publicités intempestives Résolu

Question

Bonjour,
J'ai aussi comme beaucoup de personnes ici des prob d ouverture de fenetres intempestives et je ne sais que faire J'ai fait une analyse bitdefender et un  ad-aware et apres j'ai scanné avec spybot Mais rien n'y fait les fenetres s'ouvrent toujours ma fille de 5ans1/2 jouant sur site tiji  s'est retrouvée avec une fenetre à caractere porno devant son jeu !!! 

apres avoir lu le forum G suivi les conseils et G telecharger HijackThis 

voici le log:

Logfile of HijackThis v1.99.1
Scan saved at 14:55:54, on 11/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\Wireless 802.11g Monitor\WLService.exe
C:\Program Files\Wireless 802.11g Monitor\WLanCfgG.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\VIAudioi\SBADeck\ADeck.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
C:\Program Files\Ensemble clavier et souris sans fil Labtec\MulMouse.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Ensemble clavier et souris sans fil Labtec\OSD.EXE
C:\WINDOWS\ALCFDRTM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Softwin\BitDefender10\bdmcon.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\WINDOWS\system32\mmc.exe
C:\WINDOWS\system32\DfrgNtfs.exe
C:\WINDOWS\system32\DfrgFat.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\Documents and Settings\premier utilisateur\Local Settings\Temporary Internet Files\Content.IE5\KDBTCKIU\HijackThis[1].exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.imesh.com/search/index.html?src=ssb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.imesh.com/search/index.html?src=ssb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.imesh.com/search/index.html?src=ssb
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (file missing)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (file missing)
O4 - HKLM\..\Run: [Rscmpt] C:\WINDOWS\System32\Rscmpt.exe
O4 - HKLM\..\Run: [EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P26 "EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1 
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - Startup: Raccourci vers RTLCPL.lnk = C:\Program Files\Realtek AC97\RTLCPL.exe
O4 - Global Startup: Activer l'ensemble clavier et souris sans fil Labtec.lnk = C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/advanced/2.0.1.13/cfweb_activex.camfrogweb.com-advanced-2.0.1.13_instmodule.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://finoufinette.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - https://bitdefender.solutions-antivirus.com/scan8/oscan8.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.extrafilm.fr/net/Import/ImageUploader3.cab
O16 - DPF: {EB6D7E70-AAA9-40D9-BA05-F214089F2275} (Vitalize Class) - https://www.clickteam.com/
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: R54G Wireless Service - Unknown owner - C:\Program Files\Wireless 802.11g Monitor\WLService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender10\vsserv.exe" /service (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

Si quelqu un peut m aider ce serait gentil 
merci d'avance

plouf plouf · Answer

Bonjour Lousol
Peux-tu effectuer la méthode préliminaire ,de désinfection , jusqu'au #4 inclus et poster tous les rapports , obtenus , sur le forum , dans l'ordre ,stp :-)
Bon courage ;-)
a+
Plouf Plouf

Phako · Answer

Bonjour,
Vous pouvez utiliser les bloqueurs de fenêtres intempestives d'Internet Explorer, pour ce faire allez dans Outils - Options Internet et réglez vos préférences. Pour plus de sureté, téléchargez les barres d'outils de Google /yahoo. 
http://pack.google.com/intl/fr/product_info.html?tb
https://fr.yahoo.com/?p=us

plouf plouf · Answer

re ;-)
Non s'il n'y a pas d'altercations , ne le désactives pas .
a+
Plouf Plouf

plouf plouf · Answer

re ;-)
Ilousol, il me manque 3 rapports , celui de ccleaner , bitdefender aprés quoi, tu devais remettre un hijacthis , tu n'as pas lu , la méthode preliminaire , jusqu'au bout !? ;-)
J'attends donc la suite :-)
Bonne soirée a toi
A+ Plouf Plouf

lousol · Answer

ok ça ne marche pas !!! Pourkoi lsq je previualise mon message Je l ai entierement et dès keje l ajoutmanque les 3/4  

je dois être trop nulle e ça commence à m enerveri ça arche pas là tant pis pour moi j'irai voir ailleurs !!!
pffff je recommence !!! 

1ere sauvegarde :

Windows Registry Editor Version 5.00


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\WINDOWS\System32\spool\DRIVERS\W32X86\bvrpwf2000.dll"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\WINDOWS\System32\spool\DRIVERS\W32X86\bvrpwf2000.gpd"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\WINDOWS\system32\pxwma.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Softwin\BitDefender8\Skin\Default\mdefault.tsi"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Softwin\BitDefender8\_enHTML\bdhelp.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Softwin\BitDefender8\_enHTML\readme.txt"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\PROGRA~1\Canon\PhotoRecord\Program\opapi11.dll"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\PROGRA~1\Canon\PhotoRecord\OpPrintCom\opapi11.dll"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\WINDOWS\system32\QTPlugin.OCX"=dword:000003e6

