . . c:\windows\system32\drivers\aec.sys

[-] 2004-08-05 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\ip6fw.sys
[-] 2004-08-05 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . c:\windows\system32\drivers\ip6fw.sys

[-] 2004-08-05 12:00 . E1A34560BF6CE7C703BB67EC4FA70F43 . 924432 . . [4.1.6140] . . c:\windows\system32\mfc40u.dll
[-] 2004-08-05 12:00 . E1A34560BF6CE7C703BB67EC4FA70F43 . 924432 . . [4.1.6140] . . c:\windows\system32\dllcache\mfc40u.dll

[-] 2004-08-05 . 97939358ED4487CBB4A0D743CE958266 . 33792 . . [5.1.2600.2180] . . c:\windows\system32\msgsvc.dll
[-] 2004-08-05 . 97939358ED4487CBB4A0D743CE958266 . 33792 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\msgsvc.dll

[-] 2006-10-18 20:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\mspmsnsv.dll
[-] 2006-10-18 20:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\dllcache\mspmsnsv.dll
[-] 2004-08-05 12:00 . 762B2A5F0E8B0164A5DB6741959DFB0C . 52736 . . [9.0.1.56] . . c:\windows\$NtUninstallWMFDist11$\mspmsnsv.dll

[-] 2004-08-05 . 35567C8C50986C2BC5C3EFD79CB045E4 . 2017280 . . [5.1.2600.2180] . . c:\windows\system32
tkrnlpa.exe

[-] 2004-08-05 12:00 . 3F82A4226289510DF300813B9B87F0E5 . 438272 . . [5.1.2400.2180] . . c:\windows\system32
tmssvc.dll
[-] 2004-08-05 12:00 . 3F82A4226289510DF300813B9B87F0E5 . 438272 . . [5.1.2400.2180] . . c:\windows\system32\dllcache
tmssvc.dll

[-] 2004-08-05 . 168AE9938F6BE31D198AF92496CCFA33 . 185344 . . [5.1.2600.2180] . . c:\windows\system32\upnphost.dll
[-] 2004-08-05 . 168AE9938F6BE31D198AF92496CCFA33 . 185344 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\upnphost.dll

[-] 2004-08-05 . 0AE00CA307264649EE2F5FC1CB1B0F1F . 367616 . . [5.3.2600.2180] . . c:\windows\system32\dsound.dll
[-] 2004-08-05 . 0AE00CA307264649EE2F5FC1CB1B0F1F . 367616 . . [5.3.2600.2180] . . c:\windows\system32\dllcache\dsound.dll

[-] 2004-08-05 . EA9F86E5892D85E282311C53083903DC . 1689088 . . [5.03.2600.2180] . . c:\windows\system32\d3d9.dll
[-] 2004-08-05 . EA9F86E5892D85E282311C53083903DC . 1689088 . . [5.03.2600.2180] . . c:\windows\system32\dllcache\d3d9.dll

[-] 2004-08-05 . 20A4E9DA85A1FF521AC5325FC3BADDF9 . 266240 . . [5.03.2600.2180] . . c:\windows\system32\ddraw.dll
[-] 2004-08-05 . 20A4E9DA85A1FF521AC5325FC3BADDF9 . 266240 . . [5.03.2600.2180] . . c:\windows\system32\dllcache\ddraw.dll

[-] 2004-08-05 12:00 . 5860F5A42B67EC8BBB5AA3CE7ABC9976 . 83456 . . [5.1.2600.2180] . . c:\windows\system32\olepro32.dll
[-] 2004-08-05 12:00 . 5860F5A42B67EC8BBB5AA3CE7ABC9976 . 83456 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\olepro32.dll

[-] 2004-08-05 . 719682744477D57B30248F4479EE8D0D . 42496 . . [5.1.2600.2180] . . c:\windows\system32\perfctrs.dll
[-] 2004-08-05 . 719682744477D57B30248F4479EE8D0D . 42496 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\perfctrs.dll

[-] 2004-08-05 . 8B142E6DAC3BD370637E8AF6E87C2321 . 18944 . . [5.1.2600.2180] . . c:\windows\system32\version.dll
[-] 2004-08-05 . 8B142E6DAC3BD370637E8AF6E87C2321 . 18944 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\version.dll

[-] 2004-08-05 . 833E2B3F0E2484C0F2B804AE871B4381 . 93184 . . [6.00.2900.2180] . . c:\windows\system32\dllcache\iexplore.exe
.
(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{50d0cd27-d4ef-4a21-917e-a1573771def4}"= "c:\program files\forumswatcher.com	bfor0.dll" [2010-09-13 2734688]

[HKEY_CLASSES_ROOT\clsid\{50d0cd27-d4ef-4a21-917e-a1573771def4}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{50d0cd27-d4ef-4a21-917e-a1573771def4}]
2010-09-13 12:20	2734688	----a-w-	c:\program files\forumswatcher.com	bfor0.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{50d0cd27-d4ef-4a21-917e-a1573771def4}"= "c:\program files\forumswatcher.com	bfor0.dll" [2010-09-13 2734688]

[HKEY_CLASSES_ROOT\clsid\{50d0cd27-d4ef-4a21-917e-a1573771def4}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{50D0CD27-D4EF-4A21-917E-A1573771DEF4}"= "c:\program files\forumswatcher.com	bfor0.dll" [2010-09-13 2734688]

[HKEY_CLASSES_ROOT\clsid\{50d0cd27-d4ef-4a21-917e-a1573771def4}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechSoftwareUpdate"="c:\program files\Logitech\Video\ManifestEngine.exe" [2005-06-08 196608]
"filehippo.com"="c:\program files\filehippo.com\UpdateChecker.exe" [2010-04-29 248832]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Raccourci vers la page des propriétés de High Definition Audio"="HDAudPropShortcut.exe" [2004-03-17 61952]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2005-07-19 221184]
"LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2005-06-08 458752]
"LogitechVideoTray"="c:\program files\Logitech\Video\LogiTray.exe" [2005-06-08 217088]
"PinnacleDriverCheck"="c:\windows\system32\PSDrvCheck.exe" [2003-11-10 406016]
"NBKeyScan"="c:\program files\Nero\Nero 7\Nero BackItUp\NBKeyScan.exe" [2008-02-21 1647912]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-11-04 281768]
"AppleSyncNotifier"="c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-08-13 177440]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-04-06 102400]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-11-02 2508104]
"SunJavaUpdateSched"="c:\program files\Fichiers communs\Java\Java Update\jusched.exe" [2010-05-14 248552]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-09-08 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-09-24 421160]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-05 15360]

c:\documents and settings\Propri'taire\Menu D'marrer\Programmes\D'marrage\
MagicDisc.lnk - c:\program files\MagicDisc\MagicDisc.exe [2008-11-15 575488]

c:\documents and settings\All Users\Menu D'marrer\Programmes\D'marrage\
LightSurf.lnk - c:\program files\LightSurf\Common\IconMgr.exe [2008-1-5 98304]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
NkbMonitor.exe.lnk - c:\program files\Nikon\PictureProject\NkbMonitor.exe [2008-1-5 118784]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe"=
"c:\WINDOWS\system32\dpvsetup.exe"=
"c:\Program Files\Bonjour\mDNSResponder.exe"=
"c:\Program Files\iTunes\iTunes.exe"=
"c:\Program Files\Skype\Phone\Skype.exe"=

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [23.03.2009 17:43 691696]
R2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [14.07.2009 08:18 135336]
R2 regi;regi;c:\windows\system32\driversegi.sys [17.04.2007 20:09 11032]
R3 cmudax;C-Media High Definition Audio Interface;c:\windows\system32\drivers\cmudax.sys [05.01.2008 12:05 1275584]
S3 Corfro;Corfro;c:\windows\system32\drivers\dmboot.sys [05.01.2008 16:57 800256]
.
Contenu du dossier 'Tâches planifiées'

2010-10-28 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
.
.
------- Examen supplémentaire -------
.
mWindow Title = 
uInternet Settings,ProxyOverride = *.local
IE: Add to AMV Converter... - c:\program files\MP3 Player Utilities 4.15\AMVConverter\grab.html
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
IE: MediaManager tool grab multimedia file - c:\program files\MP3 Player Utilities 4.15\MediaManager\grab.html
FF - ProfilePath - c:\documents and settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\h7kyh6p7.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.ch/
FF - component: c:\documents and settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\h7kyh6p7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - component: c:\documents and settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\h7kyh6p7.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\h7kyh6p7.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\RadioWMPCore.dll
FF - component: c:\documents and settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\h7kyh6p7.default\extensions\{ce18769b-c7fa-42d2-860d-17c4662c70ad}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\h7kyh6p7.default\extensions\{ce18769b-c7fa-42d2-860d-17c4662c70ad}\components\RadioWMPCore.dll
FF - plugin: c:\program files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL
FF - plugin: c:\program files\Google\Google Earth\plugin
pgeplugin.dll
FF - plugin: c:\program files\Java\jre6\bin
ew_plugin
pdeployJava1.dll

---- PARAMETRES FIREFOX ----
FF - user.js: keyword.enabled - true
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true); 
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true); 
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true);  // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true);  // Simplified
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - ORPHELINS SUPPRIMES - - - -

HKLM-Run-Cmaudio - cmicnfg.cpl
Notify-8176c9517 - c:\windows\System32\dmloader32.dll
AddRemove-SearchIn1Step - c:\program files\SearchIn1Step\uninstall.exe
AddRemove-Wings_Platinum - c:\windows\iun6002.exe
AddRemove-Wings_Platinum_3 - c:\windows\iun6002.exe
AddRemove-Octoshape add-in for Adobe Flash Player - c:\documents and settings\Propriétaire\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\octoshape\octoshape.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-11-09 12:30
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ... 

Recherche d'éléments en démarrage automatique cachés ... 

Recherche de fichiers cachés ... 

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(528)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
Heure de fin: 2010-11-09  12:35:24
ComboFix-quarantined-files.txt  2010-11-09 11:35

Avant-CF: 15'361'032'192 octets libres
Après-CF: 15'859'482'624 octets libres

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP  dition familiale" /noexecute=optin /fastdetect

- - End Of File - - 4AA24F5D576FB74BEF4FC9505878E7FF

Utilisateur anonyme · Answer

bonsoir, tu as tout simplement désintaller les tools :P


*	Télécharge TDSSKiller sur ton bureau :

https://support.kaspersky.com/downloads/utils/tdsskiller.exe


*  Lance le ( Utilisateurs de vista/Seven -> Clic droit puis " Exécuter en tant qu'administrateur " ) 

*  Clique sur [Start Scan] pour démarrer l'analyse. 

*  Si des élements sont trouvés, cliques sur [Continue] puis sur [Reboot Now] 

*  Un rapport s'ouvrira au redémarrage du PC. 

*  Copie/Colle son contenu dans ta prochaine réponse. 

Note : Le rapport se trouve également sous C:\TDSSKiller.N°deversion_Date_Heure_log.txt.






repasse un autre zhpdiag, 
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette  
* Héberge le rapport ZHPDiag.txt sur Cijoint, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum :  
http://www.cijoint.fr/  
ou :  
http://ww38.toofiles.com/fr/documents-upload.html

lulu1844 · Answer

Bonsoir l'electricien69,
Voici le rapport, maintenant repasse un autre zhpdiag
________________________________________________________


2010/11/09 21:04:36.0484	TDSS rootkit removing tool 2.4.7.0 Nov  8 2010 10:52:22
2010/11/09 21:04:36.0484	================================================================================
2010/11/09 21:04:36.0484	SystemInfo:
2010/11/09 21:04:36.0500	
2010/11/09 21:04:36.0500	OS Version: 5.1.2600 ServicePack: 2.0
2010/11/09 21:04:36.0500	Product type: Workstation
2010/11/09 21:04:36.0500	ComputerName: PAPERINO-925292
2010/11/09 21:04:36.0500	UserName: Propriétaire
2010/11/09 21:04:36.0500	Windows directory: C:\WINDOWS
2010/11/09 21:04:36.0500	System windows directory: C:\WINDOWS
2010/11/09 21:04:36.0500	Processor architecture: Intel x86
2010/11/09 21:04:36.0500	Number of processors: 2
2010/11/09 21:04:36.0500	Page size: 0x1000
2010/11/09 21:04:36.0500	Boot type: Normal boot
2010/11/09 21:04:36.0500	================================================================================
2010/11/09 21:04:36.0687	Initialize success
2010/11/09 21:06:52.0937	================================================================================
2010/11/09 21:06:52.0937	Scan started
2010/11/09 21:06:52.0937	Mode: Manual; 
2010/11/09 21:06:52.0937	================================================================================
2010/11/09 21:06:53.0578	ACPI            (0bd94fbfc14ea3606cd6ca4c0255baa3) C:\WINDOWS\system32\DRIVERS\ACPI.sys
2010/11/09 21:06:53.0750	ACPIEC          (e4abc1212b70bb03d35e60681c447210) C:\WINDOWS\system32\drivers\ACPIEC.sys
2010/11/09 21:06:54.0109	aec             (841f385c6cfaf66b58fbd898722bb4f0) C:\WINDOWS\system32\drivers\aec.sys
2010/11/09 21:06:54.0328	AFD             (5ac495f4cb807b2b98ad2ad591e6d92e) C:\WINDOWS\System32\drivers\afd.sys
2010/11/09 21:06:55.0484	Arp1394         (f0d692b0bffb46e30eb3cea168bbc49f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
2010/11/09 21:06:55.0656	ASAPIW2K        (4f9cbbf95e8f7a0d4c0edcfe3b78102e) C:\WINDOWS\system32\Drivers\ASAPIW2K.sys
2010/11/09 21:06:56.0265	AsyncMac        (02000abf34af4c218c35d257024807d6) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
2010/11/09 21:06:56.0468	atapi           (cdfe4411a69c224bd1d11b2da92dac51) C:\WINDOWS\system32\DRIVERS\atapi.sys
2010/11/09 21:06:58.0062	ati2mtag        (c026951271d59ff97deb2a6b4895b416) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
2010/11/09 21:06:58.0265	Atmarpc         (ec88da854ab7d7752ec8be11a741bb7f) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
2010/11/09 21:06:58.0437	audstub         (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
2010/11/09 21:06:58.0546	avgio           (0b497c79824f8e1bf22fa6aacd3de3a0) C:\Program Files\Avira\AntiVir Desktop\avgio.sys
2010/11/09 21:06:58.0765	avgntflt        (1eb7d72a82f94f7e9496d363fce00b68) C:\WINDOWS\system32\DRIVERS\avgntflt.sys
2010/11/09 21:06:58.0953	avipbb          (f8c56231ed5ecf7d1b46b0330880ccef) C:\WINDOWS\system32\DRIVERS\avipbb.sys
2010/11/09 21:06:59.0125	Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
2010/11/09 21:06:59.0375	cbidf2k         (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
2010/11/09 21:06:59.0546	CCDECODE        (6163ed60b684bab19d3352ab22fc48b2) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
2010/11/09 21:06:59.0875	Cdaudio         (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
2010/11/09 21:07:00.0078	Cdfs            (cd7d5152df32b47f4e36f710b35aae02) C:\WINDOWS\system32\drivers\Cdfs.sys
2010/11/09 21:07:00.0250	Cdrom           (af9c19b3100fe010496b1a27181fbf72) C:\WINDOWS\system32\DRIVERS\cdrom.sys
2010/11/09 21:07:01.0078	cmudax          (a2c08cfe1d549283cdafd3fd67f3abee) C:\WINDOWS\system32\drivers\cmudax.sys
2010/11/09 21:07:01.0328	Corfro          (e2d3b7620310fe56685f9b15a6b404b3) C:\WINDOWS\system32\drivers\dmboot.sys
2010/11/09 21:07:01.0953	Disk            (00ca44e4534865f8a3b64f7c0984bff0) C:\WINDOWS\system32\DRIVERS\disk.sys
2010/11/09 21:07:02.0156	dmboot          (e2d3b7620310fe56685f9b15a6b404b3) C:\WINDOWS\system32\drivers\dmboot.sys
2010/11/09 21:07:02.0375	dmio            (c77f5c20aa70197a69aa84baa9de43c8) C:\WINDOWS\system32\drivers\dmio.sys
2010/11/09 21:07:02.0546	dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
2010/11/09 21:07:02.0734	DMusic          (a6f881284ac1150e37d9ae47ff601267) C:\WINDOWS\system32\drivers\DMusic.sys
2010/11/09 21:07:03.0046	drmkaud         (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:\WINDOWS\system32\drivers\drmkaud.sys
2010/11/09 21:07:03.0218	ElbyCDIO        (44996a2addd2db7454f2ca40b67d8941) C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
2010/11/09 21:07:03.0390	ElbyDelay       (e205c313417da6fa7afe85912a310a65) C:\WINDOWS\system32\Drivers\ElbyDelay.sys
2010/11/09 21:07:03.0593	Fastfat         (3117f595e9615e04f05a54fc15a03b20) C:\WINDOWS\system32\drivers\Fastfat.sys
2010/11/09 21:07:03.0765	Fdc             (ced2e8396a8838e59d8fd529c680e02c) C:\WINDOWS\system32\DRIVERS\fdc.sys
2010/11/09 21:07:03.0953	Fips            (8b121ff880683607ab2aef0340721718) C:\WINDOWS\system32\drivers\Fips.sys
2010/11/09 21:07:04.0125	Flpydisk        (0dd1de43115b93f4d85e889d7a86f548) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
2010/11/09 21:07:04.0328	FltMgr          (157754f0df355a9e0a6f54721914f9c6) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
2010/11/09 21:07:04.0484	Fs_Rec          (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
2010/11/09 21:07:04.0671	Ftdisk          (a86859b77b908c18c2657f284aa29fe3) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
2010/11/09 21:07:04.0843	GEARAspiWDM     (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
2010/11/09 21:07:05.0031	Gpc             (c0f1d4a21de5a415df8170616703debf) C:\WINDOWS\system32\DRIVERS\msgpc.sys
2010/11/09 21:07:05.0218	HdAudAddService (160b24fd894e79e71c983ea403a6e6e7) C:\WINDOWS\system32\drivers\HdAudio.sys
2010/11/09 21:07:05.0437	HDAudBus        (cbbb304dc69e0b56f789852f6455f7ec) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
2010/11/09 21:07:05.0609	hidusb          (1de6783b918f540149aa69943bdfeba8) C:\WINDOWS\system32\DRIVERS\hidusb.sys
2010/11/09 21:07:06.0000	HTTP            (c19b522a9ae0bbc3293397f3055e80a1) C:\WINDOWS\system32\Drivers\HTTP.sys
2010/11/09 21:07:06.0468	i8042prt        (d1efcbd693b5ba21314d06368c471070) C:\WINDOWS\system32\drivers\i8042prt.sys
2010/11/09 21:07:06.0656	Imapi           (f8aa320c6a0409c0380e5d8a99d76ec6) C:\WINDOWS\system32\DRIVERS\imapi.sys
2010/11/09 21:07:07.0000	IntelIde        (1367812f8a974e0c13a4888fa5e7ede6) C:\WINDOWS\system32\DRIVERS\intelide.sys
2010/11/09 21:07:07.0156	intelppm        (6652cd490cbf72d0a234b827262834ab) C:\WINDOWS\system32\DRIVERS\intelppm.sys
2010/11/09 21:07:07.0328	Ip6Fw           (4448006b6bc60e6c027932cfc38d6855) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
2010/11/09 21:07:07.0500	IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
2010/11/09 21:07:07.0640	IpInIp          (e1ec7f5da720b640cd8fb8424f1b14bb) C:\WINDOWS\system32\DRIVERS\ipinip.sys
2010/11/09 21:07:07.0843	IpNat           (b5a8e215ac29d24d60b4d1250ef05ace) C:\WINDOWS\system32\DRIVERS\ipnat.sys
2010/11/09 21:07:08.0031	IPSec           (64537aa5c003a6afeee1df819062d0d1) C:\WINDOWS\system32\DRIVERS\ipsec.sys
2010/11/09 21:07:08.0203	IRENUM          (50708daa1b1cbb7d6ac1cf8f56a24410) C:\WINDOWS\system32\DRIVERS\irenum.sys
2010/11/09 21:07:08.0390	isapnp          (54632f1a7de61dc3615d756f2a90fa72) C:\WINDOWS\system32\DRIVERS\isapnp.sys
2010/11/09 21:07:08.0562	Kbdclass        (e798705e8dc7fab596ef6bfdf167e007) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
2010/11/09 21:07:08.0718	kbdhid          (62dd5eefcec4ef4163f1168d4262a9e4) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
2010/11/09 21:07:08.0937	kmixer          (d93cad07c5683db066b0b2d2d3790ead) C:\WINDOWS\system32\drivers\kmixer.sys
2010/11/09 21:07:09.0125	KSecDD          (eb7ffe87fd367ea8fca0506f74a87fbb) C:\WINDOWS\system32\drivers\KSecDD.sys
2010/11/09 21:07:09.0453	LVUSBSta        (a730fc8671a60666d6e877c544dd7cd4) C:\WINDOWS\system32\drivers\lvusbsta.sys
2010/11/09 21:07:09.0656	mcdbus          (af61a1c34e2d3f7543f9ccfc323170b8) C:\WINDOWS\system32\DRIVERS\mcdbus.sys
2010/11/09 21:07:09.0828	mnmdd           (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
2010/11/09 21:07:10.0000	Modem           (5ac7e16f5b40a6da14b5f2b3ada4693e) C:\WINDOWS\system32\drivers\Modem.sys
2010/11/09 21:07:10.0171	Mouclass        (7d4f19411bd941e1d432a99e24230386) C:\WINDOWS\system32\DRIVERS\mouclass.sys
2010/11/09 21:07:10.0328	mouhid          (124d6846040c79b9c997f78ef4b2a4e5) C:\WINDOWS\system32\DRIVERS\mouhid.sys
2010/11/09 21:07:10.0500	MountMgr        (65653f3b4477f3c63e68a9659f85ee2e) C:\WINDOWS\system32\drivers\MountMgr.sys
2010/11/09 21:07:10.0843	MRxDAV          (46edcc8f2db2f322c24f48785cb46366) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
2010/11/09 21:07:11.0125	MRxSmb          (1fd607fc67f7f7c633c3da65bfc53d18) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
2010/11/09 21:07:11.0296	Msfs            (561b3a4333ca2dbdba28b5b956822519) C:\WINDOWS\system32\drivers\Msfs.sys
2010/11/09 21:07:11.0453	MSKSSRV         (ae431a8dd3c1d0d0610cdbac16057ad0) C:\WINDOWS\system32\drivers\MSKSSRV.sys
2010/11/09 21:07:11.0625	MSPCLOCK        (13e75fef9dfeb08eeded9d0246e1f448) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2010/11/09 21:07:11.0781	MSPQM           (1988a33ff19242576c3d0ef9ce785da7) C:\WINDOWS\system32\drivers\MSPQM.sys
2010/11/09 21:07:11.0953	mssmbios        (469541f8bfd2b32659d5d463a6714bce) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
2010/11/09 21:07:12.0125	MSTEE           (bf13612142995096ab084f2db7f40f77) C:\WINDOWS\system32\drivers\MSTEE.sys
2010/11/09 21:07:12.0296	Mup             (82035e0f41c2dd05ae41d27fe6cf7de1) C:\WINDOWS\system32\drivers\Mup.sys
2010/11/09 21:07:12.0468	NABTSFEC        (5c8dc6429c43dc6177c1fa5b76290d1a) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
2010/11/09 21:07:12.0671	NDIS            (558635d3af1c7546d26067d5d9b6959e) C:\WINDOWS\system32\drivers\NDIS.sys
2010/11/09 21:07:12.0843	NdisIP          (520ce427a8b298f54112857bcf6bde15) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
2010/11/09 21:07:13.0031	NdisTapi        (08d43bbdacdf23f34d79e44ed35c1b4c) C:\WINDOWS\system32\DRIVERS
distapi.sys
2010/11/09 21:07:13.0171	Ndisuio         (34d6cd56409da9a7ed573e1c90a308bf) C:\WINDOWS\system32\DRIVERS
disuio.sys
2010/11/09 21:07:13.0375	NdisWan         (0b90e255a9490166ab368cd55a529893) C:\WINDOWS\system32\DRIVERS
diswan.sys
2010/11/09 21:07:13.0531	NDProxy         (59fc3fb44d2669bc144fd87826bb571f) C:\WINDOWS\system32\drivers\NDProxy.sys
2010/11/09 21:07:13.0703	NetBIOS         (3a2aca8fc1d7786902ca434998d7ceb4) C:\WINDOWS\system32\DRIVERS
etbios.sys
2010/11/09 21:07:13.0906	NetBT           (0c80e410cd2f47134407ee7dd19cc86b) C:\WINDOWS\system32\DRIVERS
etbt.sys
2010/11/09 21:07:14.0109	NIC1394         (5c5c53db4fef16cf87b9911c7e8c6fbc) C:\WINDOWS\system32\DRIVERS
ic1394.sys
2010/11/09 21:07:14.0296	Npfs            (4f601bcb8f64ea3ac0994f98fed03f8e) C:\WINDOWS\system32\drivers\Npfs.sys
2010/11/09 21:07:14.0578	Ntfs            (b78be402c3f63dd55521f73876951cdd) C:\WINDOWS\system32\drivers\Ntfs.sys
2010/11/09 21:07:14.0765	Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
2010/11/09 21:07:14.0937	NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS
wlnkflt.sys
2010/11/09 21:07:15.0109	NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS
wlnkfwd.sys
2010/11/09 21:07:15.0296	ohci1394        (0951db8e5823ea366b0e408d71e1ba2a) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
2010/11/09 21:07:15.0468	Parport         (318696359ac7df48d1e51974ec527dd2) C:\WINDOWS\system32\drivers\Parport.sys
2010/11/09 21:07:15.0625	PartMgr         (3334430c29dc338092f79c38ef7b4cd0) C:\WINDOWS\system32\drivers\PartMgr.sys
2010/11/09 21:07:15.0796	ParVdm          (9575c5630db8fb804649a6959737154c) C:\WINDOWS\system32\drivers\ParVdm.sys
2010/11/09 21:07:15.0968	PCI             (7c5da5c1ed801ad8b0309d5514f0b75e) C:\WINDOWS\system32\DRIVERS\pci.sys
2010/11/09 21:07:16.0265	PCIIde          (f4bfde7209c14a07aaa61e4d6ae69eac) C:\WINDOWS\system32\drivers\PCIIde.sys
2010/11/09 21:07:16.0468	Pcmcia          (641da274e163617ea7a33506bc6da8e3) C:\WINDOWS\system32\drivers\Pcmcia.sys
2010/11/09 21:07:17.0593	PID_0928        (5bd2c6d982481d548107c602e7ccfbbc) C:\WINDOWS\system32\DRIVERS\LV561AV.SYS
2010/11/09 21:07:17.0781	PptpMiniport    (1c5cc65aac0783c344f16353e60b72ac) C:\WINDOWS\system32\DRIVERSaspptp.sys
2010/11/09 21:07:17.0937	PQNTDrv         (2b7a1aff9bfe2c75b9b8c9bd73d7ea54) C:\WINDOWS\system32\drivers\PQNTDrv.sys
2010/11/09 21:07:18.0125	PSched          (48671f327553dcf1d27f6197f622a668) C:\WINDOWS\system32\DRIVERS\psched.sys
2010/11/09 21:07:18.0296	Ptilink         (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
2010/11/09 21:07:18.0468	PxHelp20        (49452bfcec22f36a7a9b9c2181bc3042) C:\WINDOWS\system32\Drivers\PxHelp20.sys
2010/11/09 21:07:19.0375	RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERSasacd.sys
2010/11/09 21:07:19.0562	Rasl2tp         (98faeb4a4dcf812ba1c6fca4aa3e115c) C:\WINDOWS\system32\DRIVERSasl2tp.sys
2010/11/09 21:07:19.0734	RasPppoe        (7306eeed8895454cbed4669be9f79faa) C:\WINDOWS\system32\DRIVERSaspppoe.sys
2010/11/09 21:07:19.0906	Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERSaspti.sys
2010/11/09 21:07:20.0125	Rdbss           (29d66245adba878fff574cd66abd2884) C:\WINDOWS\system32\DRIVERSdbss.sys
2010/11/09 21:07:20.0296	RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
2010/11/09 21:07:20.0500	RDPWD           (d4f5643d7714ef499ae9527fdcd50894) C:\WINDOWS\system32\drivers\RDPWD.sys
2010/11/09 21:07:20.0687	redbook         (2cc30b68dd62b73d444a41322cd7fc4c) C:\WINDOWS\system32\DRIVERSedbook.sys
2010/11/09 21:07:20.0875	regi            (001b4278407f4303efc902a2b16f2453) C:\WINDOWS\system32\driversegi.sys
2010/11/09 21:07:21.0093	rtl8139         (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
2010/11/09 21:07:21.0281	Secdrv          (d26e26ea516450af9d072635c60387f4) C:\WINDOWS\system32\DRIVERS\secdrv.sys
2010/11/09 21:07:21.0468	Sentinel        (7e5c2c58fc4e3862e7bf88bfb809a9b0) C:\WINDOWS\System32\Drivers\SENTINEL.SYS
2010/11/09 21:07:21.0640	serenum         (a2d868aeeff612e70e213c451a70cafb) C:\WINDOWS\system32\DRIVERS\serenum.sys
2010/11/09 21:07:21.0812	Serial          (653201755ca96ab4aaa4131daf6da356) C:\WINDOWS\system32\DRIVERS\serial.sys
2010/11/09 21:07:21.0968	Sfloppy         (0d13b6df6e9e101013a7afb0ce629fe0) C:\WINDOWS\system32\drivers\Sfloppy.sys
2010/11/09 21:07:22.0296	SLIP            (5caeed86821fa2c6139e32e9e05ccdc9) C:\WINDOWS\system32\DRIVERS\SLIP.sys
2010/11/09 21:07:22.0484	Sntnlusb        (1475a9533649935a048ea5e27f8c3b37) C:\WINDOWS\system32\DRIVERS\SNTNLUSB.SYS
2010/11/09 21:07:22.0656	SONYPVU1        (a1eceeaa5c5e74b2499eb51d38185b84) C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS
2010/11/09 21:07:22.0968	splitter        (8e186b8f23295d1e42c573b82b80d548) C:\WINDOWS\system32\drivers\splitter.sys
2010/11/09 21:07:23.0328	sptd            (cdddec541bc3c96f91ecb48759673505) C:\WINDOWS\system32\Drivers\sptd.sys
2010/11/09 21:07:23.0328	Suspicious file (NoAccess): C:\WINDOWS\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505
2010/11/09 21:07:23.0343	sptd - detected Locked file (1)
2010/11/09 21:07:23.0515	sr              (b52181023b827acda36c1b76751ebffd) C:\WINDOWS\system32\DRIVERS\sr.sys
2010/11/09 21:07:23.0796	Srv             (20b7e396720353e4117d64d9dcb926ca) C:\WINDOWS\system32\DRIVERS\srv.sys
2010/11/09 21:07:23.0968	ssmdrv          (a36ee93698802cd899f98bfd553d8185) C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
2010/11/09 21:07:24.0140	streamip        (284c57df5dc7abca656bc2b96a667afb) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
2010/11/09 21:07:24.0312	swenum          (03c1bae4766e2450219d20b993d6e046) C:\WINDOWS\system32\DRIVERS\swenum.sys
2010/11/09 21:07:24.0500	swmidi          (94abc808fc4b6d7d2bbf42b85e25bb4d) C:\WINDOWS\system32\drivers\swmidi.sys
2010/11/09 21:07:25.0312	sysaudio        (650ad082d46bac0e64c9c0e0928492fd) C:\WINDOWS\system32\drivers\sysaudio.sys
2010/11/09 21:07:25.0578	Tcpip           (4092c56967175f009dc8458dc434358e) C:\WINDOWS\system32\DRIVERS	cpip.sys
2010/11/09 21:07:25.0765	TDPIPE          (38d437cf2d98965f239b0abcd66dcb0f) C:\WINDOWS\system32\drivers\TDPIPE.sys
2010/11/09 21:07:25.0921	TDTCP           (ed0580af02502d00ad8c4c066b156be9) C:\WINDOWS\system32\drivers\TDTCP.sys
2010/11/09 21:07:26.0109	TermDD          (a540a99c281d933f3d69d55e48727f47) C:\WINDOWS\system32\DRIVERS	ermdd.sys
2010/11/09 21:07:26.0468	Udfs            (12f70256f140cd7d52c58c7048fde657) C:\WINDOWS\system32\drivers\Udfs.sys
2010/11/09 21:07:26.0843	Update          (aff2e5045961bbc0a602bb6f95eb1345) C:\WINDOWS\system32\DRIVERS\update.sys
2010/11/09 21:07:27.0031	USBAAPL         (1df89c499bf45d878b87ebd4421d462d) C:\WINDOWS\system32\Drivers\usbaapl.sys
2010/11/09 21:07:27.0203	usbccgp         (bffd9f120cc63bcbaa3d840f3eef9f79) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
2010/11/09 21:07:27.0375	usbehci         (15e993ba2f6946b2bfbbfcd30398621e) C:\WINDOWS\system32\DRIVERS\usbehci.sys
2010/11/09 21:07:27.0546	usbhub          (c72f40947f92cea56a8fb532edf025f1) C:\WINDOWS\system32\DRIVERS\usbhub.sys
2010/11/09 21:07:27.0718	usbprint        (a42369b7cd8886cd7c70f33da6fcbcf5) C:\WINDOWS\system32\DRIVERS\usbprint.sys
2010/11/09 21:07:27.0890	usbscan         (a6bc71402f4f7dd5b77fd7f4a8ddba85) C:\WINDOWS\system32\DRIVERS\usbscan.sys
2010/11/09 21:07:28.0046	usbstor         (6cd7b22193718f1d17a47a1cd6d37e75) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
2010/11/09 21:07:28.0218	usbuhci         (f8fd1400092e23c8f2f31406ef06167b) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
2010/11/09 21:07:28.0390	VgaSave         (8a60edd72b4ea5aea8202daf0e427925) C:\WINDOWS\System32\drivers\vga.sys
2010/11/09 21:07:28.0718	VolSnap         (313b1a0d5db26dfe1c34a6c13b2ce0a7) C:\WINDOWS\system32\drivers\VolSnap.sys
2010/11/09 21:07:28.0906	Wanarp          (984ef0b9788abf89974cfed4bfbaacbc) C:\WINDOWS\system32\DRIVERS\wanarp.sys
2010/11/09 21:07:29.0234	wdmaud          (2797f33ebf50466020c430ee4f037933) C:\WINDOWS\system32\drivers\wdmaud.sys
2010/11/09 21:07:29.0468	WpdUsb          (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys
2010/11/09 21:07:29.0656	WSTCODEC        (d5842484f05e12121c511aa93f6439ec) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
2010/11/09 21:07:29.0843	WudfPf          (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
2010/11/09 21:07:30.0015	WudfRd          (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
2010/11/09 21:07:30.0062	================================================================================
2010/11/09 21:07:30.0062	Scan finished
2010/11/09 21:07:30.0062	================================================================================
2010/11/09 21:07:30.0078	Detected object count: 1
2010/11/09 21:07:41.0062	Locked file(sptd) - User select action: Skip

