Csrss.exe [windows non légitime]

Fermé
Bonjour,

comme le titre l'indique, à chaque clic sur le net, c'est un temps interminable qui passe avant de voir une réaction!!
csrss.exe exploite 35% des dessources

Una analyse, avec quoi pour que vous puissiez y voir plus clair?

merci

20 réponses

  • Votes
  • Date
  • Date décroissante
  1. ton windows n'est pas légitime je te conseille vivement de te procurer une version légale de windows
    1. salut

      ▶ Télécharge ici : USBFIX sur ton bureau

      branche tous tes periphériques sans les ouvrir

      /!\ Désactive provisoirement et seulement le temps de l'utilisation d'USBFIX, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

      si tu as XP => double clique
      si tu as Vista ou windows 7 => clic droit "executer en tant que...."


      sur l'icône Usbfix située sur ton Bureau.
      Sur la page, clique sur le bouton :

      ▶ choisi l option Suppression

      ▶ UsbFix scannera ton pc , laisse travailler l outil.

      ▶ Ensuite post le rapport UsbFix.txt qui apparaitra avec le bureau .

      ▶ Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )

      ( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

      1. salut,

        on dirait que ce n'est plus possible de coller le rapport, le message ne part pas, alors que si je e met que quelques mots, ma réponse est bien prise en compte!
        1. re,

          voila....

          ############################## | UsbFix 7.058 | [Suppression]

          Utilisateur: Mr GREEN (Administrateur) # WINXPSP3 [ ]
          Mis à jour le 24/08/2011 par El Desaparecido
          Lancé à 05:47:59 | 29/08/2011
          Site Web: http://www.teamxscript.org
          Submit your sample: http://www.teamxscript.org/Upload.php
          Contact: TeamXscript.ElDesaparecido@gmail.com

          CPU: Intel(R) Core(TM)2 Duo CPU E6750 @ 2.66GHz
          CPU 2: Intel(R) Core(TM)2 Duo CPU E6750 @ 2.66GHz
          Microsoft Windows XP Professionnel (5.1.2600 32-Bit) # Service Pack 3
          Internet Explorer 8.0.6001.18372

          Pare-feu Windows: Désactivé /!\
          RAM -> 2046 Mo
          C:\ (%systemdrive%) -> Disque fixe # 57 Go (939 Mo libre(s) - 2%) [] # NTFS
          D:\ -> Disque fixe # 176 Go (80 Go libre(s) - 46%) [] # NTFS
          E:\ -> Disque fixe # 298 Go (7 Go libre(s) - 2%) [STOSTO] # FAT32
          G:\ -> CD-ROM

          ################## | Éléments infectieux |

          Supprimé! C:\Documents and Settings\Mr GREEN\Application Data\inst.exe
          Supprimé! D:\SketchUp.exe
          Supprimé! C:\Recycler\S-1-5-21-527237240-1960408961-725345543-500
          Supprimé! C:\Recycler\S-1-5-21-776561741-1965331169-1801674531-1003
          Supprimé! D:\Recycler\S-1-5-21-527237240-1960408961-725345543-500
          Supprimé! D:\Recycler\S-1-5-21-776561741-1965331169-1801674531-1003
          Supprimé! C:\autorun.PNF
          Non supprimé ! E:\msvcr71.dll

          ################## | Registre |

          ################## | Mountpoints2 |

          Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{1c900405-b1ce-11dd-9bb5-806d6172696f}
          Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{920182d6-f5f8-11dd-83ca-f31936ae873d}
          Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{dc7f2e72-faec-11dd-83d7-dcbdce45c930}

          ################## | Listing |

          [14/11/2008 - 05:30:16 | N | 1024] C:\.rnd
          [21/09/2008 - 11:21:04 | D ] C:\Anuman Interactive
          [14/11/2008 - 05:16:17 | N | 0] C:\AUTOEXEC.BAT
          [06/04/2008 - 12:03:02 | RASHD ] C:\autorun.inf
          [16/11/2009 - 21:12:52 | N | 816] C:\boot.ini
          [28/08/2001 - 14:00:00 | N | 4952] C:\Bootfont.bin
          [04/04/2008 - 23:30:14 | D ] C:\cmdcons
          [04/08/2004 - 01:00:07 | N | 263488] C:\cmldr
          [15/08/2011 - 00:56:05 | D ] C:\Config.Msi
          [04/04/2008 - 22:55:48 | N | 0] C:\CONFIG.SYS
          [14/11/2008 - 23:18:31 | D ] C:\CS3
          [05/04/2008 - 00:42:04 | D ] C:\D
          [14/11/2008 - 05:21:16 | D ] C:\Documents and Settings
          [14/10/2008 - 22:34:38 | D ] C:\Emt
          [05/04/2008 - 00:44:49 | N | 4128] C:\INFCACHE.1
          [04/04/2008 - 22:55:48 | N | 0] C:\IO.SYS
          [07/04/2008 - 23:57:50 | D ] C:\JM
          [22/11/2008 - 17:04:32 | N | 790] C:\lxcg.log
          [17/04/2008 - 18:42:23 | N | 278] C:\lxcgfire.000
          [24/11/2008 - 23:34:57 | N | 278] C:\lxcgfire.csv
          [17/04/2008 - 18:42:39 | N | 1004] C:\lxcginst.000
          [24/11/2008 - 23:35:10 | N | 1004] C:\lxcginst.csv
          [08/04/2009 - 14:39:58 | N | 1558] C:\lxcgscan.log
          [25/11/2008 - 00:07:28 | N | 141105] C:\lxcgUNST.csv
          [19/02/2009 - 23:34:53 | N | 238] C:\MKDEMSG.LOG
          [19/02/2009 - 23:29:33 | N | 1024] C:\MKDEWE.TRN
          [04/04/2008 - 22:55:48 | N | 0] C:\MSDOS.SYS
          [14/11/2008 - 06:16:44 | RHD ] C:\MSOCache
          [13/04/2008 - 09:43:04 | N | 47564] C:\NTDETECT.COM
          [13/04/2008 - 11:31:52 | N | 252240] C:\ntldr
          [17/04/2008 - 18:51:01 | D ] C:\NVIDIA
          [28/08/2011 - 19:16:22 | ASH | 2145386496] C:\pagefile.sys
          [19/08/2011 - 01:10:43 | D ] C:\Program Files
          [19/02/2009 - 23:35:58 | D ] C:\PVSW
          [14/10/2008 - 23:44:23 | D ] C:\RaidTool
          [26/11/2008 - 00:35:40 | D ] C:\Rawdump2.0
          [29/08/2011 - 05:57:52 | SHD ] C:\RECYCLER
          [08/11/2009 - 20:52:46 | N | 7169] C:\resetlog.txt
          [14/11/2008 - 05:34:08 | N | 440] C:\RHDSetup.log
          [03/01/2010 - 01:35:29 | D ] C:\rsit
          [21/04/2008 - 07:15:29 | N | 268] C:\sqmdata00.sqm
          [21/04/2008 - 23:40:18 | N | 268] C:\sqmdata01.sqm
          [24/06/2008 - 00:18:31 | N | 268] C:\sqmdata02.sqm
          [16/11/2008 - 22:04:49 | N | 268] C:\sqmdata03.sqm
          [16/11/2008 - 23:23:35 | N | 268] C:\sqmdata04.sqm
          [17/11/2008 - 06:26:53 | N | 268] C:\sqmdata05.sqm
          [21/04/2008 - 07:15:29 | N | 244] C:\sqmnoopt00.sqm
          [21/04/2008 - 23:40:18 | N | 244] C:\sqmnoopt01.sqm
          [24/06/2008 - 00:18:31 | N | 244] C:\sqmnoopt02.sqm
          [16/11/2008 - 22:04:49 | N | 244] C:\sqmnoopt03.sqm
          [16/11/2008 - 23:23:35 | N | 244] C:\sqmnoopt04.sqm
          [17/11/2008 - 06:26:53 | N | 244] C:\sqmnoopt05.sqm
          [14/11/2008 - 05:19:23 | SHD ] C:\System Volume Information
          [29/08/2011 - 05:57:52 | D ] C:\UsbFix
          [29/08/2011 - 05:57:53 | A | 1334] C:\UsbFix.txt
          [27/12/2008 - 12:51:12 | D ] C:\WINDOWS
          [31/05/2011 - 00:03:35 | D ] C:\WINDOWS.0
          [09/03/2009 - 23:21:59 | D ] C:\WTablet
          [04/04/2008 - 23:30:56 | N | 56] C:\XP_Version.txt
          [10/11/2008 - 19:38:46 | D ] C:\~MSSETUP.T
          [11/08/2009 - 03:02:41 | D ] D:\aa5c72fea397e20e249757
          [23/12/2010 - 15:54:54 | N | 192512] D:\alchemyext.dll
          [06/04/2008 - 12:03:02 | RASHD ] D:\autorun.inf
          [12/11/2008 - 00:17:43 | N | 64872] D:\bookmarks.html
          [23/12/2010 - 15:51:34 | N | 264328] D:\BsSndRpt.exe
          [23/12/2010 - 15:51:34 | N | 227408] D:\BugSplat.dll
          [07/01/2011 - 14:54:42 | N | 253952] D:\BugSplatRc.dll
          [18/07/2009 - 09:15:18 | D ] D:\cathy
          [11/11/2008 - 23:14:28 | D ] D:\CODEC
          [20/01/2011 - 23:59:38 | D ] D:\Components
          [08/07/2009 - 14:40:42 | D ] D:\Data
          [23/12/2010 - 15:51:36 | N | 986112] D:\dbghelp.dll
          [23/12/2010 - 15:51:34 | N | 709272] D:\DD_AcisBuilder_3.02_8.dll
          [23/12/2010 - 15:51:34 | N | 14488] D:\DD_Alloc_3.02_8.dll
          [23/12/2010 - 15:51:34 | N | 307864] D:\DD_BrepRenderer_3.02_8.dll
          [23/12/2010 - 15:51:34 | N | 94872] D:\DD_Br_3.02_8.dll
          [23/12/2010 - 15:51:34 | N | 283288] D:\DD_DbRoot_3.02_8.dll
          [23/12/2010 - 15:51:34 | N | 8172184] D:\DD_Db_3.02_8.dll
          [23/12/2010 - 15:51:34 | N | 1057432] D:\DD_Ge_3.02_8.dll
          [23/12/2010 - 15:51:34 | N | 701080] D:\DD_Gi_3.02_8.dll
          [23/12/2010 - 15:51:34 | N | 565912] D:\DD_Root_3.02_8.dll
          [15/06/2009 - 10:08:13 | D ] D:\Documents and Settings
          [11/11/2008 - 23:34:28 | D ] D:\driver
          [23/12/2010 - 15:49:20 | N | 924] D:\drivers.ini
          [24/06/2010 - 01:25:59 | D ] D:\EVEREST Ultimate Edition
          [23/08/2010 - 17:39:00 | D ] D:\foto
          [23/12/2010 - 15:51:38 | N | 2752512] D:\gdal16.dll
          [23/12/2010 - 15:50:30 | N | 320] D:\glcards.dat
          [23/12/2010 - 15:52:52 | N | 778240] D:\IGAttrs.dll
          [23/12/2010 - 15:52:54 | N | 1597440] D:\IGCore.dll
          [23/12/2010 - 15:52:54 | N | 3362816] D:\IGGfx.dll
          [23/12/2010 - 15:52:54 | N | 819200] D:\IGMath.dll
          [23/12/2010 - 15:52:54 | N | 1724416] D:\IGSg.dll
          [23/12/2010 - 15:52:56 | N | 380928] D:\IGUtils.dll
          [20/01/2011 - 23:59:43 | D ] D:\Importers
          [17/03/2011 - 20:53:22 | D ] D:\Jean
          [31/12/2010 - 18:55:27 | D ] D:\ledenon 2010
          [16/07/2011 - 17:59:19 | D ] D:\LEDENON 2011
          [20/01/2011 - 23:59:45 | D ] D:\Materials
          [23/12/2010 - 15:51:34 | N | 119448] D:\ModelerGeometry_3.02_8.drx
          [23/12/2010 - 15:51:38 | N | 339968] D:\mpiwin32.dll
          [23/12/2010 - 15:51:38 | N | 892998] D:\msvcrt-ruby18.dll
          [20/01/2011 - 23:59:45 | D ] D:\Plugins
          [25/11/2008 - 00:39:08 | D ] D:\PROGRAMMES
          [29/08/2011 - 05:57:52 | SHD ] D:\RECYCLER
          [20/01/2011 - 23:59:33 | D ] D:\resources
          [20/01/2011 - 23:59:40 | D ] D:\sdk plugins
          [23/12/2010 - 15:55:30 | N | 2236416] D:\SkpWriter.dll
          [23/12/2010 - 15:56:52 | N | 2740224] D:\slapi.dll
          [23/12/2010 - 15:51:36 | N | 31384] D:\SpatialIndex_3.02_8.dll
          [08/07/2009 - 14:42:52 | D ] D:\Sporebin
          [20/01/2011 - 23:59:45 | D ] D:\Styles
          [20/01/2011 - 23:59:44 | D ] D:\Support
          [06/04/2008 - 14:58:22 | SHD ] D:\System Volume Information
          [23/12/2010 - 15:57:48 | N | 1937408] D:\ThumbsUp.dll
          [20/01/2011 - 23:59:45 | D ] D:\Tools
          [23/12/2010 - 15:51:40 | N | 2359296] D:\xerces-c_2_6.dll
          [19/12/2010 - 15:00:03 | D ] D:\zabé
          [04/01/2009 - 10:21:38 | D ] E:\FOUND.000
          [27/04/2009 - 19:48:02 | D ] E:\SMRTNTKY
          [15/12/2007 - 17:49:44 | SHD ] E:\System Volume Information
          [07/07/2009 - 20:22:06 | N | 4183228416] E:\rld-spor.iso
          [15/12/2007 - 17:49:46 | N | 348160] E:\msvcr71.dll
          [01/01/2010 - 11:39:16 | D ] E:\DEKLICS
          [02/01/2010 - 14:29:08 | D ] E:\ds
          [15/12/2007 - 18:16:00 | SHD ] E:\Recycled
          [07/02/2010 - 23:22:04 | N | 613365594] E:\CLIP0001.ASF
          [15/12/2007 - 21:22:46 | D ] E:\zabé
          [04/01/2009 - 10:22:30 | ASH | 81408] E:\Thumbs.db
          [06/04/2008 - 12:03:04 | RASHD ] E:\autorun.inf