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\WINDOWS\system32\decdnet.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Documents and Settings\All Users\Application Data\Ahead\NeroDigital\settings.xml"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero PhotoSnap\PhotoSnap-Chs.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero PhotoSnap\PhotoSnap-Cht.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero PhotoSnap\PhotoSnap-Deu.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero PhotoSnap\PhotoSnap-Esp.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero PhotoSnap\PhotoSnap-Ita.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero PhotoSnap\PhotoSnap-Jpn.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero PhotoSnap\PhotoSnap-Kor.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero PhotoSnap\PhotoSnap-Nld.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero PhotoSnap\PhotoSnap-Ptg.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero PhotoSnap\PhotoSnap-Sve.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero PhotoSnap\PhotoSnapViewer-Chs.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero PhotoSnap\PhotoSnapViewer-Cht.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero PhotoSnap\PhotoSnapViewer-Deu.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero PhotoSnap\PhotoSnapViewer-Esp.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero PhotoSnap\PhotoSnapViewer-Ita.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero PhotoSnap\PhotoSnapViewer-Jpn.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero PhotoSnap\PhotoSnapViewer-Kor.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero PhotoSnap\PhotoSnapViewer-Nld.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero PhotoSnap\PhotoSnapViewer-Ptg.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero PhotoSnap\PhotoSnapViewer-Sve.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero MediaHome\NeroMediaHome_Chs.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero MediaHome\NeroMediaHome_Chs.pdf"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero MediaHome\NeroMediaHome_Cht.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero MediaHome\NeroMediaHome_Cht.pdf"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero MediaHome\NeroMediaHome_Deu.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero MediaHome\NeroMediaHome_Deu.pdf"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero MediaHome\NeroMediaHome_Esp.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero MediaHome\NeroMediaHome_Esp.pdf"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero MediaHome\NeroMediaHome_Ita.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero MediaHome\NeroMediaHome_Ita.pdf"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero MediaHome\NeroMediaHome_Ptg.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero MediaHome\NeroMediaHome_Ptg.pdf"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero MediaHome\NeroMediaHome_Sve.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero MediaHome\NeroMediaHome_SVE.pdf"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\CoverDesigner\covered-cht.nls"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\CoverDesigner\covered-nld.nls"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\CoverDesigner\covered-deu.nls"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\CoverDesigner\covered-ita.nls"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\CoverDesigner\covered-jpn.nls"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\CoverDesigner\covered-kor.nls"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\CoverDesigner\covered-ptg.nls"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\CoverDesigner\covered-esp.nls"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\CoverDesigner\covered-sve.nls"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\CoverDesigner\covered-chs.nls"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero ShowTime\ShowTime-Chs.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero ShowTime\ShowTime-Cht.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero ShowTime\ShowTime-Deu.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero ShowTime\ShowTime-Esp.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero ShowTime\ShowTime-Ita.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero ShowTime\ShowTime-Jpn.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero ShowTime\ShowTime-kor.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero ShowTime\ShowTime-Nld.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero ShowTime\ShowTime-Ptg.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero ShowTime\ShowTime-sve.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero ShowTime\Skins\standard.bmp"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero Recode\Recode-Chs.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero Recode\Recode-Cht.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero Recode\Recode-Deu.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero Recode\Recode-Esp.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero Recode\Recode-Ita.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero Recode\Recode-Jpn.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero Recode\Recode-Kor.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero Recode\Recode-Nld.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero Recode\Recode-Ptg.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero Recode\Recode-Sve.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero BackItUp\BackItUp-Chs.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero BackItUp\BackItUp-Cht.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero BackItUp\BackItUp-Deu.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero BackItUp\BackItUp-Esp.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero BackItUp\BackItUp-Ita.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero BackItUp\BackItUp-Kor.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero BackItUp\BackItUp-Nld.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero BackItUp\BackItUp-Ptg.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero BackItUp\BackItUp-Sve.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart_chs.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart_cht.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart_deu.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart_esp.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart_ita.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart_jpn.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart_kor.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart_nld.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart_ptg.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart_sve.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Ahead\Nero BackItUp\BackItUp-Jpn.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\System.Windows.Forms.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\System.EnterpriseServices.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\Microsoft.JScript.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\Microsoft.Vsa.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\System.Drawing.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscoree.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscorlib.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\System.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\Microsoft.Vsa.Vb.CodeDOMProcessor.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\WINDOWS\system32\DIMM.DLL"=dword:00000001

[HKEY_CLASSES_ROOT\.wpz]


[HKEY_CLASSES_ROOT\accès]


[HKEY_CLASSES_ROOT\JavaPlugin.150_06]


[HKEY_CLASSES_ROOT\JavaPlugin.150_09]


[HKEY_CLASSES_ROOT\OISemffile]
@=""


[HKEY_CLASSES_ROOT\OIStiffile]
@=""


[HKEY_CLASSES_ROOT\OISwmffile]
@=""


[HKEY_CLASSES_ROOT\OWS Collaboration Objects]
@=""


[HKEY_CLASSES_ROOT\SysmonLogManager.Snapin]


[HKEY_CLASSES_ROOT\WMPCD]


[HKEY_CLASSES_ROOT\{]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.abm]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.abm\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.arr]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.arr\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aspx?FORM=DESKKW&q=jardinage+enfants]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aspx?FORM=DESKKW&q=jardinage+enfants\OpenWithList]
"a"="WINWORD.EXE"
"MRUList"="a"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bak]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bak\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CFG]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CFG\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.DA]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.DA\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dmg]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dmg\OpenWithList]
"a"="iexplore.exe"
"MRUList"="ba"
"b"="firefox.exe"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc?PHPSESSID=5fefaa587bb09e4038176b9d273f9b52]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc?PHPSESSID=5fefaa587bb09e4038176b9d273f9b52\OpenWithList]
"a"="WINWORD.EXE"
"MRUList"="a"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dps]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dps\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.DS_Store]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.DS_Store\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.EN]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.EN\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.FIC]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.FIC\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gam]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gam\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.HAR]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.HAR\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.info]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.info\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iso]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iso\OpenWithList]
"a"="UltraISO.exe"
"MRUList"="a"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iso\OpenWithProgids]
"UltraISO"=hex(0):


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MDS]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MDS\OpenWithList]
"a"="Dora_Sakado.exe"
"MRUList"="ab"
"b"="AcroRd32.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MDS\OpenWithProgids]
"MDS_auto_file"=hex(0):
"AlcoholImageFile"=hex(0):


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.NL]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.NL\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.oc]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.oc\OpenWithList]
"a"="OpenCellar.exe"
"MRUList"="a"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.part]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.part\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pf]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pf\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PSF]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PSF\OpenWithList]
"a"="PhotoImpression.exe"
"MRUList"="a"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PSF\OpenWithProgids]
"psfFile"=hex(0):


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tmpl]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tmpl\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.WindowsLiveContact]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.WindowsLiveContact\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmd]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wpn]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wpn\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wri]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wri\OpenWithList]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wri\OpenWithProgids]
"wrifile"=hex(0):


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.x32]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.x32\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\._SS500_SCLZZZZZZZ_V1056545253_]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\._SS500_SCLZZZZZZZ_V1056545253_\OpenWithList]
"a"="IEXPLORE.EXE"
"MRUList"="a"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\OpenWithList]


[HKEY_CLASSES_ROOT\Access.CryptPKO.3]
@="Access Object"

[HKEY_CLASSES_ROOT\Access.CryptPKO.3\CLSID]
@="{82294208-CD8C-7A1F-04F7-FA289423565C}"


[HKEY_CLASSES_ROOT\acrobat\DefaultIcon]
@="C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroRd32.exe"


[HKEY_CLASSES_ROOT\acwfile\DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,61,00,63,00,\
  63,00,77,00,69,00,7a,00,2e,00,65,00,78,00,65,00,2c,00,30,00,00,00


[HKEY_CLASSES_ROOT\acwfile\shell\open]