Utilisateur anonyme · Answer

ok, passe à zhpdiag,

je m'absente, @ ++

lulu1844 · Answer

et ici le rapport

http://www.cijoint.fr/cjlink.php?file=cj201011/cijrloNZv5.txt

Utilisateur anonyme · Answer

*	Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag en cliquant sur l'écusson vert) 
Clique sur l'icone représentant la lettre H (« coller les lignes Helper ») 
Copie/colle les lignes suivantes en gras et place les dans ZHPFix : 

---------------------------------------------------------- 


O43 - CFD:Common File Directory ----D- C:\Program Files\SearchIn1Step
HKCU\Software\E-Color]
O42 - Logiciel: forumswatcher.com Toolbar - (.Pas de propriÃ©taire.) [HKLM] -- forumswatcher.com Toolbar
O42 - Logiciel: Æ'tÆ'WÆ'JÆ'â€°Â [Æ'CÆ'Â Â [Æ'WÆ'rÆ'â€¦Â [Æ'AÂ [ - (.Pas de propriÃ©taire.) [HKLM] -- {A877994C-EAA2-41BB-97B2-281EBF38C143}

---------------------------------------------------------- 

- Clique sur « Tous », puis sur « Nettoyer » 
- Copie/colle la totalité du rapport dans ta prochaine réponse
Tuto :
http://www.premiumorange.com/zeb-help-process/zhpfix.html






Télécharge JavaRa.zip de Paul McLain et Fred de Vries.

http://raproducts.org/click/click.php?id=1

* Décompresse le fichier sur le Bureau (Clic droit > Extraire tout).
* Double-clique sur le répertoire JavaRa.
* Puis double-clique sur le fichier JavaRa.exe (le exe peut ne pas s'afficher).
* Choisis Français puis clique sur Select.
* Clique sur Recherche de mises à jour.
* Sélectionne Mettre à jour via jucheck.exe puis clique sur Rechercher.
* Autorise le processus à se connecter s'il le demande, clique sur Installer et suis les instructions d'installation qui prennent quelques minutes.
* L'installation est terminée, reviens à l'écran de JavaRa et clique sur Effacer les anciennes versions.
* Clique sur Oui pour confirmer. Laisse travailler et clique ensuite sur OK, puis une deuxième fois sur OK.
* Un rapport va s'ouvrir. Poste-le dans ta prochaine réponse.
* Ferme l'application.

Note : le rapport se trouve aussi dans C:\ sous le nom JavaRa.log.	

Tuto :
https://www.commentcamarche.net/faq/15645-supprimer-les-anciennes-versions-de-java-avec-javara







Télécharge mbr.exe de Gmer ici : 
http://www2.gmer.net/mbr/mbr.exe

et enregistre le fichier sur le Bureau. 


Désactive tes protections et coupe la connexion. (Antivirus et antispywares, HIPS et autre résident) 
Double clique sur mbr.exe
Un rapport sera généré : mbr.log 
En cas d'infection, ce message "MBR rootkit code detected" va apparaitre. 

Si c'est le cas, continue comme ça : 

Dans le menu Démarrer- Exécuter tape : "%userprofile%\Bureau\mbr" -f 
Dans le mbr.log cette ligne apparaitra "original MBR restored successfully !" 

Réactive tes protections 
Poste ce rapport et supprimes-le ensuite. 

Pour vérifier 

Désactive tes protections et coupe la connexion. (Antivirus et antispywares, HIPS et autre résident) 
Relance mbr.exe 

Réactive tes protections. 

Le nouveau mbr.log devrait être celui-ci : 

Stealth MBR rootkit detector 0.2.4 by Gmer, http://www.gmer.net 
device: opened successfully 
user: MBR read successfully 
kernel: MBR read successfully 
user & kernel MBR OK

lulu1844 · Answer

Rapport de ZHPFix 1.12.3213 par Nicolas Coolman, Update du 27/10/2010
Fichier d'export Registre : 
Run by Propriétaire at 09.11.2010 22:46:55
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Contact : nicolascoolman@yahoo.fr

========== Dossier(s) ==========
C:\Program Files\SearchIn1Step  => Supprimé et mis en quarantaine

========== Logiciel(s) ==========
O42 - Logiciel: forumswatcher.com Toolbar - (.Pas de propriÃ©taire.) [HKLM] -- forumswatcher.com Toolbar  => Logiciel déjà supprimé
O42 - Logiciel: Æ'tÆ'WÆ'JÆ'â€°Â [Æ'CÆ'Â Â [Æ'WÆ'rÆ'â€¦Â [Æ'AÂ [ - (.Pas de propriÃ©taire.) [HKLM] -- {A877994C-EAA2-41BB-97B2-281EBF38C143}  => Logiciel déjà supprimé

========== Autre ==========
HKCU\Software\E-Color]  => Format Non supporté
HKCU\Software\E-Color]  => Format Non supporté


========== Récapitulatif ==========
1 : Dossier(s)
2 : Logiciel(s)
2 : Autre


End of the scan

lulu1844 · Answer

Rapport de ZHPFix 1.12.3213 par Nicolas Coolman, Update du 27/10/2010
Fichier d'export Registre : 
Run by Propriétaire at 09.11.2010 22:46:55
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Contact : nicolascoolman@yahoo.fr

========== Dossier(s) ==========
C:\Program Files\SearchIn1Step  => Supprimé et mis en quarantaine

========== Logiciel(s) ==========
O42 - Logiciel: forumswatcher.com Toolbar - (.Pas de propriÃ©taire.) [HKLM] -- forumswatcher.com Toolbar  => Logiciel déjà supprimé
O42 - Logiciel: Æ'tÆ'WÆ'JÆ'â€°Â [Æ'CÆ'Â Â [Æ'WÆ'rÆ'â€¦Â [Æ'AÂ [ - (.Pas de propriÃ©taire.) [HKLM] -- {A877994C-EAA2-41BB-97B2-281EBF38C143}  => Logiciel déjà supprimé

========== Autre ==========
HKCU\Software\E-Color]  => Format Non supporté
HKCU\Software\E-Color]  => Format Non supporté


========== Récapitulatif ==========
1 : Dossier(s)
2 : Logiciel(s)
2 : Autre


End of the scan

Utilisateur anonyme · Answer

bonjour,
il y a juste une faute de frappe de ma part, désolé !

* Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag en cliquant sur l'écusson vert)  
Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)  
Copie/colle les lignes suivantes en gras et place les dans ZHPFix :  

----------------------------------------------------------  



[HKCU\Software\E-Color] 


----------------------------------------------------------  

- Clique sur « Tous », puis sur « Nettoyer »  
- Copie/colle la totalité du rapport dans ta prochaine réponse 
Tuto : 
http://www.premiumorange.com/zeb-help-process/zhpfix.html 



pour javara, si ça ne passe pas, pas de soucis du moment ou tu as installé la version 6, uploade 22 sur ton pc  :-)

désinstalle via ajout/suppression de programme les anciennes version de ton pc.

passe à MBR de GMER, tu trouveras tout ce qu'il faut sur mon précedant message  :-)
@ ++

lulu1844 · Answer

Bonjour,

voici les deux rapports:

Rapport de ZHPFix 1.12.3213 par Nicolas Coolman, Update du 27/10/2010
Fichier d'export Registre : C:\ZHPExportRegistry-10.11.2010-08-31-04.txt
Run by Propriétaire at 10.11.2010 08:31:04
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Contact : nicolascoolman@yahoo.fr

========== Clé(s) du Registre ==========
HKCU\Software\E-Color  => Clé supprimée avec succès


========== Récapitulatif ==========
1 : Clé(s) du Registre


End of the scan

_________________________________________________________

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 5.1.2600 Disk: ST3200822AS rev.3.01 -> Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-e 

device: opened successfully
user: MBR read successfully
kernel: MBR read successfully
user & kernel MBR OK

Utilisateur anonyme · Answer

super  :-)

Télécharge Malwarebytes' Anti-Malware et enregistre le sur ton bureau:
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/ 

ou ici : https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/
. Double cliques sur le fichier téléchargé pour lancer le processus d'installation. 
. Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour 
. si le pare-feu demande l'autorisation de se connecter pour malwarebytes, acceptes 
. Une fois la mise à jour terminé
. rend-toi dans l'onglet, Recherche 
. Sélectionnes Exécuter un examen complet
. Cliques sur Rechercher
. Le scan démarre. 
. A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés. 
. Cliques sur Ok pour poursuivre. 
. Si des malwares ont été détectés, cliques sur Afficher les résultats 
. Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine. 
. Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse. 
. rends toi dans l'onglet rapport/log 
. tu cliques dessus pour l'afficher une fois affiché 
. tu cliques sur edition en haut du boc notes,et puis sur sélectionner tous 
. tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse 
. Tu cliques droit dans le cadre de la réponse et coller 
. À la fin du scan, il se peut que MBAM ait besoin de redémarrer le pc pour finaliser la suppression, donc pas de panique, redémarre ton pc !!!

Si tu as besoin d'aide regarde ce tutoriel : 
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

lulu1844 · Answer

Ici le rapport:

Par contre, au démarrage de Windows il s'affiche le message suivant (depuis hier, je crois):

Error reading TrayIcon1-> Visible: Cannot Create System Shell Notification Icon.
__________________________________________

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 5087

Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

10.11.2010 16:26:57
mbam-log-2010-11-10 (16-26-57).txt

Type d'examen: Examen complet (C:\|)
Elément(s) analysé(s): 248814
Temps écoulé: 2 heure(s), 23 minute(s), 20 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 4

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Documents and Settings\Propriétaire\Application Data\0200000067be8021517C.manifest (Malware.Trace) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\0200000067be8021517O.manifest (Malware.Trace) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\0200000067be8021517P.manifest (Malware.Trace) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\0200000067be8021517S.manifest (Malware.Trace) -> Quarantined and deleted successfully.

Utilisateur anonyme · Answer

pas cool !

relance MBAM, vide sa quarantaine,

Télécharge LSPFIX sur ton bureau : 
https://download.bleepingcomputer.com/spyware/lspfix.zip

Lancez-le (double-cliquez dessus).

Tirez un peu sur les bords de la fenêtre pour voir l'ensemble de l'outil.
Il comporte deux volets : Keep (conserver) et Remove (supprimer).
Dans le volet de gauche, vous trouverez une liste de fichiers ".dll" présents sur votre poste. 
Si LSPFix a détecté un fichier manquant
Il a déjà placé ce fichier dans le volet de droite ("Remove").
Assure toi qu'il s'agit bien d'un fichier appartenant au nuisible ou au logiciel que tu as peut être supprimé.
Si c'est le cas, tu n'as plus qu'à cliquer sur le bouton "Finish>>"
Un petit panneau "Repair Summary" te résume les actions effectuées. Clique sur "OK" pour quitter l'outil.
Pense à redémarrer Windows.
Tuto : 
https://jesses.pagesperso-orange.fr/Docs/Logiciels/LSPFix.htm

lulu1844 · Answer

Voilà, bizarre, NO PROBLEM FOUND par Ispfix.
Et maintenant?

Utilisateur anonyme · Answer

refais une mise à jour de MBAM, lance un scan rapide cette fois ci, s'il trouve des choses, mets tout en quarantaine, poste son rapport.

donne moi des nouvelles du fonctionnement du pc  :-)

lulu1844 · Answer

Rien trouvé.
Le rapport est ici:

par contre j'ai l'impression que l'ordis accélère pas mal quand il travaille, monte le tour et le ventilateur et me donne  l'impression avoir la peine (depuis quelque semaines). Pour lancer internat, il lui faut presque une minute.


Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 5087

Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

10.11.2010 22:06:14
mbam-log-2010-11-10 (22-06-14).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 140696
Temps écoulé: 17 minute(s), 29 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Utilisateur anonyme · Answer

bonjour,
arrête ton pc, débranche le du secteur, demonte son capôt et fais un nettoyage à l'interieur verus le radiateur de processeur, il doit être encrassé  :-)

relance le pc et donne moi des nouvelles  :-)

je suis absent la journée  @ ++

lulu1844 · Answer

Bonsoir,

j'ai nettoyé l'intérieur,  mais étant donné que je l'avais déjà nettoyé il y un mois il était propre.

Depuis Windows il me faut quelque minute pour me connecter à internet.

Voilà
lulu1844

Utilisateur anonyme · Answer

*	Télécharge FindyKill sur le Bureau (Merci à El Desaparecido) : 
http://www.teamxscript.org/findykillTelechargement.html
ou :
http://www.teamxscript.org/too/Setup.exe
ou ici :
http://teamxscript.changelog.fr/FindyKill.html

* Double-cliquez sur FindyKill présent sur le Bureau. 
* Choisis l'option F pour la langue
* Choisissez l'option 1 (Recherche).
* Laissez travailler l'outil. 
* Ensuite postez le rapport FindyKill.txt qui apparaîtra (si vous avez créé un sujet sur un forum pour vous faire aider).
* Note : Le rapport FindyKill.txt est sauvegardé à la racine du disque (C:\FindyKill.txt).

(CTRL+A pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller) 
* Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. 
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.

lulu1844 · Answer

Rapide l'outil, voici le rapport:
############################## | FindyKill V5.052 |

# User : Propriétaire (Administrateurs) # PAPERINO-925292
# Update on 23/10/2010 by El Desaparecido
# Start at: 19:43:21 | 11.11.2010
# Website : http://www.teamxscript.org/
# Contact : eldesaparecido@teamxscript.org

#               Intel(R) Pentium(R) 4 CPU 3.00GHz
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 2
# Internet Explorer 6.0.2900.2180
# Windows Firewall Status : Disabled
# AV : AntiVir Desktop 10.0.1.52 [ Enabled | (!) Outdated ]

# A:\ # Lecteur de disquettes 3 ½ pouces
# C:\ # Disque fixe local # 53.39 Go (17.13 Go free) [Disque Win] # NTFS
# D:\ # Disque CD-ROM # 1003.64 Mo (0 Mo free) [200802112140] # CDFS
# E:\ # Disque CD-ROM
# F:\ # Disque fixe local # 503.19 Go (319.37 Go free) [Luciano-Foto] # NTFS
# G:\ # Disque fixe local # 98.86 Go (4.77 Go free) [VIDEO] # NTFS
# H:\ # Disque amovible # 7.45 Go (2.75 Go free) [USB DISK] # FAT32
# J:\ # Disque CD-ROM
# L:\ # Disque CD-ROM
# N:\ # Disque CD-ROM
# O:\ # Disque fixe local # 428.32 Go (298.84 Go free) [Luciano-Musica] # NTFS
# P:\ # Disque fixe local # 180.59 Go (39.2 Go free) [PHOTO] # NTFS

################## | Eléments infectieux |


################## | Registre |


################## | Etat |

# Affichage des fichiers cachés : OK
 
# Mode sans echec : OK

# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 ) 
# Ip6Fw -> Start = 3 ( Good = 2 | Bad = 4 ) 
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 ) 
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 ) 
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 ) 

################## | ! Fin du rapport # FindyKill V5.052 ! |

Utilisateur anonyme · Answer

relance FYK, choisis option 2 ,
laisse travailler l'outil, poste son rapport

lulu1844 · Answer

Bonjour,

eh bien, le FYK a travaillé toute la nuit et ce matin je me retrouve sans Firefox, sans Avira  (pour l'instant je ne sait pas quoi d'autre) et le Deskstop dans un état bordélique, pas mal d'icônes qui manquent ...