          ################## | Vaccin |

          C:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)
          D:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)
          E:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)

          ################## | Upload |

          Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_WINXPSP3.zip
          http://www.teamxscript.org/Upload.php
          Merci de votre contribution.

          ################## | E.O.F |
          1. desactive ton antivirus
            desactive Windows defender si présent
            desactive ton pare-feu

            Ferme toutes tes appilications en cours

            telecharge et enregistre ceci sur ton bureau :

            Pre_Scan

            si le lien ne fonctionne pas :

            http://www.archive-host.com

            s'il n'est pas sur ton bureau coupe-le de ton dossier telechargements et colle-le sur ton bureau

            Avertissement: Il y aura une extinction du bureau pendant le scan --> pas de panique.

            une fois telechargé lance-le , laisse faire le scan jusqu'à l'apparition de "Pre_scan.txt" sur le bureau.

            si 'outil est bloqué par l'infection utilise cette version : Version .pif

            si l'outil detecte un proxy et que tu n'en as pas installé clique sur "supprimer le proxy"

            si l'outil semble ne pas avoir fonctionné renomme-le winlogon , ou change son extension en .com ou .scr

            Il se peut qu'une multitude de fenêtres noires clignotent , laisse-le travailler

            Poste Pre_Scan_la_date_et_l'heure.txt qui apparaitra sur le bureau en fin de scan

            ▶▶▶ NE LE POSTE PAS SUR LE FORUM (il est trop long)

            clique sur ce lien : http://www.cijoint.fr/

            ▶ Clique sur Parcourir et cherche le fichier ci-dessus.

            ▶ Clique sur Ouvrir.

            ▶ Clique sur "Cliquez ici pour déposer le fichier".

            Un lien de cette forme :

            http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt

            est ajouté dans la page.

            ▶ Copie ce lien dans ta réponse.

            si ton bureau ne reapparait pas => ctrl+alt+supp , gestionnaire des taches => onglet fichier => nouvelle tache puis tape explorer
            1. Bonjour,

              voici le lien

              http://www.cijoint.fr/cjlink.php?file=cj201108/cijIFHRf0F.txt
              1. desinstalle Live Player
                desinstalle FreezFrog
                desinstalle spybot

                =================================

                fais glisser une icone n'importe quel fichier sur Pre_scan , pre_script va apparaitre

                Lance Pre_script , une page vierge va s'ouvrir.

                selectionne tout le texte en gras ci-dessous, puis (clic droit/copier ou ctrl+c) :
                ___________________________________________________
                Registry::
                [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                "xybrbc"=-
                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                ""=-
                "nwiz"=-
                "QuickTime Task"=-
                "iTunesHelper"=-
                "FREEzeFrogSA"=-
                [-HKEY_CURRENT_USER\Software\FREEzeFrog]
                [-HKEY_CURRENT_USER\Software\freezefrogsa]
                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
                ""=-
                [-HKEY_CURRENT_USER\Software\Grand Virtual]
                [-HKEY_CURRENT_USER\Software\Live-Player]
                [-HKEY_LOCAL_MACHINE\Software\FREEzeFrog]
                [-HKEY_LOCAL_MACHINE\Software\Live-Player]
                [HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
                "3389:TCP"=-
                [HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\sharedaccess\parameters\firewallpolicy\domainprofile\GloballyOpenPorts\List]
                "3389:TCP"=-

                file::
                C:\Documents and Settings\Mr GREEN\Local Settings\Application Data\qcdnxb.dat

                folder::
                C:\Program Files\FREEzeFrog
                C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Spybot - Search & Destroy
                C:\Documents and Settings\Mr GREEN\Application Data\FREEzeFrog
                C:\Documents and Settings\Mr GREEN\Application Data\live-player
                C:\Documents and Settings\All Users.WINDOWS.0\Application Data\FREEzeFrogSA
                C:\Documents and Settings\All Users.WINDOWS.0\Application Data\regid.1986-12.com.adobe
                C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Spybot - Search & Destroy
                C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Live-Player
                C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Trymedia
                C:\Program Files\FREEzeFrog
                C:\Program Files\Live-Player
                C:\Program Files\Spybot - Search & Destroy

                attrib::

                ___________________________________________________

                colle-le ensuite (clic droit/coller ou ctrl+V) dans la page vierge.

                puis onglet fichier => enregistrer (pas enregistrer sous...) , puis ferme le texte

                des fenetres noires risquent de clignoter , c'est normal , c'est le programme qui travaille

                poste Pre_Script.txt qui apparaitra sur le bureau en fin de travail

                si ton bureau ne reapparait pas => ctrl+alt+supp , gestionnaire des taches => onglet fichier => nouvelle tache puis tape explorer
                1. ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Pre_Script | 1.0.2.65 ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

                  ¤¤¤¤¤ XP | Vista | Seven - 32/64 bits ¤¤¤¤¤

                  Mise à jour : 20/08/2011 | 11.30 Par g3n-h@ckm@n
                  Utilisateur : Mr GREEN (Administrateurs)
                  Ordinateur : WINXPSP3
                  Système d'exploitation : Microsoft Windows XP (32 bits)
                  Internet Explorer : 8.0.6001.18372
                  Mozilla Firefox : 5.0.1 (fr)

                  Switchs possibles :

                  processes:: | file:: | folder:: | Registry::
                  Driver:: | replace:: | DNS:: | Command::
                  attrib:: | txt:: | Host:: | NsLook::
                  list:: | IP::

                  Script : 01:27:59

                  ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
                  ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

                  Modification du registre effectuée

                  ¤

                  Supprimé : C:\Documents and Settings\Mr GREEN\Local Settings\Application Data\qcdnxb.dat

                  ¤

                  Absent : C:\Program Files\FREEzeFrog
                  Absent : C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Spybot - Search & Destroy
                  Absent : C:\Documents and Settings\Mr GREEN\Application Data\FREEzeFrog
                  Supprimé : C:\Documents and Settings\Mr GREEN\Application Data\live-player
                  Absent : C:\Documents and Settings\All Users.WINDOWS.0\Application Data\FREEzeFrogSA
                  Supprimé : C:\Documents and Settings\All Users.WINDOWS.0\Application Data\regid.1986-12.com.adobe
                  Supprimé : C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Spybot - Search & Destroy
                  Supprimé : C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Live-Player
                  Supprimé : C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Trymedia
                  Absent : C:\Program Files\FREEzeFrog
                  Supprimé : C:\Program Files\Live-Player
                  Supprimé : C:\Program Files\Spybot - Search & Destroy

                  ¤

                  Disques externes : 1265 Objets réattribués
                  Disque Local : 6 Objets réattribués
                  Utilisateurs : 0 Objets réattribués
                  ProgramFiles : 24 Objets réattribués
                  Music : 0 Objets réattribués
                  Pictures : 0 Objets réattribués
                  Videos : 0 Objets réattribués
                  Downloads : 0 Objets réattribués
                  Desktop : 0 Objets réattribués
                  Links : 0 Objets réattribués
                  Searches : 0 Objets réattribués
                  Contacts : 9 Objets réattribués
                  Saved Games : 0 Objets réattribués
                  Favorites : 0 Objets réattribués
                  Documents : 0 Objets réattribués
                  Windows : 199 Objets réattribués
                  StartMenu : 0 Objets réattribués
                  Librairies : 0 Objets réattribués
                  Quick Launch : 0 Objets réattribués
                  %AppData% : 87 Objets réattribués

                  ¤

                  Fin : 01:36:02

                  ¤¤¤¤¤¤¤¤¤¤ ( EOF ) ¤¤¤¤¤¤¤¤¤¤
                  1. ▶ Télécharge ici : Ad-remover sur ton bureau :

                    ▶ Déconnecte toi et ferme toutes applications en cours !

                    si tu as XP => double clique
                    si tu as Vista ou windows 7 => clic droit "executer en tant que...."