[HKEY_CLASSES_ROOT\acwfile\shell\open\command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,61,00,63,00,\
  63,00,77,00,69,00,7a,00,2e,00,65,00,78,00,65,00,20,00,25,00,31,00,00,00


[HKEY_CLASSES_ROOT\ADCS]
@="Conteneur de classe Annuaire"

[HKEY_CLASSES_ROOT\ADCS\CLSID]
@="{89E30300-764D-11d0-B282-00A0C90F56FC}"


[HKEY_CLASSES_ROOT\ADOX.BlnUserPs.1]
@="ADOX Applicaiton"

[HKEY_CLASSES_ROOT\ADOX.BlnUserPs.1\CLSID]
@="{0800FB8B-642A-7F94-9427-4268AC6D8A64}"


[HKEY_CLASSES_ROOT\Alg.AlgSetup]
@=""

[HKEY_CLASSES_ROOT\Alg.AlgSetup\CLSID]
@="{27D0BCCC-344D-4287-AF37-0C72C161C14C}"


[HKEY_CLASSES_ROOT\Alg.AlgSetup.1]
@=""

[HKEY_CLASSES_ROOT\Alg.AlgSetup.1\CLSID]
@="{27D0BCCC-344D-4287-AF37-0C72C161C14C}"


[HKEY_CLASSES_ROOT\BDATuner.OID.2]
@="BDATuner Applicaiton"

[HKEY_CLASSES_ROOT\BDATuner.OID.2\CLSID]
@="{E1202DC4-9A7D-4095-B3C4-E9E9F1C6409A}"


[HKEY_CLASSES_ROOT\boontybox\DefaultIcon]
@="C:\Program Files\Boonty\BoontyBox\BoontyBox.exe,0"


[HKEY_CLASSES_ROOT\boontybox\shell\open]

[HKEY_CLASSES_ROOT\boontybox\shell\open\command]
@="\"C:\Program Files\Boonty\BoontyBox\BoontyBox.exe\" %1"


[HKEY_CLASSES_ROOT\bwpfile\shell\open]

[HKEY_CLASSES_ROOT\bwpfile\shell\open\command]
@="C:\Program Files\Logitech\Desktop Messenger\8876480\6.1.4.68-8876480L\Program\PrvCnt.exe \"%1\""


[HKEY_CLASSES_ROOT\CAPESNPN.Security.1]
@="CAPESNPN Object"

[HKEY_CLASSES_ROOT\CAPESNPN.Security.1\CLSID]
@="{43563027-E302-48CF-8B4E-5B8A1131FFD7}"


[HKEY_CLASSES_ROOT\clpfile\DefaultIcon]
@=hex(2):25,00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,63,00,6c,00,\
  69,00,70,00,62,00,72,00,64,00,2e,00,65,00,78,00,65,00,2c,00,31,00,00,00


[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost]

[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost\CLSID]
@="{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}"


[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost.2]
@="Microsoft COM+ Runtime Meta Data"

[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost.2\CLSID]
@="{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}"


[HKEY_CLASSES_ROOT\ComPlusMetaDataServices.ShortCut.2]
@="ComPlusMetaDataServices Applicaiton"

[HKEY_CLASSES_ROOT\ComPlusMetaDataServices.ShortCut.2\CLSID]
@="{30A03EA3-26C8-1F07-31C1-B17EE28400B2}"


[HKEY_CLASSES_ROOT\Connection Manager Profile\DefaultIcon]
@="C:\WINDOWS\system32\CMMGR32.EXE,1"


[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\open]

[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\open\command]
@="C:\WINDOWS\system32\CMMGR32.EXE \"%1\""


[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\Settings...]

[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\Settings...\command]
@="C:\WINDOWS\system32\CMMGR32.EXE /settings \"%1\""


[HKEY_CLASSES_ROOT\CopyToDVDAutoplay\shell\CopyToDVDAutoplay_741406]
@="Create a CD or DVD"

[HKEY_CLASSES_ROOT\CopyToDVDAutoplay\shell\CopyToDVDAutoplay_741406\command]
@="C:\Program Files\VSO\vsostart.exe"


[HKEY_CLASSES_ROOT\CtorAct.DVBSTuningSpace.2]
@="CtorAct Applicaiton"

[HKEY_CLASSES_ROOT\CtorAct.DVBSTuningSpace.2\CLSID]
@="{5B896177-3BB8-065C-9AF8-0B2B16986F7E}"


[HKEY_CLASSES_ROOT\dcsfile\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,11"


[HKEY_CLASSES_ROOT\DirectAnimation.AsProxy]
@="DirectAnimation Class"

[HKEY_CLASSES_ROOT\DirectAnimation.AsProxy\CLSID]
@="{7EB916F4-8829-4FDC-827B-6647579B03D3}"


[HKEY_CLASSES_ROOT\DirectAnimation.PathControl]
@="Microsoft DirectAnimation Path"

[HKEY_CLASSES_ROOT\DirectAnimation.PathControl\CLSID]
@="{D7A7D7C3-D47F-11D0-89D3-00A0C90833E6}"


[HKEY_CLASSES_ROOT\DirectAnimation.Sequence]
@="Microsoft DirectAnimation Sequence"

[HKEY_CLASSES_ROOT\DirectAnimation.Sequence\CLSID]
@="{4F241DB1-EE9F-11D0-9824-006097C99E51}"


[HKEY_CLASSES_ROOT\DirectAnimation.SequencerControl]
@="Microsoft DirectAnimation Sequencer"

[HKEY_CLASSES_ROOT\DirectAnimation.SequencerControl\CLSID]
@="{B0A6BAE2-AAF0-11D0-A152-00A0C908DB96}"


[HKEY_CLASSES_ROOT\DirectAnimation.SpriteControl]
@="Microsoft DirectAnimation Sprite"

[HKEY_CLASSES_ROOT\DirectAnimation.SpriteControl\CLSID]
@="{FD179533-D86E-11D0-89D6-00A0C90833E6}"


[HKEY_CLASSES_ROOT\DirectAnimation.StructuredGraphicsControl]
@="Microsoft DirectAnimation Structured Graphics"

[HKEY_CLASSES_ROOT\DirectAnimation.StructuredGraphicsControl\CLSID]
@="{369303C2-D7AC-11D0-89D5-00A0C90833E6}"


[HKEY_CLASSES_ROOT\eConfPlayer.Scene\DefaultIcon]
@="C:\PROGRA~1\ORANGE~1\APPLIC~1\eConfv4\olinkp.exe,0"