J'écris depuis mon portable, je jetterais un coup d'oeil sur le rapport sous peu. Il faut que je regarde ce qui a été effacé.

lulu1844

Utilisateur anonyme · Answer

bonjour,
si tu vois que ton pc fonctionne plus comme il faut, fait une restauration système à la date du lancement de Combofix, normalement, tout devrait revenir, infection y compris !

une fois que tu retrouves ta connexion, fais moi signe, on se prend autrement  :-)

lulu1844 · Answer

La plus part des icônes ont disparus ou bien ils se sont transformés en carrés noir, il reste juste le titre, par ex. Ispfix"et si je clic dessus il affiche " pas une application W32 valide".

Ailleurs ils affichent :

*mémoire libre insuffisante pour exécuter ce programme "

* Ressources système insuffisant pour terminer le service demandé,

Bref, il y a une application ou un programme qui laisse ouvrir et je ne trouve par le rapport de FYK.

Lulu1844

Utilisateur anonyme · Answer

tu as surement un bagle sur ton pc !

redemarre ton pc en mode sans echec avec la prise en charge du reseau,

repasse FYK en option 2 direct

donne moi des nouvelles !

lulu1844 · Answer

pas moyen d'étendre l'ordi par les commande windows, quand je l'ai relancé tous parait de nouveau en place.

 dans Fyk à la racine dans Fyk, le seul rapport txt. que je trouve est le suivant:

1:Path = com
2:Folder = +
3:Size = 0
4:Packed Size = 0
5:Modified = 2010-09-15 02:07:06
6:Created = 
7:Accessed = 
8:Attributes = D....
9:Encrypted = -
10:Comment = 
11:CRC = 
12:Method = Store
13:Host OS = NTFS
14:Path = com\sun
15:Folder = +
16:Size = 0
17:Packed Size = 0
18:Modified = 2010-09-15 02:09:38
19:Created = 
20:Accessed = 
21:Attributes = D....
22:Encrypted = -
23:Comment = 
24:CRC = 
25:Method = Store
26:Host OS = NTFS
27:Path = com\sun\corba
28:Folder = +
29:Size = 0
30:Packed Size = 0
31:Modified = 2010-09-15 02:07:06
32:Created = 
33:Accessed = 
34:Attributes = D....
35:Encrypted = -
36:Comment = 
37:CRC = 
38:Method = Store
39:Host OS = NTFS
40:Path = com\sun\corba\se
41:Folder = +
42:Size = 0
43:Packed Size = 0
44:Modified = 2010-09-15 02:09:56
45:Created = 
46:Accessed = 
47:Attributes = D....
48:Encrypted = -
49:Comment = 
50:CRC = 
51:Method = Store
52:Host OS = NTFS
53:Path = com\sun\corba\se\impl
54:Folder = +
55:Size = 0
56:Packed Size = 0
57:Modified = 2010-09-15 02:09:54
58:Created = 
59:Accessed = 
60:Attributes = D....
61:Encrypted = -
62:Comment = 
63:CRC = 
64:Method = Store
65:Host OS = NTFS
66:Path = com\sun\corba\se\impl\activation
67:Folder = +
68:Size = 0
69:Packed Size = 0
70:Modified = 2010-09-15 02:07:08
71:Created = 
72:Accessed = 
73:Attributes = D....
74:Encrypted = -
75:Comment = 
76:CRC = 
77:Method = Store
78:Host OS = NTFS
79:Path = com\sun\corba\se\impl\activation\CommandHandler.java
80:Folder = -
81:Size = 751
82:Packed Size = 423
83:Modified = 2010-09-15 00:07:46
84:Created = 
85:Accessed = 
86:Attributes = ....A
87:Encrypted = -
88:Comment = 
89:CRC = E34B9393
90:Method = Deflate
91:Host OS = NTFS
92:Path = com\sun\corba\se\impl\activation\NameServiceStartThread.java
93:Folder = -
94:Size = 1259
95:Packed Size = 640
96:Modified = 2010-09-15 00:07:46
97:Created = 
98:Accessed = 
99:Attributes = ....A
100:Encrypted = -
101:Comment = 
102:CRC = 04BC4D1F
103:Method = Deflate
104:Host OS = NTFS
105:Path = com\sun\corba\se\impl\activation\ORBD.java
106:Folder = -
107:Size = 10873
108:Packed Size = 3148
109:Modified = 2010-09-15 00:07:46
110:Created = 
111:Accessed = 
112:Attributes = ....A
113:Encrypted = -
114:Comment = 
115:CRC = 4662B8AD
116:Method = Deflate
117:Host OS = NTFS
118:Path = com\sun\corba\se\impl\activation\ProcessMonitorThread.java
119:Folder = -
120:Size = 2761
121:Packed Size = 1113
122:Modified = 2010-09-15 00:07:46
123:Created = 
124:Accessed = 
125:Attributes = ....A
126:Encrypted = -
127:Comment = 
128:CRC = 85AA2CF1
129:Method = Deflate
130:Host OS = NTFS
131:Path = com\sun\corba\se\impl\activation\RepositoryImpl.java
132:Folder = -
133:Size = 13420
134:Packed Size = 3846
135:Modified = 2010-09-15 00:07:46
136:Created = 
137:Accessed = 
138:Attributes = ....A
139:Encrypted = -
140:Comment = 
141:CRC = B5DBC62B
142:Method = Deflate
143:Host OS = NTFS
144:Path = com\sun\corba\se\impl\activation\ServerMain.java
145:Folder = -
146:Size = 10986
147:Packed Size = 3419
148:Modified = 2010-09-15 00:07:46
149:Created = 
150:Accessed = 
151:Attributes = ....A
152:Encrypted = -
153:Comment = 
154:CRC = D7055EBF
155:Method = Deflate
156:Host OS = NTFS
157:Path = com\sun\corba\se\impl\activation\ServerManagerImpl.java
158:Folder = -
159:Size = 20090
160:Packed Size = 4623
161:Modified = 2010-09-15 00:07:46
162:Created = 
163:Accessed = 
164:Attributes = ....A
165:Encrypted = -
166:Comment = 
167:CRC = 346A51BB
168:Method = Deflate
169:Host OS = NTFS
170:Path = com\sun\corba\se\impl\activation\ServerTableEntry.java
171:Folder = -
172:Size = 15411
173:Packed Size = 3913
174:Modified = 2010-09-15 00:07:46
175:Created = 
176:Accessed = 
177:Attributes = ....A
178:Encrypted = -
179:Comment = 
180:CRC = 714FA86B
181:Method = Deflate
182:Host OS = NTFS
183:Path = com\sun\corba\se\impl\activation\ServerTool.java
184:Folder = -
185:Size = 27824
186:Packed Size = 4516
187:Modified = 2010-09-15 00:07:46
188:Created = 
189:Accessed = 
190:Attributes = ....A
191:Encrypted = -
192:Comment = 
193:CRC = 1C903D08
194:Method = Deflate
195:Host OS = NTFS
196:Path = com\sun\corba\se\impl\copyobject
197:Folder = +
198:Size = 0
199:Packed Size = 0
200:Modified = 2010-09-15 02:07:08
201:Created = 
202:Accessed = 
203:Attributes = D....
204:Encrypted = -
205:Comment = 
206:CRC = 
207:Method = Store
208:Host OS = NTFS
209:Path = com\sun\corba\se\impl\copyobject\CopierManagerImpl.java
210:Folder = -
211:Size = 1259
212:Packed Size = 450
213:Modified = 2010-09-15 00:07:46
214:Created = 
215:Accessed = 
216:Attributes = ....A
217:Encrypted = -
218:Comment = 
219:CRC = 0B4ACF81
220:Method = Deflate
221:Host OS = NTFS
222:Path = com\sun\corba\se\impl\copyobject\FallbackObjectCopierImpl.java
223:Folder = -
224:Size = 976
225:Packed Size = 443
226:Modified = 2010-09-15 00:07:46
227:Created = 
228:Accessed = 
229:Attributes = ....A
230:Encrypted = -
231:Comment = 
232:CRC = BB4A8F0D
233:Method = Deflate
234:Host OS = NTFS
235:Path = com\sun\corba\se\impl\copyobject\JavaStreamObjectCopierImpl.java
236:Folder = -
237:Size = 1570
238:Packed Size = 667
239:Modified = 2010-09-15 00:07:46
240:Created = 
241:Accessed = 
242:Attributes = ....A
243:Encrypted = -
244:Comment = 
245:CRC = AACFA249
246:Method = Deflate
247:Host OS = NTFS
248:Path = com\sun\corba\se\impl\copyobject\ORBStreamObjectCopierImpl.java
249:Folder = -
250:Size = 1177
251:Packed Size = 561
252:Modified = 2010-09-15 00:07:46
253:Created = 
254:Accessed = 
255:Attributes = ....A
256:Encrypted = -
257:Comment = 
258:CRC = CB6A1AA5
259:Method = Deflate
260:Host OS = NTFS
261:Path = com\sun\corba\se\impl\copyobject\ReferenceObjectCopierImpl.java
262:Folder = -
263:Size = 395
264:Packed Size = 257
265:Modified = 2010-09-15 00:07:46
266:Created = 
267:Accessed = 
268:Attributes = ....A
269:Encrypted = -
270:Comment = 
271:CRC = FBA0C095
272:Method = Deflate
273:Host OS = NTFS
274:Path = com\sun\corba\se\impl\corba
275:Folder = +
276:Size = 0
277:Packed Size = 0
278:Modified = 2010-09-15 02:07:08
279:Created = 
280:Accessed = 
281:Attributes = D....
282:Encrypted = -
283:Comment = 
284:CRC = 
285:Method = Store
286:Host OS = NTFS
287:Path = com\sun\corba\se\impl\corba\AnyImpl.java
288:Folder = -
289:Size = 39809
290:Packed Size = 8896
291:Modified = 2010-09-15 00:07:46
292:Created = 
293:Accessed = 
294:Attributes = ....A
295:Encrypted = -
296:Comment = 
297:CRC = F25FFB5D
298:Method = Deflate
299:Host OS = NTFS
300:Path = com\sun\corba\se\impl\corba\AnyImplHelper.java
301:Folder = -
302:Size = 1558
303:Packed Size = 690
304:Modified = 2010-09-15 00:07:46
305:Created = 
306:Accessed = 
307:Attributes = ....A
308:Encrypted = -
309:Comment = 
310:CRC = 94358395
311:Method = Deflate
312:Host OS = NTFS
313:Path = com\sun\corba\se\impl\corba\AsynchInvoke.java
314:Folder = -
315:Size = 1942
316:Packed Size = 874
317:Modified = 2010-09-15 00:07:46
318:Created = 
319:Accessed = 
320:Attributes = ....A
321:Encrypted = -
322:Comment = 
323:CRC = 732D3909
324:Method = Deflate
325:Host OS = NTFS
326:Path = com\sun\corba\se\impl\corba\ContextImpl.java
327:Folder = -
328:Size = 1906
329:Packed Size = 696
330:Modified = 2010-09-15 00:07:46
331:Created = 
332:Accessed = 
333:Attributes = ....A
334:Encrypted = -
335:Comment = 
336:CRC = 2FD6BA9D
337:Method = Deflate
338:Host OS = NTFS
339:Path = com\sun\corba\se\impl\corba\ContextListImpl.java
340:Folder = -
341:Size = 1618
342:Packed Size = 689
343:Modified = 2010-09-15 00:07:46
344:Created = 
345:Accessed = 
346:Attributes = ....A
347:Encrypted = -
348:Comment = 
349:CRC = 9421542B
350:Method = Deflate
351:Host OS = NTFS
352:Path = com\sun\corba\se\impl\corba\CORBAObjectImpl.java
353:Folder = -
354:Size = 714
355:Packed Size = 457
356:Modified = 2010-09-15 00:07:46
357:Created = 
358:Accessed = 
359:Attributes = ....A
360:Encrypted = -
361:Comment = 
362:CRC = B4917080
363:Method = Deflate
364:Host OS = NTFS
365:Path = com\sun\corba\se\impl\corba\EnvironmentImpl.java
366:Folder = -
367:Size = 859
368:Packed Size = 457
369:Modified = 2010-09-15 00:07:46
370:Created = 
371:Accessed = 
372:Attributes = ....A
373:Encrypted = -
374:Comment = 
375:CRC = FC637A3A
376:Method = Deflate
377:Host OS = NTFS
378:Path = com\sun\corba\se\impl\corba\ExceptionListImpl.java
379:Folder = -
380:Size = 1418
381:Packed Size = 633
382:Modified = 2010-09-15 00:07:46
383:Created = 
384:Accessed = 
385:Attributes = ....A
386:Encrypted = -
387:Comment = 
388:CRC = 0BD15078
389:Method = Deflate
390:Host OS = NTFS
391:Path = com\sun\corba\se\impl\corba\NamedValueImpl.java
392:Folder = -
393:Size = 1336
394:Packed Size = 593
395:Modified = 2010-09-15 00:07:46
396:Created = 
397:Accessed = 
398:Attributes = ....A
399:Encrypted = -
400:Comment = 
401:CRC = 3B5F8F59
402:Method = Deflate
403:Host OS = NTFS
404:Path = com\sun\corba\se\impl\corba\NVListImpl.java
405:Folder = -
406:Size = 2427
407:Packed Size = 832
408:Modified = 2010-09-15 00:07:46
409:Created = 
410:Accessed = 
411:Attributes = ....A
412:Encrypted = -
413:Comment = 
414:CRC = 5BEC31D8
415:Method = Deflate
416:Host OS = NTFS
417:Path = com\sun\corba\se\impl\corba\PrincipalImpl.java
418:Folder = -
419:Size = 668
420:Packed Size = 417
421:Modified = 2010-09-15 00:07:46
422:Created = 
423:Accessed = 
424:Attributes = ....A
425:Encrypted = -
426:Comment = 
427:CRC = 2F776933
428:Method = Deflate
429:Host OS = NTFS
430:Path = com\sun\corba\se\impl\corba\RequestImpl.java
431:Folder = -
432:Size = 10004
433:Packed Size = 2888
434:Modified = 2010-09-15 00:07:46
435:Created = 
436:Accessed = 
437:Attributes = ....A
438:Encrypted = -
439:Comment = 
440:CRC = 29555D8A
441:Method = Deflate
442:Host OS = NTFS
443:Path = com\sun\corba\se\impl\corba\ServerRequestImpl.java
444:Folder = -
445:Size = 7909
446:Packed Size = 2620
447:Modified = 2010-09-15 00:07:46
448:Created = 
449:Accessed = 
450:Attributes = ....A
451:Encrypted = -
452:Comment = 
453:CRC = 79E44EAB
454:Method = Deflate
455:Host OS = NTFS
456:Path = com\sun\corba\se\impl\corba\TCUtility.java
457:Folder = -
458:Size = 8094
459:Packed Size = 1885
460:Modified = 2010-09-15 00:07:46
461:Created = 
462:Accessed = 
463:Attributes = ....A
464:Encrypted = -
465:Comment = 
466:CRC = 26D107E2
467:Method = Deflate
468:Host OS = NTFS
469:Path = com\sun\corba\se\impl\corba\TypeCodeFactory.java
470:Folder = -
471:Size = 449
472:Packed Size = 263
473:Modified = 2010-09-15 00:07:46
474:Created = 
475:Accessed = 
476:Attributes = ....A
477:Encrypted = -
478:Comment = 
479:CRC = D83FE70A
480:Method = Deflate
481:Host OS = NTFS
482:Path = com\sun\corba\se\impl\corba\TypeCodeImpl.java
483:Folder = -
484:Size = 64896
485:Packed Size = 12590
486:Modified = 2010-09-15 00:07:46
487:Created = 
488:Accessed = 
489:Attributes = ....A
490:Encrypted = -
491:Comment = 
492:CRC = 467B7D03
493:Method = Deflate
494:Host OS = NTFS
495:Path = com\sun\corba\se\impl\corba\TypeCodeImplHelper.java
496:Folder = -
497:Size = 1726
498:Packed Size = 695
499:Modified = 2010-09-15 00:07:46
500:Created = 
501:Accessed = 
502:Attributes = ....A
503:Encrypted = -
504:Comment = 
505:CRC = 208A3752
506:Method = Deflate
507:Host OS = NTFS
508:Path = com\sun\corba\se\impl\dynamicany
509:Folder = +
510:Size = 0
511:Packed Size = 0
512:Modified = 2010-09-15 02:07:08
513:Created = 
514:Accessed = 
515:Attributes = D....
516:Encrypted = -
517:Comment = 
518:CRC = 
519:Method = Store
520:Host OS = NTFS
521:Path = com\sun\corba\se\impl\dynamicany\DynAnyBasicImpl.java
522:Folder = -
523:Size = 20059
524:Packed Size = 2072
525:Modified = 2010-09-15 00:07:46
526:Created = 
527:Accessed = 
528:Attributes = ....A
529:Encrypted = -
530:Comment = 
531:CRC = 3E3EE02B
532:Method = Deflate
533:Host OS = NTFS
534:Path = com\sun\corba\se\impl\dynamicany\DynAnyCollectionImpl.java
535:Folder = -
536:Size = 6105
537:Packed Size = 1659
538:Modified = 2010-09-15 00:07:46
539:Created = 
540:Accessed = 
541:Attributes = ....A
542:Encrypted = -
543:Comment = 
544:CRC = 2809EABD
545:Method = Deflate
546:Host OS = NTFS
547:Path = com\sun\corba\se\impl\dynamicany\DynAnyComplexImpl.java
548:Folder = -
549:Size = 14562
550:Packed Size = 2780
551:Modified = 2010-09-15 00:07:46
552:Created = 
553:Accessed = 
554:Attributes = ....A
555:Encrypted = -
556:Comment = 
557:CRC = DC901F4F
558:Method = Deflate
559:Host OS = NTFS
560:Path = com\sun\corba\se\impl\dynamicany\DynAnyConstructedImpl.java
561:Folder = -
562:Size = 34455
563:Packed Size = 3330
564:Modified = 2010-09-15 00:07:46
565:Created = 
566:Accessed = 
567:Attributes = ....A
568:Encrypted = -
569:Comment = 
570:CRC = A53D263E
571:Method = Deflate
572:Host OS = NTFS
573:Path = com\sun\corba\se\impl\dynamicany\DynAnyFactoryImpl.java
574:Folder = -
575:Size = 1768
576:Packed Size = 651
577:Modified = 2010-09-15 00:07:46
578:Created = 
579:Accessed = 
580:Attributes = ....A
581:Encrypted = -
582:Comment = 
583:CRC = F6DEA26A
584:Method = Deflate
585:Host OS = NTFS
586:Path = com\sun\corba\se\impl\dynamicany\DynAnyImpl.java
587:Folder = -
588:Size = 5845
589:Packed Size = 1855
590:Modified = 2010-09-15 00:07:46
591:Created = 
592:Accessed = 
593:Attributes = ....A
594:Encrypted = -
595:Comment = 
596:CRC = 7DD4332E
597:Method = Deflate
598:Host OS = NTFS
599:Path = com\sun\corba\se\impl\dynamicany\DynAnyUtil.java
600:Folder = -
601:Size = 13052
602:Packed Size = 2789
603:Modified = 2010-09-15 00:07:46
604:Created = 
605:Accessed = 
606:Attributes = ....A
607:Encrypted = -
608:Comment = 
609:CRC = 8529B091
610:Method = Deflate
611:Host OS = NTFS
612:Path = com\sun\corba\se\impl\dynamicany\DynArrayImpl.java
613:Folder = -
614:Size = 3815
615:Packed Size = 1284
616:Modified = 2010-09-15 00:07:46
617:Created = 
618:Accessed = 
619:Attributes = ....A
620:Encrypted = -
621:Comment = 
622:CRC = 7CF34261
623:Method = Deflate
624:Host OS = NTFS
625:Path = com\sun\corba\se\impl\dynamicany\DynEnumImpl.java
626:Folder = -
627:Size = 5100
628:Packed Size = 1507
629:Modified = 2010-09-15 00:07:46
630:Created = 
631:Accessed = 
632:Attributes = ....A
633:Encrypted = -
634:Comment = 
635:CRC = 7616248F
636:Method = Deflate
637:Host OS = NTFS
638:Path = com\sun\corba\se\impl\dynamicany\DynFixedImpl.java
639:Folder = -
640:Size = 6707
641:Packed Size = 1997
642:Modified = 2010-09-15 00:07:46
643:Created = 
644:Accessed = 
645:Attributes = ....A
646:Encrypted = -
647:Comment = 
648:CRC = C36796EB
649:Method = Deflate
650:Host OS = NTFS
651:Path = com\sun\corba\se\impl\dynamicany\DynSequenceImpl.java
652:Folder = -
653:Size = 9236
654:Packed Size = 2543
655:Modified = 2010-09-15 00:07:46
656:Created = 
657:Accessed = 
658:Attributes = ....A
659:Encrypted = -
660:Comment = 
661:CRC = 7E2F7E98
662:Method = Deflate
663:Host OS = NTFS
664:Path = com\sun\corba\se\impl\dynamicany\DynStructImpl.java
665:Folder = -
666:Size = 2162
667:Packed Size = 861
668:Modified = 2010-09-15 00:07:46
669:Created = 
670:Accessed = 
671:Attributes = ....A
672:Encrypted = -
673:Comment = 
674:CRC = BF54410F
675:Method = Deflate
676:Host OS = NTFS
677:Path = com\sun\corba\se\impl\dynamicany\DynUnionImpl.java
678:Folder = -
679:Size = 13799
680:Packed Size = 2938
681:Modified = 2010-09-15 00:07:46
682:Created = 
683:Accessed = 
684:Attributes = ....A
685:Encrypted = -
686:Comment = 
687:CRC = 9A306519
688:Method = Deflate
689:Host OS = NTFS
690:Path = com\sun\corba\se\impl\dynamicany\DynValueBoxImpl.java
691:Folder = -
692:Size = 3202
693:Packed Size = 906
694:Modified = 2010-09-15 00:07:46
695:Created = 
696:Accessed = 
697:Attributes = ....A
698:Encrypted = -
699:Comment = 
700:CRC = 2693A674
701:Method = Deflate
702:Host OS = NTFS
703:Path = com\sun\corba\se\impl\dynamicany\DynValueCommonImpl.java
704:Folder = -
705:Size = 3864
706:Packed Size = 1100
707:Modified = 2010-09-15 00:07:46
708:Created = 
709:Accessed = 
710:Attributes = ....A
711:Encrypted = -
712:Comment = 
713:CRC = 1C32B6EE
714:Method = Deflate
715:Host OS = NTFS
716:Path = com\sun\corba\se\impl\dynamicany\DynValueImpl.java
717:Folder = -
718:Size = 1135
719:Packed Size = 483
720:Modified = 2010-09-15 00:07:46
721:Created = 
722:Accessed = 
723:Attributes = ....A
724:Encrypted = -
725:Comment = 
726:CRC = 186095FA
727:Method = Deflate
728:Host OS = NTFS
729:Path = com\sun\corba\se\impl\encoding
730:Folder = +
731:Size = 0
732:Packed Size = 0
733:Modified = 2010-09-15 02:07:10
734:Created = 
735:Accessed = 
736:Attributes = D....
737:Encrypted = -
738:Comment = 
739:CRC = 
740:Method = Store
741:Host OS = NTFS
742:Path = com\sun\corba\se\impl\encoding\BufferManagerFactory.java
743:Folder = -
744:Size = 4664
745:Packed Size = 1203
746:Modified = 2010-09-15 00:07:46
747:Created = 
748:Accessed = 
749:Attributes = ....A
750:Encrypted = -
751:Comment = 
752:CRC = 8BF91ACF
753:Method = Deflate
754:Host OS = NTFS
755:Path = com\sun\corba\se\impl\encoding\BufferManagerRead.java
756:Folder = -
757:Size = 2056
758:Packed Size = 818
759:Modified = 2010-09-15 00:07:46
760:Created = 
761:Accessed = 
762:Attributes = ....A
763:Encrypted = -
764:Comment = 
765:CRC = 82319D2C
766:Method = Deflate
767:Host OS = NTFS
768:Path = com\sun\corba\se\impl\encoding\BufferManagerReadGrow.java
769:Folder = -
770:Size = 2312
771:Packed Size = 911
772:Modified = 2010-09-15 00:07:46
773:Created = 
774:Accessed = 
775:Attributes = ....A
776:Encrypted = -
777:Comment = 
778:CRC = 58C4BB1F
779:Method = Deflate
780:Host OS = NTFS
781:Path = com\sun\corba\se\impl\encoding\BufferManagerReadStream.java
782:Folder = -
783:Size = 11971
784:Packed Size = 2707
785:Modified = 2010-09-15 00:07:46
786:Created = 
787:Accessed = 
788:Attributes = ....A
789:Encrypted = -
790:Comment = 
791:CRC = 96A623DA
792:Method = Deflate
793:Host OS = NTFS
794:Path = com\sun\corba\se\impl\encoding\BufferManagerWrite.java
795:Folder = -
796:Size = 4027
797:Packed Size = 1438
798:Modified = 2010-09-15 00:07:46
799:Created = 
800:Accessed = 
801:Attributes = ....A
802:Encrypted = -
803:Comment = 
804:CRC = 0763A6CF
805:Method = Deflate
806:Host OS = NTFS
807:Path = com\sun\corba\se\impl\encoding\BufferManagerWriteCollect.java
808:Folder = -
809:Size = 6773
810:Packed Size = 1849
811:Modified = 2010-09-15 00:07:46
812:Created = 
813:Accessed = 
814:Attributes = ....A
815:Encrypted = -
816:Comment = 
817:CRC = 56D63F62
818:Method = Deflate
819:Host OS = NTFS
820:Path = com\sun\corba\se\impl\encoding\BufferManagerWriteGrow.java
821:Folder = -
822:Size = 1800
823:Packed Size = 748
824:Modified = 2010-09-15 00:07:46
825:Created = 
826:Accessed = 
827:Attributes = ....A
828:Encrypted = -
829:Comment = 
830:CRC = 9A80305F
831:Method = Deflate
832:Host OS = NTFS
833:Path = com\sun\corba\se\impl\encoding\BufferManagerWriteStream.java
834:Folder = -
835:Size = 3285
836:Packed Size = 1251
837:Modified = 2010-09-15 00:07:46
838:Created = 
839:Accessed = 
840:Attributes = ....A
841:Encrypted = -
842:Comment = 
843:CRC = 8E276A8F
844:Method = Deflate
845:Host OS = NTFS
846:Path = com\sun\corba\se\impl\encoding\BufferQueue.java
847:Folder = -
848:Size = 981
849:Packed Size = 478
850:Modified = 2010-09-15 00:07:46
851:Created = 
852:Accessed = 
853:Attributes = ....A
854:Encrypted = -
855:Comment = 
856:CRC = 2EAA5D4C
857:Method = Deflate
858:Host OS = NTFS
859:Path = com\sun\corba\se\impl\encoding\ByteBufferWithInfo.java
860:Folder = -
861:Size = 8051
862:Packed Size = 2229
863:Modified = 2010-09-15 00:07:46
864:Created = 
865:Accessed = 
866:Attributes = ....A
867:Encrypted = -
868:Comment = 
869:CRC = 96BA7935
870:Method = Deflate
871:Host OS = NTFS
872:Path = com\sun\corba\se\impl\encoding\CachedCodeBase.java
873:Folder = -
874:Size = 5982
875:Packed Size = 1899
876:Modified = 2010-09-15 00:07:46
877:Created = 
878:Accessed = 
879:Attributes = ....A
880:Encrypted = -
881:Comment = 
882:CRC = D141DAA9
883:Method = Deflate
884:Host OS = NTFS
885:Path = com\sun\corba\se\impl\encoding\CDRInputObject.java
886:Folder = -
887:Size = 7728
888:Packed Size = 2403
889:Modified = 2010-09-15 00:07:46
890:Created = 
891:Accessed = 
892:Attributes = ....A
893:Encrypted = -
894:Comment = 
895:CRC = 9EDCF88E
896:Method = Deflate
897:Host OS = NTFS
898:Path = com\sun\corba\se\impl\encoding\CDRInputStream.java
899:Folder = -
900:Size = 15614
901:Packed Size = 3434
902:Modified = 2010-09-15 00:07:46
903:Created = 
904:Accessed = 
905:Attributes = ....A
906:Encrypted = -
907:Comment = 
908:CRC = 1CD16561
909:Method = Deflate
910:Host OS = NTFS
911:Path = com\sun\corba\se\impl\encoding\CDRInputStreamBase.java
912:Folder = -
913:Size = 8091
914:Packed Size = 1927
915:Modified = 2010-09-15 00:07:46
916:Created = 
917:Accessed = 
918:Attributes = ....A
919:Encrypted = -
920:Comment = 
921:CRC = A1308851
922:Method = Deflate
923:Host OS = NTFS
924:Path = com\sun\corba\se\impl\encoding\CDRInputStream_1_0.java
925:Folder = -
926:Size = 80827
927:Packed Size = 19218
928:Modified = 2010-09-15 00:07:46
929:Created = 
930:Accessed = 
931:Attributes = ....A
932:Encrypted = -
933:Comment = 
934:CRC = 4BBDA4E3
935:Method = Deflate
936:Host OS = NTFS
937:Path = com\sun\corba\se\impl\encoding\CDRInputStream_1_1.java
938:Folder = -
939:Size = 5229
940:Packed Size = 1904
941:Modified = 2010-09-15 00:07:46
942:Created = 
943:Accessed = 
944:Attributes = ....A
945:Encrypted = -
946:Comment = 
947:CRC = 6A8AEF22
948:Method = Deflate
949:Host OS = NTFS
950:Path = com\sun\corba\se\impl\encoding\CDRInputStream_1_2.java
951:Folder = -
952:Size = 4625
953:Packed Size = 1813
954:Modified = 2010-09-15 00:07:46
955:Created = 
956:Accessed = 
957:Attributes = ....A
958:Encrypted = -
959:Comment = 
960:CRC = C9318115
961:Method = Deflate
962:Host OS = NTFS
963:Path = com\sun\corba\se\impl\encoding\CDROutputObject.java
964:Folder = -
965:Size = 10238
966:Packed Size = 2728
967:Modified = 2010-09-15 00:07:46
968:Created = 
969:Accessed = 
970:Attributes = ....A
971:Encrypted = -
972:Comment = 
973:CRC = 3DBD1EFD
974:Method = Deflate
975:Host OS = NTFS
976:Path = com\sun\corba\se\impl\encoding\CDROutputStream.java
977:Folder = -
978:Size = 13142
979:Packed Size = 2945
980:Modified = 2010-09-15 00:07:46
981:Created = 
982:Accessed = 
983:Attributes = ....A
984:Encrypted = -
985:Comment = 
986:CRC = C967C797
987:Method = Deflate
988:Host OS = NTFS
989:Path = com\sun\corba\se\impl\encoding\CDROutputStreamBase.java
990:Folder = -
991:Size = 6648
992:Packed Size = 1588
993:Modified = 2010-09-15 00:07:46
994:Created = 
995:Accessed = 
996:Attributes = ....A
997:Encrypted = -
998:Comment = 
999:CRC = FB3C5CB8
1000:Method = Deflate
1001:Host OS = NTFS
1002:Path = com\sun\corba\se\impl\encoding\CDROutputStream_1_0.java
1003:Folder = -
1004:Size = 60349
1005:Packed Size = 13146
1006:Modified = 2010-09-15 00:07:46
1007:Created = 
1008:Accessed = 
1009:Attributes = ....A
1010:Encrypted = -
1011:Comment = 
1012:CRC = 026E61E7
1013:Method = Deflate
1014:Host OS = NTFS
1015:Path = com\sun\corba\se\impl\encoding\CDROutputStream_1_1.java
1016:Folder = -
1017:Size = 4455
1018:Packed Size = 1687
1019:Modified = 2010-09-15 00:07:46
1020:Created = 
1021:Accessed = 
1022:Attributes = ....A
1023:Encrypted = -
1024:Comment = 
1025:CRC = CDDB979C
1026:Method = Deflate
1027:Host OS = NTFS
1028:Path = com\sun\corba\se\impl\encoding\CDROutputStream_1_2.java
1029:Folder = -
1030:Size = 12443
1031:Packed Size = 3910
1032:Modified = 2010-09-15 00:07:46
1033:Created = 
1034:Accessed = 
1035:Attributes = ....A
1036:Encrypted = -
1037:Comment = 
1038:CRC = 4F0FC1B5
1039:Method = Deflate
1040:Host OS = NTFS
1041:Path = com\sun\corba\se\impl\encoding\CodeSetCache.java
1042:Folder = -
1043:Size = 2669
1044:Packed Size = 853
1045:Modified = 2010-09-15 00:07:46
1046:Created = 
1047:Accessed = 
1048:Attributes = ....A
1049:Encrypted = -
1050:Comment = 
1051:CRC = 67CD09C2
1052:Method = Deflate
1053:Host OS = NTFS
1054:Path = com\sun\corba\se\impl\encoding\CodeSetComponentInfo.java
1055:Folder = -
1056:Size = 10011
1057:Packed Size = 2818
1058:Modified = 2010-09-15 00:07:46
1059:Created = 
1060:Accessed = 
1061:Attributes = ....A
1062:Encrypted = -
1063:Comment = 
1064:CRC = 71CF395B
1065:Method = Deflate
1066:Host OS = NTFS
1067:Path = com\sun\corba\se\impl\encoding\CodeSetConversion.java
1068:Folder = -
1069:Size = 26402
1070:Packed Size = 6786
1071:Modified = 2010-09-15 00:07:46
1072:Created = 
1073:Accessed = 
1074:Attributes = ....A
1075:Encrypted = -
1076:Comment = 
1077:CRC = 9C70A42D
1078:Method = Deflate
1079:Host OS = NTFS
1080:Path = com\sun\corba\se\impl\encoding\EncapsInputStream.java
1081:Folder = -
1082:Size = 5740
1083:Packed Size = 1798
1084:Modified = 2010-09-15 00:07:46
1085:Created = 
1086:Accessed = 
1087:Attributes = ....A
1088:Encrypted = -
1089:Comment = 
1090:CRC = 4E60F5E8
1091:Method = Deflate
1092:Host OS = NTFS
1093:Path = com\sun\corba\se\impl\encoding\EncapsOutputStream.java
1094:Folder = -
1095:Size = 4681
1096:Packed Size = 1671
1097:Modified = 2010-09-15 00:07:46
1098:Created = 
1099:Accessed = 
1100:Attributes = ....A
1101:Encrypted = -
1102:Comment = 
1103:CRC = 3B52B0BE
1104:Method = Deflate
1105:Host OS = NTFS
1106:Path = com\sun\corba\se\impl\encoding\IDLJavaSerializationInputStream.java
1107:Folder = -
1108:Size = 30689
1109:Packed Size = 7214