                    ▶ sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut .

                    ▶ clique le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .

                    ▶ Au menu principal choisis "option Nettoyer" et tape sur [entrée] .

                    ▶ Laisse travailler l'outil et ne touche à rien ...

                    ▶ Poste le rapport qui apparait à la fin , sur le forum ...

                    ( Le rapport est sauvegardé aussi sous C:\Ad-report.log )
                    ( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

                    1. ======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

                      Mis à jour par TeamXscript le 12/04/11
                      Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
                      Site web: http://www.teamxscript.org

                      C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 22:52:52 le 31/08/2011, Mode normal

                      Microsoft Windows XP Professionnel Service Pack 3 (X86)
                      Mr GREEN@WINXPSP3 ( )

                      ============== ACTION(S) ==============

                      Dossier supprimé: C:\Documents and Settings\All Users.WINDOWS.0\Menu Démarrer\Programmes\Everest Poker
                      Dossier supprimé: C:\Program Files\Everest Poker
                      Fichier supprimé: C:\Documents and Settings\All Users.WINDOWS.0\Bureau\Everest Poker.lnk

                      (!) -- Fichiers temporaires supprimés.

                      Clé supprimée: HKLM\Software\Classes\Interface\{6E4C89CF-3061-4EE4-B22A-B7A8AAEA5CB3}
                      Clé supprimée: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\qcdnxb
                      Clé supprimée: HKLM\Software\Live-Player
                      Clé supprimée: HKCU\Software\Grand Virtual
                      Clé supprimée: HKCU\Software\Live-Player
                      Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Everest Poker
                      Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\live-player
                      Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Everest Poker
                      Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{69725738-CD68-4f36-8D02-8C43722EE5DA}
                      Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE}

                      ============== SCAN ADDITIONNEL ==============

                      **** Mozilla Firefox Version [5.0.1 (fr)] ****

                      FIREFOX.EXE\Shell\Open\Command - "C:\Program Files\Mozilla Firefox\Firefox.exe"
                      Searchplugins\bing.xml ( hxxp://www.bing.com/search)
                      Components\browsercomps.dll (Mozilla Foundation)
                      Extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} (Skype extension for Firefox )

                      -- C:\Documents and Settings\Mr GREEN\Application Data\Mozilla\FireFox\Profiles\721f4ieq.default --
                      Extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}(2) (Ma-config.com)
                      Prefs.js - browser.startup.homepage, hxxp://google.fr
                      Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.0.3

                      -- C:\Documents and Settings\Administrateur\Application Data\Mozilla\FireFox\Profiles\f03slbvu.default --
                      Prefs.js - browser.download.dir, C:\\Documents and Settings\\Administrateur\\Bureau\\Mes téléchargements
                      Prefs.js - browser.download.lastDir, C:\\Documents and Settings\\Administrateur\\Bureau
                      Prefs.js - browser.startup.homepage, hxxp://www.google.fr
                      Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.0.11

                      ========================================

                      **** Internet Explorer Version [8.0.6001.18372] ****

                      Plugins\NPWMin32.dll (SYNERSOFT)
                      HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                      HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                      HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
                      HKCU_Main|Start Page - hxxp://fr.msn.com/
                      HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
                      HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                      HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
                      HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                      HKLM_Main|Start Page - hxxp://fr.msn.com/
                      HKCU_URLSearchHooks|{08C06D61-F1F3-4799-86F8-BE1A89362C85} - "Search Class" (C:\PROGRA~1\Wanadoo\SEARCH~1.DLL)
                      HKCU_SearchScopes\{0F36E18A-6296-4333-9D99-269AAFE3D111}_Chercher Malin - "Chercher Malin" (hxxp://www.cherchermalin.com/?t=Q0908201728&s=b&keywords={searchTerms})
                      HKCU_Toolbar|{1E796980-9CC5-11D1-A83F-00C04FC99D61} (x)
                      HKCU_Toolbar\WebBrowser|{47833539-D0C5-4125-9FA8-0819E2EAAC93} (C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll)
                      HKLM_Toolbar|{47833539-D0C5-4125-9FA8-0819E2EAAC93} (C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll)
                      HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)
                      HKLM_ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} - C:\Program Files\FREEzeFrog\bin\1.0.670.0\Weather.exe (x)
                      HKCU_Extensions\{1462651F-F4BA-4C76-A001-C4284D0FE16E} - "Wanadoo" (C:\PROGRA~1\Wanadoo\Audience\Icones\Wanadoo.ico)
                      HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
                      BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)
                      BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)

                      ========================================

                      C:\Program Files\Ad-Remover\Quarantine: 149 Fichier(s)
                      C:\Program Files\Ad-Remover\Backup: 12 Fichier(s)

                      C:\Ad-Report-CLEAN[1].txt - 31/08/2011 22:53:05 (4148 Octet(s))

                      Fin à: 22:54:02, 31/08/2011

                      ============== E.O.F ==============
                      1. Télécharge ici :OTL

                        ▶ enregistre le sur ton Bureau.

                        si tu as XP => double clique
                        si tu as Vista ou windows 7 => clic droit "executer en tant que...."


                        sur OTL.exe pour le lancer.

                        ▶ => Clique ici pour voir la Configuration

                        ▶Clic sur Analyse.

                        A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).

                        Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\OTL.txt)

                        ▶▶▶ NE LE POSTE PAS SUR LE FORUM (il est trop long)

                        Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/

                        ▶ Clique sur Parcourir et cherche le fichier ci-dessus.

                        ▶ Clique sur Ouvrir.

                        ▶ Clique sur "Cliquez ici pour déposer le fichier".

                        juste au niveau du bouton , en fin de chargement du fichier , Un lien de cette forme apparaitra :

                        http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt

                        ▶ Copie ce lien dans ta réponse.

                        ▶▶ Tu feras la meme chose avec le "Extra.txt" qui logiquement sera aussi sur ton bureau.
                        1. Salut,

                          le lien pour telecharger OTL nécessite un pass...j'ai farfouillé un peu et l'ai trouvé ailleurs

                          http://www.cijoint.fr/cjlink.php?file=cj201109/cijmcjfrvB.txt

                          OTL Extras logfile created on: 02/09/2011 02:02:52 - Run 1
                          OTL by OldTimer - Version 3.2.27.0 Folder = C:\Documents and Settings\Mr GREEN\Bureau
                          Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
                          Internet Explorer (Version = 8.0.6001.18372)
                          Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

                          2,00 Gb Total Physical Memory | 1,41 Gb Available Physical Memory | 70,67% Memory free
                          3,85 Gb Paging File | 3,41 Gb Available in Paging File | 88,55% Paging File free
                          Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

                          %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS.0 | %ProgramFiles% = C:\Program Files
                          Drive C: | 56,64 Gb Total Space | 0,03 Gb Free Space | 0,06% Space Free | Partition Type: NTFS
                          Drive D: | 176,23 Gb Total Space | 85,95 Gb Free Space | 48,77% Space Free | Partition Type: NTFS
                          Drive E: | 298,02 Gb Total Space | 9,99 Gb Free Space | 3,35% Space Free | Partition Type: FAT32
                          Drive F: | 15,02 Gb Total Space | 2,15 Gb Free Space | 14,28% Space Free | Partition Type: FAT32

                          Computer Name: WINXPSP3 | User Name: Mr GREEN | Logged in as Administrator.
                          Boot Mode: Normal | Scan Mode: All users
                          Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

                          [color=#E56717]========== Extra Registry (All) ==========/color

                          [color=#E56717]========== File Associations ==========/color

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
                          .bat [@ = batfile] -- "%1" %*
                          .chm [@ = chm.file] -- C:\WINDOWS.0\hh.exe (Microsoft Corporation)
                          .cmd [@ = cmdfile] -- "%1" %*
                          .com [@ = comfile] -- "%1" %*
                          .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
                          .exe [@ = exefile] -- "%1" %*
                          .hlp [@ = hlpfile] -- C:\WINDOWS.0\System32\winhlp32.exe (Microsoft Corporation)
                          .hta [@ = htafile] -- C:\WINDOWS.0\System32\mshta.exe (Microsoft Corporation)
                          .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
                          .inf [@ = inffile] -- C:\WINDOWS.0\System32\NOTEPAD.EXE (Microsoft Corporation)
                          .ini [@ = inifile] -- C:\WINDOWS.0\System32\NOTEPAD.EXE (Microsoft Corporation)
                          .url [@ = InternetShortcut] -- C:\WINDOWS.0\System32\rundll32.exe (Microsoft Corporation)
                          .js [@ = jsfile] -- C:\WINDOWS.0\System32\WScript.exe (Microsoft Corporation)
                          .jse [@ = JSEFile] -- C:\WINDOWS.0\System32\WScript.exe (Microsoft Corporation)
                          .pif [@ = piffile] -- "%1" %*
                          .reg [@ = regfile] -- C:\WINDOWS.0\regedit.exe (Microsoft Corporation)
                          .scr [@ = scrfile] -- "%1" /S
                          .txt [@ = txtfile] -- C:\WINDOWS.0\System32\NOTEPAD.EXE (Microsoft Corporation)
                          .vbe [@ = VBEFile] -- C:\WINDOWS.0\System32\WScript.exe (Microsoft Corporation)
                          .vbs [@ = VBSFile] -- C:\WINDOWS.0\System32\WScript.exe (Microsoft Corporation)
                          .wsf [@ = WSFFile] -- C:\WINDOWS.0\System32\WScript.exe (Microsoft Corporation)
                          .wsh [@ = WSHFile] -- C:\WINDOWS.0\System32\WScript.exe (Microsoft Corporation)

                          [HKEY_USERS\S-1-5-21-776561741-1965331169-1801674531-1003\SOFTWARE\Classes\<extension>]
                          .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
                          .url [@ = InternetShortcut] -- C:\WINDOWS.0\System32\rundll32.exe (Microsoft Corporation)

