Virus - Gendarmerie - AIDE SVP

Voila moi mon rapport, que dois je enlever?

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Pre_Scan | 2.210 ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤ XP | Vista | 7 | 8 - 32/64 bits ¤¤¤¤¤

~ Mis à jour le 10/02/2012 | 19.00 par g3n-h@ckm@n
~ Informations Evolution : https://gen-hackman.kanak.fr/
~ Informations sur les switchs Pre_Script : https://gen-hackman.kanak.fr/
~ Remontées rogues : https://gen-hackman.kanak.fr/#504
~ Feedback Pre_scan : https://gen-hackman.kanak.fr/#505

~ Utilisateur : Propriétaire (Administrateurs) | SID = S-1-5-21-918319700-1789878857-3928151191-1001
~ Ordinateur : PC-DE-PROPRIÉTA

~ Système d'exploitation : Windows Vista (TM) Home Premium (32 bits) HomePremium Service Pack 2
~ Enregistré sous : Propriétaire
~ Enregistré sous : Hewlett-Packard Company
~ Processeur : Intel(R) Core(TM)2 Duo CPU E4400 @ 2.00GHz
~ Identification : x86 Family 6 Model 15 Stepping 13
Internet Explorer : 9.0.8112.16421
Mozilla Firefox : 9.0.1 (fr)
Pare-feu windows : Actif
Windows Defender : Inactif

c:\ -> [Fixed] | [HP] | Total : 335760 Mo | Free : 210280 Mo -> NTFS
d:\ -> [Fixed] | [FACTORY_IMAGE] | Total : 7640 Mo | Free : 1020 Mo -> NTFS

Scan : 19:57:04 | 10/02/2012

[HKLM | Auto Update\Results\Detect] | LastSuccessTime -> 2012-02-10 11:07:20
[HKLM | Auto Update\Results\Download] | LastSuccessTime -> 2012-01-26 07:09:41
[HKLM | Auto Update\Results\Install] | LastSuccessTime -> 2012-02-01 09:14:45

¤¤¤¤¤¤¤¤¤¤ | Sessions

~ [HKLM | ProfileList] | S-1-5-21-918319700-1789878857-3928151191-1000 : ProfileImagePath -> C:\Users\IUSR_NMPR
~ [HKLM | ProfileList] | S-1-5-21-918319700-1789878857-3928151191-1000 : RefCount -> 0
~ [HKLM | ProfileList] | S-1-5-21-918319700-1789878857-3928151191-1000 : State -> 516
~ [HKLM | ProfileList] | S-1-5-21-918319700-1789878857-3928151191-1001 : ProfileImagePath -> C:\Users\Propriétaire
~ [HKLM | ProfileList] | S-1-5-21-918319700-1789878857-3928151191-1001 : RefCount -> 1
~ [HKLM | ProfileList] | S-1-5-21-918319700-1789878857-3928151191-1001 : State -> 256
~ [HKLM | ProfileList] | S-1-5-21-918319700-1789878857-3928151191-1003 : ProfileImagePath -> C:\Users\Maman
~ [HKLM | ProfileList] | S-1-5-21-918319700-1789878857-3928151191-1003 : RefCount -> 0
~ [HKLM | ProfileList] | S-1-5-21-918319700-1789878857-3928151191-1003 : State -> 0
~ [HKLM | ProfileList] | S-1-5-21-918319700-1789878857-3928151191-501 : ProfileImagePath -> C:\Users\Invité
~ [HKLM | ProfileList] | S-1-5-21-918319700-1789878857-3928151191-501 : RefCount -> 0
~ [HKLM | ProfileList] | S-1-5-21-918319700-1789878857-3928151191-501 : State -> 128

¤¤¤¤¤¤¤¤¤¤ | Contrôle MD5

[MD5.FD8C53FB002217F6F888BCF6F5D7084D] - (.Microsoft Corporation - Windows Explorer.) (.02/11/2006 - 09:47:18.) -- c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16386_none_4f7de5167cd15deb\explorer.exe [2923520]
[MD5.6D06CD98D954FE87FB2DB8108793B399] - (.Microsoft Corporation - Windows Explorer.) (.15/11/2007 - 09:52:29.) -- c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16549_none_4fac29707cae347a\explorer.exe [2923520]
[MD5.37440D09DEAE0B672A04DCCF7ABF06BE] - (.Microsoft Corporation - Windows Explorer.) (.12/12/2008 - 09:29:25.) -- c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe [2923520]
[MD5.BD06F0BF753BC704B653C3A50F89D362] - (.Microsoft Corporation - Windows Explorer.) (.15/11/2007 - 09:52:29.) -- c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20668_none_501f261995dcf2cf\explorer.exe [2923520]
[MD5.E7156B0B74762D9DE0E66BDCDE06E5FB] - (.Microsoft Corporation - Windows Explorer.) (.12/12/2008 - 09:29:25.) -- c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe [2923520]
[MD5.FFA764631CB70A30065C12EF8E174F9F] - (.Microsoft Corporation - Windows Explorer.) (.01/07/2008 - 08:39:54.) -- c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe [2927104]
[MD5.4F554999D7D5F05DAAEBBA7B5BA1089D] - (.Microsoft Corporation - Windows Explorer.) (.12/12/2008 - 09:29:26.) -- c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe [2927104]
[MD5.50BA5850147410CDE89C523AD3BC606E] - (.Microsoft Corporation - Windows Explorer.) (.12/12/2008 - 09:29:26.) -- c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe [2927616]
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Windows Explorer.) (.24/10/2010 - 16:07:18.) -- c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe [2926592]
[MD5.ABCA209EBA02CB59233614DB83B4F50D] - (.Microsoft Corporation - Processus d'exécuttion client-serveur.) (.01/07/2008 - 08:38:35.) -- c:\windows\system32\csrss.exe [6144]
[MD5.98AF15A94CD6AC37248E72E5FE789B35] - (.Microsoft Corporation - Windows Session Manager.) (.24/10/2010 - 16:06:35.) -- c:\windows\system32\smss.exe [64000]
[MD5.0E135526E9785D085BCD9AEDE6FBCBF9] - (.Microsoft Corporation - Application d'ouverture de session Userinit.) (.01/07/2008 - 08:38:44.) -- c:\windows\system32\userinit.exe [25088]
[MD5.22027835939F86C3E47AD8E3FBDE3D11] - (.Microsoft Corporation - Userinit Logon Application.) (.02/11/2006 - 09:43:52.) -- c:\windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6000.16386_none_d9f1f819d4c4e737\userinit.exe [24576]
[MD5.0E135526E9785D085BCD9AEDE6FBCBF9] - (.Microsoft Corporation - Userinit Logon Application.) (.01/07/2008 - 08:38:44.) -- c:\windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe [25088]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.01/07/2008 - 08:39:29.) -- c:\windows\system32\wininit.exe [96768]
[MD5.D4385B03E8CCCEE6F0EE249F827C1F3E] - (.Microsoft Corporation - Windows Start-Up Application.) (.02/11/2006 - 09:44:42.) -- c:\windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6000.16386_none_2ebbf6d3076595ce\wininit.exe [95744]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Windows Start-Up Application.) (.01/07/2008 - 08:39:29.) -- c:\windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wininit.exe [96768]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.24/10/2010 - 16:06:56.) -- c:\windows\system32\winlogon.exe [314368]
[MD5.9F75392B9128A91ABAFB044EA350BAAD] - (.Microsoft Corporation - Windows Logon Application.) (.02/11/2006 - 09:44:42.) -- c:\windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6000.16386_none_6d8c3f1ad8066b21\winlogon.exe [308224]
[MD5.C2610B6BDBEFC053BBDAB4F1B965CB24] - (.Microsoft Corporation - Windows Logon Application.) (.01/07/2008 - 08:39:40.) -- c:\windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe [314880]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Windows Logon Application.) (.24/10/2010 - 16:06:56.) -- c:\windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe [314368]
[MD5.4B555106290BD117334E9A08761C035A] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) (.02/11/2006 - 09:48:33.) -- c:\windows\system32\rundll32.exe [44544]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.24/10/2010 - 16:06:51.) -- c:\windows\system32\drivers\atapi.sys [19944]
[MD5.B35CFCEF838382AB6490B321C87EDF17] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.13/02/2008 - 10:02:01.) -- c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys [21560]
[MD5.E03E8C99D15D0381E02743C36AFC7C6F] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.13/02/2008 - 10:02:01.) -- c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys [21560]
[MD5.2D9C903DC76A66813D350A562DE40ED9] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.01/07/2008 - 08:39:05.) -- c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys [21560]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.24/10/2010 - 16:06:51.) -- c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys [19944]
[MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.24/10/2010 - 16:06:29.) -- c:\windows\system32\drivers\cdrom.sys [67072]
[MD5.1EC25CEA0DE6AC4718BF89F9E1778B57] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.01/07/2008 - 08:38:36.) -- c:\windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.0.6001.18000_none_5fa95be2a3c76a4a\cdrom.sys [67072]
[MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.24/10/2010 - 16:06:29.) -- c:\windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.0.6002.18005_none_6194d4eea0e93596\cdrom.sys [67072]
[MD5.147281C01FCB1DF9252DE2A10D5E7093] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.24/10/2010 - 16:06:53.) -- c:\windows\system32\drivers\volsnap.sys [226280]
[MD5.80DC0C9BCB579ED9815001A4D37CBFD5] - (.Microsoft Corporation - Volume Shadow Copy Driver.) (.09/01/2008 - 11:28:19.) -- c:\windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.0.6000.16586_none_137ff950ff29e447\volsnap.sys [211000]
[MD5.327639D2EC931B057F3826A51ADC73E9] - (.Microsoft Corporation - Volume Shadow Copy Driver.) (.09/01/2008 - 11:28:19.) -- c:\windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.0.6000.20709_none_146318401803edb5\volsnap.sys [211000]
[MD5.D8B4A53DD2769F226B3EB374374987C9] - (.Microsoft Corporation - Volume Shadow Copy Driver.) (.01/07/2008 - 08:39:57.) -- c:\windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.0.6001.18000_none_15b6b780fc14facd\volsnap.sys [227896]
[MD5.147281C01FCB1DF9252DE2A10D5E7093] - (.Microsoft Corporation - Volume Shadow Copy Driver.) (.24/10/2010 - 16:06:53.) -- c:\windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.0.6002.18005_none_17a2308cf936c619\volsnap.sys [226280]