1110:Modified = 2010-09-15 00:07:46
1111:Created = 
1112:Accessed = 
1113:Attributes = ....A
1114:Encrypted = -
1115:Comment = 
1116:CRC = 7E6AD204
1117:Method = Deflate
1118:Host OS = NTFS
1119:Path = com\sun\corba\se\impl\encoding\IDLJavaSerializationOutputStream.java
1120:Folder = -
1121:Size = 22276
1122:Packed Size = 5473
1123:Modified = 2010-09-15 00:07:46
1124:Created = 
1125:Accessed = 
1126:Attributes = ....A
1127:Encrypted = -
1128:Comment = 
1129:CRC = 8FC3EECE
1130:Method = Deflate
1131:Host OS = NTFS
1132:Path = com\sun\corba\se\impl\encoding\MarkAndResetHandler.java
1133:Folder = -
1134:Size = 464
1135:Packed Size = 312
1136:Modified = 2010-09-15 00:07:46
1137:Created = 
1138:Accessed = 
1139:Attributes = ....A
1140:Encrypted = -
1141:Comment = 
1142:CRC = A0A17CE9
1143:Method = Deflate
1144:Host OS = NTFS
1145:Path = com\sun\corba\se\impl\encoding\MarshalInputStream.java
1146:Folder = -
1147:Size = 3083
1148:Packed Size = 1059
1149:Modified = 2010-09-15 00:07:46
1150:Created = 
1151:Accessed = 
1152:Attributes = ....A
1153:Encrypted = -
1154:Comment = 
1155:CRC = 6CDDABF7
1156:Method = Deflate
1157:Host OS = NTFS
1158:Path = com\sun\corba\se\impl\encoding\MarshalOutputStream.java
1159:Folder = -
1160:Size = 2505
1161:Packed Size = 661
1162:Modified = 2010-09-15 00:07:46
1163:Created = 
1164:Accessed = 
1165:Attributes = ....A
1166:Encrypted = -
1167:Comment = 
1168:CRC = 250B2BC1
1169:Method = Deflate
1170:Host OS = NTFS
1171:Path = com\sun\corba\se\impl\encoding\OSFCodeSetRegistry.java
1172:Folder = -
1173:Size = 6685
1174:Packed Size = 2089
1175:Modified = 2010-09-15 00:07:46
1176:Created = 
1177:Accessed = 
1178:Attributes = ....A
1179:Encrypted = -
1180:Comment = 
1181:CRC = 8EE651DD
1182:Method = Deflate
1183:Host OS = NTFS
1184:Path = com\sun\corba\se\impl\encoding\RestorableInputStream.java
1185:Folder = -
1186:Size = 476
1187:Packed Size = 319
1188:Modified = 2010-09-15 00:07:46
1189:Created = 
1190:Accessed = 
1191:Attributes = ....A
1192:Encrypted = -
1193:Comment = 
1194:CRC = BC836D33
1195:Method = Deflate
1196:Host OS = NTFS
1197:Path = com\sun\corba\se\impl\encoding\TypeCodeInputStream.java
1198:Folder = -
1199:Size = 6593
1200:Packed Size = 1799
1201:Modified = 2010-09-15 00:07:46
1202:Created = 
1203:Accessed = 
1204:Attributes = ....A
1205:Encrypted = -
1206:Comment = 
1207:CRC = 2BDAC845
1208:Method = Deflate
1209:Host OS = NTFS
1210:Path = com\sun\corba\se\impl\encoding\TypeCodeOutputStream.java
1211:Folder = -
1212:Size = 9452
1213:Packed Size = 2541
1214:Modified = 2010-09-15 00:07:46
1215:Created = 
1216:Accessed = 
1217:Attributes = ....A
1218:Encrypted = -
1219:Comment = 
1220:CRC = 31FB70A4
1221:Method = Deflate
1222:Host OS = NTFS
1223:Path = com\sun\corba\se\impl\encoding\TypeCodeReader.java
1224:Folder = -
1225:Size = 1935
1226:Packed Size = 653
1227:Modified = 2010-09-15 00:07:46
1228:Created = 
1229:Accessed = 
1230:Attributes = ....A
1231:Encrypted = -
1232:Comment = 
1233:CRC = 570DECE3
1234:Method = Deflate
1235:Host OS = NTFS
1236:Path = com\sun\corba\se\impl\encoding\WrapperInputStream.java
1237:Folder = -
1238:Size = 7792
1239:Packed Size = 1804
1240:Modified = 2010-09-15 00:07:46
1241:Created = 
1242:Accessed = 
1243:Attributes = ....A
1244:Encrypted = -
1245:Comment = 
1246:CRC = 1FA9F841
1247:Method = Deflate
1248:Host OS = NTFS
1249:Path = com\sun\corba\se\impl\interceptors
1250:Folder = +
1251:Size = 0
1252:Packed Size = 0
1253:Modified = 2010-09-15 02:07:10
1254:Created = 
1255:Accessed = 
1256:Attributes = D....
1257:Encrypted = -
1258:Comment = 
1259:CRC = 
1260:Method = Store
1261:Host OS = NTFS
1262:Path = com\sun\corba\se\impl\interceptors\CDREncapsCodec.java
1263:Folder = -
1264:Size = 6267
1265:Packed Size = 1973
1266:Modified = 2010-09-15 00:07:46
1267:Created = 
1268:Accessed = 
1269:Attributes = ....A
1270:Encrypted = -
1271:Comment = 
1272:CRC = 59A47719
1273:Method = Deflate
1274:Host OS = NTFS
1275:Path = com\sun\corba\se\impl\interceptors\ClientRequestInfoImpl.java
1276:Folder = -
1277:Size = 32321
1278:Packed Size = 7873
1279:Modified = 2010-09-15 00:07:46
1280:Created = 
1281:Accessed = 
1282:Attributes = ....A
1283:Encrypted = -
1284:Comment = 
1285:CRC = 18038726
1286:Method = Deflate
1287:Host OS = NTFS
1288:Path = com\sun\corba\se\impl\interceptors\CodecFactoryImpl.java
1289:Folder = -
1290:Size = 3081
1291:Packed Size = 1234
1292:Modified = 2010-09-15 00:07:46
1293:Created = 
1294:Accessed = 
1295:Attributes = ....A
1296:Encrypted = -
1297:Comment = 
1298:CRC = 7A82A6E4
1299:Method = Deflate
1300:Host OS = NTFS
1301:Path = com\sun\corba\se\impl\interceptors\InterceptorInvoker.java
1302:Folder = -
1303:Size = 23059
1304:Packed Size = 4917
1305:Modified = 2010-09-15 00:07:46
1306:Created = 
1307:Accessed = 
1308:Attributes = ....A
1309:Encrypted = -
1310:Comment = 
1311:CRC = FDCDF785
1312:Method = Deflate
1313:Host OS = NTFS
1314:Path = com\sun\corba\se\impl\interceptors\InterceptorList.java
1315:Folder = -
1316:Size = 7996
1317:Packed Size = 2582
1318:Modified = 2010-09-15 00:07:46
1319:Created = 
1320:Accessed = 
1321:Attributes = ....A
1322:Encrypted = -
1323:Comment = 
1324:CRC = B925C73C
1325:Method = Deflate
1326:Host OS = NTFS
1327:Path = com\sun\corba\se\impl\interceptors\IORInfoImpl.java
1328:Folder = -
1329:Size = 9676
1330:Packed Size = 2893
1331:Modified = 2010-09-15 00:07:46
1332:Created = 
1333:Accessed = 
1334:Attributes = ....A
1335:Encrypted = -
1336:Comment = 
1337:CRC = F449B3C9
1338:Method = Deflate
1339:Host OS = NTFS
1340:Path = com\sun\corba\se\impl\interceptors\ORBInitInfoImpl.java
1341:Folder = -
1342:Size = 11283
1343:Packed Size = 3151
1344:Modified = 2010-09-15 00:07:46
1345:Created = 
1346:Accessed = 
1347:Attributes = ....A
1348:Encrypted = -
1349:Comment = 
1350:CRC = 58B4B613
1351:Method = Deflate
1352:Host OS = NTFS
1353:Path = com\sun\corba\se\impl\interceptors\PICurrent.java
1354:Folder = -
1355:Size = 4509
1356:Packed Size = 1425
1357:Modified = 2010-09-15 00:07:46
1358:Created = 
1359:Accessed = 
1360:Attributes = ....A
1361:Encrypted = -
1362:Comment = 
1363:CRC = EC49A5AF
1364:Method = Deflate
1365:Host OS = NTFS
1366:Path = com\sun\corba\se\impl\interceptors\PIHandlerImpl.java
1367:Folder = -
1368:Size = 34857
1369:Packed Size = 8705
1370:Modified = 2010-09-15 00:07:46
1371:Created = 
1372:Accessed = 
1373:Attributes = ....A
1374:Encrypted = -
1375:Comment = 
1376:CRC = 9C1C89E6
1377:Method = Deflate
1378:Host OS = NTFS
1379:Path = com\sun\corba\se\impl\interceptors\PINoOpHandlerImpl.java
1380:Folder = -
1381:Size = 4077
1382:Packed Size = 1231
1383:Modified = 2010-09-15 00:07:46
1384:Created = 
1385:Accessed = 
1386:Attributes = ....A
1387:Encrypted = -
1388:Comment = 
1389:CRC = FF903FD1
1390:Method = Deflate
1391:Host OS = NTFS
1392:Path = com\sun\corba\se\impl\interceptors\RequestInfoImpl.java
1393:Folder = -
1394:Size = 33446
1395:Packed Size = 8108
1396:Modified = 2010-09-15 00:07:46
1397:Created = 
1398:Accessed = 
1399:Attributes = ....A
1400:Encrypted = -
1401:Comment = 
1402:CRC = D6B18E74
1403:Method = Deflate
1404:Host OS = NTFS
1405:Path = com\sun\corba\se\impl\interceptors\ServerRequestInfoImpl.java
1406:Folder = -
1407:Size = 28800
1408:Packed Size = 6991
1409:Modified = 2010-09-15 00:07:46
1410:Created = 
1411:Accessed = 
1412:Attributes = ....A
1413:Encrypted = -
1414:Comment = 
1415:CRC = F2044B37
1416:Method = Deflate
1417:Host OS = NTFS
1418:Path = com\sun\corba\se\impl\interceptors\SlotTable.java
1419:Folder = -
1420:Size = 2440
1421:Packed Size = 879
1422:Modified = 2010-09-15 00:07:46
1423:Created = 
1424:Accessed = 
1425:Attributes = ....A
1426:Encrypted = -
1427:Comment = 
1428:CRC = AE9F5137
1429:Method = Deflate
1430:Host OS = NTFS
1431:Path = com\sun\corba\se\impl\interceptors\SlotTableStack.java
1432:Folder = -
1433:Size = 5581
1434:Packed Size = 1826
1435:Modified = 2010-09-15 00:07:46
1436:Created = 
1437:Accessed = 
1438:Attributes = ....A
1439:Encrypted = -
1440:Comment = 
1441:CRC = 60C4D610
1442:Method = Deflate
1443:Host OS = NTFS
1444:Path = com\sun\corba\se\impl\io
1445:Folder = +
1446:Size = 0
1447:Packed Size = 0
1448:Modified = 2010-09-15 02:07:10
1449:Created = 
1450:Accessed = 
1451:Attributes = D....
1452:Encrypted = -
1453:Comment = 
1454:CRC = 
1455:Method = Store
1456:Host OS = NTFS
1457:Path = com\sun\corba\se\impl\io\FVDCodeBaseImpl.java
1458:Folder = -
1459:Size = 4983
1460:Packed Size = 1718
1461:Modified = 2010-09-15 00:07:46
1462:Created = 
1463:Accessed = 
1464:Attributes = ....A
1465:Encrypted = -
1466:Comment = 
1467:CRC = A37E879A
1468:Method = Deflate
1469:Host OS = NTFS
1470:Path = com\sun\corba\se\impl\io\IIOPInputStream.java
1471:Folder = -
1472:Size = 97913
1473:Packed Size = 18191
1474:Modified = 2010-09-15 00:07:46
1475:Created = 
1476:Accessed = 
1477:Attributes = ....A
1478:Encrypted = -
1479:Comment = 
1480:CRC = 16741C58
1481:Method = Deflate
1482:Host OS = NTFS
1483:Path = com\sun\corba\se\impl\io\IIOPOutputStream.java
1484:Folder = -
1485:Size = 23431
1486:Packed Size = 5132
1487:Modified = 2010-09-15 00:07:46
1488:Created = 
1489:Accessed = 
1490:Attributes = ....A
1491:Encrypted = -
1492:Comment = 
1493:CRC = 10319676
1494:Method = Deflate
1495:Host OS = NTFS
1496:Path = com\sun\corba\se\impl\io\InputStreamHook.java
1497:Folder = -
1498:Size = 16006
1499:Packed Size = 3403
1500:Modified = 2010-09-15 00:07:46
1501:Created = 
1502:Accessed = 
1503:Attributes = ....A
1504:Encrypted = -
1505:Comment = 
1506:CRC = A2E89E2C
1507:Method = Deflate
1508:Host OS = NTFS
1509:Path = com\sun\corba\se\impl\io\ObjectStreamClass.java
1510:Folder = -
1511:Size = 58410
1512:Packed Size = 15184
1513:Modified = 2010-09-15 00:07:46
1514:Created = 
1515:Accessed = 
1516:Attributes = ....A
1517:Encrypted = -
1518:Comment = 
1519:CRC = 2FD1DC7E
1520:Method = Deflate
1521:Host OS = NTFS
1522:Path = com\sun\corba\se\impl\io\ObjectStreamClassCorbaExt.java
1523:Folder = -
1524:Size = 2984
1525:Packed Size = 1173
1526:Modified = 2010-09-15 00:07:46
1527:Created = 
1528:Accessed = 
1529:Attributes = ....A
1530:Encrypted = -
1531:Comment = 
1532:CRC = 7DA7E0CA
1533:Method = Deflate
1534:Host OS = NTFS
1535:Path = com\sun\corba\se\impl\io\ObjectStreamField.java
1536:Folder = -
1537:Size = 5898
1538:Packed Size = 2032
1539:Modified = 2010-09-15 00:07:46
1540:Created = 
1541:Accessed = 
1542:Attributes = ....A
1543:Encrypted = -
1544:Comment = 
1545:CRC = 232EBA12
1546:Method = Deflate
1547:Host OS = NTFS
1548:Path = com\sun\corba\se\impl\io\OptionalDataException.java
1549:Folder = -
1550:Size = 1558
1551:Packed Size = 752
1552:Modified = 2010-09-15 00:07:46
1553:Created = 
1554:Accessed = 
1555:Attributes = ....A
1556:Encrypted = -
1557:Comment = 
1558:CRC = DF3C2A26
1559:Method = Deflate
1560:Host OS = NTFS
1561:Path = com\sun\corba\se\impl\io\OutputStreamHook.java
1562:Folder = -
1563:Size = 9709
1564:Packed Size = 2317
1565:Modified = 2010-09-15 00:07:46
1566:Created = 
1567:Accessed = 
1568:Attributes = ....A
1569:Encrypted = -
1570:Comment = 
1571:CRC = DA34B259
1572:Method = Deflate
1573:Host OS = NTFS
1574:Path = com\sun\corba\se\impl\io\TypeMismatchException.java
1575:Folder = -
1576:Size = 650
1577:Packed Size = 391
1578:Modified = 2010-09-15 00:07:46
1579:Created = 
1580:Accessed = 
1581:Attributes = ....A
1582:Encrypted = -
1583:Comment = 
1584:CRC = 9ABD9BFD
1585:Method = Deflate
1586:Host OS = NTFS
1587:Path = com\sun\corba\se\impl\io\ValueHandlerImpl.java
1588:Folder = -
1589:Size = 33608
1590:Packed Size = 6897
1591:Modified = 2010-09-15 00:07:46
1592:Created = 
1593:Accessed = 
1594:Attributes = ....A
1595:Encrypted = -
1596:Comment = 
1597:CRC = CDED5D76
1598:Method = Deflate
1599:Host OS = NTFS
1600:Path = com\sun\corba\se\impl\io\ValueUtility.java
1601:Folder = -
1602:Size = 16010
1603:Packed Size = 4133
1604:Modified = 2010-09-15 00:07:46
1605:Created = 
1606:Accessed = 
1607:Attributes = ....A
1608:Encrypted = -
1609:Comment = 
1610:CRC = 92A630B6
1611:Method = Deflate
1612:Host OS = NTFS
1613:Path = com\sun\corba\se\impl\ior
1614:Folder = +
1615:Size = 0
1616:Packed Size = 0
1617:Modified = 2010-09-15 02:07:12
1618:Created = 
1619:Accessed = 
1620:Attributes = D....
1621:Encrypted = -
1622:Comment = 
1623:CRC = 
1624:Method = Store
1625:Host OS = NTFS
1626:Path = com\sun\corba\se\impl\ior\ByteBuffer.java
1627:Folder = -
1628:Size = 5894
1629:Packed Size = 1739
1630:Modified = 2010-09-15 00:07:46
1631:Created = 
1632:Accessed = 
1633:Attributes = ....A
1634:Encrypted = -
1635:Comment = 
1636:CRC = FA7CEF92
1637:Method = Deflate
1638:Host OS = NTFS
1639:Path = com\sun\corba\se\impl\ior\EncapsulationUtility.java
1640:Folder = -
1641:Size = 3561
1642:Packed Size = 1277
1643:Modified = 2010-09-15 00:07:46
1644:Created = 
1645:Accessed = 
1646:Attributes = ....A
1647:Encrypted = -
1648:Comment = 
1649:CRC = 955B040E
1650:Method = Deflate
1651:Host OS = NTFS
1652:Path = com\sun\corba\se\impl\ior\FreezableList.java
1653:Folder = -
1654:Size = 2718
1655:Packed Size = 938
1656:Modified = 2010-09-15 00:07:46
1657:Created = 
1658:Accessed = 
1659:Attributes = ....A
1660:Encrypted = -
1661:Comment = 
1662:CRC = 24D9E7AF
1663:Method = Deflate
1664:Host OS = NTFS
1665:Path = com\sun\corba\se\impl\ior\GenericIdentifiable.java
1666:Folder = -
1667:Size = 1699
1668:Packed Size = 763
1669:Modified = 2010-09-15 00:07:46
1670:Created = 
1671:Accessed = 
1672:Attributes = ....A
1673:Encrypted = -
1674:Comment = 
1675:CRC = A6802F86
1676:Method = Deflate
1677:Host OS = NTFS
1678:Path = com\sun\corba\se\impl\ior\GenericTaggedComponent.java
1679:Folder = -
1680:Size = 983
1681:Packed Size = 445
1682:Modified = 2010-09-15 00:07:46
1683:Created = 
1684:Accessed = 
1685:Attributes = ....A
1686:Encrypted = -
1687:Comment = 
1688:CRC = 64236B93
1689:Method = Deflate
1690:Host OS = NTFS
1691:Path = com\sun\corba\se\impl\ior\GenericTaggedProfile.java
1692:Folder = -
1693:Size = 1782
1694:Packed Size = 637
1695:Modified = 2010-09-15 00:07:46
1696:Created = 
1697:Accessed = 
1698:Attributes = ....A
1699:Encrypted = -
1700:Comment = 
1701:CRC = ACD0FC89
1702:Method = Deflate
1703:Host OS = NTFS
1704:Path = com\sun\corba\se\impl\ior\IdentifiableFactoryFinderBase.java
1705:Folder = -
1706:Size = 1659
1707:Packed Size = 628
1708:Modified = 2010-09-15 00:07:46
1709:Created = 
1710:Accessed = 
1711:Attributes = ....A
1712:Encrypted = -
1713:Comment = 
1714:CRC = 390B7E18
1715:Method = Deflate
1716:Host OS = NTFS
1717:Path = com\sun\corba\se\impl\ior\iiop
1718:Folder = +
1719:Size = 0
1720:Packed Size = 0
1721:Modified = 2010-09-15 02:07:12
1722:Created = 
1723:Accessed = 
1724:Attributes = D....
1725:Encrypted = -
1726:Comment = 
1727:CRC = 
1728:Method = Store
1729:Host OS = NTFS
1730:Path = com\sun\corba\se\impl\ior\iiop\AlternateIIOPAddressComponentImpl.java
1731:Folder = -
1732:Size = 1465
1733:Packed Size = 612
1734:Modified = 2010-09-15 00:07:46
1735:Created = 
1736:Accessed = 
1737:Attributes = ....A
1738:Encrypted = -
1739:Comment = 
1740:CRC = CF90545B
1741:Method = Deflate
1742:Host OS = NTFS
1743:Path = com\sun\corba\se\impl\ior\iiop\CodeSetsComponentImpl.java
1744:Folder = -
1745:Size = 1976
1746:Packed Size = 716
1747:Modified = 2010-09-15 00:07:46
1748:Created = 
1749:Accessed = 
1750:Attributes = ....A
1751:Encrypted = -
1752:Comment = 
1753:CRC = 75E503F4
1754:Method = Deflate
1755:Host OS = NTFS
1756:Path = com\sun\corba\se\impl\ior\iiop\IIOPAddressBase.java
1757:Folder = -
1758:Size = 1647
1759:Packed Size = 775
1760:Modified = 2010-09-15 00:07:46
1761:Created = 
1762:Accessed = 
1763:Attributes = ....A
1764:Encrypted = -
1765:Comment = 
1766:CRC = 581512BF
1767:Method = Deflate
1768:Host OS = NTFS
1769:Path = com\sun\corba\se\impl\ior\iiop\IIOPAddressClosureImpl.java
1770:Folder = -
1771:Size = 845
1772:Packed Size = 438
1773:Modified = 2010-09-15 00:07:46
1774:Created = 
1775:Accessed = 
1776:Attributes = ....A
1777:Encrypted = -
1778:Comment = 
1779:CRC = 964D64DA
1780:Method = Deflate
1781:Host OS = NTFS
1782:Path = com\sun\corba\se\impl\ior\iiop\IIOPAddressImpl.java
1783:Folder = -
1784:Size = 1251
1785:Packed Size = 578
1786:Modified = 2010-09-15 00:07:46
1787:Created = 
1788:Accessed = 
1789:Attributes = ....A
1790:Encrypted = -
1791:Comment = 
1792:CRC = B0D90BC3
1793:Method = Deflate
1794:Host OS = NTFS
1795:Path = com\sun\corba\se\impl\ior\iiop\IIOPProfileImpl.java
1796:Folder = -
1797:Size = 8964
1798:Packed Size = 2748
1799:Modified = 2010-09-15 00:07:46
1800:Created = 
1801:Accessed = 
1802:Attributes = ....A
1803:Encrypted = -
1804:Comment = 
1805:CRC = 3027C3F6
1806:Method = Deflate
1807:Host OS = NTFS
1808:Path = com\sun\corba\se\impl\ior\iiop\IIOPProfileTemplateImpl.java
1809:Folder = -
1810:Size = 4378
1811:Packed Size = 1354
1812:Modified = 2010-09-15 00:07:46
1813:Created = 
1814:Accessed = 
1815:Attributes = ....A
1816:Encrypted = -
1817:Comment = 
1818:CRC = E6901E2C
1819:Method = Deflate
1820:Host OS = NTFS
1821:Path = com\sun\corba\se\impl\ior\iiop\JavaCodebaseComponentImpl.java
1822:Folder = -
1823:Size = 1343
1824:Packed Size = 584
1825:Modified = 2010-09-15 00:07:46
1826:Created = 
1827:Accessed = 
1828:Attributes = ....A
1829:Encrypted = -
1830:Comment = 
1831:CRC = B78ED642
1832:Method = Deflate
1833:Host OS = NTFS
1834:Path = com\sun\corba\se\impl\ior\iiop\JavaSerializationComponent.java
1835:Folder = -
1836:Size = 1926
1837:Packed Size = 787
1838:Modified = 2010-09-15 00:07:46
1839:Created = 
1840:Accessed = 
1841:Attributes = ....A
1842:Encrypted = -
1843:Comment = 
1844:CRC = 0110EB0D
1845:Method = Deflate
1846:Host OS = NTFS
1847:Path = com\sun\corba\se\impl\ior\iiop\MaxStreamFormatVersionComponentImpl.java
1848:Folder = -
1849:Size = 1901
1850:Packed Size = 698
1851:Modified = 2010-09-15 00:07:46
1852:Created = 
1853:Accessed = 
1854:Attributes = ....A
1855:Encrypted = -
1856:Comment = 
1857:CRC = 994D8401
1858:Method = Deflate
1859:Host OS = NTFS
1860:Path = com\sun\corba\se\impl\ior\iiop\ORBTypeComponentImpl.java
1861:Folder = -
1862:Size = 1273
1863:Packed Size = 570
1864:Modified = 2010-09-15 00:07:46
1865:Created = 
1866:Accessed = 
1867:Attributes = ....A
1868:Encrypted = -
1869:Comment = 
1870:CRC = 2367E3B1
1871:Method = Deflate
1872:Host OS = NTFS
1873:Path = com\sun\corba\se\impl\ior\iiop\RequestPartitioningComponentImpl.java
1874:Folder = -
1875:Size = 2003
1876:Packed Size = 641
1877:Modified = 2010-09-15 00:07:46
1878:Created = 
1879:Accessed = 
1880:Attributes = ....A
1881:Encrypted = -
1882:Comment = 
1883:CRC = 5437EA8C
1884:Method = Deflate
1885:Host OS = NTFS
1886:Path = com\sun\corba\se\impl\ior\IORImpl.java
1887:Folder = -
1888:Size = 8982
1889:Packed Size = 2788
1890:Modified = 2010-09-15 00:07:46
1891:Created = 
1892:Accessed = 
1893:Attributes = ....A
1894:Encrypted = -
1895:Comment = 
1896:CRC = 7C4EB71B
1897:Method = Deflate
1898:Host OS = NTFS
1899:Path = com\sun\corba\se\impl\ior\IORTemplateImpl.java
1900:Folder = -
1901:Size = 3161
1902:Packed Size = 1058
1903:Modified = 2010-09-15 00:07:46
1904:Created = 
1905:Accessed = 
1906:Attributes = ....A
1907:Encrypted = -
1908:Comment = 
1909:CRC = E57830C4
1910:Method = Deflate
1911:Host OS = NTFS
1912:Path = com\sun\corba\se\impl\ior\IORTemplateListImpl.java
1913:Folder = -
1914:Size = 3008
1915:Packed Size = 968
1916:Modified = 2010-09-15 00:07:46
1917:Created = 
1918:Accessed = 
1919:Attributes = ....A
1920:Encrypted = -
1921:Comment = 
1922:CRC = F4A495A1
1923:Method = Deflate
1924:Host OS = NTFS
1925:Path = com\sun\corba\se\impl\ior\JIDLObjectKeyTemplate.java
1926:Folder = -
1927:Size = 1754
1928:Packed Size = 645
1929:Modified = 2010-09-15 00:07:46
1930:Created = 
1931:Accessed = 
1932:Attributes = ....A
1933:Encrypted = -
1934:Comment = 
1935:CRC = DCDB3469
1936:Method = Deflate
1937:Host OS = NTFS
1938:Path = com\sun\corba\se\impl\ior\NewObjectKeyTemplateBase.java
1939:Folder = -
1940:Size = 1559
1941:Packed Size = 614
1942:Modified = 2010-09-15 00:07:46
1943:Created = 
1944:Accessed = 
1945:Attributes = ....A
1946:Encrypted = -
1947:Comment = 
1948:CRC = CAC7A228
1949:Method = Deflate
1950:Host OS = NTFS
1951:Path = com\sun\corba\se\impl\ior\ObjectAdapterIdArray.java
1952:Folder = -
1953:Size = 990
1954:Packed Size = 445
1955:Modified = 2010-09-15 00:07:46
1956:Created = 
1957:Accessed = 
1958:Attributes = ....A
1959:Encrypted = -
1960:Comment = 
1961:CRC = 33B59828
1962:Method = Deflate
1963:Host OS = NTFS
1964:Path = com\sun\corba\se\impl\ior\ObjectAdapterIdBase.java
1965:Folder = -
1966:Size = 1708
1967:Packed Size = 666
1968:Modified = 2010-09-15 00:07:46
1969:Created = 
1970:Accessed = 
1971:Attributes = ....A
1972:Encrypted = -
1973:Comment = 
1974:CRC = EF75E85B
1975:Method = Deflate
1976:Host OS = NTFS
1977:Path = com\sun\corba\se\impl\ior\ObjectAdapterIdNumber.java
1978:Folder = -
1979:Size = 903
1980:Packed Size = 526
1981:Modified = 2010-09-15 00:07:46
1982:Created = 
1983:Accessed = 
1984:Attributes = ....A
1985:Encrypted = -
1986:Comment = 
1987:CRC = A4ABAD2B
1988:Method = Deflate
1989:Host OS = NTFS
1990:Path = com\sun\corba\se\impl\ior\ObjectIdImpl.java
1991:Folder = -
1992:Size = 1020
1993:Packed Size = 538
1994:Modified = 2010-09-15 00:07:46
1995:Created = 
1996:Accessed = 
1997:Attributes = ....A
1998:Encrypted = -
1999:Comment = 
2000:CRC = 03538482
2001:Method = Deflate
2002:Host OS = NTFS
2003:Path = com\sun\corba\se\impl\ior\ObjectKeyFactoryImpl.java
2004:Folder = -
2005:Size = 7195
2006:Packed Size = 2167
2007:Modified = 2010-09-15 00:07:46
2008:Created = 
2009:Accessed = 
2010:Attributes = ....A
2011:Encrypted = -
2012:Comment = 
2013:CRC = 612B96B5
2014:Method = Deflate
2015:Host OS = NTFS
2016:Path = com\sun\corba\se\impl\ior\ObjectKeyImpl.java
2017:Folder = -
2018:Size = 1694
2019:Packed Size = 636
2020:Modified = 2010-09-15 00:07:46
2021:Created = 
2022:Accessed = 
2023:Attributes = ....A
2024:Encrypted = -
2025:Comment = 
2026:CRC = EB93B843
2027:Method = Deflate
2028:Host OS = NTFS
2029:Path = com\sun\corba\se\impl\ior\ObjectKeyTemplateBase.java
2030:Folder = -
2031:Size = 4230
2032:Packed Size = 1412
2033:Modified = 2010-09-15 00:07:46
2034:Created = 
2035:Accessed = 
2036:Attributes = ....A
2037:Encrypted = -
2038:Comment = 
2039:CRC = A84A30A1
2040:Method = Deflate
2041:Host OS = NTFS
2042:Path = com\sun\corba\se\impl\ior\ObjectReferenceFactoryImpl.java
2043:Folder = -
2044:Size = 3613
2045:Packed Size = 1204
2046:Modified = 2010-09-15 00:07:46
2047:Created = 
2048:Accessed = 
2049:Attributes = ....A
2050:Encrypted = -
2051:Comment = 
2052:CRC = 8EFF5B9C
2053:Method = Deflate
2054:Host OS = NTFS
2055:Path = com\sun\corba\se\impl\ior\ObjectReferenceProducerBase.java
2056:Folder = -
2057:Size = 1177
2058:Packed Size = 491
2059:Modified = 2010-09-15 00:07:46
2060:Created = 
2061:Accessed = 
2062:Attributes = ....A
2063:Encrypted = -
2064:Comment = 
2065:CRC = 5E2A88F0
2066:Method = Deflate
2067:Host OS = NTFS
2068:Path = com\sun\corba\se\impl\ior\ObjectReferenceTemplateImpl.java
2069:Folder = -
2070:Size = 4159
2071:Packed Size = 1354
2072:Modified = 2010-09-15 00:07:46
2073:Created = 
2074:Accessed = 
2075:Attributes = ....A
2076:Encrypted = -
2077:Comment = 
2078:CRC = 78367843
2079:Method = Deflate
2080:Host OS = NTFS
2081:Path = com\sun\corba\se\impl\ior\OldJIDLObjectKeyTemplate.java
2082:Folder = -
2083:Size = 3400
2084:Packed Size = 1259
2085:Modified = 2010-09-15 00:07:46
2086:Created = 
2087:Accessed = 
2088:Attributes = ....A
2089:Encrypted = -
2090:Comment = 
2091:CRC = 93E78330
2092:Method = Deflate
2093:Host OS = NTFS
2094:Path = com\sun\corba\se\impl\ior\OldObjectKeyTemplateBase.java
2095:Folder = -
2096:Size = 1131
2097:Packed Size = 530
2098:Modified = 2010-09-15 00:07:46
2099:Created = 
2100:Accessed = 
2101:Attributes = ....A
2102:Encrypted = -
2103:Comment = 
2104:CRC = EF421F6A
2105:Method = Deflate
2106:Host OS = NTFS
2107:Path = com\sun\corba\se\impl\ior\OldPOAObjectKeyTemplate.java
2108:Folder = -
2109:Size = 2111
2110:Packed Size = 775
2111:Modified = 2010-09-15 00:07:46
2112:Created = 
2113:Accessed = 
2114:Attributes = ....A
2115:Encrypted = -
2116:Comment = 
2117:CRC = 05A326FF
2118:Method = Deflate
2119:Host OS = NTFS
2120:Path = com\sun\corba\se\impl\ior\POAObjectKeyTemplate.java
2121:Folder = -
2122:Size = 2000
2123:Packed Size = 703
2124:Modified = 2010-09-15 00:07:46
2125:Created = 
2126:Accessed = 
2127:Attributes = ....A
2128:Encrypted = -
2129:Comment = 
2130:CRC = 9F40A272
2131:Method = Deflate
2132:Host OS = NTFS
2133:Path = com\sun\corba\se\impl\ior\StubIORImpl.java
2134:Folder = -
2135:Size = 6928
2136:Packed Size = 1971
2137:Modified = 2010-09-15 00:07:46
2138:Created = 
2139:Accessed = 
2140:Attributes = ....A
2141:Encrypted = -
2142:Comment = 
2143:CRC = C7A5A17E
2144:Method = Deflate
2145:Host OS = NTFS
2146:Path = com\sun\corba\se\impl\ior\TaggedComponentFactoryFinderImpl.java
2147:Folder = -
2148:Size = 1583
2149:Packed Size = 606
2150:Modified = 2010-09-15 00:07:46
2151:Created = 
2152:Accessed = 
2153:Attributes = ....A
2154:Encrypted = -
2155:Comment = 
2156:CRC = F9BE9A33
2157:Method = Deflate
2158:Host OS = NTFS
2159:Path = com\sun\corba\se\impl\ior\TaggedProfileFactoryFinderImpl.java