                          [color=#E56717]========== Shell Spawning ==========/color

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
                          batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
                          batfile [open] -- "%1" %*
                          batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
                          chm.file [open] -- "C:\WINDOWS.0\hh.exe" %1 (Microsoft Corporation)
                          cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
                          cmdfile [open] -- "%1" %*
                          cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
                          comfile [open] -- "%1" %*
                          cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
                          exefile [open] -- "%1" %*
                          helpfile [open] -- winhlp32.exe %1 (Microsoft Corporation)
                          hlpfile [open] -- %SystemRoot%\System32\winhlp32.exe %1 (Microsoft Corporation)
                          htafile [open] -- C:\WINDOWS.0\system32\mshta.exe "%1" %* (Microsoft Corporation)
                          htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
                          htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
                          htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
                          htmlfile [print] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
                          http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
                          https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
                          inffile [install] -- %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)
                          inffile [open] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
                          inffile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
                          inifile [open] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
                          inifile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
                          InternetShortcut [open] -- "C:\WINDOWS.0\system32\rundll32.exe" "C:\WINDOWS.0\system32\ieframe.dll",OpenURL %l (Microsoft Corporation)
                          InternetShortcut [print] -- "C:\WINDOWS.0\system32\rundll32.exe" "C:\WINDOWS.0\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
                          jsfile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
                          jsfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
                          jsfile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
                          jsefile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
                          jsefile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
                          jsefile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
                          piffile [open] -- "%1" %*
                          regfile [edit] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
                          regfile [open] -- regedit.exe "%1" (Microsoft Corporation)
                          regfile [merge] -- Reg Error: Key error.
                          regfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
                          scrfile [config] -- "%1"
                          scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
                          scrfile [open] -- "%1" /S
                          txtfile [edit] -- Reg Error: Key error.
                          txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
                          txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
                          txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
                          vbefile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
                          vbefile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
                          vbefile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
                          vbsfile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
                          vbsfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
                          vbsfile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
                          wsffile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
                          wsffile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
                          wsffile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
                          wshfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
                          Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
                          Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
                          Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
                          Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
                          Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
                          Folder [open] -- C:\WINDOWS.0\explorer.exe (Microsoft Corporation)
                          Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
                          Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
                          Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
                          CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

                          [color=#E56717]========== Security Center Settings ==========/color

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
                          "FirstRunDisabled" = 1
                          "AntiVirusDisableNotify" = 0
                          "FirewallDisableNotify" = 0
                          "UpdatesDisableNotify" = 0
                          "AntiVirusOverride" = 0
                          "FirewallOverride" = 0

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

                          [color=#E56717]========== System Restore Settings ==========/color

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
                          "DisableSR" = 0

                          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
                          "Start" = 0

                          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
                          "Start" = 2

                          [color=#E56717]========== Firewall Settings ==========/color

                          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

                          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
                          "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
                          "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
                          "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
                          "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
                          "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
                          "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
                          "3389:TCP" = 3389:TCP:*:Disabled:@xpsp2res.dll,-22009

                          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
                          "EnableFirewall" = 0
                          "DoNotAllowExceptions" = 0

                          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
                          "3703:TCP" = 3703:TCP:*:Enabled:Adobe Version Cue CS3 Server
                          "3704:TCP" = 3704:TCP:*:Enabled:Adobe Version Cue CS3 Server
                          "50900:TCP" = 50900:TCP:*:Enabled:Adobe Version Cue CS3 Server
                          "50901:TCP" = 50901:TCP:*:Enabled:Adobe Version Cue CS3 Server
                          "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
                          "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
                          "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
                          "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
                          "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
                          "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
                          "3389:TCP" = 3389:TCP:*:Disabled:@xpsp2res.dll,-22009
                          "48113:TCP" = 48113:TCP:LocalSubNet:Enabled:maconfig_tcp
                          "48113:UDP" = 48113:UDP:LocalSubNet:Enabled:maconfig_udp
                          "1035:TCP" = 1035:TCP:*:Enabled:Akamai NetSession Interface
                          "5000:UDP" = 5000:UDP:*:Enabled:Akamai NetSession Interface

                          [color=#E56717]========== Authorized Applications List ==========/color

                          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
                          "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
                          "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
                          "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" = C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger -- (Microsoft Corporation)

                          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
                          "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
                          "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
                          "C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe" = C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe:*:Enabled:Adobe Version Cue CS3 Server -- (Adobe Systems Incorporated)
                          "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
                          "C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe" = C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe:*:Enabled:Adobe Dreamweaver CS3 -- (Adobe Systems, Inc.)
                          "C:\PVSW\Bin\w3dbsmgr.exe" = C:\PVSW\Bin\w3dbsmgr.exe:*:Enabled:Database Service Manager -- ()
                          "C:\Program Files\Iomega\ScreenPlay HD Discovery\ScreenPlay Discovery.exe" = C:\Program Files\Iomega\ScreenPlay HD Discovery\ScreenPlay Discovery.exe:*:Enabled:ScreenPlay Discovery -- (Iomega Corp.)
                          "C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
                          "C:\Program Files\MFP Server\App\Common\MFPAgent.exe" = C:\Program Files\MFP Server\App\Common\MFPAgent.exe:*:Enabled:MFP Agent -- (Edimax Technology Co., Ltd.)
                          "C:\Documents and Settings\Mr GREEN\Bureau\utorrent.exe" = C:\Documents and Settings\Mr GREEN\Bureau\utorrent.exe:*:Enabled:µTorrent
                          "C:\Program Files\Skype\Plugin Manager\skypePM.exe" = C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager -- (Skype Technologies)
                          "C:\Program Files\ma-config.com\maconfservice.exe" = C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice -- (CybelSoft)
                          "C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)
                          "C:\Program Files\Bonjour\mDNSResponder.exe" = C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour -- (Apple Inc.)
                          "C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)
                          "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" = C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger -- (Microsoft Corporation)