[HKEY_CLASSES_ROOT\eConfPlayer.Scene\shell\open]

[HKEY_CLASSES_ROOT\eConfPlayer.Scene\shell\open\command]
@="C:\PROGRA~1\ORANGE~1\APPLIC~1\eConfv4\olinkp.exe \"%1\""


[HKEY_CLASSES_ROOT\eConfPlayer.Scene\shell\print]

[HKEY_CLASSES_ROOT\eConfPlayer.Scene\shell\print\command]
@="C:\PROGRA~1\ORANGE~1\APPLIC~1\eConfv4\olinkp.exe /p \"%1\""


[HKEY_CLASSES_ROOT\eConfPlayer.Scene\shell\printto]

[HKEY_CLASSES_ROOT\eConfPlayer.Scene\shell\printto\command]
@="C:\PROGRA~1\ORANGE~1\APPLIC~1\eConfv4\olinkp.exe /pt \"%1\" \"%2\" \"%3\" \"%4\""


[HKEY_CLASSES_ROOT\ecsfile\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,10"


[HKEY_CLASSES_ROOT\ed2k\DefaultIcon]
@="C:\Program Files\eMule\emule.exe"
"OldIcon"="C:\Program Files\eMule\emule.exe"


[HKEY_CLASSES_ROOT\ed2k\shell\open]

[HKEY_CLASSES_ROOT\ed2k\shell\open\command]
@="\"C:\Program Files\eMule\emule.exe\" \"%1\""
"OldDefault"="\"C:\Program Files\eMule\emule.exe\" \"%1\""


[HKEY_CLASSES_ROOT\fcsfile\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,12"


[HKEY_CLASSES_ROOT\htfile\shell\open]

[HKEY_CLASSES_ROOT\htfile\shell\open\command]
@="\"C:\Program Files\Windows NT\HYPERTRM.EXE\" %1"


[HKEY_CLASSES_ROOT\itpc\DefaultIcon]
@="\"C:\Program Files\Morpheus\Morpheus.exe\""


[HKEY_CLASSES_ROOT\itpc\shell\open]

[HKEY_CLASSES_ROOT\itpc\shell\open\command]
@="\"C:\Program Files\Morpheus\Morpheus.exe\" \"%1\""


[HKEY_CLASSES_ROOT\MDS_auto_file\shell\open]

[HKEY_CLASSES_ROOT\MDS_auto_file\shell\open\command]
@="\"C:\Program Files\eMule\Incoming\Dora_Sakado.exe\" \"%1\""


[HKEY_CLASSES_ROOT\morphpodcast\DefaultIcon]
@="\"C:\Program Files\Morpheus\podcast_icon.ico\""


[HKEY_CLASSES_ROOT\morphpodcast\shell\open]

[HKEY_CLASSES_ROOT\morphpodcast\shell\open\command]
@="\"C:\Program Files\Morpheus\Morpheus.exe\" \"%1\""


[HKEY_CLASSES_ROOT\morphtorrent\DefaultIcon]
@="\"C:\Program Files\Morpheus\Torrent.ico\""


[HKEY_CLASSES_ROOT\morphtorrent\shell\open]

[HKEY_CLASSES_ROOT\morphtorrent\shell\open\command]
@="\"C:\Program Files\Morpheus\Morpheus.exe\" \"%1\""


[HKEY_CLASSES_ROOT\mpodcast\DefaultIcon]
@="\"C:\Program Files\Morpheus\Morpheus.exe\""


[HKEY_CLASSES_ROOT\mpodcast\shell\open]

[HKEY_CLASSES_ROOT\mpodcast\shell\open\command]
@="\"C:\Program Files\Morpheus\Morpheus.exe\" \"%1\""


[HKEY_CLASSES_ROOT
csfile\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,14"


[HKEY_CLASSES_ROOT\Plenoptic.Plenoptic]
@="Plenoptic Class"

[HKEY_CLASSES_ROOT\Plenoptic.Plenoptic\CLSID]
@="{607C27E9-AB27-11d3-A116-A0EA50C10801}"

[HKEY_CLASSES_ROOT\Plenoptic.Plenoptic\CurVer]
@="Plenoptic.Plenoptic.1"


[HKEY_CLASSES_ROOT\Plenoptic.Plenoptic.1]
@="Plenoptic Class"

[HKEY_CLASSES_ROOT\Plenoptic.Plenoptic.1\CLSID]
@="{607C27E9-AB27-11d3-A116-A0EA50C10801}"


[HKEY_CLASSES_ROOT\PMWBannerType\shell\open]

[HKEY_CLASSES_ROOT\PMWBannerType\shell\open\command]
@="C:\PROGRA~1\MINDSC~1\PRINTM~1\PMW.EXE \"%1\""

[HKEY_CLASSES_ROOT\PMWBannerType\shell\open\ddeexec]
@="[open(\"%1\")]"


[HKEY_CLASSES_ROOT\PMWBizcardType\shell\open]

[HKEY_CLASSES_ROOT\PMWBizcardType\shell\open\command]
@="C:\PROGRA~1\MINDSC~1\PRINTM~1\PMW.EXE \"%1\""

[HKEY_CLASSES_ROOT\PMWBizcardType\shell\open\ddeexec]
@="[open(\"%1\")]"


[HKEY_CLASSES_ROOT\PMWBrochureType\shell\open]

[HKEY_CLASSES_ROOT\PMWBrochureType\shell\open\command]
@="C:\PROGRA~1\MINDSC~1\PRINTM~1\PMW.EXE \"%1\""

[HKEY_CLASSES_ROOT\PMWBrochureType\shell\open\ddeexec]
@="[open(\"%1\")]"


[HKEY_CLASSES_ROOT\PMWCalendarType\shell\open]

[HKEY_CLASSES_ROOT\PMWCalendarType\shell\open\command]
@="C:\PROGRA~1\MINDSC~1\PRINTM~1\PMW.EXE \"%1\""

[HKEY_CLASSES_ROOT\PMWCalendarType\shell\open\ddeexec]
@="[open(\"%1\")]"


[HKEY_CLASSES_ROOT\PMWCertificateType\shell\open]

[HKEY_CLASSES_ROOT\PMWCertificateType\shell\open\command]
@="C:\PROGRA~1\MINDSC~1\PRINTM~1\PMW.EXE \"%1\""

[HKEY_CLASSES_ROOT\PMWCertificateType\shell\open\ddeexec]
@="[open(\"%1\")]"


[HKEY_CLASSES_ROOT\PMWEnvelopeType\shell\open]