lulu1844 · Answer

je fait quoi? dois-je repasser Fyk  en option diret 2, une autre fois?

Utilisateur anonyme · Answer

oui, repasse FYK en option 2 direct, on verra ce que ça dit  :-)

lulu1844 · Answer

Le seul rapport txt. que je trouve-

1:Path = META-INF
2:Folder = +
3:Size = 0
4:Packed Size = 2
5:Modified = 2008-08-06 13:12:46
6:Created = 
7:Accessed = 
8:Attributes = D....
9:Encrypted = -
10:Comment = 
11:CRC = 
12:Method = Deflate
13:Host OS = FAT
14:Path = META-INF\MANIFEST.MF
15:Folder = -
16:Size = 84
17:Packed Size = 84
18:Modified = 2008-08-06 13:12:46
19:Created = 
20:Accessed = 
21:Attributes = .....
22:Encrypted = -
23:Comment = 
24:CRC = 2998AFB0
25:Method = Deflate
26:Host OS = FAT
27:Path = com
28:Folder = +
29:Size = 0
30:Packed Size = 0
31:Modified = 2008-08-06 13:12:44
32:Created = 
33:Accessed = 
34:Attributes = D....
35:Encrypted = -
36:Comment = 
37:CRC = 
38:Method = Store
39:Host OS = FAT
40:Path = com\apple
41:Folder = +
42:Size = 0
43:Packed Size = 0
44:Modified = 2008-08-06 13:12:44
45:Created = 
46:Accessed = 
47:Attributes = D....
48:Encrypted = -
49:Comment = 
50:CRC = 
51:Method = Store
52:Host OS = FAT
53:Path = com\apple\jdirect
54:Folder = +
55:Size = 0
56:Packed Size = 0
57:Modified = 2008-08-06 13:12:44
58:Created = 
59:Accessed = 
60:Attributes = D....
61:Encrypted = -
62:Comment = 
63:CRC = 
64:Method = Store
65:Host OS = FAT
66:Path = com\apple\jdirect\SharedLibrary.class
67:Folder = -
68:Size = 125
69:Packed Size = 107
70:Modified = 2008-08-06 13:12:44
71:Created = 
72:Accessed = 
73:Attributes = .....
74:Encrypted = -
75:Comment = 
76:CRC = 9C4D9419
77:Method = Deflate
78:Host OS = FAT
79:Path = com\apple\mrj
80:Folder = +
81:Size = 0
82:Packed Size = 0
83:Modified = 2008-08-06 13:12:44
84:Created = 
85:Accessed = 
86:Attributes = D....
87:Encrypted = -
88:Comment = 
89:CRC = 
90:Method = Store
91:Host OS = FAT
92:Path = com\apple\mrj\macos
93:Folder = +
94:Size = 0
95:Packed Size = 0
96:Modified = 2008-08-06 13:12:44
97:Created = 
98:Accessed = 
99:Attributes = D....
100:Encrypted = -
101:Comment = 
102:CRC = 
103:Method = Store
104:Host OS = FAT
105:Path = com\apple\mrj\macos\carbon
106:Folder = +
107:Size = 0
108:Packed Size = 0
109:Modified = 2008-08-06 13:12:44
110:Created = 
111:Accessed = 
112:Attributes = D....
113:Encrypted = -
114:Comment = 
115:CRC = 
116:Method = Store
117:Host OS = FAT
118:Path = com\apple\mrj\macos\carbon\CarbonAccess$1Runner.class
119:Folder = -
120:Size = 936
121:Packed Size = 550
122:Modified = 2008-08-06 13:12:44
123:Created = 
124:Accessed = 
125:Attributes = .....
126:Encrypted = -
127:Comment = 
128:CRC = 636EDB7B
129:Method = Deflate
130:Host OS = FAT
131:Path = com\apple\mrj\macos\carbon\CarbonAccess.class
132:Folder = -
133:Size = 865
134:Packed Size = 512
135:Modified = 2008-08-06 13:12:44
136:Created = 
137:Accessed = 
138:Attributes = .....
139:Encrypted = -
140:Comment = 
141:CRC = 874FC851
142:Method = Deflate
143:Host OS = FAT
144:Path = com\apple\mrj\macos\carbon\CarbonEventClient.class
145:Folder = -
146:Size = 182
147:Packed Size = 142
148:Modified = 2008-08-06 13:12:44
149:Created = 
150:Accessed = 
151:Attributes = .....
152:Encrypted = -
153:Comment = 
154:CRC = ABC710D1
155:Method = Deflate
156:Host OS = FAT
157:Path = com\apple\mrj\macos\carbon\EventLoopTimerClosureUPP$1.class
158:Folder = -
159:Size = 789
160:Packed Size = 451
161:Modified = 2008-08-06 13:12:44
162:Created = 
163:Accessed = 
164:Attributes = .....
165:Encrypted = -
166:Comment = 
167:CRC = 6F597290
168:Method = Deflate
169:Host OS = FAT
170:Path = com\apple\mrj\macos\carbon\EventLoopTimerClosureUPP$2.class
171:Folder = -
172:Size = 745
173:Packed Size = 431
174:Modified = 2008-08-06 13:12:44
175:Created = 
176:Accessed = 
177:Attributes = .....
178:Encrypted = -
179:Comment = 
180:CRC = 06087632
181:Method = Deflate
182:Host OS = FAT
183:Path = com\apple\mrj\macos\carbon\EventLoopTimerClosureUPP.class
184:Folder = -
185:Size = 834
186:Packed Size = 463
187:Modified = 2008-08-06 13:12:44
188:Created = 
189:Accessed = 
190:Attributes = .....
191:Encrypted = -
192:Comment = 
193:CRC = 9DA0D2DA
194:Method = Deflate
195:Host OS = FAT
196:Path = com\apple\mrj\macos\carbon\EventLoopTimerInterface.class
197:Folder = -
198:Size = 156
199:Packed Size = 139
200:Modified = 2008-08-06 13:12:44
201:Created = 
202:Accessed = 
203:Attributes = .....
204:Encrypted = -
205:Comment = 
206:CRC = A046C360
207:Method = Deflate
208:Host OS = FAT
209:Path = com\apple\mrj\macos\carbon\HIToolBoxFunctions.class
210:Folder = -
211:Size = 388
212:Packed Size = 287
213:Modified = 2008-08-06 13:12:44
214:Created = 
215:Accessed = 
216:Attributes = .....
217:Encrypted = -
218:Comment = 
219:CRC = F70FEBD6
220:Method = Deflate
221:Host OS = FAT
222:Path = com\apple\mrj\macos\carbon\Timer$1Deferrer.class
223:Folder = -
224:Size = 564
225:Packed Size = 363
226:Modified = 2008-08-06 13:12:44
227:Created = 
228:Accessed = 
229:Attributes = .....
230:Encrypted = -
231:Comment = 
232:CRC = 521D032F
233:Method = Deflate
234:Host OS = FAT
235:Path = com\apple\mrj\macos\carbon\Timer$2Deferrer.class
236:Folder = -
237:Size = 770
238:Packed Size = 484
239:Modified = 2008-08-06 13:12:44
240:Created = 
241:Accessed = 
242:Attributes = .....
243:Encrypted = -
244:Comment = 
245:CRC = 5C32DAD0
246:Method = Deflate
247:Host OS = FAT
248:Path = com\apple\mrj\macos\carbon\Timer.class
249:Folder = -
250:Size = 3021
251:Packed Size = 1677
252:Modified = 2008-08-06 13:12:44
253:Created = 
254:Accessed = 
255:Attributes = .....
256:Encrypted = -
257:Comment = 
258:CRC = FBC0F71D
259:Method = Deflate
260:Host OS = FAT
261:Path = manifest
262:Folder = -
263:Size = 36
264:Packed Size = 38
265:Modified = 2008-08-06 13:12:46
266:Created = 
267:Accessed = 
268:Attributes = .....
269:Encrypted = -
270:Comment = 
271:CRC = 60BB845F
272:Method = Deflate
273:Host OS = FAT
274:Path = qt3logo.jpg
275:Folder = -
276:Size = 10837
277:Packed Size = 10177
278:Modified = 2008-08-06 13:12:46
279:Created = 
280:Accessed = 
281:Attributes = .....
282:Encrypted = -
283:Comment = 
284:CRC = A1A3330D
285:Method = Deflate
286:Host OS = FAT
287:Path = quicktime
288:Folder = +
289:Size = 0
290:Packed Size = 0
291:Modified = 2008-08-06 13:12:46
292:Created = 
293:Accessed = 
294:Attributes = D....
295:Encrypted = -
296:Comment = 
297:CRC = 
298:Method = Store
299:Host OS = FAT
300:Path = quicktime\app
301:Folder = +
302:Size = 0
303:Packed Size = 0
304:Modified = 2008-08-06 13:12:44
305:Created = 
306:Accessed = 
307:Attributes = D....
308:Encrypted = -
309:Comment = 
310:CRC = 
311:Method = Store
312:Host OS = FAT
313:Path = quicktime\app\actions
314:Folder = +
315:Size = 0
316:Packed Size = 0
317:Modified = 2008-08-06 13:12:44
318:Created = 
319:Accessed = 
320:Attributes = D....
321:Encrypted = -
322:Comment = 
323:CRC = 
324:Method = Store
325:Host OS = FAT
326:Path = quicktime\app\actions\Actionable.class
327:Folder = -
328:Size = 172
329:Packed Size = 141
330:Modified = 2008-08-06 13:12:44
331:Created = 
332:Accessed = 
333:Attributes = .....
334:Encrypted = -
335:Comment = 
336:CRC = 16AACDEB
337:Method = Deflate
338:Host OS = FAT
339:Path = quicktime\app\actions\BounceAction.class
340:Folder = -
341:Size = 937
342:Packed Size = 541
343:Modified = 2008-08-06 13:12:44
344:Created = 
345:Accessed = 
346:Attributes = .....
347:Encrypted = -
348:Comment = 
349:CRC = BB1558AB
350:Method = Deflate
351:Host OS = FAT
352:Path = quicktime\app\actions\DragAction.class
353:Folder = -
354:Size = 2079
355:Packed Size = 982
356:Modified = 2008-08-06 13:12:44
357:Created = 
358:Accessed = 
359:Attributes = .....
360:Encrypted = -
361:Comment = 
362:CRC = 97B97823
363:Method = Deflate
364:Host OS = FAT
365:Path = quicktime\app\actions\Dragger.class
366:Folder = -
367:Size = 4796
368:Packed Size = 2493
369:Modified = 2008-08-06 13:12:44
370:Created = 
371:Accessed = 
372:Attributes = .....
373:Encrypted = -
374:Comment = 
375:CRC = ACBDE128
376:Method = Deflate
377:Host OS = FAT
378:Path = quicktime\app\actions\GenericResponder$GREventMulticaster.class
379:Folder = -
380:Size = 1137
381:Packed Size = 560
382:Modified = 2008-08-06 13:12:44
383:Created = 
384:Accessed = 
385:Attributes = .....
386:Encrypted = -
387:Comment = 
388:CRC = 860544C3
389:Method = Deflate
390:Host OS = FAT
391:Path = quicktime\app\actions\GenericResponder.class
392:Folder = -
393:Size = 4209
394:Packed Size = 1509
395:Modified = 2008-08-06 13:12:44
396:Created = 
397:Accessed = 
398:Attributes = .....
399:Encrypted = -
400:Comment = 
401:CRC = B26503B8
402:Method = Deflate
403:Host OS = FAT
404:Path = quicktime\app\actions\Invalidator.class
405:Folder = -
406:Size = 1038
407:Packed Size = 602
408:Modified = 2008-08-06 13:12:44
409:Created = 
410:Accessed = 
411:Attributes = .....
412:Encrypted = -
413:Comment = 
414:CRC = 524406E8
415:Method = Deflate
416:Host OS = FAT
417:Path = quicktime\app\actions\MatrixAction.class
418:Folder = -
419:Size = 4778
420:Packed Size = 2360
421:Modified = 2008-08-06 13:12:44
422:Created = 
423:Accessed = 
424:Attributes = .....
425:Encrypted = -
426:Comment = 
427:CRC = 39A57E0B
428:Method = Deflate
429:Host OS = FAT
430:Path = quicktime\app\actions\MouseController.class
431:Folder = -
432:Size = 6143
433:Packed Size = 2926
434:Modified = 2008-08-06 13:12:44
435:Created = 
436:Accessed = 
437:Attributes = .....
438:Encrypted = -
439:Comment = 
440:CRC = 0CEF8419
441:Method = Deflate
442:Host OS = FAT
443:Path = quicktime\app\actions\MouseResponder.class
444:Folder = -
445:Size = 3279
446:Packed Size = 1472
447:Modified = 2008-08-06 13:12:44
448:Created = 
449:Accessed = 
450:Attributes = .....
451:Encrypted = -
452:Comment = 
453:CRC = D4C14D9F
454:Method = Deflate
455:Host OS = FAT
456:Path = quicktime\app\actions\NextImageAction.class
457:Folder = -
458:Size = 1634
459:Packed Size = 817
460:Modified = 2008-08-06 13:12:44
461:Created = 
462:Accessed = 
463:Attributes = .....
464:Encrypted = -
465:Comment = 
466:CRC = 8EA8B2A0
467:Method = Deflate
468:Host OS = FAT
469:Path = quicktime\app\actions\Notifier.class
470:Folder = -
471:Size = 216
472:Packed Size = 156
473:Modified = 2008-08-06 13:12:44
474:Created = 
475:Accessed = 
476:Attributes = .....
477:Encrypted = -
478:Comment = 
479:CRC = AC7BC67A
480:Method = Deflate
481:Host OS = FAT
482:Path = quicktime\app\actions\NotifyListener.class
483:Folder = -
484:Size = 253
485:Packed Size = 180
486:Modified = 2008-08-06 13:12:44
487:Created = 
488:Accessed = 
489:Attributes = .....
490:Encrypted = -
491:Comment = 
492:CRC = 88D6A1C0
493:Method = Deflate
494:Host OS = FAT
495:Path = quicktime\app\actions\PeriodicAction.class
496:Folder = -
497:Size = 2836
498:Packed Size = 1477
499:Modified = 2008-08-06 13:12:44
500:Created = 
501:Accessed = 
502:Attributes = .....
503:Encrypted = -
504:Comment = 
505:CRC = 547A3F4B
506:Method = Deflate
507:Host OS = FAT
508:Path = quicktime\app\actions\QTMouseMotionAdapter.class
509:Folder = -
510:Size = 921
511:Packed Size = 537
512:Modified = 2008-08-06 13:12:44
513:Created = 
514:Accessed = 
515:Attributes = .....
516:Encrypted = -
517:Comment = 
518:CRC = A9044468
519:Method = Deflate
520:Host OS = FAT
521:Path = quicktime\app\actions\QTMouseMotionListener.class
522:Folder = -
523:Size = 308
524:Packed Size = 207
525:Modified = 2008-08-06 13:12:44
526:Created = 
527:Accessed = 
528:Attributes = .....
529:Encrypted = -
530:Comment = 
531:CRC = 25EA22BF
532:Method = Deflate
533:Host OS = FAT
534:Path = quicktime\app\actions\SequencerAction.class
535:Folder = -
536:Size = 1474
537:Packed Size = 841
538:Modified = 2008-08-06 13:12:44
539:Created = 
540:Accessed = 
541:Attributes = .....
542:Encrypted = -
543:Comment = 
544:CRC = 953FDDF3
545:Method = Deflate
546:Host OS = FAT
547:Path = quicktime\app\actions\SimpleActionList$1.class
548:Folder = -
549:Size = 233
550:Packed Size = 164
551:Modified = 2008-08-06 13:12:44
552:Created = 
553:Accessed = 
554:Attributes = .....
555:Encrypted = -
556:Comment = 
557:CRC = CBBA5C54
558:Method = Deflate
559:Host OS = FAT
560:Path = quicktime\app\actions\SimpleActionList$TargetEnumerator.class
561:Folder = -
562:Size = 1412
563:Packed Size = 726
564:Modified = 2008-08-06 13:12:44
565:Created = 
566:Accessed = 
567:Attributes = .....
568:Encrypted = -
569:Comment = 
570:CRC = 4DDBEA11
571:Method = Deflate
572:Host OS = FAT
573:Path = quicktime\app\actions\SimpleActionList.class
574:Folder = -
575:Size = 1573
576:Packed Size = 850
577:Modified = 2008-08-06 13:12:44
578:Created = 
579:Accessed = 
580:Attributes = .....
581:Encrypted = -
582:Comment = 
583:CRC = B5644A64
584:Method = Deflate
585:Host OS = FAT
586:Path = quicktime\app\actions\Targetable.class
587:Folder = -
588:Size = 276
589:Packed Size = 179
590:Modified = 2008-08-06 13:12:44
591:Created = 
592:Accessed = 
593:Attributes = .....
594:Encrypted = -
595:Comment = 
596:CRC = A3D674AB
597:Method = Deflate
598:Host OS = FAT
599:Path = quicktime\app\actions\TickleList$1.class
600:Folder = -
601:Size = 215
602:Packed Size = 158
603:Modified = 2008-08-06 13:12:44
604:Created = 
605:Accessed = 
606:Attributes = .....
607:Encrypted = -
608:Comment = 
609:CRC = 1506F8D0
610:Method = Deflate
611:Host OS = FAT
612:Path = quicktime\app\actions\TickleList$ListEnumerator.class
613:Folder = -
614:Size = 1057
615:Packed Size = 558
616:Modified = 2008-08-06 13:12:44
617:Created = 
618:Accessed = 
619:Attributes = .....
620:Encrypted = -
621:Comment = 
622:CRC = FA20D66B
623:Method = Deflate
624:Host OS = FAT
625:Path = quicktime\app\actions\TickleList$NodeEnumerator.class
626:Folder = -
627:Size = 1003
628:Packed Size = 533
629:Modified = 2008-08-06 13:12:44
630:Created = 
631:Accessed = 
632:Attributes = .....
633:Encrypted = -
634:Comment = 
635:CRC = AA7F37C1
636:Method = Deflate
637:Host OS = FAT
638:Path = quicktime\app\actions\TickleList.class
639:Folder = -
640:Size = 4079
641:Packed Size = 1977
642:Modified = 2008-08-06 13:12:44
643:Created = 
644:Accessed = 
645:Attributes = .....
646:Encrypted = -
647:Comment = 
648:CRC = 54E41333
649:Method = Deflate
650:Host OS = FAT
651:Path = quicktime\app\actions\TickleNode.class
652:Folder = -
653:Size = 1530
654:Packed Size = 791
655:Modified = 2008-08-06 13:12:44
656:Created = 
657:Accessed = 
658:Attributes = .....
659:Encrypted = -
660:Comment = 
661:CRC = 46BD866A
662:Method = Deflate
663:Host OS = FAT
664:Path = quicktime\app\actions\TransformMatrix.class
665:Folder = -
666:Size = 6630
667:Packed Size = 3192
668:Modified = 2008-08-06 13:12:44
669:Created = 
670:Accessed = 
671:Attributes = .....
672:Encrypted = -
673:Comment = 
674:CRC = C03D3677
675:Method = Deflate
676:Host OS = FAT
677:Path = quicktime\app\actions\TranslateMatrix.class
678:Folder = -
679:Size = 1525
680:Packed Size = 814
681:Modified = 2008-08-06 13:12:44
682:Created = 
683:Accessed = 
684:Attributes = .....
685:Encrypted = -
686:Comment = 
687:CRC = DA53BFB6
688:Method = Deflate
689:Host OS = FAT
690:Path = quicktime\app\anim
691:Folder = +
692:Size = 0
693:Packed Size = 0
694:Modified = 2008-08-06 13:12:44
695:Created = 
696:Accessed = 
697:Attributes = D....
698:Encrypted = -
699:Comment = 
700:CRC = 
701:Method = Store
702:Host OS = FAT
703:Path = quicktime\app\anim\Compositor.class
704:Folder = -
705:Size = 4704
706:Packed Size = 2110
707:Modified = 2008-08-06 13:12:44
708:Created = 
709:Accessed = 
710:Attributes = .....
711:Encrypted = -
712:Comment = 
713:CRC = 72824D7D
714:Method = Deflate
715:Host OS = FAT
716:Path = quicktime\app\anim\SpriteInvalidException.class
717:Folder = -
718:Size = 534
719:Packed Size = 381
720:Modified = 2008-08-06 13:12:44
721:Created = 
722:Accessed = 
723:Attributes = .....
724:Encrypted = -
725:Comment = 
726:CRC = B05100AD
727:Method = Deflate
728:Host OS = FAT
729:Path = quicktime\app\anim\SWCompositor$ASpriteWorld.class
730:Folder = -
731:Size = 2170
732:Packed Size = 1030
733:Modified = 2008-08-06 13:12:44
734:Created = 
735:Accessed = 
736:Attributes = .....
737:Encrypted = -
738:Comment = 
739:CRC = 2E8FDBDA
740:Method = Deflate
741:Host OS = FAT
742:Path = quicktime\app\anim\SWCompositor.class
743:Folder = -
744:Size = 12788
745:Packed Size = 5638
746:Modified = 2008-08-06 13:12:44
747:Created = 
748:Accessed = 
749:Attributes = .....
750:Encrypted = -
751:Comment = 
752:CRC = 428B3F7A
753:Method = Deflate
754:Host OS = FAT
755:Path = quicktime\app\anim\SWController.class
756:Folder = -
757:Size = 2960
758:Packed Size = 1582
759:Modified = 2008-08-06 13:12:44
760:Created = 
761:Accessed = 
762:Attributes = .....
763:Encrypted = -
764:Comment = 
765:CRC = 8E8E52F1
766:Method = Deflate
767:Host OS = FAT
768:Path = quicktime\app\anim\TwoDSprite.class
769:Folder = -
770:Size = 9958
771:Packed Size = 4165
772:Modified = 2008-08-06 13:12:44
773:Created = 
774:Accessed = 
775:Attributes = .....
776:Encrypted = -
777:Comment = 
778:CRC = 33D9D08A
779:Method = Deflate
780:Host OS = FAT
781:Path = quicktime\app\anim\TwoDSpriteInfo.class
782:Folder = -
783:Size = 2526
784:Packed Size = 1184
785:Modified = 2008-08-06 13:12:44
786:Created = 
787:Accessed = 
788:Attributes = .....
789:Encrypted = -
790:Comment = 
791:CRC = 0DCB9A21
792:Method = Deflate
793:Host OS = FAT
794:Path = quicktime\app\audio
795:Folder = +
796:Size = 0
797:Packed Size = 0
798:Modified = 2008-08-06 13:12:44
799:Created = 
800:Accessed = 
801:Attributes = D....
802:Encrypted = -
803:Comment = 
804:CRC = 
805:Method = Store
806:Host OS = FAT
807:Path = quicktime\app\audio\AudioMediaControl.class
808:Folder = -
809:Size = 2113
810:Packed Size = 1032
811:Modified = 2008-08-06 13:12:44
812:Created = 
813:Accessed = 
814:Attributes = .....
815:Encrypted = -
816:Comment = 
817:CRC = E76C6D8C
818:Method = Deflate
819:Host OS = FAT
820:Path = quicktime\app\audio\AudioSpec.class
821:Folder = -
822:Size = 327
823:Packed Size = 216
824:Modified = 2008-08-06 13:12:44
825:Created = 
826:Accessed = 
827:Attributes = .....
828:Encrypted = -
829:Comment = 
830:CRC = F10EDC08
831:Method = Deflate
832:Host OS = FAT
833:Path = quicktime\app\audio\ExtendedAudioSpec.class
834:Folder = -
835:Size = 306
836:Packed Size = 204
837:Modified = 2008-08-06 13:12:44
838:Created = 
839:Accessed = 
840:Attributes = .....
841:Encrypted = -
842:Comment = 
843:CRC = C97D1804
844:Method = Deflate
845:Host OS = FAT
846:Path = quicktime\app\audio\MusicMediaControl.class
847:Folder = -
848:Size = 1405
849:Packed Size = 708
850:Modified = 2008-08-06 13:12:44
851:Created = 
852:Accessed = 
853:Attributes = .....
854:Encrypted = -
855:Comment = 
856:CRC = 1EEA8D30
857:Method = Deflate
858:Host OS = FAT
859:Path = quicktime\app\audio\MusicPart.class
860:Folder = -
861:Size = 436
862:Packed Size = 265
863:Modified = 2008-08-06 13:12:44
864:Created = 
865:Accessed = 
866:Attributes = .....
867:Encrypted = -
868:Comment = 
869:CRC = D743FC2E
870:Method = Deflate
871:Host OS = FAT
872:Path = quicktime\app\audio\MusicPartControl.class
873:Folder = -
874:Size = 2474
875:Packed Size = 1195
876:Modified = 2008-08-06 13:12:44
877:Created = 
878:Accessed = 
879:Attributes = .....
880:Encrypted = -
881:Comment = 
882:CRC = B5EFDB21
883:Method = Deflate
884:Host OS = FAT
885:Path = quicktime\app\audio\MusicScore.class
886:Folder = -
887:Size = 341
888:Packed Size = 226
889:Modified = 2008-08-06 13:12:44
890:Created = 
891:Accessed = 
892:Attributes = .....
893:Encrypted = -
894:Comment = 
895:CRC = 86C6A3A2
896:Method = Deflate
897:Host OS = FAT
898:Path = quicktime\app\audio\NoteChannelControl$EndNote.class
899:Folder = -
900:Size = 1896
901:Packed Size = 979
902:Modified = 2008-08-06 13:12:44
903:Created = 
904:Accessed = 
905:Attributes = .....
906:Encrypted = -
907:Comment = 
908:CRC = C29AAD8C
909:Method = Deflate
910:Host OS = FAT
911:Path = quicktime\app\audio\NoteChannelControl$TurnOffNotes.class
912:Folder = -
913:Size = 1086
914:Packed Size = 585
915:Modified = 2008-08-06 13:12:44
916:Created = 
917:Accessed = 
918:Attributes = .....
919:Encrypted = -
920:Comment = 
921:CRC = 276D2D16
922:Method = Deflate
923:Host OS = FAT
924:Path = quicktime\app\audio\NoteChannelControl.class
925:Folder = -
926:Size = 4281
927:Packed Size = 1963
928:Modified = 2008-08-06 13:12:44
929:Created = 
930:Accessed = 
931:Attributes = .....
932:Encrypted = -
933:Comment = 
934:CRC = FB42723B
935:Method = Deflate
936:Host OS = FAT
937:Path = quicktime\app\display
938:Folder = +
939:Size = 0
940:Packed Size = 0
941:Modified = 2008-08-06 13:12:44
942:Created = 
943:Accessed = 
944:Attributes = D....
945:Encrypted = -
946:Comment = 
947:CRC = 
948:Method = Store
949:Host OS = FAT
950:Path = quicktime\app\display\DirectGroup.class
951:Folder = -
952:Size = 7345
953:Packed Size = 3657
954:Modified = 2008-08-06 13:12:44
955:Created = 
956:Accessed = 
957:Attributes = .....
958:Encrypted = -
959:Comment = 
960:CRC = 5A99AF15
961:Method = Deflate
962:Host OS = FAT
963:Path = quicktime\app\display\Drawable.class
964:Folder = -
965:Size = 414
966:Packed Size = 246
967:Modified = 2008-08-06 13:12:44
968:Created = 
969:Accessed = 
970:Attributes = .....
971:Encrypted = -
972:Comment = 
973:CRC = 122CE0D7
974:Method = Deflate
975:Host OS = FAT
976:Path = quicktime\app\display\DrawingListener.class
977:Folder = -
978:Size = 224
979:Packed Size = 166
980:Modified = 2008-08-06 13:12:44
981:Created = 
982:Accessed = 
983:Attributes = .....
984:Encrypted = -
985:Comment = 
986:CRC = E03DB135
987:Method = Deflate
988:Host OS = FAT
989:Path = quicktime\app\display\DrawingNotifier.class
990:Folder = -
991:Size = 264
992:Packed Size = 174
993:Modified = 2008-08-06 13:12:44
994:Created = 
995:Accessed = 
996:Attributes = .....
997:Encrypted = -
998:Comment = 
999:CRC = F13E474F
1000:Method = Deflate
1001:Host OS = FAT
1002:Path = quicktime\app\display\FullScreenWindow$1.class
1003:Folder = -
1004:Size = 585
1005:Packed Size = 359
1006:Modified = 2008-08-06 13:12:44
1007:Created = 
1008:Accessed = 
1009:Attributes = .....
1010:Encrypted = -
1011:Comment = 
1012:CRC = 12E22179
1013:Method = Deflate
1014:Host OS = FAT
1015:Path = quicktime\app\display\FullScreenWindow$QTM.class
1016:Folder = -
1017:Size = 418
1018:Packed Size = 287
1019:Modified = 2008-08-06 13:12:44
1020:Created = 
1021:Accessed = 
1022:Attributes = .....
1023:Encrypted = -
1024:Comment = 
1025:CRC = 4E2B2DFF
1026:Method = Deflate
1027:Host OS = FAT
1028:Path = quicktime\app\display\FullScreenWindow.class
1029:Folder = -
1030:Size = 4238
1031:Packed Size = 2141
1032:Modified = 2008-08-06 13:12:44
1033:Created = 
1034:Accessed = 
1035:Attributes = .....
1036:Encrypted = -
1037:Comment = 
1038:CRC = 197A3185
1039:Method = Deflate
1040:Host OS = FAT
1041:Path = quicktime\app\display\GroupController.class
1042:Folder = -
1043:Size = 2655
1044:Packed Size = 1372
1045:Modified = 2008-08-06 13:12:44
1046:Created = 
1047:Accessed = 
1048:Attributes = .....
1049:Encrypted = -
1050:Comment = 
1051:CRC = ACDA6CF6
1052:Method = Deflate
1053:Host OS = FAT
1054:Path = quicktime\app\display\GroupDrawable.class
1055:Folder = -
1056:Size = 7667
1057:Packed Size = 3641
1058:Modified = 2008-08-06 13:12:44
1059:Created = 
1060:Accessed = 
1061:Attributes = .....
1062:Encrypted = -
1063:Comment = 
1064:CRC = 3AEA23E6
1065:Method = Deflate
1066:Host OS = FAT
1067:Path = quicktime\app\display\GroupMember.class
1068:Folder = -
1069:Size = 1879
1070:Packed Size = 954
1071:Modified = 2008-08-06 13:12:44
1072:Created = 
1073:Accessed = 
1074:Attributes = .....
1075:Encrypted = -
1076:Comment = 
1077:CRC = 0E74E1E2
1078:Method = Deflate
1079:Host OS = FAT
1080:Path = quicktime\app\display\JQTCanvas.class
1081:Folder = -
1082:Size = 11665
1083:Packed Size = 5731
1084:Modified = 2008-08-06 13:12:44
1085:Created = 
1086:Accessed = 
1087:Attributes = .....
1088:Encrypted = -
1089:Comment = 
1090:CRC = 1753A33F
1091:Method = Deflate
1092:Host OS = FAT
1093:Path = quicktime\app\display\Layerable.class
1094:Folder = -
1095:Size = 327
1096:Packed Size = 233
1097:Modified = 2008-08-06 13:12:44
1098:Created = 
1099:Accessed = 
1100:Attributes = .....
1101:Encrypted = -
1102:Comment = 
1103:CRC = D18E0597
1104:Method = Deflate
1105:Host OS = FAT
1106:Path = quicktime\app\display\QTCanvas.class
1107:Folder = -
1108:Size = 15077
1109:Packed Size = 7479
1110:Modified = 2008-08-06 13:12:44
1111:Created = 
1112:Accessed = 
1113:Attributes = .....
1114:Encrypted = -
1115:Comment = 
1116:CRC = 579C57CF
1117:Method = Deflate
1118:Host OS = FAT
1119:Path = quicktime\app\display\QTCanvasHelper.class
1120:Folder = -
1121:Size = 4035
1122:Packed Size = 2162
1123:Modified = 2008-08-06 13:12:44
1124:Created = 
1125:Accessed = 
1126:Attributes = .....
1127:Encrypted = -
1128:Comment = 
1129:CRC = 10915434
1130:Method = Deflate
1131:Host OS = FAT
1132:Path = quicktime\app\display\QTDisplaySpace.class
1133:Folder = -
1134:Size = 645
1135:Packed Size = 320
1136:Modified = 2008-08-06 13:12:44
1137:Created = 
1138:Accessed = 
1139:Attributes = .....
1140:Encrypted = -
1141:Comment = 
1142:CRC = 8357B3EB
1143:Method = Deflate
1144:Host OS = FAT