                          [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========/color

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
                          "{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
                          "{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3
                          "{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
                          "{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting
                          "{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
                          "{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
                          "{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
                          "{121634B0-2F4B-11D3-ADA3-00C04F52DD52}" = Windows Installer Clean Up
                          "{12E11FBB-7CA6-4A86-834D-5E6390D51009}" = ASUS Smart Doctor
                          "{133742BA-6F46-4D3E-85AF-78631D9AD8B8}" = Installation Windows Live
                          "{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
                          "{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
                          "{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin
                          "{1B0BCA28-1F11-4D60-8A2F-DEBE04B5341E}" = Adobe Flash Video Encoder
                          "{1C1036EB-D736-4A71-9F76-CF962C4F3697}" = EBP Immobilisations
                          "{1D58229F-C505-45CA-8223-F35F3A34B963}" = Adobe Version Cue CS3 Server
                          "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
                          "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Outil de téléchargement Windows Live
                          "{207BB01A-0163-43E0-8CE9-BE494505BE0F}" = Ma-Config.com
                          "{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email
                          "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
                          "{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 17
                          "{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3
                          "{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}" = EPSON Scan Assistant
                          "{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour
                          "{2DA701B1-5597-44BA-BA96-ED6A737CCA57}" = Playlist Management
                          "{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support
                          "{315ACD04-BCEB-478B-9B1D-5431D0E6CB11}" = ASUS Gamer OSD
                          "{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
                          "{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
                          "{35B2F4D8-620A-4C54-9295-56A2FA8B4E1E}" = Iomega ScreenPlay HD Discovery
                          "{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = JMB36X Raid Configurer
                          "{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
                          "{42EDF895-158C-484E-A7F2-42B90759F281}" = Camera RAW Plug-In for EPSON Creativity Suite
                          "{445B183D-F4F1-45C8-B9DB-F11355CA657B}" = Windows Live Messenger
                          "{46CBBDF8-55B5-40DB-B459-7B848394309C}" = EPSON File Manager
                          "{4BDB76C6-902E-41D5-9064-68768E02886B}" = Adobe Dreamweaver CS3
                          "{534AC850-BF98-4D2C-902A-B17A37E42DA0}" = Réussir son ASSR
                          "{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3
                          "{566BB41D-F006-4956-A5D3-94D8DFFA7F51}" = Adobe Setup
                          "{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
                          "{5827A3F0-23B3-414F-BFD8-95F96A3D199D}" = EBP Comptabilité
                          "{5FCFC78C-438A-4F4D-B266-E32B8468BAFC}" = Pervasive.SQL V8 Workgroup (v8.6)
                          "{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}" = Adobe Dynamiclink Support
                          "{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
                          "{6901DD22-527A-41EF-9059-E81FEDE9E494}" = Windows Presentation Foundation Language Pack (FRA)
                          "{6B708481-748A-4EB4-97C1-CD386244FF77}" = Adobe MotionPicture Color Files
                          "{6BBAA81D-6A7E-43AD-8889-2F002DCAAFDD}" = AHV content for Acrobat and Flash
                          "{6E08CE13-C2AB-4749-9335-5900B958929E}" = Adobe Illustrator CS3
                          "{6E9EF98E-259E-416D-B5F8-0ABDB99942CE}" = Adobe Flash Player 10 ActiveX
                          "{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3
                          "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
                          "{73B5D990-04EA-4751-B10F-5534770B91F2}" = Adobe Color EU Recommended Settings
                          "{75ADEFA2-D4FF-4B37-9E93-4306E6AC176B}_is1" = ImgBurn 2.3.2.0 Fr
                          "{76C24F39-B161-498F-BD8B-C64789812D13}_is1" = ConvertXtoDVD 3.3.2.100
                          "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
                          "{7A529246-912F-4C40-A82A-E608DB702FD7}" = ASUS VideoSecurity Online
                          "{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}" = EPSON Web-To-Page
                          "{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3
                          "{80FD3971-8482-49C8-BA8C-B6464A15882F}" = Adobe Flash CS3
                          "{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
                          "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110422467}" = Tiks Texas Hold em
                          "{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
                          "{881F5DE8-9367-4B81-A325-E91BBC6472F9}" = iTunes
                          "{8A8F8391-4C2C-4BE1-A984-CD4A5A546467}" = EPSON Easy Photo Print
                          "{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3
                          "{90120000-0010-040C-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (French) 12
                          "{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007
                          "{90120000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2007
                          "{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007
                          "{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007
                          "{90120000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2007
                          "{90120000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2007
                          "{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007
                          "{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007
                          "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
                          "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
                          "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
                          "{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007
                          "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
                          "{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007
                          "{90120000-0044-040C-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (French) 2007
                          "{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007
                          "{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3
                          "{90FF23FE-0E1B-40DF-A22E-B4C0372E5936}" = Iomega Product Registration
                          "{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
                          "{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
                          "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
                          "{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
                          "{98736A65-3C79-49EC-B7E9-A3C77774B0E6}" = Google SketchUp 6
                          "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
                          "{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3
                          "{9D3F3D5A-BE6D-48C4-B51E-E2D6753ABCDE}" = Adobe Setup
                          "{9DF0196F-B6B8-4C3A-8790-DE42AA530101}" = SPORE(TM)
                          "{9F52ABCA-E38F-4132-B5C5-211055868AB6}" = EBP Comptabilité et Facturation
                          "{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
                          "{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
                          "{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific
                          "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
                          "{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
                          "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
                          "{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}" = PDF Settings
                          "{AC76BA86-1033-F400-7760-000000000003}" = Adobe Acrobat 8 Professional - English, Français, Deutsch
                          "{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
                          "{B168C59D-5FCF-4EEC-B464-BFA7A8266150}" = Windows Communication Foundation Language Pack - FRA
                          "{B169BC97-B8AA-4ACA-9CF2-9D0FF5BABDF7}" = Adobe Premiere Pro CS4 Functional Content
                          "{B1EF7B00-8FCC-4209-BFB6-37C50B354B2A}" = Adobe Creative Suite 3 Design Premium
                          "{B3B487E7-6171-4376-9074-B28082CEB504}" = Windows Live Call
                          "{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0
                          "{B3D8B2F8-3C2C-45BC-933E-8B60E78F6684}" = Google SketchUp 6
                          "{B3FED300-806C-11E0-A0D0-B8AC6F97B88E}" = Google Earth
                          "{B671CBFD-4109-4D35-9252-3062D3CCB7B2}" = Adobe SING CS3
                          "{B73CFB12-C814-4638-AFFD-7E3AAFAF0B4E}" = Adobe BridgeTalk Plugin CS3
                          "{B84C141C-9A13-44BE-9A69-301D7B11D836}" = Windows Workflow Foundation FR Language Pack
                          "{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
                          "{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
                          "{BCC57687-98A2-4C4C-B0F8-BC6B6F52D4E3}" = Retrospect Express HD 2.5
                          "{BCE0B7AC-9F72-454E-9265-E963C60530B1}" = Cegid CommonFiles
                          "{BE5F3842-8309-4754-92D5-83E02E6077A3}" = Adobe Extension Manager CS3
                          "{BE9CEAAA-F069-4331-BF2F-8D350F6504F4}" = Adobe Media Encoder CS4 Additional Exporter
                          "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
                          "{C1FA4B3B-1625-4922-9C9D-780E8FCE161A}" = Adobe Photoshop CS3
                          "{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2
                          "{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
                          "{C4E1603B-E550-4A14-8F53-4E989849D1B4}" = Google SketchUp 8
                          "{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
                          "{C5BD220A-EFE8-48A5-B70E-9503D535FACE}" = Adobe WAS CS3
                          "{C950420B-4182-49EA-850A-A6A2ABF06C6B}" = Marvell Miniport Driver
                          "{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
                          "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
                          "{CFC9F871-7C40-40B6-BE4A-B98A5B309716}" = Adobe Flash Professional CS5
                          "{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client
                          "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype(TM) 4.2
                          "{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
                          "{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}" = Assistant de connexion Windows Live
                          "{D499F8DE-3F31-4900-9157-61061613704B}" = Adobe Premiere Pro CS4
                          "{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
                          "{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}" = Adobe Color JA Extra Settings
                          "{DE3BB35E-C0CE-4CA1-9CB4-CD9E69364BD9}" = Adobe Premiere Pro CS4
                          "{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}" = Adobe Media Encoder CS4
                          "{E2883E8F-472F-4fb0-9522-AC9BF37916A7}" = Adobe Download Manager
                          "{E3C080B0-23F5-49AF-89F8-8E8DBC89E659}" = Microsoft .NET Framework 3.0 French Language Pack
                          "{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3
                          "{EA7B3CC4-366D-4CF6-8350-FD7A7034116E}" = Adobe InDesign CS3 Icon Handler
                          "{EE353798-E875-42E0-B58D-7E6696182EA8}" = Adobe Media Encoder CS4 Dolby
                          "{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
                          "{F0207194-35B9-4476-B02E-395EE52B5960}" = ASUS nVidia Driver
                          "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
                          "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
                          "{F196AC50-7C95-42E1-9947-BDAB18BF3C8C}" = Microsoft .NET Framework 2.0 Language Pack - FRA
                          "{F784C4A8-2D71-4376-9E47-F9F8AABC377E}" = ASUS Utilities
                          "{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
                          "{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
                          "{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
                          "{FE8327F9-3AC1-4586-8C7E-3DEE2BC92441}" = Adobe InDesign CS3
                          "{FF29A7E2-FF40-4D07-B7E4-2093DE59E10A}" = Adobe Color NA Extra Settings
                          "Adobe Acrobat 8 Professional - English, Français, Deutsch" = Adobe Acrobat 8.1.3 Professional
                          "Adobe AIR" = Adobe AIR
                          "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
                          "Adobe_26b63376f4efc354dae41af6b5e3343" = Adobe Premiere Pro CS4
                          "Adobe_e79070e1ef25043cbd93191267ecaf0" = Ajouter ou supprimer Adobe Creative Suite 3 Design Premium
                          "Akamai" = Akamai NetSession Interface
                          "avast" = avast! Free Antivirus
                          "AVS DVD Player_is1" = AVS DVD Player version 2.4
                          "AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.2
                          "Carom3D" = Carom3D
                          "chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
                          "Conduite 3D" = Micro Application - Conduite 3D
                          "EPSON Scanner" = EPSON Scan
                          "EPSON Stylus SX200_SX400_TX200_TX400 Guide d'utilisation" = EPSON Stylus SX200_SX400_TX200_TX400 Manuel
                          "EspaceWanadoo.exe" = Wanadoo
                          "EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.50
                          "FileZilla Client" = FileZilla Client 3.3.5.1
                          "Free Easy Burner_is1" = Free Easy Burner V 3.8
                          "Frozen-Bubble_is1" = Frozen-Bubble 1.0
                          "Google Chrome" = Google Chrome
                          "HijackThis" = HijackThis 2.0.2
                          "IconWorkshop" = Axialis IconWorkshop 6.33
                          "ie8" = Windows Internet Explorer 8 Release Candidate 1
                          "InstallShield_{12E11FBB-7CA6-4A86-834D-5E6390D51009}" = ASUS Smart Doctor
                          "InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email
                          "InstallShield_{7A529246-912F-4C40-A82A-E608DB702FD7}" = ASUS VideoSecurity Online
                          "KLiteCodecPack_is1" = K-Lite Codec Pack 4.2.5 (Full)
                          "Lexmark 2300 Series" = Lexmark 2300 Series
                          "McAfee Security Scan" = McAfee Security Scan
                          "MediaCoder" = MediaCoder 0.6.0
                          "Messager Wanadoo.exe" = Messager Wanadoo
                          "Messenger Plus! Live" = Messenger Plus! Live
                          "Microsoft .NET Framework 2.0 Language Pack - FRA" = Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA
                          "Microsoft .NET Framework 3.0 French Language Pack" = Module de prise en charge linguistique du français de Microsoft .NET Framework 3.0
                          "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
                          "Mozilla Firefox 5.0.1 (x86 fr)" = Mozilla Firefox 5.0.1 (x86 fr)
                          "Mozilla Thunderbird (2.0.0.18)" = Mozilla Thunderbird (2.0.0.18)
                          "MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
                          "MSNINST" = MSN
                          "Nettoyer mon PC_is1" = Nettoyer mon PC 4.2.0.2
                          "NVIDIA Drivers" = NVIDIA Drivers
                          "Pen Tablet Driver" = Pen Tablet
                          "Pervasive System Analyzer" = Pervasive System Analyzer
                          "PROPLUS" = Microsoft Office Professional Plus 2007
                          "ProtectDisc Driver 11" = ProtectDisc Driver, Version 11
                          "Three Cards to Midnight 1.00" = Three Cards to Midnight 1.00
                          "Usbfix" = UsbFix By El Desaparecido
                          "VLC media player" = VLC media player 1.0.2
                          "VSO DivxToDVD_is1" = DivxToDVD 0.5.2
                          "Windows Media Format Runtime" = Windows Media Format 11 runtime
                          "Windows Media Player" = Lecteur Windows Media 11
                          "WinLiveSuite_Wave3" = Installation Windows Live
                          "WinRAR archiver" = Archiveur WinRAR
                          "WMFDist11" = Windows Media Format 11 runtime
                          "wmp11" = Windows Media Player 11
                          "Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
                          "XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
                          "XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
                          "Xvid Video Codec 1.3.1" = Xvid Video Codec
                          "ZHPDiag_is1" = ZHPDiag 1.28

                          [color=#E56717]========== HKEY_USERS Uninstall List ==========/color

                          [HKEY_USERS\S-1-5-21-776561741-1965331169-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
                          "Ad-Remover" = Ad-Remover
                          "uTorrent" = µTorrent

                          [color=#E56717]========== Last 10 Event Log Errors ==========/color

                          [ Antivirus Events ]
                          Error - 08/02/2011 13:44:35 | Computer Name = WINXPSP3 | Source = avast! | ID = 33554522
                          Description =

                          Error - 08/02/2011 13:44:44 | Computer Name = WINXPSP3 | Source = avast! | ID = 33554522
                          Description =

                          Error - 08/02/2011 13:45:21 | Computer Name = WINXPSP3 | Source = avast! | ID = 33554522
                          Description =

                          Error - 08/02/2011 13:46:00 | Computer Name = WINXPSP3 | Source = avast! | ID = 33554522
                          Description =

                          Error - 08/02/2011 13:46:17 | Computer Name = WINXPSP3 | Source = avast! | ID = 33554522
                          Description =

                          Error - 08/02/2011 13:46:18 | Computer Name = WINXPSP3 | Source = avast! | ID = 33554522
                          Description =

                          Error - 08/02/2011 13:46:18 | Computer Name = WINXPSP3 | Source = avast! | ID = 33554522
                          Description =

                          Error - 08/02/2011 13:46:18 | Computer Name = WINXPSP3 | Source = avast! | ID = 33554522
                          Description =

                          Error - 08/02/2011 13:46:19 | Computer Name = WINXPSP3 | Source = avast! | ID = 33554522
                          Description =

                          Error - 08/02/2011 13:46:21 | Computer Name = WINXPSP3 | Source = avast! | ID = 33554522
                          Description =

                          [ Application Events ]
                          Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                          Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                          writing installation information to disk. Check to make sure enough disk space
                          is available, and click Retry, or Cancel to end the installation.

                          Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                          Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                          writing installation information to disk. Check to make sure enough disk space
                          is available, and click Retry, or Cancel to end the installation.

                          Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                          Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                          writing installation information to disk. Check to make sure enough disk space
                          is available, and click Retry, or Cancel to end the installation.

                          Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                          Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                          writing installation information to disk. Check to make sure enough disk space
                          is available, and click Retry, or Cancel to end the installation.

                          Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                          Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                          writing installation information to disk. Check to make sure enough disk space
                          is available, and click Retry, or Cancel to end the installation.

                          Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                          Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                          writing installation information to disk. Check to make sure enough disk space
                          is available, and click Retry, or Cancel to end the installation.

                          Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                          Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                          writing installation information to disk. Check to make sure enough disk space
                          is available, and click Retry, or Cancel to end the installation.

                          Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                          Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                          writing installation information to disk. Check to make sure enough disk space
                          is available, and click Retry, or Cancel to end the installation.

                          Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                          Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                          writing installation information to disk. Check to make sure enough disk space
                          is available, and click Retry, or Cancel to end the installation.

                          Error - 01/09/2011 19:42:08 | Computer Name = WINXPSP3 | Source = Application Error | ID = 1000
                          Description = Application défaillante iexplore.exe, version 8.0.6001.18372, module
                          défaillant ieapfltr.dll, version 8.0.6001.18448, adresse de défaillance 0x0000336f.

                          [ Application Events ]
                          Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                          Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                          writing installation information to disk. Check to make sure enough disk space
                          is available, and click Retry, or Cancel to end the installation.

                          Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                          Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                          writing installation information to disk. Check to make sure enough disk space
                          is available, and click Retry, or Cancel to end the installation.

                          Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                          Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                          writing installation information to disk. Check to make sure enough disk space
                          is available, and click Retry, or Cancel to end the installation.

                          Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                          Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                          writing installation information to disk. Check to make sure enough disk space
                          is available, and click Retry, or Cancel to end the installation.