19:58:51

¤¤¤¤¤¤¤¤¤¤ | Processus en cours

Demarrage : MSE

376 | C:\Windows\System32\smss.exe - SYSTEM - Normal - \SystemRoot\System32\smss.exe - 4
500 | C:\Windows\system32\csrss.exe - SYSTEM - Normal - C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16 - 488
536 | C:\Windows\system32\csrss.exe - SYSTEM - Normal - C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16 - 528
544 | C:\Windows\system32\wininit.exe - SYSTEM - High - wininit.exe - 488
588 | C:\Windows\system32\winlogon.exe - SYSTEM - High - winlogon.exe - 528
620 | C:\Windows\system32\services.exe - SYSTEM - Normal - C:\Windows\system32\services.exe - 544
632 | C:\Windows\system32\lsass.exe - SYSTEM - Normal - C:\Windows\system32\lsass.exe - 544
640 | C:\Windows\system32\lsm.exe - SYSTEM - Normal - C:\Windows\system32\lsm.exe - 544
780 | C:\Windows\system32\svchost.exe - SYSTEM - Normal - C:\Windows\system32\svchost.exe -k DcomLaunch - 620
836 | C:\Windows\system32\svchost.exe - SERVICE RÉSEAU - Normal - C:\Windows\system32\svchost.exe -k rpcss - 620
928 | C:\Windows\System32\svchost.exe - SERVICE LOCAL - Normal - C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted - 620
956 | C:\Windows\system32\svchost.exe - SYSTEM - Normal - C:\Windows\system32\svchost.exe -k netsvcs - 620
996 | C:\Windows\System32\svchost.exe - SYSTEM - Normal - C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted - 620
1036 | C:\Windows\system32\svchost.exe - SERVICE RÉSEAU - Normal - C:\Windows\system32\svchost.exe -k NetworkService - 620
1052 | C:\Windows\system32\svchost.exe - SERVICE LOCAL - Normal - C:\Windows\system32\svchost.exe -k LocalService - 620
1140 | C:\Windows\system32\svchost.exe - SERVICE LOCAL - Normal - C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork - 620
1328 | C:\Windows\system32\svchost.exe - SERVICE RÉSEAU - Normal - C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted - 620
1716 | C:\Users\Propriétaire\Downloads\Pre_scan (1).exe - Propriétaire - High - "C:\Users\Propriétaire\Downloads\Pre_scan (1).exe" - 312
1108 | C:\Windows\system32\Taskmgr.exe - Propriétaire - High - "Taskmgr.exe" - 588
1592 | \\?\C:\Windows\system32\wbem\WMIADAP.EXE - SYSTEM - Normal - wmiadap.exe /F /T /R - 956
1644 | C:\Windows\system32\wbem\wmiprvse.exe - SYSTEM - Normal - C:\Windows\system32\wbem\wmiprvse.exe - 780
1256 | C:\Windows\system32\conime.exe - Propriétaire - Normal - C:\Windows\system32\conime.exe - 1280
820 | C:\Windows\system32\conime.exe - Propriétaire - Normal - C:\Windows\system32\conime.exe - 1376
1748 | C:\Windows\system32\conime.exe - Propriétaire - Normal - C:\Windows\system32\conime.exe - 232
1364 | C:\Windows\system32\conime.exe - Propriétaire - Normal - C:\Windows\system32\conime.exe - 900
1768 | C:\Windows\system32\conime.exe - Propriétaire - Normal - C:\Windows\system32\conime.exe - 492
308 | C:\Windows\system32\conime.exe - Propriétaire - Normal - C:\Windows\system32\conime.exe - 1712
1668 | C:\Windows\system32\cmd.exe - Propriétaire - Normal - C:\Windows\system32\cmd.exe /c"%Homedrive%\Kill'em\Pv.exe -o"%i | %f - %u - %p - %l - %r">>%Homedrive%\Pre_Scan.txt" - 1716
1864 | C:\Windows\system32\conime.exe - Propriétaire - Normal - C:\Windows\system32\conime.exe - 1668
1652 | C:\Kill'em\Pv.exe - Propriétaire - Normal - C:\Kill'em\Pv.exe -o"%i | %f - %u - %p - %l - %r" - 1668

¤¤¤¤¤¤¤¤¤¤ | Démarrage principaux avant suppression

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
"NPSStartup"=
"PlusService"=C:\Program Files\Yuna Software\Messenger Plus!\PlusService.exe [07/10/2011|16:30:43]
"avast"="C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
"Malwarebytes' Anti-Malware"="C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"RoboForm"="C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=%ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
"WindowsWelcomeCenter"=rundll32.exe oobefldr.dll,ShowWelcomeCenter

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=%ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
"WindowsWelcomeCenter"=rundll32.exe oobefldr.dll,ShowWelcomeCenter

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

[HKEY_USERS\S-1-5-21-918319700-1789878857-3928151191-1001\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [01/07/2008|08:38:54]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

[HKEY_USERS\S-1-5-21-918319700-1789878857-3928151191-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce]

[HKEY_USERS\S-1-5-21-918319700-1789878857-3928151191-1001_Classes\Software\Microsoft\Windows\CurrentVersion\Run]