1145:Path = quicktime\app\display\QTDrawable.class
1146:Folder = -
1147:Size = 561
1148:Packed Size = 297
1149:Modified = 2008-08-06 13:12:44
1150:Created = 
1151:Accessed = 
1152:Attributes = .....
1153:Encrypted = -
1154:Comment = 
1155:CRC = 084FEB47
1156:Method = Deflate
1157:Host OS = FAT
1158:Path = quicktime\app\event
1159:Folder = +
1160:Size = 0
1161:Packed Size = 0
1162:Modified = 2008-08-06 13:12:44
1163:Created = 
1164:Accessed = 
1165:Attributes = D....
1166:Encrypted = -
1167:Comment = 
1168:CRC = 
1169:Method = Store
1170:Host OS = FAT
1171:Path = quicktime\app\event\AWTMouseEventDispatcher.class
1172:Folder = -
1173:Size = 4271
1174:Packed Size = 1742
1175:Modified = 2008-08-06 13:12:44
1176:Created = 
1177:Accessed = 
1178:Attributes = .....
1179:Encrypted = -
1180:Comment = 
1181:CRC = 5220DF16
1182:Method = Deflate
1183:Host OS = FAT
1184:Path = quicktime\app\event\DragAdapter.class
1185:Folder = -
1186:Size = 1033
1187:Packed Size = 559
1188:Modified = 2008-08-06 13:12:44
1189:Created = 
1190:Accessed = 
1191:Attributes = .....
1192:Encrypted = -
1193:Comment = 
1194:CRC = 12901CD5
1195:Method = Deflate
1196:Host OS = FAT
1197:Path = quicktime\app\event\EventDispatcher.class
1198:Folder = -
1199:Size = 2500
1200:Packed Size = 1201
1201:Modified = 2008-08-06 13:12:44
1202:Created = 
1203:Accessed = 
1204:Attributes = .....
1205:Encrypted = -
1206:Comment = 
1207:CRC = 6C2DFC33
1208:Method = Deflate
1209:Host OS = FAT
1210:Path = quicktime\app\event\EventDispatcherMaker.class
1211:Folder = -
1212:Size = 310
1213:Packed Size = 183
1214:Modified = 2008-08-06 13:12:44
1215:Created = 
1216:Accessed = 
1217:Attributes = .....
1218:Encrypted = -
1219:Comment = 
1220:CRC = 40C1EE05
1221:Method = Deflate
1222:Host OS = FAT
1223:Path = quicktime\app\event\MouseButtonAdapter.class
1224:Folder = -
1225:Size = 884
1226:Packed Size = 518
1227:Modified = 2008-08-06 13:12:44
1228:Created = 
1229:Accessed = 
1230:Attributes = .....
1231:Encrypted = -
1232:Comment = 
1233:CRC = 3C460D4C
1234:Method = Deflate
1235:Host OS = FAT
1236:Path = quicktime\app\event\MouseButtonListener.class
1237:Folder = -
1238:Size = 329
1239:Packed Size = 204
1240:Modified = 2008-08-06 13:12:44
1241:Created = 
1242:Accessed = 
1243:Attributes = .....
1244:Encrypted = -
1245:Comment = 
1246:CRC = 416C4A0C
1247:Method = Deflate
1248:Host OS = FAT
1249:Path = quicktime\app\event\MouseEnterExitAdapter.class
1250:Folder = -
1251:Size = 783
1252:Packed Size = 466
1253:Modified = 2008-08-06 13:12:44
1254:Created = 
1255:Accessed = 
1256:Attributes = .....
1257:Encrypted = -
1258:Comment = 
1259:CRC = 67349532
1260:Method = Deflate
1261:Host OS = FAT
1262:Path = quicktime\app\event\MouseEnterExitListener.class
1263:Folder = -
1264:Size = 306
1265:Packed Size = 187
1266:Modified = 2008-08-06 13:12:44
1267:Created = 
1268:Accessed = 
1269:Attributes = .....
1270:Encrypted = -
1271:Comment = 
1272:CRC = 3CC58E19
1273:Method = Deflate
1274:Host OS = FAT
1275:Path = quicktime\app\event\MouseMoveAdapter.class
1276:Folder = -
1277:Size = 815
1278:Packed Size = 503
1279:Modified = 2008-08-06 13:12:44
1280:Created = 
1281:Accessed = 
1282:Attributes = .....
1283:Encrypted = -
1284:Comment = 
1285:CRC = 9DAD9CB1
1286:Method = Deflate
1287:Host OS = FAT
1288:Path = quicktime\app\event\MouseMoveListener.class
1289:Folder = -
1290:Size = 293
1291:Packed Size = 186
1292:Modified = 2008-08-06 13:12:44
1293:Created = 
1294:Accessed = 
1295:Attributes = .....
1296:Encrypted = -
1297:Comment = 
1298:CRC = 520EADA3
1299:Method = Deflate
1300:Host OS = FAT
1301:Path = quicktime\app\event\MouseTargetAdapter.class
1302:Folder = -
1303:Size = 834
1304:Packed Size = 504
1305:Modified = 2008-08-06 13:12:44
1306:Created = 
1307:Accessed = 
1308:Attributes = .....
1309:Encrypted = -
1310:Comment = 
1311:CRC = B3CC9CF3
1312:Method = Deflate
1313:Host OS = FAT
1314:Path = quicktime\app\event\MouseTargetListener.class
1315:Folder = -
1316:Size = 310
1317:Packed Size = 189
1318:Modified = 2008-08-06 13:12:44
1319:Created = 
1320:Accessed = 
1321:Attributes = .....
1322:Encrypted = -
1323:Comment = 
1324:CRC = F7612CA3
1325:Method = Deflate
1326:Host OS = FAT
1327:Path = quicktime\app\event\QTActionEvent.class
1328:Folder = -
1329:Size = 1618
1330:Packed Size = 845
1331:Modified = 2008-08-06 13:12:44
1332:Created = 
1333:Accessed = 
1334:Attributes = .....
1335:Encrypted = -
1336:Comment = 
1337:CRC = 0094B8A3
1338:Method = Deflate
1339:Host OS = FAT
1340:Path = quicktime\app\event\QTActionListener.class
1341:Folder = -
1342:Size = 256
1343:Packed Size = 179
1344:Modified = 2008-08-06 13:12:44
1345:Created = 
1346:Accessed = 
1347:Attributes = .....
1348:Encrypted = -
1349:Comment = 
1350:CRC = 51251D9D
1351:Method = Deflate
1352:Host OS = FAT
1353:Path = quicktime\app\event\QTEventCaster.class
1354:Folder = -
1355:Size = 4552
1356:Packed Size = 1665
1357:Modified = 2008-08-06 13:12:44
1358:Created = 
1359:Accessed = 
1360:Attributes = .....
1361:Encrypted = -
1362:Comment = 
1363:CRC = 15C6B381
1364:Method = Deflate
1365:Host OS = FAT
1366:Path = quicktime\app\event\QTMouseController.class
1367:Folder = -
1368:Size = 8023
1369:Packed Size = 3360
1370:Modified = 2008-08-06 13:12:44
1371:Created = 
1372:Accessed = 
1373:Attributes = .....
1374:Encrypted = -
1375:Comment = 
1376:CRC = CBBACD69
1377:Method = Deflate
1378:Host OS = FAT
1379:Path = quicktime\app\event\QTMouseEvent.class
1380:Folder = -
1381:Size = 3811
1382:Packed Size = 1906
1383:Modified = 2008-08-06 13:12:44
1384:Created = 
1385:Accessed = 
1386:Attributes = .....
1387:Encrypted = -
1388:Comment = 
1389:CRC = DD1E6278
1390:Method = Deflate
1391:Host OS = FAT
1392:Path = quicktime\app\event\QTMouseListener.class
1393:Folder = -
1394:Size = 224
1395:Packed Size = 177
1396:Modified = 2008-08-06 13:12:44
1397:Created = 
1398:Accessed = 
1399:Attributes = .....
1400:Encrypted = -
1401:Comment = 
1402:CRC = 89303045
1403:Method = Deflate
1404:Host OS = FAT
1405:Path = quicktime\app\event\QTMouseTargetController.class
1406:Folder = -
1407:Size = 9772
1408:Packed Size = 4619
1409:Modified = 2008-08-06 13:12:44
1410:Created = 
1411:Accessed = 
1412:Attributes = .....
1413:Encrypted = -
1414:Comment = 
1415:CRC = 5B8EFC89
1416:Method = Deflate
1417:Host OS = FAT
1418:Path = quicktime\app\image
1419:Folder = +
1420:Size = 0
1421:Packed Size = 0
1422:Modified = 2008-08-06 13:12:44
1423:Created = 
1424:Accessed = 
1425:Attributes = D....
1426:Encrypted = -
1427:Comment = 
1428:CRC = 
1429:Method = Store
1430:Host OS = FAT
1431:Path = quicktime\app\image\Compositable.class
1432:Folder = -
1433:Size = 384
1434:Packed Size = 230
1435:Modified = 2008-08-06 13:12:44
1436:Created = 
1437:Accessed = 
1438:Attributes = .....
1439:Encrypted = -
1440:Comment = 
1441:CRC = 03AA3898
1442:Method = Deflate
1443:Host OS = FAT
1444:Path = quicktime\app\image\CompositableEffect$CEInvalidator.class
1445:Folder = -
1446:Size = 894
1447:Packed Size = 478
1448:Modified = 2008-08-06 13:12:44
1449:Created = 
1450:Accessed = 
1451:Attributes = .....
1452:Encrypted = -
1453:Comment = 
1454:CRC = F137884C
1455:Method = Deflate
1456:Host OS = FAT
1457:Path = quicktime\app\image\CompositableEffect.class
1458:Folder = -
1459:Size = 1296
1460:Packed Size = 683
1461:Modified = 2008-08-06 13:12:44
1462:Created = 
1463:Accessed = 
1464:Attributes = .....
1465:Encrypted = -
1466:Comment = 
1467:CRC = D5221C18
1468:Method = Deflate
1469:Host OS = FAT
1470:Path = quicktime\app\image\CSequenceToMemory.class
1471:Folder = -
1472:Size = 2684
1473:Packed Size = 1364
1474:Modified = 2008-08-06 13:12:44
1475:Created = 
1476:Accessed = 
1477:Attributes = .....
1478:Encrypted = -
1479:Comment = 
1480:CRC = 268A4C0F
1481:Method = Deflate
1482:Host OS = FAT
1483:Path = quicktime\app\image\DSequenceFromMemory$SeqInvalidator.class
1484:Folder = -
1485:Size = 968
1486:Packed Size = 529
1487:Modified = 2008-08-06 13:12:44
1488:Created = 
1489:Accessed = 
1490:Attributes = .....
1491:Encrypted = -
1492:Comment = 
1493:CRC = 7088D18C
1494:Method = Deflate
1495:Host OS = FAT
1496:Path = quicktime\app\image\DSequenceFromMemory.class
1497:Folder = -
1498:Size = 7470
1499:Packed Size = 3132
1500:Modified = 2008-08-06 13:12:44
1501:Created = 
1502:Accessed = 
1503:Attributes = .....
1504:Encrypted = -
1505:Comment = 
1506:CRC = 54BBC8C8
1507:Method = Deflate
1508:Host OS = FAT
1509:Path = quicktime\app\image\DynamicImage.class
1510:Folder = -
1511:Size = 459
1512:Packed Size = 256
1513:Modified = 2008-08-06 13:12:44
1514:Created = 
1515:Accessed = 
1516:Attributes = .....
1517:Encrypted = -
1518:Comment = 
1519:CRC = 9728BB8B
1520:Method = Deflate
1521:Host OS = FAT
1522:Path = quicktime\app\image\FileFilter.class
1523:Folder = -
1524:Size = 1782
1525:Packed Size = 1070
1526:Modified = 2008-08-06 13:12:44
1527:Created = 
1528:Accessed = 
1529:Attributes = .....
1530:Encrypted = -
1531:Comment = 
1532:CRC = C3C210A5
1533:Method = Deflate
1534:Host OS = FAT
1535:Path = quicktime\app\image\GraphicsImporterDrawer.class
1536:Folder = -
1537:Size = 4352
1538:Packed Size = 1833
1539:Modified = 2008-08-06 13:12:44
1540:Created = 
1541:Accessed = 
1542:Attributes = .....
1543:Encrypted = -
1544:Comment = 
1545:CRC = F04EDE4D
1546:Method = Deflate
1547:Host OS = FAT
1548:Path = quicktime\app\image\ImageDataSequence.class
1549:Folder = -
1550:Size = 4990
1551:Packed Size = 2351
1552:Modified = 2008-08-06 13:12:44
1553:Created = 
1554:Accessed = 
1555:Attributes = .....
1556:Encrypted = -
1557:Comment = 
1558:CRC = BDDCF2F3
1559:Method = Deflate
1560:Host OS = FAT
1561:Path = quicktime\app\image\ImageDrawer$1PrivilegedGetLogoAction$1.class
1562:Folder = -
1563:Size = 911
1564:Packed Size = 509
1565:Modified = 2008-08-06 13:12:44
1566:Created = 
1567:Accessed = 
1568:Attributes = .....
1569:Encrypted = -
1570:Comment = 
1571:CRC = 573C9767
1572:Method = Deflate
1573:Host OS = FAT
1574:Path = quicktime\app\image\ImageDrawer$1PrivilegedGetLogoAction.class
1575:Folder = -
1576:Size = 731
1577:Packed Size = 403
1578:Modified = 2008-08-06 13:12:44
1579:Created = 
1580:Accessed = 
1581:Attributes = .....
1582:Encrypted = -
1583:Comment = 
1584:CRC = 0F8DBA12
1585:Method = Deflate
1586:Host OS = FAT
1587:Path = quicktime\app\image\ImageDrawer.class
1588:Folder = -
1589:Size = 2983
1590:Packed Size = 1509
1591:Modified = 2008-08-06 13:12:44
1592:Created = 
1593:Accessed = 
1594:Attributes = .....
1595:Encrypted = -
1596:Comment = 
1597:CRC = B3536C81
1598:Method = Deflate
1599:Host OS = FAT
1600:Path = quicktime\app\image\ImagePresenter.class
1601:Folder = -
1602:Size = 10621
1603:Packed Size = 4496
1604:Modified = 2008-08-06 13:12:44
1605:Created = 
1606:Accessed = 
1607:Attributes = .....
1608:Encrypted = -
1609:Comment = 
1610:CRC = 2BFEFA5E
1611:Method = Deflate
1612:Host OS = FAT
1613:Path = quicktime\app\image\ImageSequencer.class
1614:Folder = -
1615:Size = 1678
1616:Packed Size = 820
1617:Modified = 2008-08-06 13:12:44
1618:Created = 
1619:Accessed = 
1620:Attributes = .....
1621:Encrypted = -
1622:Comment = 
1623:CRC = A5E06E3C
1624:Method = Deflate
1625:Host OS = FAT
1626:Path = quicktime\app\image\ImageSettable.class
1627:Folder = -
1628:Size = 298
1629:Packed Size = 207
1630:Modified = 2008-08-06 13:12:44
1631:Created = 
1632:Accessed = 
1633:Attributes = .....
1634:Encrypted = -
1635:Comment = 
1636:CRC = 7C9A5A0C
1637:Method = Deflate
1638:Host OS = FAT
1639:Path = quicktime\app\image\ImageSpec.class
1640:Folder = -
1641:Size = 331
1642:Packed Size = 214
1643:Modified = 2008-08-06 13:12:44
1644:Created = 
1645:Accessed = 
1646:Attributes = .....
1647:Encrypted = -
1648:Comment = 
1649:CRC = 2705EE36
1650:Method = Deflate
1651:Host OS = FAT
1652:Path = quicktime\app\image\ImageUtil.class
1653:Folder = -
1654:Size = 7760
1655:Packed Size = 3485
1656:Modified = 2008-08-06 13:12:44
1657:Created = 
1658:Accessed = 
1659:Attributes = .....
1660:Encrypted = -
1661:Comment = 
1662:CRC = C21BFBC5
1663:Method = Deflate
1664:Host OS = FAT
1665:Path = quicktime\app\image\ImageViewer.class
1666:Folder = -
1667:Size = 3510
1668:Packed Size = 1488
1669:Modified = 2008-08-06 13:12:44
1670:Created = 
1671:Accessed = 
1672:Attributes = .....
1673:Encrypted = -
1674:Comment = 
1675:CRC = C3DD405E
1676:Method = Deflate
1677:Host OS = FAT
1678:Path = quicktime\app\image\JImagePainter.class
1679:Folder = -
1680:Size = 1506
1681:Packed Size = 856
1682:Modified = 2008-08-06 13:12:44
1683:Created = 
1684:Accessed = 
1685:Attributes = .....
1686:Encrypted = -
1687:Comment = 
1688:CRC = 8BB61295
1689:Method = Deflate
1690:Host OS = FAT
1691:Path = quicktime\app\image\Paintable.class
1692:Folder = -
1693:Size = 298
1694:Packed Size = 214
1695:Modified = 2008-08-06 13:12:44
1696:Created = 
1697:Accessed = 
1698:Attributes = .....
1699:Encrypted = -
1700:Comment = 
1701:CRC = 4B92B977
1702:Method = Deflate
1703:Host OS = FAT
1704:Path = quicktime\app\image\QTEffect.class
1705:Folder = -
1706:Size = 8234
1707:Packed Size = 3621
1708:Modified = 2008-08-06 13:12:44
1709:Created = 
1710:Accessed = 
1711:Attributes = .....
1712:Encrypted = -
1713:Comment = 
1714:CRC = C2888793
1715:Method = Deflate
1716:Host OS = FAT
1717:Path = quicktime\app\image\QTEffectPresenter$EFInvalidator.class
1718:Folder = -
1719:Size = 1492
1720:Packed Size = 763
1721:Modified = 2008-08-06 13:12:44
1722:Created = 
1723:Accessed = 
1724:Attributes = .....
1725:Encrypted = -
1726:Comment = 
1727:CRC = 1C77C6AA
1728:Method = Deflate
1729:Host OS = FAT
1730:Path = quicktime\app\image\QTEffectPresenter.class
1731:Folder = -
1732:Size = 3662
1733:Packed Size = 1616
1734:Modified = 2008-08-06 13:12:44
1735:Created = 
1736:Accessed = 
1737:Attributes = .....
1738:Encrypted = -
1739:Comment = 
1740:CRC = EFB8725A
1741:Method = Deflate
1742:Host OS = FAT
1743:Path = quicktime\app\image\QTFilter$ImageContainer.class
1744:Folder = -
1745:Size = 2867
1746:Packed Size = 1408
1747:Modified = 2008-08-06 13:12:44
1748:Created = 
1749:Accessed = 
1750:Attributes = .....
1751:Encrypted = -
1752:Comment = 
1753:CRC = 4B525417
1754:Method = Deflate
1755:Host OS = FAT
1756:Path = quicktime\app\image\QTFilter.class
1757:Folder = -
1758:Size = 4116
1759:Packed Size = 1960
1760:Modified = 2008-08-06 13:12:44
1761:Created = 
1762:Accessed = 
1763:Attributes = .....
1764:Encrypted = -
1765:Comment = 
1766:CRC = 43DDD485
1767:Method = Deflate
1768:Host OS = FAT
1769:Path = quicktime\app\image\QTImageDrawer$RedrawInvalidator.class
1770:Folder = -
1771:Size = 1023
1772:Packed Size = 540
1773:Modified = 2008-08-06 13:12:44
1774:Created = 
1775:Accessed = 
1776:Attributes = .....
1777:Encrypted = -
1778:Comment = 
1779:CRC = 8843AD94
1780:Method = Deflate
1781:Host OS = FAT
1782:Path = quicktime\app\image\QTImageDrawer.class
1783:Folder = -
1784:Size = 9887
1785:Packed Size = 4371
1786:Modified = 2008-08-06 13:12:44
1787:Created = 
1788:Accessed = 
1789:Attributes = .....
1790:Encrypted = -
1791:Comment = 
1792:CRC = 5E8A920E
1793:Method = Deflate
1794:Host OS = FAT
1795:Path = quicktime\app\image\QTImageProducer.class
1796:Folder = -
1797:Size = 5675
1798:Packed Size = 2973
1799:Modified = 2008-08-06 13:12:44
1800:Created = 
1801:Accessed = 
1802:Attributes = .....
1803:Encrypted = -
1804:Comment = 
1805:CRC = 82627D63
1806:Method = Deflate
1807:Host OS = FAT
1808:Path = quicktime\app\image\QTTransition.class
1809:Folder = -
1810:Size = 7345
1811:Packed Size = 3577
1812:Modified = 2008-08-06 13:12:44
1813:Created = 
1814:Accessed = 
1815:Attributes = .....
1816:Encrypted = -
1817:Comment = 
1818:CRC = 7BFD0D22
1819:Method = Deflate
1820:Host OS = FAT
1821:Path = quicktime\app\image\Redrawable.class
1822:Folder = -
1823:Size = 343
1824:Packed Size = 232
1825:Modified = 2008-08-06 13:12:44
1826:Created = 
1827:Accessed = 
1828:Attributes = .....
1829:Encrypted = -
1830:Comment = 
1831:CRC = 026C40C7
1832:Method = Deflate
1833:Host OS = FAT
1834:Path = quicktime\app\image\Transformable.class
1835:Folder = -
1836:Size = 398
1837:Packed Size = 242
1838:Modified = 2008-08-06 13:12:44
1839:Created = 
1840:Accessed = 
1841:Attributes = .....
1842:Encrypted = -
1843:Comment = 
1844:CRC = D55F821B
1845:Method = Deflate
1846:Host OS = FAT
1847:Path = quicktime\app\players
1848:Folder = +
1849:Size = 0
1850:Packed Size = 0
1851:Modified = 2008-08-06 13:12:44
1852:Created = 
1853:Accessed = 
1854:Attributes = D....
1855:Encrypted = -
1856:Comment = 
1857:CRC = 
1858:Method = Store
1859:Host OS = FAT
1860:Path = quicktime\app\players\MoviePlayer$MovieComplete.class
1861:Folder = -
1862:Size = 966
1863:Packed Size = 553
1864:Modified = 2008-08-06 13:12:44
1865:Created = 
1866:Accessed = 
1867:Attributes = .....
1868:Encrypted = -
1869:Comment = 
1870:CRC = 3E1C8D82
1871:Method = Deflate
1872:Host OS = FAT
1873:Path = quicktime\app\players\MoviePlayer$PrerollCallback.class
1874:Folder = -
1875:Size = 1205
1876:Packed Size = 691
1877:Modified = 2008-08-06 13:12:44
1878:Created = 
1879:Accessed = 
1880:Attributes = .....
1881:Encrypted = -
1882:Comment = 
1883:CRC = 46B19ABC
1884:Method = Deflate
1885:Host OS = FAT
1886:Path = quicktime\app\players\MoviePlayer.class
1887:Folder = -
1888:Size = 6035
1889:Packed Size = 2684
1890:Modified = 2008-08-06 13:12:44
1891:Created = 
1892:Accessed = 
1893:Attributes = .....
1894:Encrypted = -
1895:Comment = 
1896:CRC = 585FA9F2
1897:Method = Deflate
1898:Host OS = FAT
1899:Path = quicktime\app\players\MoviePresenter$MPInvalidator.class
1900:Folder = -
1901:Size = 1124
1902:Packed Size = 543
1903:Modified = 2008-08-06 13:12:44
1904:Created = 
1905:Accessed = 
1906:Attributes = .....
1907:Encrypted = -
1908:Comment = 
1909:CRC = A065A24F
1910:Method = Deflate
1911:Host OS = FAT
1912:Path = quicktime\app\players\MoviePresenter$PrerollCallback.class
1913:Folder = -
1914:Size = 1223
1915:Packed Size = 696
1916:Modified = 2008-08-06 13:12:44
1917:Created = 
1918:Accessed = 
1919:Attributes = .....
1920:Encrypted = -
1921:Comment = 
1922:CRC = BF4A2EAB
1923:Method = Deflate
1924:Host OS = FAT
1925:Path = quicktime\app\players\MoviePresenter.class
1926:Folder = -
1927:Size = 7105
1928:Packed Size = 3227
1929:Modified = 2008-08-06 13:12:44
1930:Created = 
1931:Accessed = 
1932:Attributes = .....
1933:Encrypted = -
1934:Comment = 
1935:CRC = 031B6272
1936:Method = Deflate
1937:Host OS = FAT
1938:Path = quicktime\app\players\Playable.class
1939:Folder = -
1940:Size = 427
1941:Packed Size = 263
1942:Modified = 2008-08-06 13:12:44
1943:Created = 
1944:Accessed = 
1945:Attributes = .....
1946:Encrypted = -
1947:Comment = 
1948:CRC = 0ACC7AA8
1949:Method = Deflate
1950:Host OS = FAT
1951:Path = quicktime\app\players\QTPlayer.class
1952:Folder = -
1953:Size = 6138
1954:Packed Size = 2762
1955:Modified = 2008-08-06 13:12:44
1956:Created = 
1957:Accessed = 
1958:Attributes = .....
1959:Encrypted = -
1960:Comment = 
1961:CRC = 4B5A4DE6
1962:Method = Deflate
1963:Host OS = FAT
1964:Path = quicktime\app\players\QTPlayerAWTEventHandler$1.class
1965:Folder = -
1966:Size = 1484
1967:Packed Size = 782
1968:Modified = 2008-08-06 13:12:44
1969:Created = 
1970:Accessed = 
1971:Attributes = .....
1972:Encrypted = -
1973:Comment = 
1974:CRC = 38B676DD
1975:Method = Deflate
1976:Host OS = FAT
1977:Path = quicktime\app\players\QTPlayerAWTEventHandler.class
1978:Folder = -
1979:Size = 3054
1980:Packed Size = 1455
1981:Modified = 2008-08-06 13:12:44
1982:Created = 
1983:Accessed = 
1984:Attributes = .....
1985:Encrypted = -
1986:Comment = 
1987:CRC = 8C314FC3
1988:Method = Deflate
1989:Host OS = FAT
1990:Path = quicktime\app\players\QTPlayerEventHandler.class
1991:Folder = -
1992:Size = 1886
1993:Packed Size = 1024
1994:Modified = 2008-08-06 13:12:44
1995:Created = 
1996:Accessed = 
1997:Attributes = .....
1998:Encrypted = -
1999:Comment = 
2000:CRC = FA8AC891
2001:Method = Deflate
2002:Host OS = FAT
2003:Path = quicktime\app\players\QTPlayerEventHandlerMaker.class
2004:Folder = -
2005:Size = 292
2006:Packed Size = 167
2007:Modified = 2008-08-06 13:12:44
2008:Created = 
2009:Accessed = 
2010:Attributes = .....
2011:Encrypted = -
2012:Comment = 
2013:CRC = 27B48B99
2014:Method = Deflate
2015:Host OS = FAT
2016:Path = quicktime\app\QTAppException.class
2017:Folder = -
2018:Size = 297
2019:Packed Size = 217
2020:Modified = 2008-08-06 13:12:44
2021:Created = 
2022:Accessed = 
2023:Attributes = .....
2024:Encrypted = -
2025:Comment = 
2026:CRC = 6DACE8E1
2027:Method = Deflate
2028:Host OS = FAT
2029:Path = quicktime\app\QTDrawableMaker.class
2030:Folder = -
2031:Size = 1215
2032:Packed Size = 649
2033:Modified = 2008-08-06 13:12:44
2034:Created = 
2035:Accessed = 
2036:Attributes = .....
2037:Encrypted = -
2038:Comment = 
2039:CRC = 041387AE
2040:Method = Deflate
2041:Host OS = FAT
2042:Path = quicktime\app\QTFactory.class
2043:Folder = -
2044:Size = 8817
2045:Packed Size = 4061
2046:Modified = 2008-08-06 13:12:44
2047:Created = 
2048:Accessed = 
2049:Attributes = .....
2050:Encrypted = -
2051:Comment = 
2052:CRC = DC891604
2053:Method = Deflate
2054:Host OS = FAT
2055:Path = quicktime\app\RecordMovie$1.class
2056:Folder = -
2057:Size = 759
2058:Packed Size = 398
2059:Modified = 2008-08-06 13:12:44
2060:Created = 
2061:Accessed = 
2062:Attributes = .....
2063:Encrypted = -
2064:Comment = 
2065:CRC = BDC55F52
2066:Method = Deflate
2067:Host OS = FAT
2068:Path = quicktime\app\RecordMovie.class
2069:Folder = -
2070:Size = 6512
2071:Packed Size = 3039
2072:Modified = 2008-08-06 13:12:44
2073:Created = 
2074:Accessed = 
2075:Attributes = .....
2076:Encrypted = -
2077:Comment = 
2078:CRC = 20F588A5
2079:Method = Deflate
2080:Host OS = FAT
2081:Path = quicktime\app\RecordMovieCallback.class
2082:Folder = -
2083:Size = 209
2084:Packed Size = 159
2085:Modified = 2008-08-06 13:12:44
2086:Created = 
2087:Accessed = 
2088:Attributes = .....
2089:Encrypted = -
2090:Comment = 
2091:CRC = B8583321
2092:Method = Deflate
2093:Host OS = FAT
2094:Path = quicktime\app\sg
2095:Folder = +
2096:Size = 0
2097:Packed Size = 0
2098:Modified = 2008-08-06 13:12:44
2099:Created = 
2100:Accessed = 
2101:Attributes = D....
2102:Encrypted = -
2103:Comment = 
2104:CRC = 
2105:Method = Store
2106:Host OS = FAT
2107:Path = quicktime\app\sg\PresentationDrawer.class
2108:Folder = -
2109:Size = 4225
2110:Packed Size = 1832
2111:Modified = 2008-08-06 13:12:44
2112:Created = 
2113:Accessed = 
2114:Attributes = .....
2115:Encrypted = -
2116:Comment = 
2117:CRC = EF7CC44C
2118:Method = Deflate
2119:Host OS = FAT
2120:Path = quicktime\app\sg\SGCaptureCallback.class
2121:Folder = -
2122:Size = 207
2123:Packed Size = 159
2124:Modified = 2008-08-06 13:12:44
2125:Created = 
2126:Accessed = 
2127:Attributes = .....
2128:Encrypted = -
2129:Comment = 
2130:CRC = 119F5CF9
2131:Method = Deflate
2132:Host OS = FAT
2133:Path = quicktime\app\sg\SGDrawer$1.class
2134:Folder = -
2135:Size = 628
2136:Packed Size = 366
2137:Modified = 2008-08-06 13:12:44
2138:Created = 
2139:Accessed = 
2140:Attributes = .....
2141:Encrypted = -
2142:Comment = 
2143:CRC = 7DFDB762
2144:Method = Deflate
2145:Host OS = FAT
2146:Path = quicktime\app\sg\SGDrawer.class
2147:Folder = -
2148:Size = 4905
2149:Packed Size = 2214
2150:Modified = 2008-08-06 13:12:44
2151:Created = 
2152:Accessed = 
2153:Attributes = .....
2154:Encrypted = -
2155:Comment = 
2156:CRC = 8451EEDB
2157:Method = Deflate
2158:Host OS = FAT
2159:Path = quicktime\app\spaces
2160:Folder = +
2161:Size = 0
2162:Packed Size = 0
2163:Modified = 2008-08-06 13:12:44
2164:Created = 
2165:Accessed = 
2166:Attributes = D....
2167:Encrypted = -
2168:Comment = 
2169:CRC = 
2170:Method = Store
2171:Host OS = FAT
2172:Path = quicktime\app\spaces\Collection.class
2173:Folder = -
2174:Size = 469
2175:Packed Size = 280
2176:Modified = 2008-08-06 13:12:44
2177:Created = 
2178:Accessed = 
2179:Attributes = .....
2180:Encrypted = -
2181:Comment = 
2182:CRC = 09F581F3
2183:Method = Deflate
2184:Host OS = FAT
2185:Path = quicktime\app\spaces\CollectionController.class
2186:Folder = -
2187:Size = 274
2188:Packed Size = 174
2189:Modified = 2008-08-06 13:12:44
2190:Created = 
2191:Accessed = 
2192:Attributes = .....
2193:Encrypted = -
2194:Comment = 
2195:CRC = 6A93B33D
2196:Method = Deflate
2197:Host OS = FAT
2198:Path = quicktime\app\spaces\Controller.class
2199:Folder = -
2200:Size = 243
2201:Packed Size = 174
2202:Modified = 2008-08-06 13:12:44
2203:Created = 
2204:Accessed = 
2205:Attributes = .....
2206:Encrypted = -
2207:Comment = 
2208:CRC = 5CCBE7AE
2209:Method = Deflate
2210:Host OS = FAT
2211:Path = quicktime\app\spaces\DynamicCollection.class
2212:Folder = -
2213:Size = 258
2214:Packed Size = 173
2215:Modified = 2008-08-06 13:12:44
2216:Created = 
2217:Accessed = 
2218:Attributes = .....
2219:Encrypted = -
2220:Comment = 
2221:CRC = 38E8E58B
2222:Method = Deflate
2223:Host OS = FAT
2224:Path = quicktime\app\spaces\Listener.class
2225:Folder = -
2226:Size = 213
2227:Packed Size = 163
2228:Modified = 2008-08-06 13:12:44
2229:Created = 
2230:Accessed = 
2231:Attributes = .....
2232:Encrypted = -
2233:Comment = 
2234:CRC = 03F3668A
2235:Method = Deflate
2236:Host OS = FAT