                          Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                          Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                          writing installation information to disk. Check to make sure enough disk space
                          is available, and click Retry, or Cancel to end the installation.

                          Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                          Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                          writing installation information to disk. Check to make sure enough disk space
                          is available, and click Retry, or Cancel to end the installation.

                          Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                          Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                          writing installation information to disk. Check to make sure enough disk space
                          is available, and click Retry, or Cancel to end the installation.

                          Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                          Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                          writing installation information to disk. Check to make sure enough disk space
                          is available, and click Retry, or Cancel to end the installation.

                          Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                          Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                          writing installation information to disk. Check to make sure enough disk space
                          is available, and click Retry, or Cancel to end the installation.

                          Error - 01/09/2011 19:42:08 | Computer Name = WINXPSP3 | Source = Application Error | ID = 1000
                          Description = Application défaillante iexplore.exe, version 8.0.6001.18372, module
                          défaillant ieapfltr.dll, version 8.0.6001.18448, adresse de défaillance 0x0000336f.

                          [ System Events ]
                          Error - 30/08/2011 16:53:31 | Computer Name = WINXPSP3 | Source = Cdrom | ID = 262155
                          Description = Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

                          Error - 30/08/2011 16:53:32 | Computer Name = WINXPSP3 | Source = Cdrom | ID = 262155
                          Description = Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

                          Error - 30/08/2011 16:53:33 | Computer Name = WINXPSP3 | Source = Cdrom | ID = 262155
                          Description = Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

                          Error - 30/08/2011 16:53:34 | Computer Name = WINXPSP3 | Source = Cdrom | ID = 262155
                          Description = Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

                          Error - 30/08/2011 16:53:35 | Computer Name = WINXPSP3 | Source = Cdrom | ID = 262155
                          Description = Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

                          Error - 30/08/2011 16:53:36 | Computer Name = WINXPSP3 | Source = Cdrom | ID = 262155
                          Description = Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

                          Error - 30/08/2011 16:53:37 | Computer Name = WINXPSP3 | Source = Cdrom | ID = 262155
                          Description = Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

                          Error - 30/08/2011 19:23:34 | Computer Name = WINXPSP3 | Source = Service Control Manager | ID = 7000
                          Description = Le service MFP Server Enhanced Controller n'a pas pu démarrer en raison
                          de l'erreur : %%1058

                          Error - 31/08/2011 16:56:26 | Computer Name = WINXPSP3 | Source = Service Control Manager | ID = 7000
                          Description = Le service MFP Server Enhanced Controller n'a pas pu démarrer en raison
                          de l'erreur : %%1058

                          Error - 01/09/2011 19:45:31 | Computer Name = WINXPSP3 | Source = Service Control Manager | ID = 7000
                          Description = Le service MFP Server Enhanced Controller n'a pas pu démarrer en raison
                          de l'erreur : %%1058

                          < End of report >
                          1. je voudrais bien, mais pas moyen!!!

                            http://www.itxassociates.com/OT-Tools/OTL.exe

                            identification requise

                            peut être aurais tu un autre lien?
                            1. pas de p...mais du coup c'est la version 3.2.27.0 alors que celle de ton tuto pour la config est antérieure

                              le lien
                              http://www.cijoint.fr/cjlink.php?file=cj201109/cijEnUNY1K.txt

                              et l'extra

                              OTL Extras logfile created on: 04/09/2011 23:14:03 - Run 2
                              OTL by OldTimer - Version 3.2.27.0 Folder = C:\Documents and Settings\Mr GREEN\Bureau
                              Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
                              Internet Explorer (Version = 8.0.6001.18372)
                              Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

                              2,00 Gb Total Physical Memory | 1,41 Gb Available Physical Memory | 70,53% Memory free
                              3,85 Gb Paging File | 3,43 Gb Available in Paging File | 89,10% Paging File free
                              Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

                              %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS.0 | %ProgramFiles% = C:\Program Files
                              Drive C: | 56,64 Gb Total Space | 0,04 Gb Free Space | 0,06% Space Free | Partition Type: NTFS
                              Drive D: | 176,23 Gb Total Space | 85,95 Gb Free Space | 48,77% Space Free | Partition Type: NTFS
                              Drive E: | 298,02 Gb Total Space | 9,99 Gb Free Space | 3,35% Space Free | Partition Type: FAT32

                              Computer Name: WINXPSP3 | User Name: Mr GREEN | Logged in as Administrator.
                              Boot Mode: Normal | Scan Mode: All users
                              Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days

                              [color=#E56717]========== Extra Registry (All) ==========/color

                              [color=#E56717]========== File Associations ==========/color

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
                              .bat [@ = batfile] -- "%1" %*
                              .chm [@ = chm.file] -- C:\WINDOWS.0\hh.exe (Microsoft Corporation)
                              .cmd [@ = cmdfile] -- "%1" %*
                              .com [@ = comfile] -- "%1" %*
                              .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
                              .exe [@ = exefile] -- "%1" %*
                              .hlp [@ = hlpfile] -- C:\WINDOWS.0\System32\winhlp32.exe (Microsoft Corporation)
                              .hta [@ = htafile] -- C:\WINDOWS.0\System32\mshta.exe (Microsoft Corporation)
                              .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
                              .inf [@ = inffile] -- C:\WINDOWS.0\System32\NOTEPAD.EXE (Microsoft Corporation)
                              .ini [@ = inifile] -- C:\WINDOWS.0\System32\NOTEPAD.EXE (Microsoft Corporation)
                              .url [@ = InternetShortcut] -- C:\WINDOWS.0\System32\rundll32.exe (Microsoft Corporation)
                              .js [@ = jsfile] -- C:\WINDOWS.0\System32\WScript.exe (Microsoft Corporation)
                              .jse [@ = JSEFile] -- C:\WINDOWS.0\System32\WScript.exe (Microsoft Corporation)
                              .pif [@ = piffile] -- "%1" %*
                              .reg [@ = regfile] -- C:\WINDOWS.0\regedit.exe (Microsoft Corporation)
                              .scr [@ = scrfile] -- "%1" /S
                              .txt [@ = txtfile] -- C:\WINDOWS.0\System32\NOTEPAD.EXE (Microsoft Corporation)
                              .vbe [@ = VBEFile] -- C:\WINDOWS.0\System32\WScript.exe (Microsoft Corporation)
                              .vbs [@ = VBSFile] -- C:\WINDOWS.0\System32\WScript.exe (Microsoft Corporation)
                              .wsf [@ = WSFFile] -- C:\WINDOWS.0\System32\WScript.exe (Microsoft Corporation)
                              .wsh [@ = WSHFile] -- C:\WINDOWS.0\System32\WScript.exe (Microsoft Corporation)

                              [HKEY_USERS\S-1-5-21-776561741-1965331169-1801674531-1003\SOFTWARE\Classes\<extension>]
                              .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
                              .url [@ = InternetShortcut] -- C:\WINDOWS.0\System32\rundll32.exe (Microsoft Corporation)

                              [color=#E56717]========== Shell Spawning ==========/color

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
                              batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
                              batfile [open] -- "%1" %*
                              batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
                              chm.file [open] -- "C:\WINDOWS.0\hh.exe" %1 (Microsoft Corporation)
                              cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
                              cmdfile [open] -- "%1" %*
                              cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
                              comfile [open] -- "%1" %*
                              cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
                              exefile [open] -- "%1" %*
                              helpfile [open] -- winhlp32.exe %1 (Microsoft Corporation)
                              hlpfile [open] -- %SystemRoot%\System32\winhlp32.exe %1 (Microsoft Corporation)
                              htafile [open] -- C:\WINDOWS.0\system32\mshta.exe "%1" %* (Microsoft Corporation)
                              htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
                              htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
                              htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
                              htmlfile [print] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
                              http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
                              https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
                              inffile [install] -- %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)
                              inffile [open] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
                              inffile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
                              inifile [open] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
                              inifile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
                              InternetShortcut [open] -- "C:\WINDOWS.0\system32\rundll32.exe" "C:\WINDOWS.0\system32\ieframe.dll",OpenURL %l (Microsoft Corporation)
                              InternetShortcut [print] -- "C:\WINDOWS.0\system32\rundll32.exe" "C:\WINDOWS.0\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
                              jsfile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
                              jsfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
                              jsfile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
                              jsefile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
                              jsefile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
                              jsefile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
                              piffile [open] -- "%1" %*
                              regfile [edit] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
                              regfile [open] -- regedit.exe "%1" (Microsoft Corporation)
                              regfile [merge] -- Reg Error: Key error.
                              regfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
                              scrfile [config] -- "%1"
                              scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
                              scrfile [open] -- "%1" /S
                              txtfile [edit] -- Reg Error: Key error.
                              txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
                              txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
                              txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
                              vbefile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
                              vbefile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
                              vbefile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
                              vbsfile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
                              vbsfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
                              vbsfile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
                              wsffile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
                              wsffile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
                              wsffile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
                              wshfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
                              Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
                              Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
                              Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
                              Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
                              Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
                              Folder [open] -- C:\WINDOWS.0\explorer.exe (Microsoft Corporation)
                              Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
                              Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
                              Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
                              CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

                              [color=#E56717]========== Security Center Settings ==========/color

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
                              "FirstRunDisabled" = 1
                              "AntiVirusDisableNotify" = 0
                              "FirewallDisableNotify" = 0
                              "UpdatesDisableNotify" = 0
                              "AntiVirusOverride" = 0
                              "FirewallOverride" = 0

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

                              [color=#E56717]========== System Restore Settings ==========/color

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
                              "DisableSR" = 0

                              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
                              "Start" = 0

                              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
                              "Start" = 2

                              [color=#E56717]========== Firewall Settings ==========/color

                              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

                              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
                              "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
                              "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
                              "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
                              "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
                              "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
                              "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
                              "3389:TCP" = 3389:TCP:*:Disabled:@xpsp2res.dll,-22009

                              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
                              "EnableFirewall" = 0
                              "DoNotAllowExceptions" = 0

                              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
                              "3703:TCP" = 3703:TCP:*:Enabled:Adobe Version Cue CS3 Server
                              "3704:TCP" = 3704:TCP:*:Enabled:Adobe Version Cue CS3 Server
                              "50900:TCP" = 50900:TCP:*:Enabled:Adobe Version Cue CS3 Server
                              "50901:TCP" = 50901:TCP:*:Enabled:Adobe Version Cue CS3 Server
                              "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
                              "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
                              "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
                              "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
                              "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
                              "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
                              "3389:TCP" = 3389:TCP:*:Disabled:@xpsp2res.dll,-22009
                              "48113:TCP" = 48113:TCP:LocalSubNet:Enabled:maconfig_tcp
                              "48113:UDP" = 48113:UDP:LocalSubNet:Enabled:maconfig_udp
                              "1036:TCP" = 1036:TCP:*:Enabled:Akamai NetSession Interface
                              "5000:UDP" = 5000:UDP:*:Enabled:Akamai NetSession Interface

                              [color=#E56717]========== Authorized Applications List ==========/color

                              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
                              "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
                              "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
                              "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" = C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger -- (Microsoft Corporation)