[HKEY_USERS\S-1-5-21-918319700-1789878857-3928151191-1001_Classes\Software\Microsoft\Windows\CurrentVersion\RunOnce]

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run]
"RoboForm"="C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce]

[HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\TkBellExe] | TkBellExe -> "C:\Program Files\Real\RealPlayer\update\realsched.exe" -osboot

¤¤¤¤¤¤¤¤¤¤ | Autres Démarrages Silencieux

[HKEY_LOCAL_MACHINE\Software\Classes\*\shellex\ContextMenuHandlers\7-Zip] | @ -> {23170F69-40C1-278A-1000-000100020000}
[HKEY_LOCAL_MACHINE\Software\Classes\*\shellex\ContextMenuHandlers\avast] | @ -> {472083B0-C522-11CF-8763-00608CC02F24}
[HKEY_LOCAL_MACHINE\Software\Classes\*\shellex\ContextMenuHandlers\BriefcaseMenu] | @ -> {85BBD920-42A0-1069-A2E4-08002B30309D}
[HKEY_LOCAL_MACHINE\Software\Classes\*\shellex\ContextMenuHandlers\EPP] | @ -> {3F3B81BE-529B-40b9-8189-6666B241ADFA}
[HKEY_LOCAL_MACHINE\Software\Classes\*\shellex\ContextMenuHandlers\KonvertorCxtExt] | @ -> {030513C0-BA07-4AC2-88A3-269773B4EE8B}
[HKEY_LOCAL_MACHINE\Software\Classes\*\shellex\ContextMenuHandlers\Open With] | @ -> {09799AFB-AD67-11d1-ABCD-00C04FC30936}
[HKEY_LOCAL_MACHINE\Software\Classes\*\shellex\ContextMenuHandlers\Open With EncryptionMenu] | @ -> {A470F8CF-A1E8-4f65-8335-227475AA5C46}
[HKEY_LOCAL_MACHINE\Software\Classes\*\shellex\ContextMenuHandlers\Sharing] | @ -> {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}
[HKEY_LOCAL_MACHINE\Software\Classes\*\shellex\ContextMenuHandlers\Shell Extension for Malware scanning] | @ -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A}
[HKEY_LOCAL_MACHINE\Software\Classes\*\shellex\ContextMenuHandlers\ShellExtension] | @ ->
[HKEY_LOCAL_MACHINE\Software\Classes\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}] | @ -> Start Menu Pin
[HKEY_LOCAL_MACHINE\Software\Classes\*\shellex\PropertySheetHandlers\BriefcasePage] | @ -> {85BBD920-42A0-1069-A2E4-08002B30309D}
[HKEY_LOCAL_MACHINE\Software\Classes\*\shellex\PropertySheetHandlers\CryptoSignMenu] | @ -> {7444C719-39BF-11D1-8CD9-00C04FC29D45}
[HKEY_LOCAL_MACHINE\Software\Classes\*\shellex\PropertySheetHandlers\{1f2e5c40-9550-11ce-99d2-00aa006e086c}] | @ ->
[HKEY_LOCAL_MACHINE\Software\Classes\*\shellex\PropertySheetHandlers\{3EA48300-8CF6-101B-84FB-666CCB9BCD32}] | @ -> OLE DocFile Property Page
[HKEY_LOCAL_MACHINE\Software\Classes\*\shellex\PropertySheetHandlers\{883373C3-BF89-11D1-BE35-080036B11A03}] | @ -> Summary Properties Page
[HKEY_LOCAL_MACHINE\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\00avast] | @ -> {472083B0-C522-11CF-8763-00608CC02F24}
[HKEY_LOCAL_MACHINE\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\CopyAsPathMenu] | @ -> {f3d06e7c-1e45-4a26-847e-f9fcdee59be0}
[HKEY_LOCAL_MACHINE\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\MBAMShlExt] | @ -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3}
[HKEY_LOCAL_MACHINE\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\Send To] | @ -> {7BA4C740-9E81-11CF-99D3-00AA004AE837}
[HKEY_LOCAL_MACHINE\Software\Classes\Directory\shellex\ContextMenuHandlers\7-Zip] | @ -> {23170F69-40C1-278A-1000-000100020000}
[HKEY_LOCAL_MACHINE\Software\Classes\Directory\shellex\ContextMenuHandlers\EncryptionMenu] | @ -> {A470F8CF-A1E8-4f65-8335-227475AA5C46}
[HKEY_LOCAL_MACHINE\Software\Classes\Directory\shellex\ContextMenuHandlers\Sharing] | @ -> {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}
[HKEY_LOCAL_MACHINE\Software\Classes\Directory\shellex\ContextMenuHandlers\ShellExtension] | @ ->
[HKEY_LOCAL_MACHINE\Software\Classes\Directory\shellex\CopyHookHandlers\FileSystem] | @ -> {217FC9C0-3AEA-1069-A2DB-08002B30309D}
[HKEY_LOCAL_MACHINE\Software\Classes\Directory\shellex\CopyHookHandlers\Sharing] | @ -> {40dd6e20-7c17-11ce-a804-00aa003ca9f6}
[HKEY_LOCAL_MACHINE\Software\Classes\Directory\shellex\DragDropHandlers\7-Zip] | @ -> {23170F69-40C1-278A-1000-000100020000}
[HKEY_LOCAL_MACHINE\Software\Classes\Directory\shellex\PropertySheetHandlers\Sharing] | @ -> {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}
[HKEY_LOCAL_MACHINE\Software\Classes\Directory\shellex\PropertySheetHandlers\{1f2e5c40-9550-11ce-99d2-00aa006e086c}] | @ ->
[HKEY_LOCAL_MACHINE\Software\Classes\Directory\shellex\PropertySheetHandlers\{4a7ded0a-ad25-11d0-98a8-0800361b1103}] | @ ->
[HKEY_LOCAL_MACHINE\Software\Classes\Directory\shellex\PropertySheetHandlers\{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}] | @ ->
[HKEY_LOCAL_MACHINE\Software\Classes\Directory\shellex\PropertySheetHandlers\{ef43ecfe-2ab9-4632-bf21-58909dd177f0}] | @ ->
[HKEY_LOCAL_MACHINE\Software\Classes\Directory\Background\shellex\ContextMenuHandlers\ACE] | @ -> {5E2121EE-0300-11D4-8D3B-444553540000}
[HKEY_LOCAL_MACHINE\Software\Classes\Directory\Background\shellex\ContextMenuHandlers\New] | @ -> {D969A300-E7FF-11d0-A93B-00A0C90F2719}
[HKEY_LOCAL_MACHINE\Software\Classes\Folder\shellex\ColumnHandlers\{7D4D6379-F301-4311-BEBA-E26EB0561882}] | @ -> NeroDigitalExt.NeroDigitalColumnHandler
[HKEY_LOCAL_MACHINE\Software\Classes\Folder\shellex\ColumnHandlers\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}] | @ -> OpenOffice.org Column Handler
[HKEY_LOCAL_MACHINE\Software\Classes\Folder\shellex\ColumnHandlers\{F9DB5320-233E-11D1-9F84-707F02C10627}] | @ -> PDF Column Info
[HKEY_LOCAL_MACHINE\Software\Classes\Folder\shellex\ContextMenuHandlers\avast] | @ -> {472083B0-C522-11CF-8763-00608CC02F24}
[HKEY_LOCAL_MACHINE\Software\Classes\Folder\shellex\ContextMenuHandlers\BriefcaseMenu] | @ -> {85BBD920-42A0-1069-A2E4-08002B30309D}
[HKEY_LOCAL_MACHINE\Software\Classes\Folder\shellex\ContextMenuHandlers\MBAMShlExt] | @ -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3}
[HKEY_LOCAL_MACHINE\Software\Classes\Folder\shellex\ContextMenuHandlers\Shell Extension for Malware scanning] | @ -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A}
[HKEY_LOCAL_MACHINE\Software\Classes\Folder\shellex\DragDropHandlers\{BD472F60-27FA-11cf-B8B4-444553540000}] | @ ->
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\EHomeDVDDropTarget] | @ -> @%SystemRoot%\eHome\ehdrop.dll,-117
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\EHomeMusicDropTarget] | @ -> @%SystemRoot%\eHome\ehdrop.dll,-116
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\EHomePhotosHandler] | @ -> @%SystemRoot%\eHome\ehdrop.dll,-118
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\EHomeSVCDDropTarget] | @ -> @%SystemRoot%\eHome\ehdrop.dll,-123
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\EHomeVCDDropTarget] | @ -> @%SystemRoot%\eHome\ehdrop.dll,-122
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\EHomeVideosHandler] | @ -> @%SystemRoot%\eHome\ehdrop.dll,-119
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\HPAutoplayPSE] | @ -> Importer et visualiser vos photos
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\iTunesBurnCDOnArrival] | @ -> Créer un CD
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\iTunesImportSongsOnArrival] | @ -> Importer les morceaux
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\iTunesPlaySongsOnArrival] | @ -> Lire un CD audio
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\iTunesShowSongsOnArrival] | @ -> Afficher les morceaux
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\LightScribeOnArrivalAP] | @ -> Étiqueter un disque LightScribe
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\LogitechQuickSync] | @ -> Copy files to your computer
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MagicUSBCable] | @ -> @%windir%\system32\migwiz\MIGUIRes.dll,-12094
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MediaCapture9MixedContent] | @ -> Transférer des fichiers multimédia
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MediaCapture9Music] | @ -> Transférer de la musique
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MediaCapture9Photos] | @ -> Transférer des images
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MediaCapture9VideoCamera] | @ -> Capturer des données vidéo
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MediaCapture9Videos] | @ -> Transférer des données vidéo
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSAutoRun] | @ -> @%SystemRoot%\system32\shell32.dll,-17419
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSCDBurningOnArrival] | @ -> @%SystemRoot%\system32\shell32.dll,-17416
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSCreateEmdCache] | @ -> @emdmgmt.dll,-201
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSDVDArrivalDvdMaker] | @ -> @%ProgramFiles%\movie maker\dvdmaker.exe,-63377
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSEnhancedStorageHandler] | @ -> @%SystemRoot%\system32\EhStorShell.dll,-104
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSLivePhotoAcqHWEventHandler] | @ -> @%ProgramFiles%\Windows Live\Photo Gallery\regres.dll,-11;fr-fr.8117.0416
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSLivePhotoAcquireDropHandler] | @ -> @%ProgramFiles%\Windows Live\Photo Gallery\regres.dll,-11;fr-fr.8117.0416
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSLiveShowPicturesOnArrival] | @ -> @%ProgramFiles%\Windows Live\Photo Gallery\regres.dll,-12;fr-fr.8117.0416
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSLiveVideoCameraArrivalCaptureWizard] | @ -> @%ProgramFiles%\Windows Live\Photo Gallery\regres.dll,-13;fr-fr.8117.0416
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSOpenFolder] | @ -> @%SystemRoot%\system32\shell32.dll,-17410
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPhotoAcqHWEventHandler] | @ -> @%ProgramFiles%\Windows Photo Gallery\PhotoAcq.dll,-400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPhotoAcquireDropHandler] | @ -> @%ProgramFiles%\Windows Photo Gallery\PhotoAcq.dll,-400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival] | @ -> @wmploc.dll,-6503
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival] | @ -> @wmploc.dll,-6504
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayMediaOnArrival] | @ -> @wmploc.dll,-1800
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlaySuperVideoCDMovieOnArrival] | @ -> @wmploc.dll,-6508
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayVideoCDMovieOnArrival] | @ -> @wmploc.dll,-6507
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPromptEachTime] | @ -> @%SystemRoot%\system32\shell32.dll,-17409
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPromptEachTimeNoContent] | @ -> @%SystemRoot%\system32\shell32.dll,-17409
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival] | @ -> @wmploc.dll,-6506
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSSHAudioDevHandler] | @ -> @%SystemRoot%\system32\audiodev.dll,-500
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSShowPicturesOnArrival] | @ -> @%ProgramFiles%\Windows Photo Gallery\PhotoViewer.dll,-3066
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSTakeNoAction] | @ -> @%SystemRoot%\system32\shell32.dll,-17408
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSVideoCameraArrivalCaptureWizard] | @ -> @%ProgramFiles%\Movie Maker\CaptureWizard.exe,-100
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler] | @ -> @wmploc.dll,-29300
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival] | @ -> @wmploc.dll,-6505
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnDataDVDArrival] | @ -> @wmploc.dll,-6509
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWPDNetworkConfigHandler] | @ -> @%SystemRoot%\system32\wpdshext.dll,-502
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWPDShellNamespaceHandler] | @ -> @%SystemRoot%\system32\wpdshext.dll,-500
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\NeroAutoPlay7AudioToNeroDigital] | @ -> Convertir des CD audio en Nero Digital Audio
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\NeroAutoPlay7CDAudio] | @ -> Créer CD Audio
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\NeroAutoPlay7CopyCD] | @ -> Copier CD
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\NeroAutoPlay7DataDisc] | @ -> Créer disque de données
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\NeroAutoPlay7LaunchNeroStartSmart] | @ -> Créer votre propre disque
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\NeroAutoPlay7PlayAudioCD] | @ -> Lire le fichier audio
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\NeroAutoPlay7PlayDVD] | @ -> Lire la vidéo
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\NeroAutoPlay7RipCD] | @ -> Convertir des CD audio en fichiers audio
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\NeroAutoPlay7TranscodeVideo] | @ -> Recoder DVD-Vidéo
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\NeroAutoPlay7VideoCapture] | @ -> Capture vidéo
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\NeroAutoPlay7ViewPhotos] | @ -> Visualiser vos photos
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\REG_AUTOCDPLAY] | @ -> Play Audio CD & CD Ripping
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\REG_AUTOPLAY] | @ -> Play
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\RoxioSCAudioCDTask33] | @ -> @%RoxioCentral%Audio\MainrFRA.dll,-106
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\RoxioSCCopyCD33] | @ -> @%RoxioCentral%Copy\MainrFRA.dll,-401
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\RoxioSCCopyDisc33] | @ -> @%RoxioCentral%Copy\MainrFRA.dll,-400
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\RoxioSCDataProject33] | @ -> @%RoxioCentral%Data\MainrFRA.dll,-104
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\RoxioSCDataTask33] | @ -> @%RoxioCentral%Data\MainrFRA.dll,-104
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\RPCDBurningOnArrival] | @ -> Graver un CD
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\RPDeviceOnArrival] | @ -> Gérer le périphérique
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\RPDVDBurningOnArrival] | @ -> Graver le DVD
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\RPPlayCDAudioOnArrival] | @ -> Lire ou enregistrer de la musique du CD audio
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\RPPlayDVDMovieOnArrival] | @ -> Lire la vidéo sur DVD
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\RPPlayMediaOnArrival] | @ -> Importer de la musique, des vidéos et des photos
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival] | @ -> Lecture CD Audio
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival] | @ -> Lecture DVD
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\WIA_{611C7325-0D14-43BE-A867-497E03A48103}] | @ -> Microsoft Office Word
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\WIA_{81A3FACA-54FD-4D61-9535-9B82B8836034}] | @ -> ABBYY FineReader 6.0 Sprint
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\WIA_{B2292E84-1452-4085-A058-DC5EBCABFB2A}] | @ -> Microsoft Office Word
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\WIA_{B535D316-3CF3-4066-B4D4-EE0D45182265}] | @ -> Microsoft Office Publisher
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\WIA_{BEF4C794-88D4-42D7-8917-364D24C8E6B8}] | @ -> Microsoft Office Publisher
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\WIA_{CCD04E38-C27C-42B3-A32E-3FC86D526CE5}] | @ -> Microsoft Word
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\WIA_{D38C2373-36D4-4CDA-84CE-788B35148229}] | @ -> Epson Event Manager
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\WIA_{EBD0B366-0739-4D8B-95C9-F1B0115BB779}] | @ -> EPSON Scan
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SafeBoot] | AlternateShell -> cmd.exe
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders] | SecurityProviders -> credssp.dll
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server] | AllowRemoteRPC -> 0
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager] | BootExecute -> autocheck autochk *