Utilisateur anonyme · Answer

ce n'est pas le rapport, mais ce n'est pas grave  :-)

est ce que le pc et ta connexion fonctionnent correctement ?

lulu1844 · Answer

comme d'habitude ... une éternité pour me connecter la première fois, puis ça va ...

Comparé aux portables que j'ai par là, c'est pas génial.

Après l'analyse FYK, j'ai du redémarrer la machine, car rien ne fonctionnait, et comme avant je ne voyait plus les icônes.

Utilisateur anonyme · Answer

. télécharges Ccleaner à partir de cette adresse et enregistres le sur le bureau

https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/ 

.double-cliques sur le fichier pour lancer l'installation 

.sur la fenêtre de l'installation langage bien choisir français et OK 
.cliques sur suivant 
.lis la licence et j'accepte 
.cliques sur suivant 
.la tu ne gardes de coché que mettre un raccourci sur le bureau et puis contrôler automatiquement les mises à jour de Ccleaner 
.cliques sur installer 
.cliques sur fermer 
.double-cliques sur l'icône de Ccleaner pour l'ouvrir 
.une fois ouvert tu cliques sur option et puis avancé 
.tu décoches effacer uniquement les fichiers, du dossier temp de windows plus vieux que 24 heures 
.cliques sur nettoyeur 
.cliques sur windows et dans la colonne avancé 
.coches la première case vieilles données du perfetch que celle-la ce qui te donnes la case vielles données du perfetch et la case avancé qui c'est coché automatiquement mais que celle-la 
.cliques sur analyse une fois l'analyse terminé 
.cliques sur lancer le nettoyage et sur la demande de confirmation OK il vas falloir que tu le refasses une autre fois une fois fini vériffis en appuiant de nouveau sur analyse pour être sur qu'il n'y est plus rien 
.cliques maintenant sur registre et puis sur rechercher les erreurs 
.laisses tout cochées et cliques sur réparrer les erreurs sélectionnées 
.il te demande de sauvegarder OUI 
.tu lui donnes un nom pour pouvoir la retrouver et enregistre 
.cliques sur corriger toutes les erreurs sélectionnées et sur la demande de confirmation OK 
.il supprime et fermer tu vérifies en relançant rechercher les erreurs 
.tu retournes dans option et tu recoches la case effacer uniquement les fichiers, du dossier temp de windows plus vieux que 48 heures et sur nettoyeur, windows sous avancé tu décoches la première case vieilles données du perfetch 
.tu peux fermer Ccleaner

lulu1844 · Answer

Voilà, c'est fait.
Tu aimerais voir le rapport?
Mais comment l'ouvrir? Éditeur de registre ...???

Utilisateur anonyme · Answer

non, ça va  :-)

* pour supprimer les outils de désinfection 
: 
Télecharge Delfix sur ton bureau : 
http://sd-1.archive-host.com/membres/up/17959594961240255/DelFix.exe 

*Clique sur le bouton « Suppression » et poste son rapport sur ton prochain message 
**Pour le désinstaller, il suffit de le relancer et cliquer sur le bouton de désinstallation. 

* Désactivation, puis Réactivation de la restauration système après désinfection : 

Il est nécessaire de désactiver puis réactiver la restauration système pour la purger car les points de restauration peuvent être infectés : 

Pour XP : https://www.commentcamarche.net/faq/5097-virus-system-volume-information 

* fais une mise à jour de ton antivirus, lance un scan complet de ton pc, tiens moi au courant du résultat :-)

lulu1844 · Answer

Premier rapport:

########## DelFix - Nettoyeur d'outils de désinfection ##########
#
# DelFix v6.2 - Rapport créé le 12/11/2010 à 18:21
# Mis à jour le 11/11/10 à 16h00 par Xplode
# Système d'exploitation : Microsoft Windows XP (32 bits) [version 5.1.2600] Service Pack 2
# Navigateur : Mozilla Firefox 3.6.12 (fr) [Navigateur par défaut]
# Nom d'utilisateur : Propriétaire - PAPERINO-925292 (Administrateur)
# Exécuté depuis : C:\Documents and Settings\Propriétaire\Bureau\DelFix.exe


~~~~~~ Dossier(s) ~~~~~~

Supprimé : C:\Qoobox
Supprimé : C:\FyK
Supprimé : C:\Program Files\ZHPDiag
Supprimé : C:\Program Files	rend micro
Supprimé : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZHP

~~~~~~ Fichier(s) ~~~~~~

Supprimé : C:\ComboFix.txt
Supprimé : C:\FyK.txt
Supprimé : C:\Ad-Report-CLEAN[1].txt
Supprimé : C:\TDSSKiller.2.4.7.0_09.11.2010_21.01.25_log.txt
Supprimé : C:\TDSSKiller.2.4.7.0_09.11.2010_21.04.36_log.txt
Supprimé : C:\ZHPExportRegistry-10.11.2010-08-31-04.txt
Supprimé : C:\WINDOWS\grep.exe
Supprimé : C:\WINDOWS\PEV.exe
Supprimé : C:\WINDOWS\NIRCMD.exe
Supprimé : C:\WINDOWS\MBR.exe
Supprimé : C:\WINDOWS\sed.exe
Supprimé : C:\WINDOWS\SWREG.exe
Supprimé : C:\WINDOWS\SWSC.exe
Supprimé : C:\WINDOWS\SWXCACLS.exe
Supprimé : C:\WINDOWS\zip.exe
Supprimé : C:\Documents and Settings\Propriétaire\Bureau\ComboFix.exe
Supprimé : C:\Documents and Settings\Propriétaire\Bureau\lspfix.zip
Supprimé : C:\Documents and Settings\Propriétaire\Bureau	dsskiller.exe
Supprimé : C:\Documents and Settings\Propriétaire\Bureau\mbr.exe
Supprimé : C:\Documents and Settings\Propriétaire\Bureau\ZHPDiag.exe
Supprimé : C:\Documents and Settings\All Users\Bureau\ZHPDiag.lnk
Supprimé : C:\Documents and Settings\All Users\Bureau\ZHPFix.lnk
Supprimé : C:\Documents and Settings\Propriétaire\Mes documents\Téléchargements\ZHPDiag(2).exe

~~~~~~ Registre ~~~~~~

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\ZHP
Clé Supprimée : HKLM\Software\swearware
Clé Supprimée : HKLM\Software\Classes\.cfxxe
Clé Supprimée : HKLM\Software\Classes\cfxxefile
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe

########## EOF - "C:\DelFixSuppr.txt" - [2431 octets] ##########

Utilisateur anonyme · Answer

ok, passe à la suite de mon précedant message  :-) 

O.o°*??? Membre, Contributeur Sécurité CCM o°.Oø¤º°'°º¤ø

lulu1844 · Answer

Antivir a fait un scan complet et je pense que il y a rien trouvé.
J'ai laissé tourner l'antivirus, quand je suis revenu, il avait relancé la machine et il n'y avait as de rapport.

En fouillant un peut, j'ai trouvé que il y a ces trucs en quarantaine depuis le 22.08.09



   unistall.exe
   upgrade.cab
   searching1.dll
   Si1opt.exe
   Si1setup-160-SI1PRT1.exe
-------------------------------------------------------

par contre au demarrage 

Windows a rencontré des erreurs .......

les voici

BCCode : 1000000a     BCP1 : FFFFFFE0     BCP2 : 00000002     BCP3 : 00000000
BCP4 : 804E8790     OSVer : 5_1_2600     SP : 2_0     Product : 768_1     

C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\WER971b.dir00\Mini111210-01.dmp
C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\WER971b.dir00\sysdata.xml

Utilisateur anonyme · Answer

bonjour,

. télécharges Ccleaner à partir de cette adresse et enregistres le sur le bureau

https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/ 

.double-cliques sur le fichier pour lancer l'installation 

.sur la fenêtre de l'installation langage bien choisir français et OK 
.cliques sur suivant 
.lis la licence et j'accepte 
.cliques sur suivant 
.la tu ne gardes de coché que mettre un raccourci sur le bureau et puis contrôler automatiquement les mises à jour de Ccleaner 
.cliques sur installer 
.cliques sur fermer 
.double-cliques sur l'icône de Ccleaner pour l'ouvrir 
.une fois ouvert tu cliques sur option et puis avancé 
.tu décoches effacer uniquement les fichiers, du dossier temp de windows plus vieux que 24 heures 
.cliques sur nettoyeur 
.cliques sur windows et dans la colonne avancé 
.coches la première case vieilles données du perfetch que celle-la ce qui te donnes la case vielles données du perfetch et la case avancé qui c'est coché automatiquement mais que celle-la 
.cliques sur analyse une fois l'analyse terminé 
.cliques sur lancer le nettoyage et sur la demande de confirmation OK il vas falloir que tu le refasses une autre fois une fois fini vériffis en appuiant de nouveau sur analyse pour être sur qu'il n'y est plus rien 
.cliques maintenant sur registre et puis sur rechercher les erreurs 
.laisses tout cochées et cliques sur réparrer les erreurs sélectionnées 
.il te demande de sauvegarder OUI 
.tu lui donnes un nom pour pouvoir la retrouver et enregistre 
.cliques sur corriger toutes les erreurs sélectionnées et sur la demande de confirmation OK 
.il supprime et fermer tu vérifies en relançant rechercher les erreurs 
.tu retournes dans option et tu recoches la case effacer uniquement les fichiers, du dossier temp de windows plus vieux que 48 heures et sur nettoyeur, windows sous avancé tu décoches la première case vieilles données du perfetch 
.tu peux fermer Ccleaner



redemarre ton pc pour voir s'il y a encore le message d'erreur  :-)

lulu1844 · Answer

Plus de message d'erreur maintenant.

Utilisateur anonyme · Answer

du moment ou tout va bien sur le pc, crée un nouveau point de restauration système, ça peut servie  :-)

as tu d'autres soucis ?

lulu1844 · Answer

as tu d'autres soucis ? 
________________________________

Oui,les suivants et je te remercie pour ta patience:

1. J'ai 3 barres de taches dans Mozilla que j'aimerais éliminer.
J'avais accepté trop rapidement les conditions du fournisseur, lors que m'installait les applications. Je n'arrive pas à les éliminer. 

2. Quand je lance Microsoft Word, j'ai le message suivant:

«C:\ Document and Setting \Proprietére\Application Data\Microsoft\Macros complémentaires\VoiceReaderOfficeAddin.dll» n'est pas un macro complémentaire d'Office valide.  

C'est tout.
merci

Utilisateur anonyme · Answer

1. J'ai 3 barres de taches dans Mozilla que j'aimerais éliminer. 
J'avais accepté trop rapidement les conditions du fournisseur, lors que m'installait les applications. Je n'arrive pas à les éliminer. 

normalement, tu peux le désinstaller via ajout suppression de programmes, n'oublie pas de cocher la petite case en haut de la fenêtre, affiche les mise à jour, trouve tes barres de taches et vire les.

la deuxième solution est de les virer en faisant un clique droit direct sur la barre de tache, puis supprimer.

la troisième solution consiste à désinstaller  carrement FF, supprimer son répertoire en manuel de ton disques dure, puis le réinstaller, cette solution te permet de gagner du temps et ne pas trop chercher  :P

 2. Quand je lance Microsoft Word, j'ai le message suivant: 

«C:\ Document and Setting \Proprietére\Application Data\Microsoft\Macros complémentaires\VoiceReaderOfficeAddin.dll» n'est pas un macro complémentaire d'Office valide.


aide toit de cette page pour voir si tu trouves la solution à ton pproblème :
https://support.microsoft.com/fr-fr/office/activer-ou-d%c3%a9sactiver-les-macros-dans-les-fichiers-office-12b036fd-d140-4e74-b45e-16fed1a7e5c6?ocmsassetid=ha010031071&correlationid=bb0dc084-7cd6-4881-af4b-a02b4a2cec67&ui=fr-fr&rs=fr-fr&ad=fr

au pire, poste un message dans le forum logiciel, il y a des gens plus compétants que moi dans ce domaine pour t'aider  :-)

lulu1844 · Answer

Ok, pour les barres de taches c'est bon, pour Word je vais m'y mettre lundi.
Un grand merci à toi, j'ai beaucoup apprécié ton soutiens.
lulu1844

Utilisateur anonyme · Answer

bon surf  ;-)

lulu1844 · Answer

TSKMGR.EXE

L'application n'a pas réussis à s'initialiser correctement.

?????

Utilisateur anonyme · Answer

bonjour,
à quel moment tu reçois ce message ?

lulu1844 · Answer

Salut,

J'étais sur deux programmes au même  temps, Photoshop et un album-photos en lignes (Belcolor FotoArt Designer, pour qui je dois livrer un bouquin). A un moment donné, arrive le message (Taskmgr.exe .....ect) que j'annulais systématiquement, lui par contre continuait à s'afficher. Les boutons de commandes de Photoshop ne réagissait plus, puis ils avait disparus complétement et  je me suis retrouver avec une page blanche. Et là, j'ai éteint l'ordi.

Utilisateur anonyme · Answer

accépte ce qu'il demande et tu verras que ton problème sera résolu  :-)

lulu1844 · Answer

justement pas, j'ai seulement le choix de cliquer sur le bouton "OK", 3 secondes après voici le même message .....

aujourd'hui il ne se rien passé encore, on verra par la suite.

par contre il m'arrive (parfois) que si écoute de la musique, ou bien youtube, l'ordi à (parfois) de la peine, il va au ralenti, comme si la carte graphique arrivait au bout (mais vu mes connaissances en matière, peut-être que là je dis une conneries)

Utilisateur anonyme · Answer

utilise ce lien pour faire une mise à jour des derniers pilotes de ton pc :
https://www.touslesdrivers.com/index.php?v_page=29

lulu1844 · Answer

Voilà, les mis à jour sont faites.

Au démarrage il m'affiche:

ImageStudio Tray Application a rencontrer un problème et doit fermer.
Je connais pas cette application et je ne la trouve nul part.

Puis comme d'habitude: une fois Windows lancé, j'attends que tout soit installé, puis je clique une fois sur l'icône de Mozilla et il ne se passe rien pendant deux  minute, même pas le sablier qui tourne puis finalement internet se lance. 

Comparé aux portables que j'utilise, il me semble pas normal.  
A mon avis, il y a quelque chose qui coince. Mais quoi?

Maintenant je lance Photoshop et les autres applications, curieux de voir le comportement de la machine.

Utilisateur anonyme · Answer

bonsoir,
j'ai regardé le premier rapport de zhpdiag,
tu disposes de 1023.4 MB de ram, si tu lance tropn d'applications au demarrage de windows, ou même pendant le fonctionnement, ton pc va vite fait ramer !

tu auras donc 2 solution, ou ajouter des barettes de ram, ou diminuer les nombres de programmes lancés en automatique  :-)

tu compares ce pc à un portable, si ton portable dispose de plus de ram, il est normal qu'il réagisse plus vite  :-)

lulu1844 · Answer

Bonsoir l'électricien,

ça était de pire en pire et je ne pense pas que la puissance de la machine soit la cause du problème, car il marchait très bien il y a un mois.  
Ainsi, j'ai me suis décidé de ré-formater le disque, et maintenant il roule comme un horloge.

En tous cas, je tiens a te remercier pour ta généreuse assistance.
Lulu1844

Utilisateur anonyme · Answer

bon surf alors  :-)

Ordinateur très lent, virus??

62 réponses

Newsletters