[HKEY_CLASSES_ROOT\PMWEnvelopeType\shell\open\command]
@="C:\PROGRA~1\MINDSC~1\PRINTM~1\PMW.EXE \"%1\""

[HKEY_CLASSES_ROOT\PMWEnvelopeType\shell\open\ddeexec]
@="[open(\"%1\")]"


[HKEY_CLASSES_ROOT\PMWFaxCoverType\shell\open]

[HKEY_CLASSES_ROOT\PMWFaxCoverType\shell\open\command]
@="C:\PROGRA~1\MINDSC~1\PRINTM~1\PMW.EXE \"%1\""

[HKEY_CLASSES_ROOT\PMWFaxCoverType\shell\open\ddeexec]
@="[open(\"%1\")]"


[HKEY_CLASSES_ROOT\PMWHalfFoldCardType\shell\open]

[HKEY_CLASSES_ROOT\PMWHalfFoldCardType\shell\open\command]
@="C:\PROGRA~1\MINDSC~1\PRINTM~1\PMW.EXE \"%1\""

[HKEY_CLASSES_ROOT\PMWHalfFoldCardType\shell\open\ddeexec]
@="[open(\"%1\")]"


[HKEY_CLASSES_ROOT\PMWLabelType\shell\open]

[HKEY_CLASSES_ROOT\PMWLabelType\shell\open\command]
@="C:\PROGRA~1\MINDSC~1\PRINTM~1\PMW.EXE \"%1\""

[HKEY_CLASSES_ROOT\PMWLabelType\shell\open\ddeexec]
@="[open(\"%1\")]"


[HKEY_CLASSES_ROOT\PMWLetterheadType\shell\open]

[HKEY_CLASSES_ROOT\PMWLetterheadType\shell\open\command]
@="C:\PROGRA~1\MINDSC~1\PRINTM~1\PMW.EXE \"%1\""

[HKEY_CLASSES_ROOT\PMWLetterheadType\shell\open\ddeexec]
@="[open(\"%1\")]"


[HKEY_CLASSES_ROOT\PMWNewsletterType\shell\open]

[HKEY_CLASSES_ROOT\PMWNewsletterType\shell\open\command]
@="C:\PROGRA~1\MINDSC~1\PRINTM~1\PMW.EXE \"%1\""

[HKEY_CLASSES_ROOT\PMWNewsletterType\shell\open\ddeexec]
@="[open(\"%1\")]"


[HKEY_CLASSES_ROOT\PMWNoteCardType\shell\open]

[HKEY_CLASSES_ROOT\PMWNoteCardType\shell\open\command]
@="C:\PROGRA~1\MINDSC~1\PRINTM~1\PMW.EXE \"%1\""

[HKEY_CLASSES_ROOT\PMWNoteCardType\shell\open\ddeexec]
@="[open(\"%1\")]"


[HKEY_CLASSES_ROOT\PMWPosterType\shell\open]

[HKEY_CLASSES_ROOT\PMWPosterType\shell\open\command]
@="C:\PROGRA~1\MINDSC~1\PRINTM~1\PMW.EXE \"%1\""

[HKEY_CLASSES_ROOT\PMWPosterType\shell\open\ddeexec]
@="[open(\"%1\")]"


[HKEY_CLASSES_ROOT\PMWTShirtType\shell\open]

[HKEY_CLASSES_ROOT\PMWTShirtType\shell\open\command]
@="C:\PROGRA~1\MINDSC~1\PRINTM~1\PMW.EXE \"%1\""

[HKEY_CLASSES_ROOT\PMWTShirtType\shell\open\ddeexec]
@="[open(\"%1\")]"


[HKEY_CLASSES_ROOT\podcast\DefaultIcon]
@="\"C:\Program Files\Morpheus\Morpheus.exe\""


[HKEY_CLASSES_ROOT\podcast\shell\open]

[HKEY_CLASSES_ROOT\podcast\shell\open\command]
@="\"C:\Program Files\Morpheus\Morpheus.exe\" \"%1\""


[HKEY_CLASSES_ROOT\ppifile\DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6d,00,73,00,\
  70,00,70,00,63,00,6e,00,66,00,67,00,2e,00,65,00,78,00,65,00,2c,00,31,00,00,\
  00


[HKEY_CLASSES_ROOT\ppifile\shell\open]

[HKEY_CLASSES_ROOT\ppifile\shell\open\command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6d,00,73,00,\
  70,00,70,00,63,00,6e,00,66,00,67,00,2e,00,65,00,78,00,65,00,20,00,2f,00,43,\
  00,6f,00,6e,00,66,00,69,00,67,00,20,00,25,00,31,00,00,00


[HKEY_CLASSES_ROOT\RTCCore.RTCClient]
@="RTCClient Class"

[HKEY_CLASSES_ROOT\RTCCore.RTCClient\CLSID]
@="{7a42ea29-a2b7-40c4-b091-f6f024aa89be}"


[HKEY_CLASSES_ROOT\RTCCore.RTCClient.1]
@="RTCClient Class"

[HKEY_CLASSES_ROOT\RTCCore.RTCClient.1\CLSID]
@="{7a42ea29-a2b7-40c4-b091-f6f024aa89be}"


[HKEY_CLASSES_ROOT\Shareaza.Collection\DefaultIcon]
@="\"C:\Program Files\Shareaza\Shareaza.exe\",-244"


[HKEY_CLASSES_ROOT\Shareaza.Collection\shell\open]

[HKEY_CLASSES_ROOT\Shareaza.Collection\shell\open\command]
@="\"C:\Program Files\Shareaza\Shareaza.exe\" \"%1\""

[HKEY_CLASSES_ROOT\Shareaza.Collection\shell\open\ddeexec]
@="%1"

[HKEY_CLASSES_ROOT\Shareaza.Collection\shell\open\ddeexec\Application]
@="Shareaza"

[HKEY_CLASSES_ROOT\Shareaza.Collection\shell\open\ddeexec\Topic]
@="COLLECTION"


[HKEY_CLASSES_ROOT\Sms_object.SMS]
@="SMS Class"

[HKEY_CLASSES_ROOT\Sms_object.SMS\CLSID]
@="{46E1BF8E-AA99-4749-AA37-E18A20629B2E5}"

[HKEY_CLASSES_ROOT\Sms_object.SMS\CurVer]
@="Sms_object.SMS.1"


[HKEY_CLASSES_ROOT\SpyDoctor.EBankProblem]
@="EBankProblem Object"