¤

¤

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar]
"{9421DD08-935F-4701-A9CA-22DF90AC4EA6}"=EPTBL

¤

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{F2CF5485-4E02-4F68-819C-B92DE9277049}"=0x8554CFF2024E684F819CB92DE927704922001C000800000006000000010000000000000000000000000000004C0000000114020000000000C000000000000046810100001100000010372F835D47C901700335835D47C901802A35835D47C901000000000000000001000000000000000000000000000000CE0014001F44471A0359723FA74489C55595FE6B30EE200000001A00EEBBFE230000100061F77717AD688A4D87BD30B759FA33DD000098003100000000006F39B0A011004C696E6B7300840007000400EFBE6F39B0A06F39B0A026000000980600000000DF08000000000000000032004C0069006E006B0073000000400043003A005C00570069006E0064006F00770073005C00530079007300740065006D00330032005C00690065006600720061006D0065002E0064006C006C002C002D003100320033003800350000001400000010000000050000A006000000340000001C0000000B0000A061F77717AD688A4D87BD30B759FA33DD3400000060000000030000A0580000000000000070632D64652D70726F707269827461002EDCFCB459256E448E7D099FB49B4C3C22E8D3CFF0B2DD119474001D605397852EDCFCB459256E448E7D099FB49B4C3C22E8D3CFF0B2DD119474001D6053978500000000
"ITBar7Position"=1
"ITBar7Layout"=0x1300000000000000000000003000000010000000150000000100000080060000CA030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
"{724D43A0-0D85-11D4-9908-00400523E39A}"=0xA0434D72850DD411990800400523E39A
"ITBar7Height"=27
"{C55BBCD6-41AD-48AD-9953-3609C48EACC7}"=0xD6BC5BC5AD41AD4899533609C48EACC7

[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] | {8C7461EF-2B13-11d2-BE35-3078302C2030} -> Component Categories cache daemon