                              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
                              "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
                              "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
                              "C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe" = C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe:*:Enabled:Adobe Version Cue CS3 Server -- (Adobe Systems Incorporated)
                              "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
                              "C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe" = C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe:*:Enabled:Adobe Dreamweaver CS3 -- (Adobe Systems, Inc.)
                              "C:\PVSW\Bin\w3dbsmgr.exe" = C:\PVSW\Bin\w3dbsmgr.exe:*:Enabled:Database Service Manager -- ()
                              "C:\Program Files\Iomega\ScreenPlay HD Discovery\ScreenPlay Discovery.exe" = C:\Program Files\Iomega\ScreenPlay HD Discovery\ScreenPlay Discovery.exe:*:Enabled:ScreenPlay Discovery -- (Iomega Corp.)
                              "C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
                              "C:\Program Files\MFP Server\App\Common\MFPAgent.exe" = C:\Program Files\MFP Server\App\Common\MFPAgent.exe:*:Enabled:MFP Agent -- (Edimax Technology Co., Ltd.)
                              "C:\Documents and Settings\Mr GREEN\Bureau\utorrent.exe" = C:\Documents and Settings\Mr GREEN\Bureau\utorrent.exe:*:Enabled:µTorrent
                              "C:\Program Files\Skype\Plugin Manager\skypePM.exe" = C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager -- (Skype Technologies)
                              "C:\Program Files\ma-config.com\maconfservice.exe" = C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice -- (CybelSoft)
                              "C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)
                              "C:\Program Files\Bonjour\mDNSResponder.exe" = C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour -- (Apple Inc.)
                              "C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)
                              "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" = C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger -- (Microsoft Corporation)

                              [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========/color

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
                              "{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
                              "{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3
                              "{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
                              "{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting
                              "{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
                              "{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
                              "{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
                              "{121634B0-2F4B-11D3-ADA3-00C04F52DD52}" = Windows Installer Clean Up
                              "{12E11FBB-7CA6-4A86-834D-5E6390D51009}" = ASUS Smart Doctor
                              "{133742BA-6F46-4D3E-85AF-78631D9AD8B8}" = Installation Windows Live
                              "{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
                              "{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
                              "{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin
                              "{1B0BCA28-1F11-4D60-8A2F-DEBE04B5341E}" = Adobe Flash Video Encoder
                              "{1C1036EB-D736-4A71-9F76-CF962C4F3697}" = EBP Immobilisations
                              "{1D58229F-C505-45CA-8223-F35F3A34B963}" = Adobe Version Cue CS3 Server
                              "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
                              "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Outil de téléchargement Windows Live
                              "{207BB01A-0163-43E0-8CE9-BE494505BE0F}" = Ma-Config.com
                              "{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email
                              "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
                              "{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 17
                              "{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3
                              "{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}" = EPSON Scan Assistant
                              "{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour
                              "{2DA701B1-5597-44BA-BA96-ED6A737CCA57}" = Playlist Management
                              "{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support
                              "{315ACD04-BCEB-478B-9B1D-5431D0E6CB11}" = ASUS Gamer OSD
                              "{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
                              "{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
                              "{35B2F4D8-620A-4C54-9295-56A2FA8B4E1E}" = Iomega ScreenPlay HD Discovery
                              "{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = JMB36X Raid Configurer
                              "{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
                              "{42EDF895-158C-484E-A7F2-42B90759F281}" = Camera RAW Plug-In for EPSON Creativity Suite
                              "{445B183D-F4F1-45C8-B9DB-F11355CA657B}" = Windows Live Messenger
                              "{46CBBDF8-55B5-40DB-B459-7B848394309C}" = EPSON File Manager
                              "{4BDB76C6-902E-41D5-9064-68768E02886B}" = Adobe Dreamweaver CS3
                              "{534AC850-BF98-4D2C-902A-B17A37E42DA0}" = Réussir son ASSR
                              "{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3
                              "{566BB41D-F006-4956-A5D3-94D8DFFA7F51}" = Adobe Setup
                              "{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
                              "{5827A3F0-23B3-414F-BFD8-95F96A3D199D}" = EBP Comptabilité
                              "{5FCFC78C-438A-4F4D-B266-E32B8468BAFC}" = Pervasive.SQL V8 Workgroup (v8.6)
                              "{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}" = Adobe Dynamiclink Support
                              "{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
                              "{6901DD22-527A-41EF-9059-E81FEDE9E494}" = Windows Presentation Foundation Language Pack (FRA)
                              "{6B708481-748A-4EB4-97C1-CD386244FF77}" = Adobe MotionPicture Color Files
                              "{6BBAA81D-6A7E-43AD-8889-2F002DCAAFDD}" = AHV content for Acrobat and Flash
                              "{6E08CE13-C2AB-4749-9335-5900B958929E}" = Adobe Illustrator CS3
                              "{6E9EF98E-259E-416D-B5F8-0ABDB99942CE}" = Adobe Flash Player 10 ActiveX
                              "{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3
                              "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
                              "{73B5D990-04EA-4751-B10F-5534770B91F2}" = Adobe Color EU Recommended Settings
                              "{75ADEFA2-D4FF-4B37-9E93-4306E6AC176B}_is1" = ImgBurn 2.3.2.0 Fr
                              "{76C24F39-B161-498F-BD8B-C64789812D13}_is1" = ConvertXtoDVD 3.3.2.100
                              "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
                              "{7A529246-912F-4C40-A82A-E608DB702FD7}" = ASUS VideoSecurity Online
                              "{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}" = EPSON Web-To-Page
                              "{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3
                              "{80FD3971-8482-49C8-BA8C-B6464A15882F}" = Adobe Flash CS3
                              "{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
                              "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110422467}" = Tiks Texas Hold em
                              "{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
                              "{881F5DE8-9367-4B81-A325-E91BBC6472F9}" = iTunes
                              "{8A8F8391-4C2C-4BE1-A984-CD4A5A546467}" = EPSON Easy Photo Print
                              "{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3
                              "{90120000-0010-040C-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (French) 12
                              "{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007
                              "{90120000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2007
                              "{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007
                              "{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007
                              "{90120000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2007
                              "{90120000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2007
                              "{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007
                              "{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007
                              "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
                              "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
                              "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
                              "{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007
                              "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
                              "{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007
                              "{90120000-0044-040C-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (French) 2007
                              "{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007
                              "{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3
                              "{90FF23FE-0E1B-40DF-A22E-B4C0372E5936}" = Iomega Product Registration
                              "{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
                              "{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
                              "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
                              "{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
                              "{98736A65-3C79-49EC-B7E9-A3C77774B0E6}" = Google SketchUp 6
                              "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
                              "{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3
                              "{9D3F3D5A-BE6D-48C4-B51E-E2D6753ABCDE}" = Adobe Setup
                              "{9DF0196F-B6B8-4C3A-8790-DE42AA530101}" = SPORE(TM)
                              "{9F52ABCA-E38F-4132-B5C5-211055868AB6}" = EBP Comptabilité et Facturation
                              "{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
                              "{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
                              "{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific
                              "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
                              "{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
                              "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
                              "{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}" = PDF Settings
                              "{AC76BA86-1033-F400-7760-000000000003}" = Adobe Acrobat 8 Professional - English, Français, Deutsch
                              "{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
                              "{B168C59D-5FCF-4EEC-B464-BFA7A8266150}" = Windows Communication Foundation Language Pack - FRA
                              "{B169BC97-B8AA-4ACA-9CF2-9D0FF5BABDF7}" = Adobe Premiere Pro CS4 Functional Content
                              "{B1EF7B00-8FCC-4209-BFB6-37C50B354B2A}" = Adobe Creative Suite 3 Design Premium
                              "{B3B487E7-6171-4376-9074-B28082CEB504}" = Windows Live Call
                              "{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0
                              "{B3D8B2F8-3C2C-45BC-933E-8B60E78F6684}" = Google SketchUp 6
                              "{B3FED300-806C-11E0-A0D0-B8AC6F97B88E}" = Google Earth
                              "{B671CBFD-4109-4D35-9252-3062D3CCB7B2}" = Adobe SING CS3
                              "{B73CFB12-C814-4638-AFFD-7E3AAFAF0B4E}" = Adobe BridgeTalk Plugin CS3
                              "{B84C141C-9A13-44BE-9A69-301D7B11D836}" = Windows Workflow Foundation FR Language Pack
                              "{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
                              "{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
                              "{BCC57687-98A2-4C4C-B0F8-BC6B6F52D4E3}" = Retrospect Express HD 2.5
                              "{BCE0B7AC-9F72-454E-9265-E963C60530B1}" = Cegid CommonFiles
                              "{BE5F3842-8309-4754-92D5-83E02E6077A3}" = Adobe Extension Manager CS3
                              "{BE9CEAAA-F069-4331-BF2F-8D350F6504F4}" = Adobe Media Encoder CS4 Additional Exporter
                              "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
                              "{C1FA4B3B-1625-4922-9C9D-780E8FCE161A}" = Adobe Photoshop CS3
                              "{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2
                              "{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
                              "{C4E1603B-E550-4A14-8F53-4E989849D1B4}" = Google SketchUp 8
                              "{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
                              "{C5BD220A-EFE8-48A5-B70E-9503D535FACE}" = Adobe WAS CS3
                              "{C950420B-4182-49EA-850A-A6A2ABF06C6B}" = Marvell Miniport Driver
                              "{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
                              "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
                              "{CFC9F871-7C40-40B6-BE4A-B98A5B309716}" = Adobe Flash Professional CS5
                              "{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client
                              "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype(TM) 4.2
                              "{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
                              "{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}" = Assistant de connexion Windows Live
                              "{D499F8DE-3F31-4900-9157-61061613704B}" = Adobe Premiere Pro CS4
                              "{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
                              "{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}" = Adobe Color JA Extra Settings
                              "{DE3BB35E-C0CE-4CA1-9CB4-CD9E69364BD9}" = Adobe Premiere Pro CS4
                              "{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}" = Adobe Media Encoder CS4
                              "{E2883E8F-472F-4fb0-9522-AC9BF37916A7}" = Adobe Download Manager
                              "{E3C080B0-23F5-49AF-89F8-8E8DBC89E659}" = Microsoft .NET Framework 3.0 French Language Pack
                              "{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3
                              "{EA7B3CC4-366D-4CF6-8350-FD7A7034116E}" = Adobe InDesign CS3 Icon Handler
                              "{EE353798-E875-42E0-B58D-7E6696182EA8}" = Adobe Media Encoder CS4 Dolby
                              "{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
                              "{F0207194-35B9-4476-B02E-395EE52B5960}" = ASUS nVidia Driver
                              "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
                              "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
                              "{F196AC50-7C95-42E1-9947-BDAB18BF3C8C}" = Microsoft .NET Framework 2.0 Language Pack - FRA
                              "{F784C4A8-2D71-4376-9E47-F9F8AABC377E}" = ASUS Utilities
                              "{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
                              "{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
                              "{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
                              "{FE8327F9-3AC1-4586-8C7E-3DEE2BC92441}" = Adobe InDesign CS3
                              "{FF29A7E2-FF40-4D07-B7E4-2093DE59E10A}" = Adobe Color NA Extra Settings
                              "Adobe Acrobat 8 Professional - English, Français, Deutsch" = Adobe Acrobat 8.1.3 Professional
                              "Adobe AIR" = Adobe AIR
                              "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
                              "Adobe_26b63376f4efc354dae41af6b5e3343" = Adobe Premiere Pro CS4
                              "Adobe_e79070e1ef25043cbd93191267ecaf0" = Ajouter ou supprimer Adobe Creative Suite 3 Design Premium
                              "Akamai" = Akamai NetSession Interface
                              "avast" = avast! Free Antivirus
                              "AVS DVD Player_is1" = AVS DVD Player version 2.4
                              "AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.2
                              "Carom3D" = Carom3D
                              "chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
                              "Conduite 3D" = Micro Application - Conduite 3D
                              "EPSON Scanner" = EPSON Scan
                              "EPSON Stylus SX200_SX400_TX200_TX400 Guide d'utilisation" = EPSON Stylus SX200_SX400_TX200_TX400 Manuel
                              "EspaceWanadoo.exe" = Wanadoo
                              "EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.50
                              "FileZilla Client" = FileZilla Client 3.3.5.1
                              "Free Easy Burner_is1" = Free Easy Burner V 3.8
                              "Frozen-Bubble_is1" = Frozen-Bubble 1.0
                              "Google Chrome" = Google Chrome
                              "HijackThis" = HijackThis 2.0.2
                              "IconWorkshop" = Axialis IconWorkshop 6.33
                              "ie8" = Windows Internet Explorer 8 Release Candidate 1
                              "InstallShield_{12E11FBB-7CA6-4A86-834D-5E6390D51009}" = ASUS Smart Doctor
                              "InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email
                              "InstallShield_{7A529246-912F-4C40-A82A-E608DB702FD7}" = ASUS VideoSecurity Online
                              "KLiteCodecPack_is1" = K-Lite Codec Pack 4.2.5 (Full)
                              "Lexmark 2300 Series" = Lexmark 2300 Series
                              "McAfee Security Scan" = McAfee Security Scan
                              "MediaCoder" = MediaCoder 0.6.0
                              "Messager Wanadoo.exe" = Messager Wanadoo
                              "Messenger Plus! Live" = Messenger Plus! Live
                              "Microsoft .NET Framework 2.0 Language Pack - FRA" = Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA
                              "Microsoft .NET Framework 3.0 French Language Pack" = Module de prise en charge linguistique du français de Microsoft .NET Framework 3.0
                              "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
                              "Mozilla Firefox 5.0.1 (x86 fr)" = Mozilla Firefox 5.0.1 (x86 fr)
                              "Mozilla Thunderbird (2.0.0.18)" = Mozilla Thunderbird (2.0.0.18)
                              "MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
                              "MSNINST" = MSN
                              "Nettoyer mon PC_is1" = Nettoyer mon PC 4.2.0.2
                              "NVIDIA Drivers" = NVIDIA Drivers
                              "Pen Tablet Driver" = Pen Tablet
                              "Pervasive System Analyzer" = Pervasive System Analyzer
                              "PROPLUS" = Microsoft Office Professional Plus 2007
                              "ProtectDisc Driver 11" = ProtectDisc Driver, Version 11
                              "Three Cards to Midnight 1.00" = Three Cards to Midnight 1.00
                              "Usbfix" = UsbFix By El Desaparecido
                              "VLC media player" = VLC media player 1.0.2
                              "VSO DivxToDVD_is1" = DivxToDVD 0.5.2
                              "Windows Media Format Runtime" = Windows Media Format 11 runtime
                              "Windows Media Player" = Lecteur Windows Media 11
                              "WinLiveSuite_Wave3" = Installation Windows Live
                              "WinRAR archiver" = Archiveur WinRAR
                              "WMFDist11" = Windows Media Format 11 runtime
                              "wmp11" = Windows Media Player 11
                              "Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
                              "XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
                              "XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
                              "Xvid Video Codec 1.3.1" = Xvid Video Codec
                              "ZHPDiag_is1" = ZHPDiag 1.28