[HKEY_CLASSES_ROOT\SpyDoctor.EBankProblem\Clsid]
@="{AE612304-E8F9-45D9-A444-32409D33E954}"


[HKEY_CLASSES_ROOT\SpyDoctor.QuarantinedItemProxy]
@="QuarantinedItemProxy Object"

[HKEY_CLASSES_ROOT\SpyDoctor.QuarantinedItemProxy\Clsid]
@="{C2CE6266-0404-4C54-96B4-8829852E3537}"


[HKEY_CLASSES_ROOT\SpyDoctor.ScripterProxy]
@="ScripterProxy Object"

[HKEY_CLASSES_ROOT\SpyDoctor.ScripterProxy\Clsid]
@="{9FEF02F5-B3B8-4D7B-8939-72A1C989D1B9}"


[HKEY_CLASSES_ROOT\SymWriter.pdb]
@="Pdb based SymWriter"

[HKEY_CLASSES_ROOT\SymWriter.pdb\CLSID]
@="{520DC67A-752E-11D3-8D56-00C04F680B2B}"


[HKEY_CLASSES_ROOT	csfile\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,13"


[HKEY_CLASSES_ROOT\Type d'autocollant PMW\shell\open]

[HKEY_CLASSES_ROOT\Type d'autocollant PMW\shell\open\command]
@="C:\PROGRA~1\MINDSC~1\PRINTM~1\PMW.EXE \"%1\""

[HKEY_CLASSES_ROOT\Type d'autocollant PMW\shell\open\ddeexec]
@="[open(\"%1\")]"


[HKEY_CLASSES_ROOT\Type de carte PMW\shell\open]

[HKEY_CLASSES_ROOT\Type de carte PMW\shell\open\command]
@="C:\PROGRA~1\MINDSC~1\PRINTM~1\PMW.EXE \"%1\""

[HKEY_CLASSES_ROOT\Type de carte PMW\shell\open\ddeexec]
@="[open(\"%1\")]"


[HKEY_CLASSES_ROOT\Type de carte postale PMW\shell\open]

[HKEY_CLASSES_ROOT\Type de carte postale PMW\shell\open\command]
@="C:\PROGRA~1\MINDSC~1\PRINTM~1\PMW.EXE \"%1\""

[HKEY_CLASSES_ROOT\Type de carte postale PMW\shell\open\ddeexec]
@="[open(\"%1\")]"


[HKEY_CLASSES_ROOT\Type de page Web PMW\shell\open]

[HKEY_CLASSES_ROOT\Type de page Web PMW\shell\open\command]
@="C:\PROGRA~1\MINDSC~1\PRINTM~1\PMW.EXE \"%1\""

[HKEY_CLASSES_ROOT\Type de page Web PMW\shell\open\ddeexec]
@="[open(\"%1\")]"


[HKEY_CLASSES_ROOT\urn:content-classes:catalog\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,15"


[HKEY_CLASSES_ROOT\urn:content-classes:catalog-settings\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12471"


[HKEY_CLASSES_ROOT\urn:content-classes:contentclassdef\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-13101"


[HKEY_CLASSES_ROOT\urn:content-classes:exchange55startaddress\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12451"


[HKEY_CLASSES_ROOT\urn:content-classes:exchangestartaddress\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12451"


[HKEY_CLASSES_ROOT\urn:content-classes:filestartaddress\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12453"


[HKEY_CLASSES_ROOT\urn:content-classes:management\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,20"


[HKEY_CLASSES_ROOT\urn:content-classes:notesstartaddress\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12456"


[HKEY_CLASSES_ROOT\urn:content-classes:remoteworkspacestartaddress\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12454"


[HKEY_CLASSES_ROOT\urn:content-classes:webstartaddress\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12450"


[HKEY_CLASSES_ROOT\urn:content-classes:wizard/addcontentclass\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-13100"


[HKEY_CLASSES_ROOT\urn:content-classes:wizard/addsearchcontentlocation\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12461"


[HKEY_CLASSES_ROOT\urn:content-classes:workspace-settings\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12472"


[HKEY_CLASSES_ROOT\urn:content-classes:workspaceconfiguration\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12476"


[HKEY_CLASSES_ROOT\urn:content-classes:workspacestartaddress\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12454"


[HKEY_CLASSES_ROOT\WBEMComConnection]
@="WBEM Connection"

[HKEY_CLASSES_ROOT\WBEMComConnection\CLSID]
@="SOFTWARE\CLASSES\WBEMComConnection"


[HKEY_CLASSES_ROOT\wcsfile\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,9"


[HKEY_CLASSES_ROOT\WebTarot\DefaultIcon]
@="C:\Program Files\Webtarot\WEBTAROT.EXE,0"


[HKEY_CLASSES_ROOT\WebTarot\shell\open]

[HKEY_CLASSES_ROOT\WebTarot\shell\open\command]
@="\"C:\Program Files\Webtarot\WEBTAROT.EXE\" \"%1\""


[HKEY_CLASSES_ROOT\WMPPublsihCntr.WMPPublsihCntr]
@="PublishCntr for WMP 7.0"

[HKEY_CLASSES_ROOT\WMPPublsihCntr.WMPPublsihCntr\CLSID]
@="{939438A9-CF0F-44d8-9140-599736F0D3A2}"

[HKEY_CLASSES_ROOT\WMPPublsihCntr.WMPPublsihCntr\CurVer]
@="WMPPublsihCntr.WMPPublsihCntr.1"


[HKEY_CLASSES_ROOT\WMPPublsihCntr.WMPPublsihCntr.1]
@="PublishCntr for WMP 7.0"

[HKEY_CLASSES_ROOT\WMPPublsihCntr.WMPPublsihCntr.1\CLSID]
@="{939438A9-CF0F-44d8-9140-599736F0D3A2}"


[HKEY_CLASSES_ROOT\WMPShell.HWEventHandler]
@="WMP HWEventHandler"

[HKEY_CLASSES_ROOT\WMPShell.HWEventHandler\CLSID]
@="{9B186A8F-F520-4eeb-B553-118304AC46C5}"

[HKEY_CLASSES_ROOT\WMPShell.HWEventHandler\CurVer]
@="WMPShell.HWEventHandler.1"


[HKEY_CLASSES_ROOT\WMPShell.HWEventHandler.1]
@="WMP HWEventHandler"

[HKEY_CLASSES_ROOT\WMPShell.HWEventHandler.1\CLSID]
@="{9B186A8F-F520-4eeb-B553-118304AC46C5}"


[HKEY_CLASSES_ROOT\_SCLZZZZZZZ_SL160__auto_file\shell\Open]
@="&Ouvrir"