¤

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{2206CDB2-19C1-11D1-89E0-00C04FD7A829}"=Microsoft Data Link
"{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}"=Computers and Devices
"{E7DE9B1A-7533-4556-9484-B26FB486475E}"=
"{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"=MMC Icon Handler
"{08165EA0-E946-11CF-9C87-00AA005127ED}"=WebCheckWebCrawler
"{7D559C10-9FE9-11d0-93F7-00AA0059CE02}"=Code Download Agent
"{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}"=WebCheck SyncMgr Handler
"{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}"=Subscription Mgr
"{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"=WebCheck
"{F5175861-2688-11d0-9C5E-00AA00A45957}"=Subscription Folder
"{7007ACC7-3202-11D1-AAD2-00805FC1270E}"=Network Connections
"{992CFFA0-F557-101A-88EC-00DD010CCC48}"=Network Connections
"{4A1E5ACD-A108-4100-9E26-D2FAFA1BA486}"=IGD Property Sheet Handler
"{92dbad9f-5025-49b0-9078-2d78f935e341}"=Microsoft Windows Mail Html Preview Handler
"{b9815375-5d7f-4ce2-9245-c9d4da436930}"=Microsoft Windows Mail Html Preview Handler
"{f8b8412b-dea3-4130-b36c-5e8be73106ac}"=Microsoft Windows Mail Html Preview Handler
"{5FA29220-36A1-40f9-89C6-F4B384B7642E}"=Shell Message Handler
"{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}"=Shell DocObject Viewer
"{FBF23B40-E3F0-101B-8488-00AA003E56F8}"=InternetShortcut
"{3C374A40-BAE4-11CF-BF7D-00AA006946EE}"=Microsoft Url History Service
"{FF393560-C2A7-11CF-BFF4-444553540000}"=History
"{7BD29E00-76C1-11CF-9DD0-00A0C9034933}"=Temporary Internet Files
"{7BD29E01-76C1-11CF-9DD0-00A0C9034933}"=Temporary Internet Files
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=Microsoft Url Search Hook
"{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}"=The Internet
"{73CFD649-CD48-4fd8-A272-2070EA56526B}"=IE BandProxy
"{07C45BB1-4A8C-4642-A1F5-237E7215FF66}"=IE Microsoft BrowserBand
"{43886CD5-6529-41c4-A707-7B3C92C05E68}"=IE Navigation Bar
"{30D02401-6A81-11d0-8274-00C04FD5AE38}"=IE Search Band
"{F83DAC1C-9BB9-4f2b-B619-09819DA81B0E}"=IE Registry Tree Options Utility
"{3028902F-6374-48b2-8DC6-9725E775B926}"=IE AutoComplete
"{98FF6D4B-6387-4b0a-8FBD-C5C4BB17B4F8}"=IE MRU AutoComplete List
"{FDE7673D-2E19-4145-8376-BBD58C4BC7BA}"=IE Custom MRU AutoCompleted List
"{6038EF75-ABFC-4e59-AB6F-12D397F6568D}"=IE Microsoft History AutoComplete List
"{9D958C62-3954-4b44-8FAB-C4670C1DB4C2}"=IE Microsoft Shell Folder AutoComplete List
"{B31C5FAE-961F-415b-BAF0-E697A5178B94}"=IE Microsoft Multiple AutoComplete List Container
"{E6EE9AAC-F76B-4947-8260-A9F136138E11}"=IE Shell Band Site Menu
"{BFAD62EE-9D54-4b2a-BF3B-76F90697BD2A}"=IE Shell Rebar BandSite
"{FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75}"=IE User Assist
"{4B78D326-D922-44f9-AF2A-07805C2A3560}"=IE Menu Band
"{6CF48EF8-44CD-45d2-8832-A16EA016311B}"=IE IShellFolderBand
"{F2CF5485-4E02-4f68-819C-B92DE9277049}"=&Links
"{1C1EDB47-CE22-4bbb-B608-77B48F83C823}"=IE Fade Task
"{6B4ECC4F-16D1-4474-94AB-5A763F2A54AE}"=IE Tracking Shell Menu
"{44C76ECD-F7FA-411c-9929-1B77BA77F524}"=IE Menu Site
"{205D7A97-F16D-4691-86EF-F3075DCCA57D}"=IE Menu Desk Bar
"{871C5380-42A0-1069-A2EA-08002B30309D}"=Internet Name Space
"{9A096BB5-9DC3-4D1C-8526-C3CBF991EA4E}"=IE RSS Feeder Folder
"{8856f961-340a-11d0-a96b-00c04fd705a2}"=Microsoft Web Browser
"{3050f3d9-98b5-11cf-bb82-00aa00bdce0b}"=MSHTML Document
"{25336920-03f9-11cf-8fd0-00aa00686f13}"=HTML Document
"{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}"=Mail Service
"{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}"=Desktop Shortcut
"{CC6EEFFB-43F6-46c5-9619-51D571967F7D}"=Web Publishing Wizard
"{add36aa8-751a-4579-a266-d66f5202ccbb}"=Print Ordering via the Web
"{6b33163c-76a5-4b6c-bf21-45de9cd503a1}"=Shell Publishing Wizard Object
"{176d6597-26d3-11d1-b350-080036a75b03}"=ICM Scanner Management
"{5DB2625A-54DF-11D0-B6C4-0800091AA605}"=ICM Monitor Management
"{675F097E-4C4D-11D0-B6C1-0800091AA605}"=ICM Printer Management
"{DBCE2480-C732-101B-BE72-BA78E9AD5B27}"=ICC Profile
"{b2c761c6-29bc-4f19-9251-e6195265baf1}"=Color Control Panel Applet
"{0D45D530-764B-11d0-A1CA-00AA00C16E65}"=Directory Property UI
"{62AE1F9A-126A-11D0-A14B-0800361B1103}"=Directory Context Menu Verbs
"{8A23E65E-31C2-11d0-891C-00A024AB2DBB}"=Directory Query UI
"{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}"=Shell properties for a DS object
"{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}"=Directory Object Find
"{F020E586-5264-11d1-A532-0000F8757D7E}"=Directory Start/Search Find
"{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}"=Printers Security Page
"{1F2E5C40-9550-11CE-99D2-00AA006E086C}"=NTFS Security Page
"{40dd6e20-7c17-11ce-a804-00aa003ca9f6}"=Shell extensions for sharing
"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"=Shell extensions for sharing
"{77597368-7b15-11d0-a0c2-080036af3f03}"=Web Printer Shell Extension
"{4E40F770-369C-11d0-8922-00A024AB2DBB}"=DS Security Page
"{41E300E0-78B6-11ce-849B-444553540000}"=PlusPack CPL Extension
"{74246bfc-4c96-11d0-abef-0020af6b0b7a}"=Device Manager
"{7A979262-40CE-46ff-AEEE-7884AC3B6136}"=Add New Hardware
"{7b81be6a-ce2b-4676-a29e-eb907a5126c5}"=Programs and Features
"{15eae92e-f17a-4431-9f28-805e482dafd4}"=Install New Programs
"{d450a8a1-9568-45c7-9c0e-b4f9fb4537bd}"=Installed Updates
"{ceefea1b-3e29-4ef1-b34c-fec79c4f70af}"=New Shortcut Wizard
"{0BFCF7B7-E7B6-433a-B205-2904FCF040DD}"=New Shortcut Wizard Modal
"{CFCCC7A0-A282-11D1-9082-006008059382}"=Darwin App Publisher
"{3e7efb4c-faf1-453d-89eb-56026875ef90}"=Get Programs Online
"{59099400-57FF-11CE-BD94-0020AF85B590}"=Disk Copy Extension
"{ECF03A32-103D-11d2-854D-006008059367}"=MyDocs Drop Target
"{4a7ded0a-ad25-11d0-98a8-0800361b1103}"=MyFolder Properties
"{44f3dab6-4392-4186-bb7b-6282ccb7a9f6}"=MyDocuments menu and properties
"{0DF44EAA-FF21-4412-828E-260A8728E7F1}"=Taskbar and Start Menu
"{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}"=Search
"{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}"=Help and Support
"{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}"=Help and Support
"{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}"=Run...
"{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}"=Internet
"{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}"=E-mail
"{2559a1f6-21d7-11d4-bdaf-00c04f60b9f0}"=Start Menu OEM Command
"{2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}"=Set Program Access and Defaults
"{3080F90D-D7AD-11D9-BD98-0000947B0257}"=Show Desktop
"{3080F90E-D7AD-11D9-BD98-0000947B0257}"=Window Switcher