                              [color=#E56717]========== HKEY_USERS Uninstall List ==========/color

                              [HKEY_USERS\S-1-5-21-776561741-1965331169-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
                              "Ad-Remover" = Ad-Remover
                              "uTorrent" = µTorrent

                              [color=#E56717]========== Last 10 Event Log Errors ==========/color

                              [ Antivirus Events ]
                              Error - 08/02/2011 13:44:35 | Computer Name = WINXPSP3 | Source = avast! | ID = 33554522
                              Description =

                              Error - 08/02/2011 13:44:44 | Computer Name = WINXPSP3 | Source = avast! | ID = 33554522
                              Description =

                              Error - 08/02/2011 13:45:21 | Computer Name = WINXPSP3 | Source = avast! | ID = 33554522
                              Description =

                              Error - 08/02/2011 13:46:00 | Computer Name = WINXPSP3 | Source = avast! | ID = 33554522
                              Description =

                              Error - 08/02/2011 13:46:17 | Computer Name = WINXPSP3 | Source = avast! | ID = 33554522
                              Description =

                              Error - 08/02/2011 13:46:18 | Computer Name = WINXPSP3 | Source = avast! | ID = 33554522
                              Description =

                              Error - 08/02/2011 13:46:18 | Computer Name = WINXPSP3 | Source = avast! | ID = 33554522
                              Description =

                              Error - 08/02/2011 13:46:18 | Computer Name = WINXPSP3 | Source = avast! | ID = 33554522
                              Description =

                              Error - 08/02/2011 13:46:19 | Computer Name = WINXPSP3 | Source = avast! | ID = 33554522
                              Description =

                              Error - 08/02/2011 13:46:21 | Computer Name = WINXPSP3 | Source = avast! | ID = 33554522
                              Description =

                              [ Application Events ]
                              Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                              Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                              writing installation information to disk. Check to make sure enough disk space
                              is available, and click Retry, or Cancel to end the installation.

                              Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                              Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                              writing installation information to disk. Check to make sure enough disk space
                              is available, and click Retry, or Cancel to end the installation.

                              Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                              Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                              writing installation information to disk. Check to make sure enough disk space
                              is available, and click Retry, or Cancel to end the installation.

                              Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                              Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                              writing installation information to disk. Check to make sure enough disk space
                              is available, and click Retry, or Cancel to end the installation.

                              Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                              Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                              writing installation information to disk. Check to make sure enough disk space
                              is available, and click Retry, or Cancel to end the installation.

                              Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                              Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                              writing installation information to disk. Check to make sure enough disk space
                              is available, and click Retry, or Cancel to end the installation.

                              Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                              Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                              writing installation information to disk. Check to make sure enough disk space
                              is available, and click Retry, or Cancel to end the installation.

                              Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                              Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                              writing installation information to disk. Check to make sure enough disk space
                              is available, and click Retry, or Cancel to end the installation.

                              Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                              Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                              writing installation information to disk. Check to make sure enough disk space
                              is available, and click Retry, or Cancel to end the installation.

                              Error - 01/09/2011 19:42:08 | Computer Name = WINXPSP3 | Source = Application Error | ID = 1000
                              Description = Application défaillante iexplore.exe, version 8.0.6001.18372, module
                              défaillant ieapfltr.dll, version 8.0.6001.18448, adresse de défaillance 0x0000336f.

                              [ Application Events ]
                              Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                              Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                              writing installation information to disk. Check to make sure enough disk space
                              is available, and click Retry, or Cancel to end the installation.

                              Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                              Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                              writing installation information to disk. Check to make sure enough disk space
                              is available, and click Retry, or Cancel to end the installation.

                              Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                              Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                              writing installation information to disk. Check to make sure enough disk space
                              is available, and click Retry, or Cancel to end the installation.

                              Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                              Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                              writing installation information to disk. Check to make sure enough disk space
                              is available, and click Retry, or Cancel to end the installation.

                              Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                              Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                              writing installation information to disk. Check to make sure enough disk space
                              is available, and click Retry, or Cancel to end the installation.

                              Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                              Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                              writing installation information to disk. Check to make sure enough disk space
                              is available, and click Retry, or Cancel to end the installation.

                              Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                              Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                              writing installation information to disk. Check to make sure enough disk space
                              is available, and click Retry, or Cancel to end the installation.

                              Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                              Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                              writing installation information to disk. Check to make sure enough disk space
                              is available, and click Retry, or Cancel to end the installation.

                              Error - 01/09/2011 19:40:59 | Computer Name = WINXPSP3 | Source = MsiInstaller | ID = 11711
                              Description = Product: Adobe Premiere Pro CS4 -- Error 1711.An error occurred while
                              writing installation information to disk. Check to make sure enough disk space
                              is available, and click Retry, or Cancel to end the installation.

                              Error - 01/09/2011 19:42:08 | Computer Name = WINXPSP3 | Source = Application Error | ID = 1000
                              Description = Application défaillante iexplore.exe, version 8.0.6001.18372, module
                              défaillant ieapfltr.dll, version 8.0.6001.18448, adresse de défaillance 0x0000336f.

                              [ System Events ]
                              Error - 30/08/2011 16:53:33 | Computer Name = WINXPSP3 | Source = Cdrom | ID = 262155
                              Description = Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

                              Error - 30/08/2011 16:53:34 | Computer Name = WINXPSP3 | Source = Cdrom | ID = 262155
                              Description = Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

                              Error - 30/08/2011 16:53:35 | Computer Name = WINXPSP3 | Source = Cdrom | ID = 262155
                              Description = Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

                              Error - 30/08/2011 16:53:36 | Computer Name = WINXPSP3 | Source = Cdrom | ID = 262155
                              Description = Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

                              Error - 30/08/2011 16:53:37 | Computer Name = WINXPSP3 | Source = Cdrom | ID = 262155
                              Description = Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

                              Error - 30/08/2011 19:23:34 | Computer Name = WINXPSP3 | Source = Service Control Manager | ID = 7000
                              Description = Le service MFP Server Enhanced Controller n'a pas pu démarrer en raison
                              de l'erreur : %%1058

                              Error - 31/08/2011 16:56:26 | Computer Name = WINXPSP3 | Source = Service Control Manager | ID = 7000
                              Description = Le service MFP Server Enhanced Controller n'a pas pu démarrer en raison
                              de l'erreur : %%1058

                              Error - 01/09/2011 19:45:31 | Computer Name = WINXPSP3 | Source = Service Control Manager | ID = 7000
                              Description = Le service MFP Server Enhanced Controller n'a pas pu démarrer en raison
                              de l'erreur : %%1058

                              Error - 03/09/2011 05:13:24 | Computer Name = WINXPSP3 | Source = Service Control Manager | ID = 7000
                              Description = Le service MFP Server Enhanced Controller n'a pas pu démarrer en raison
                              de l'erreur : %%1058

                              Error - 04/09/2011 17:01:21 | Computer Name = WINXPSP3 | Source = Service Control Manager | ID = 7000
                              Description = Le service MFP Server Enhanced Controller n'a pas pu démarrer en raison
                              de l'erreur : %%1058

                              < End of report >