[HKEY_CLASSES_ROOT\_SCLZZZZZZZ_SL160__auto_file\shell\Open\command]
@="\"C:\Program Files\Microsoft Office\Office\MSPUB.EXE\" %1"
"command"=hex(7):38,00,4c,00,4c,00,21,00,21,00,67,00,78,00,73,00,66,00,28,00,\
  4e,00,67,00,5d,00,71,00,46,00,60,00,48,00,7b,00,4c,00,73,00,50,00,75,00,62,\
  00,50,00,72,00,69,00,6d,00,61,00,72,00,79,00,3e,00,25,00,7b,00,54,00,5d,00,\
  6a,00,49,00,7b,00,6a,00,66,00,28,00,3d,00,31,00,26,00,4c,00,5b,00,2d,00,38,\
  00,31,00,2d,00,5d,00,20,00,25,00,31,00,00,00,00,00


[HKEY_CLASSES_ROOT\_SCLZZZZZZZ_SL160__auto_file\shell\Print]
@="&Imprimer"

[HKEY_CLASSES_ROOT\_SCLZZZZZZZ_SL160__auto_file\shell\Print\command]
@="\"C:\Program Files\Microsoft Office\Office\MSPUB.EXE\" /p %1"
"command"=hex(7):38,00,4c,00,4c,00,21,00,21,00,67,00,78,00,73,00,66,00,28,00,\
  4e,00,67,00,5d,00,71,00,46,00,60,00,48,00,7b,00,4c,00,73,00,50,00,75,00,62,\
  00,50,00,72,00,69,00,6d,00,61,00,72,00,79,00,3e,00,25,00,7b,00,54,00,5d,00,\
  6a,00,49,00,7b,00,6a,00,66,00,28,00,3d,00,31,00,26,00,4c,00,5b,00,2d,00,38,\
  00,31,00,2d,00,5d,00,20,00,2f,00,70,00,20,00,25,00,31,00,00,00,00,00


[HKEY_CLASSES_ROOT\_SCLZZZZZZZ_SL160__auto_file\shell\Printto]

[HKEY_CLASSES_ROOT\_SCLZZZZZZZ_SL160__auto_file\shell\Printto\command]
@="\"C:\Program Files\Microsoft Office\Office\MSPUB.EXE\" /p %1 *%2, %3, %4"
"command"=hex(7):38,00,4c,00,4c,00,21,00,21,00,67,00,78,00,73,00,66,00,28,00,\
  4e,00,67,00,5d,00,71,00,46,00,60,00,48,00,7b,00,4c,00,73,00,50,00,75,00,62,\
  00,50,00,72,00,69,00,6d,00,61,00,72,00,79,00,3e,00,25,00,7b,00,54,00,5d,00,\
  6a,00,49,00,7b,00,6a,00,66,00,28,00,3d,00,31,00,26,00,4c,00,5b,00,2d,00,38,\
  00,31,00,2d,00,5d,00,20,00,2f,00,70,00,20,00,25,00,31,00,20,00,2a,00,25,00,\
  32,00,2c,00,20,00,25,00,33,00,2c,00,20,00,25,00,34,00,00,00,00,00


[HKEY_CLASSES_ROOT\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
@="Yahoo! Toolbar Helper"

[HKEY_CLASSES_ROOT\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\Control]

[HKEY_CLASSES_ROOT\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\Implemented Categories]

[HKEY_CLASSES_ROOT\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]

[HKEY_CLASSES_ROOT\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}]

[HKEY_CLASSES_ROOT\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\InprocServer32]
@="C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll"
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\MiscStatus]
@="0"

[HKEY_CLASSES_ROOT\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\MiscStatus\1]
@="132497"

[HKEY_CLASSES_ROOT\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ProgID]
@="yt.YTHelper.2"

[HKEY_CLASSES_ROOT\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\TypeLib]
@="{003028C2-EA1C-4676-A316-B5CB50917002}"

[HKEY_CLASSES_ROOT\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\Version]
@="6.1.2.0"

[HKEY_CLASSES_ROOT\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\VersionIndependentProgID]
@="yt.YTHelper"


[HKEY_CLASSES_ROOT\CLSID\{04CF20C0-BE7E-C9A6-2C51-B8CE6EBDEF92}]

[HKEY_CLASSES_ROOT\CLSID\{04CF20C0-BE7E-C9A6-2C51-B8CE6EBDEF92}\InprocServer32]
@="C:\WINDOWS\system32\jxobgdse.dll"
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{04CF20C0-BE7E-C9A6-2C51-B8CE6EBDEF92}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{04CF20C0-BE7E-C9A6-2C51-B8CE6EBDEF92}\TypeLib]
@="{C6EB7612-846F-CDF3-0FBA-97F63B91111B}"


[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}]
@="ActiveXPlugin Object"

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\Control]

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\Implemented Categories]

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}]

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\InprocServer32]
@="C:\WINDOWS\system32\plugin.ocx"
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\MiscStatus]
@="0"

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\MiscStatus\1]
@="131473"

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\ProgID]
@="Microsoft.ActiveXPlugin.1"

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\ToolboxBitmap32]
@="C:\WINDOWS\system32\plugin.ocx, 1"

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\TypeLib]
@="{06DD38D0-D187-11CF-A80D-00C04FD74AD8}"

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\Version]
@="1.0"

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\VersionIndependentProgID]
@="Microsoft.ActiveXPlugin"


[HKEY_CLASSES_ROOT\CLSID\{08C8F6D9-969D-11D1-8E02-00C04FB6FECE}]
@="QuillStoriesManager"

[HKEY_CLASSES_ROOT\CLSID\{08C8F6D9-969D-11D1-8E02-00C04FB6FECE}\InprocServer32]
@="C:\Program Files\Microsoft Office\Office\PTXT9.DLL"

[HKEY_CLASSES_ROOT\CLSID\{08C8F6D9-969D-11D1-8E02-00C04FB6FECE}\NotInsertable]


[HKEY_CLASSES_ROOT\CLSID\{08C8F6E4-969D-11D1-8E02-00C04FB6FECE}]
@="Publisher Rtf I/O"

[HKEY_CLASSES_ROOT\CLSID\{08C8F6E4-969D-11D1-8E02-00C04FB6FECE}\InprocServer32]
@="C:\Program Files\Microsoft Office\Office\PRTF9.DLL"

[HKEY_CLASSES_ROOT\CLSID\{08C8F6E4-969D-11D1-8E02-00C04FB6FECE}\NotInsertable]