"{eb124705-128b-40d4-8dd8-d93ed12589a4}"=WPL property store
"{3c2654c6-7372-4f6b-b310-55d6128f49d2}"=Alphabetical Categorizer
"{9DBD2C50-62AD-11d0-B806-00C04FD706EC}"=Summary Info Thumbnail handler (DOCFILES)
"{708e1662-b832-42a8-bbe1-0a77121e3908}"=Tree property value folder
"{71f96385-ddd6-48d3-a0c1-ae06e8b055fb}"=Explorer Browser
"{b2952b16-0e07-4e5a-b993-58c52cb94cae}"=Search Folders
"{437ff9c0-a07f-4fa0-af80-84b6c6440a16}"=Command Folder
"{90f8c90b-04e0-4e92-a186-e6e9c125d664}"=Property Labels
"{1b24a030-9b20-49bc-97ac-1be4426f9e59}"=ActiveDirectory Folder
"{34449847-FD14-4fc8-A75A-7432F5181EFB}"=ActiveDirectory Folder
"{C8494E42-ACDD-4739-B0FB-217361E4894F}"=Sam Account Folder
"{E29F9716-5C08-4FCD-955A-119FDB5A522D}"=Sam Account Folder
"{D20EA4E1-3957-11d2-A40B-0C5020524152}"=Fonts
"{D20EA4E1-3957-11d2-A40B-0C5020524153}"=Administrative Tools
"{b155bdf8-02f0-451e-9a26-ae317cfd7779}"=nethood delegate folder
"{DFFACDC5-679F-4156-8947-C5C76BC0B67F}"=users files delegate folder
"{ed50fc29-b964-48a9-afb3-15ebb9b97f36}"=printhood delegate folder
"{328B0346-7EAF-4BBE-A479-7CB88A095F5B}"=Layout Folder
"{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}"=Control Panel command object for Start menu
"{E44E5D18-0652-4508-A4E2-8A090067BCB0}"=Default Programs command object for Start menu
"{4336a54d-038b-4685-ab02-99bb52d3fb8b}"=Public Folder
"{00021401-0000-0000-C000-000000000046}"=Shortcut
"{C73F6F30-97A0-4AD1-A08F-540D4E9BC7B9}"=Search Folder
"{0AFCCBA6-BF90-4A4E-8482-0AC960981F5B}"=.fon, .otf, .ttc or .ttf files
"{66742402-F9B9-11D1-A202-0000F81FEDEE}"=.cpl, .dll, .exe, .ocx, .rll or .sys files
"{D34A6CA6-62C2-4C34-8A7C-14709C1AD938}"=Common Places Folder
"{865e5e76-ad83-4dca-a109-50dc2113ce9a}"=Programs Folder and Fast Items
"{21ec2020-3aea-1069-a2dd-08002b30309d}"=Control Panel
"{25585dc7-4da0-438d-ad04-e42c8d2d64b9}"=Client application shell extension
"{6dfd7c5c-2451-11d3-a299-00c04f8ef6af}"=Folder Options
"{a42c2ccb-67d3-46fa-abe6-7d2f3488c7a3}"=Microsoft Windows RTF Preview Handler
"{1531d583-8375-4d3f-b5fb-d23bbd169f22}"=Window TXT Preview Handler
"{97e467b4-98c6-4f19-9588-161b7773d6f6}"=Office Document Property Handler
"{88C6C381-2E85-11D0-94DE-444553540000}"=ActiveX Cache Folder
"{5E6AB780-7743-11CF-A12B-00AA004AE837}"=Microsoft Internet Toolbar
"{7BA4C742-9E81-11CF-99D3-00AA004AE837}"=Microsoft BrowserBand
"{056440FD-8568-48e7-A632-72157243B55B}"=Explorer Navigation Bar
"{C4EC38BD-4E9E-4b5e-935A-D1BFF237D980}"=Explorer Travel Band
"{6D8BB3D3-9D87-4a91-AB56-4F30CFFEFE9F}"=Explorer Search Band
"{2C2577C2-63A7-40e3-9B7F-586602617ECB}"=Explorer Query Band
"{21569614-B795-46b1-85F4-E737A8DC09AD}"=Search Band
"{169A0691-8DF9-11d1-A1C4-00C04FD75D13}"=In-pane search
"{AF4F6510-F982-11d0-8595-00AA004CD6D8}"=Registry Tree Options Utility
"{01E04581-4EEE-11d0-BFE9-00AA005B4383}"=&Address
"{a542e116-8088-4146-a352-b0d06e7f6af6}"=Address EditBox
"{F61FFEC1-754F-11d0-80CA-00AA005B4383}"=BandProxy
"{00BB2763-6A77-11D0-A535-00C04FD7D062}"=Microsoft AutoComplete
"{596742A5-1393-4e13-8765-AE1DF71ACAFB}"=Microsoft Breadcrumb Bar
"{6756A641-DE71-11d0-831B-00AA005B4383}"=MRU AutoComplete List
"{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}"=Custom MRU AutoCompleted List
"{00BB2764-6A77-11D0-A535-00C04FD7D062}"=Microsoft History AutoComplete List
"{03C036F1-A186-11D0-824A-00AA005B4383}"=Microsoft Shell Folder AutoComplete List
"{00BB2765-6A77-11D0-A535-00C04FD7D062}"=Microsoft Multiple AutoComplete List Container
"{ECD4FC4E-521C-11D0-B792-00A0C90312E1}"=Shell Band Site Menu
"{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}"=Shell DeskBarApp
"{ECD4FC4D-521C-11D0-B792-00A0C90312E1}"=Shell Rebar BandSite
"{DD313E04-FEFF-11d1-8ECD-0000F87A470C}"=User Assist
"{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}"=Global Folder Settings
"{fccf70c8-f4d7-4d8b-8c17-cd6715e37fff}"=Search Control
"{4d5c8c2a-d075-11d0-b416-00c04fb90376}"=Microsoft CommBand
"{DC1C5A9C-E88A-4dde-A5A1-60F82A20AEF7}"=File Open Dialog
"{C0B4E2F3-BA21-4773-8DBA-335EC946EB8B}"=File Save Dialog
"{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75}"=Shell Icon Handler for Application References
"{e82a2d71-5b2f-43a0-97b8-81be15854de8}"=ShellLink for Application References
"{92337A8C-E11D-11D0-BE48-00C04FC30DF6}"=OlePrn.PrinterURL
"{45670FA8-ED97-4F44-BC93-305082590BFB}"=Microsoft XPS Properties
"{44121072-A222-48f2-A58A-6D9AD51EBBE9}"=Microsoft XPS Thumbnail
"{38a98528-6cbf-4ca9-8dc0-b1e1d10f7b1b}"=View Available Networks
"{13D3C4B8-B179-4ebb-BF62-F704173E7448}"=Windows Contact Preview Handler
"{32714800-2E5F-11d0-8B85-00AA0044F941}"=For &People...
"{0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48}"=Contacts folder
"{4F58F63F-244B-4c07-B29F-210BE59BE9B4}"=.group shell extension handler
"{8082C5E6-4C27-48ec-A809-B8E1122E8F97}"=.contact shell extension handler
"{16C2C29D-0E5F-45f3-A445-03E03F587B7D}"=group_wab_auto_file
"{CF67796C-F57F-45F8-92FB-AD698826C602}"=contact_wab_auto_file
"{7444C717-39BF-11D1-8CD9-00C04FC29D45}"=Crypto PKO Extension
"{7444C719-39BF-11D1-8CD9-00C04FC29D45}"=Crypto Sign Extension
"{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"=Compatibility Property Page
"{F0152790-D56E-4445-850E-4F3117DB740C}"=Remote Sessions CPL Extension
"{4026492f-2f69-46b8-b9bf-5654fc07e423}"=Windows Firewall
"{D555645E-D4F8-4c29-A827-D93C859C4F2A}"=
"{60254CA5-953B-11CF-8C96-00AA00B8708C}"=Shell extensions for Windows Script Host
"{fcfeecae-ee1b-4849-ae50-685dcf7717ec}"=Problem Reports and Solutions
"{a304259d-52b8-4526-8b1a-a1d6cecc8243}"=iSCSI Initiator
"{8E908FC9-BECC-40f6-915B-F4CA0E70D03D}"=
"{143A62C8-C33B-11D1-84FE-00C04FA34A14}"=Microsoft Agent Character Property Sheet Handler
"{025A5937-A6BE-4686-A844-36FE4BEC8B6D}"=Microsoft Power Options
"{BB06C0E4-D293-4f75-8A90-CB05B6477EEE}"=
"{ED834ED6-4B5A-4bfe-8F11-A626DCB6A921}"=
"{17cd9488-1228-4b2f-88ce-4298e93e0966}"=
"{60632754-c523-4b62-b45c-4172da012619}"=
"{9C60DE1E-E5FC-40f4-A487-460851A8D915}"=
"{42071712-76d4-11d1-8b24-00a0c9068ff3}"=Display Adapter CPL Extension
"{42071713-76d4-11d1-8b24-00a0c9068ff3}"=Display Monitor CPL Extension
"{f92e8c40-3d33-11d2-b1aa-080036a75b03}"=Display TroubleShoot CPL Extension
"{3EA48300-8CF6-101B-84FB-666CCB9BCD32}"=OLE Docfile Property Page
"{11dbb47c-a525-400b-9e80-a54615a090c0}"=Execute Folder
"{90b9bce2-b6db-4fd3-8451-35917ea1081b}"=Search Execute Command
"{7988B573-EC89-11cf-9C00-00AA00A14F56}"=Disk Quota UI
"{BD84B380-8CA2-1069-AB1D-08000948F534}"=Microsoft Windows Font Folder
"{2BC0DA0E-F1BC-43AB-B4B5-738EB6B51E7E}"=Microsoft Windows Font File Icon Handler
"{1a184871-359e-4f67-aad9-5b9905d62232}"=Microsoft Windows Font File Context Menu Handler
"{8a7cae0e-5951-49cb-bf20-ab3fa1e44b01}"=Microsoft Windows Font Previewer
"{63da6ec0-2e98-11cf-8d82-444553540000}"=FTP Folders Webview
"{E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31}"=Compressed (zipped) Folder
"{BD472F60-27FA-11cf-B8B4-444553540000}"=Compressed (zipped) Folder Right Drag Handler
"{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}"=Compressed (zipped) Folder SendTo Target
"{b8cdcb65-b1bf-4b42-9428-1dfdb7ee92af}"=Compressed (zipped) Folder Context Menu
"{ed9d80b9-d157-457b-9192-0e7280313bf0}"=Compressed (zipped) Folder Drop Handler
"{911051fa-c21c-4246-b470-070cd8df6dc4}"=.cab or .zip files
"{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}"=.CAB file viewer
"{59be4990-f85c-11ce-aff7-00aa003ca9f6}"=Shell extensions for Microsoft Windows Network objects
"{da67b8ad-e81b-4c70-9b91b417b5e33527}"=Windows Search Shell Service
"{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}"=DfsShell.DfsShell Property Sheet
"{BC65FB43-1958-4349-971A-210290480130}"=Network Explorer Property Sheet Handler
"{d3e34b21-9d75-101a-8c3d-00aa001a1652}"=Bitmap Image
"{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}"=Video Media Properties Handler
"{E598560B-28D5-46aa-A14A-8A3BEA34B576}"=Windows Photo Gallery Viewer Video Verbs
"{00f2886f-cd64-4fc9-8ec5-30ef6cdbe8c3}"=Microsoft.ScannersAndCameras
"{0a4286ea-e355-44fb-8086-af3df7645bd9}"=Windows Media Player
"{BB6B2374-3D79-41DB-87F4-896C91846510}"=EMDFileProperties
"{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}"=Audio Media Properties Handler
"{E95A4861-D57A-4be1-AD0F-35267E261739}"=
"{89D83576-6BD1-4c86-9454-BEB04E94C819}"=MAPI Search Namespace Extension
"{7A0F6AB7-ED84-46B6-B47E-02AA159A152B}"=Sync Center Simple Conflict Presenter
"{9D687A4C-1404-41ef-A089-883B6FBECDE6}"=Windows Photo Gallery Viewer Autoplay Handler
"{BE122A0E-4503-11DA-8BDE-F66BAD1E3F3A}"=
"{60fd46de-f830-4894-a628-6fa81bc0190d}"=DropTarget Object for Photo Printing Wizard
"{37efd44d-ef8d-41b1-940d-96973a50e9e0}"=Windows Sidebar Properties
"{640167b4-59b0-47a6-b335-a6b3c0695aea}"=Portable Media Devices
"{00f20eb5-8fd6-4d9d-b75e-36801766c8f1}"=PhotoAcqDropTarget
"{BC48B32F-5910-47F5-8570-5074A8A5636A}"=Sync Results Delegate Folder
"{ED228FDF-9EA8-4870-83B1-96B02CFE0D52}"=Games Folder
"{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}"=Windows Media Player Add to Playlist Context Menu Handler
"{E413D040-6788-4C22-957E-175D1C513A34}"=Sync Center Conflict Delegate Folder
"{67718415-c450-4f3c-bf8a-b487642dc39b}"=Windows Features
"{335a31dd-f04b-4d76-a925-d6b47cf360df}"=
"{91ADC906-6722-4B05-A12B-471ADDCCE132}"=Touch Band
"{7D4734E6-047E-41e2-AEAA-E763B4739DC4}"=Windows Media Player Play as Playlist Context Menu Handler
"{2781761E-28E0-4109-99FE-B9D127C57AFE}"=Windows Defender IOfficeAntiVirus implementation
"{96AE8D84-A250-4520-95A5-A47A7E3C548B}"=
"{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}"=Windows Photo Gallery Viewer Image Verbs
"{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"=Windows Media Player Play as Playlist Context Menu Handler
"{4B534112-3AF6-4697-A77C-D62CE9B9E7CF}"=Sync Center Event Properties Extension
"{F1390A9A-A3F4-4E5D-9C5F-98F3BD8D935C}"=Sync Setup Delegate Folder
"{85BBD920-42A0-1069-A2E4-08002B30309D}"=Briefcase
"{4E5BFBF8-F59A-4e87-9805-1F9B42CC254A}"=GameUX.RichGameMediaThumbnail
"{d8559eb9-20c0-410e-beda-7ed416aecc2a}"=Windows Defender
"{576C9E85-1300-4EF5-BF6B-D00509F4EDCD}"=Sync Center Handler Properties Extension
"{5ea4f148-308c-46d7-98a9-49041b1dd468}"=Mobility Center Control Panel
"{289978AC-A101-4341-A817-21EBA7FD046D}"=Sync Center Conflict Folder
"{877ca5ac-cb41-4842-9c69-9136e42d47e2}"=File Backup Index
"{71D99464-3B6B-475C-B241-E15883207529}"=Sync Results Folder
"{B32D3949-ED98-4DBB-B347-17A144969BBA}"=Sync Center Item Properties Extension
"{D6791A63-E7E2-4fee-BF52-5DED8E86E9B8}"=Portable Devices Menu
"{8DD448E6-C188-4aed-AF92-44956194EB1F}"=Windows Media Player Burn Audio CD Context Menu Handler
"{2E9E59C0-B437-4981-A647-9C34B9B90891}"=Sync Setup Folder
"{58E3C745-D971-4081-9034-86E34B30836A}"=
"{9C73F5E5-7AE7-4E32-A8E8-8D23B85255BF}"=Sync Center Folder
"{CB1B7F8C-C50A-4176-B604-9E24DEE8D4D1}"=Welcome Center
"{15D633E2-AD00-465b-9EC7-F56B7CDF8E27}"=Tablet PC Input Panel
"{78F3955E-3B90-4184-BD14-5397C15F1EFC}"=
"{F04CC277-03A2-4277-96A9-77967471BDFF}"=Sync Center Conflict Properties Extension
"{53BEDF0B-4E5B-4183-8DC9-B844344FA104}"=Microsoft Windows MAPI Preview Handler
"{6b9228da-9c15-419e-856c-19e768a13bdc}"=Windows gadget DropTarget
"{8E25992B-373E-486E-80E5-BD23AE417E66}"=Sync Center Device Notification Sink
"{35786D3C-B075-49b9-88DD-029876E11C01}"=Portable Devices
"{031EE060-67BC-460d-8847-E4A7C5E45A27}"=Windows Media Player Rich Preview Handler
"{1FA9085F-25A2-489B-85D4-86326EEDCD87}"=Manage Wireless Networks
"{ECDD6472-2B9B-4b4b-AE36-F316DF3C8D60}"=RichGameMediaPropertyStore Class
"{BD7A2E7B-21CB-41b2-A086-B309680C6B7E}"=Client Side Cache Namespace Extension
"{8A734961-C4AA-4741-AC1E-791ACEBF5B39}"=Windows Media Player Shop Music Context Menu Handler
"{7A9D77BD-5403-11d2-8785-2E0420524153}"=User Accounts
"{c5a40261-cd64-4ccf-84cb-c394da41d590}"=Video Thumbnail Extractor
"{5E2121EE-0300-11D4-8D3B-444553540000}"=Catalyst Context Menu extension
"{7F67036B-66F1-411A-AD85-759FB9C5B0DB}"=ShellViewRTF
"{23170F69-40C1-278A-1000-000100020000}"=7-Zip Shell Extension
"{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}"=OpenOffice.org Column Handler
"{087B3AE3-E237-4467-B8DB-5A38AB959AC9}"=OpenOffice.org Infotip Handler
"{63542C48-9552-494A-84F7-73AA6A7C99C1}"=OpenOffice.org Property Sheet Handler
"{3B092F0C-7696-40E3-A80F-68D74DA84210}"=OpenOffice.org Thumbnail Viewer
"{B327765E-D724-4347-8B16-78AE18552FC3}"=NeroDigitalIconHandler
"{7F1CF152-04F8-453A-B34C-E609530A9DC8}"=NeroDigitalPropSheetHandler
"{45AC2688-0253-4ED8-97DE-B5370FA7D48A}"=Shell Extension for Malware scanning
"{738D66C6-0149-4D40-84E4-A7BB2D0CE949}"=Gestionnaire de fichiers Sony Ericsson
"{BDEADF00-C265-11D0-BCED-00A0C90AB50F}"=Dossiers Web
"{06A2568A-CED6-4187-BB20-400B8C02BE5A}"=
"{00F33137-EE26-412F-8D71-F84E4C2C6625}"=
"{2BE99FD4-A181-4996-BFA9-58C5FFD11F6C}"=Windows Live Photo Gallery Autoplay Drop Target
"{00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C}"=Windows Live Photo Gallery Viewer Drop Target
"{00F374B7-B390-4884-B372-2FC349F2172B}"=Windows Live Photo Gallery Editor Drop Target

Attention : cet outil peut etre détecté à tort comme virus

tous les processus "non vitaux de windows" vont être coupés , enregistre ton travail.

Désactive toutes tes protections si possible , antivirus , sandbox , etc....

telecharge et enregistre Pre_Scan sur ton bureau :

http://forums-fec.be/gen-hackman/Pre_Scan.exe
http://general-changelog-team.fr/fr/downloads/viewdownload/41-outils-de-gen-hackman/52-pre-scan

Avertissement :Il y aura une extinction du bureau pendant le scan --> pas de panique.

une fois telechargé lance-le , laisse faire le scan jusqu'à l'apparition de "Pre_scan_la_date_et_l'heure.txt" sur le bureau.

si l'outil est relancé plusieurs fois , il te proposera un menu et qu'aucune option n'est demandée, lance l'option "Kill"

si l'outil est bloqué par l'infection utilise cette version avec extension .pif :

http://forums-fec.be/gen-hackman/Pre_Scan.pif

si l'outil detecte un proxy et que tu n'en as pas installé clique sur "supprimer le proxy"

Il se peut qu'une multitude de fenêtres noires clignotent , laisse-le travailler

Poste Pre_Scan_la_date_et_l'heure.txt qui apparaitra sur le bureau en fin de scan

NE LE POSTE PAS SUR LE FORUM !!! (il est trop long)

Heberge le rapport sur http://pjjoint.malekal.com puis donne le lien obtenu en echange sur le forum où tu te fais aider