[HKEY_CLASSES_ROOT\CLSID\{111C85E9-BB62-4528-A806-F0BE908E02F0}]

[HKEY_CLASSES_ROOT\CLSID\{111C85E9-BB62-4528-A806-F0BE908E02F0}\InprocServer32]
@="\"C:\PROGRA~1\MSNMES~1\msgsc.dll\""
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{111C85E9-BB62-4528-A806-F0BE908E02F0}\LocalServer32]
@="\"C:\PROGRA~1\MSNMES~1\msnmsgr.exe\""
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{111C85E9-BB62-4528-A806-F0BE908E02F0}\ProgID]
@="MSNMessenger.ContactsPicker"

[HKEY_CLASSES_ROOT\CLSID\{111C85E9-BB62-4528-A806-F0BE908E02F0}\Programmable]
@=""

[HKEY_CLASSES_ROOT\CLSID\{111C85E9-BB62-4528-A806-F0BE908E02F0}\Version]
@="1.0"

[HKEY_CLASSES_ROOT\CLSID\{111C85E9-BB62-4528-A806-F0BE908E02F0}\VersionIndependentProgID]
@="MSNMessenger.ContactsPicker.1"


[HKEY_CLASSES_ROOT\CLSID\{1147DC83-6208-4dca-8E88-DD45BAAB3043}]
@="PopupBlocker Class"

[HKEY_CLASSES_ROOT\CLSID\{1147DC83-6208-4dca-8E88-DD45BAAB3043}\InprocServer32]
@="C:\Program Files\Yahoo!\Companion\Installs\cpn\pubmod.dll"
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{1147DC83-6208-4dca-8E88-DD45BAAB3043}\ProgID]
@="Yahoo.PopupBlockerPlugin.4"

[HKEY_CLASSES_ROOT\CLSID\{1147DC83-6208-4dca-8E88-DD45BAAB3043}\VersionIndependentProgID]
@="Yahoo.PopupBlockerPlugin"


[HKEY_CLASSES_ROOT\CLSID\{11CB4723-D5A1-4a55-8D1D-5C2679D54CF5}]
@="StringList Class"
"AppID"="{FFFFE1D1-E40D-49a1-9622-BC59BD1879C3}"

[HKEY_CLASSES_ROOT\CLSID\{11CB4723-D5A1-4a55-8D1D-5C2679D54CF5}\InprocServer32]
@="C:\Program Files\Yahoo!\Companion\Installs\cpn\ypubc.dll"
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{11CB4723-D5A1-4a55-8D1D-5C2679D54CF5}\ProgID]
@="YPUBC.StringList.1"

[HKEY_CLASSES_ROOT\CLSID\{11CB4723-D5A1-4a55-8D1D-5C2679D54CF5}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{11CB4723-D5A1-4a55-8D1D-5C2679D54CF5}\TypeLib]
@="{8A1AB044-787D-4309-8410-709768E484AB}"

[HKEY_CLASSES_ROOT\CLSID\{11CB4723-D5A1-4a55-8D1D-5C2679D54CF5}\VersionIndependentProgID]
@="YPUBC.StringList"


[HKEY_CLASSES_ROOT\CLSID\{1B34AB40-301E-4607-A524-43829385D1C5}]
@="CommunicationAgentMain Class"
"AppID"="{7C31C2B8-4CCD-4986-A3D0-84940B9AEA67}"

[HKEY_CLASSES_ROOT\CLSID\{1B34AB40-301E-4607-A524-43829385D1C5}\LocalServer32]
@="\"C:\PROGRA~1\ORANGE~1\APPLIC~1\COMMUN~1\COMMUN~1.EXE\""

[HKEY_CLASSES_ROOT\CLSID\{1B34AB40-301E-4607-A524-43829385D1C5}\ProgID]
@="CommunicationAgent.CommunicationAgentMain.1"

[HKEY_CLASSES_ROOT\CLSID\{1B34AB40-301E-4607-A524-43829385D1C5}\VersionIndependentProgID]
@="CommunicationAgent.CommunicationAgentMain"


[HKEY_CLASSES_ROOT\CLSID\{1B53F360-9A1B-1069-930C-00AA0030EBC8}]
@="HyperTerminal Connection Page Ext"

[HKEY_CLASSES_ROOT\CLSID\{1B53F360-9A1B-1069-930C-00AA0030EBC8}\InProcServer32]
@="C:\WINDOWS\system32\hypertrm.dll"
"ThreadingModel"="Apartment"


[HKEY_CLASSES_ROOT\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}]
@="Microsoft WinSock Control, version 6.0"

[HKEY_CLASSES_ROOT\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Control]

[HKEY_CLASSES_ROOT\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Implemented Categories]

[HKEY_CLASSES_ROOT\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Implemented Categories\{0DE86A52-2BAA-11CF-A229-00AA003D7352}]

[HKEY_CLASSES_ROOT\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Implemented Categories\{0DE86A53-2BAA-11CF-A229-00AA003D7352}]

[HKEY_CLASSES_ROOT\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Implemented Categories\{0DE86A57-2BAA-11CF-A229-00AA003D7352}]

[HKEY_CLASSES_ROOT\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Implemented Categories\{40FC6ED4-2438-11CF-A3DB-080036F12502}]

[HKEY_CLASSES_ROOT\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Implemented Categories\{40FC6ED5-2438-11CF-A3DB-080036F12502}]

[HKEY_CLASSES_ROOT\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\InprocServer32]
@="C:\Program Files\easyrencontre\MSWINSCK.OCX"
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\MiscStatus]
@="0"

[HKEY_CLASSES_ROOT\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\MiscStatus\1]
@="132497"

[HKEY_CLASSES_ROOT\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\ProgID]
@="MSWinsock.Winsock.1"

[HKEY_CLASSES_ROOT\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\ToolboxBitmap32]
@="C:\Program Files\easyrencontre\MSWINSCK.OCX, 1"

[HKEY_CLASSES_ROOT\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\TypeLib]
@="{248DD890-BB45-11CF-9ABC-0080C7E7B78D}"

[HKEY_CLASSES_ROOT\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Version]
@="1.0"

[HKEY_CLASSES_ROOT\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\VersionIndependentProgID]
@="MSWinsock.Winsock"


[HKEY_CLASSES_ROOT\CLSID\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}]
@="Winsock General Property Page Object"

[HKEY_CLASSES_ROOT\CLSID\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\InprocServer32]
@="C:\Program Files\easyrencontre\MSWINSCK.OCX"


[HKEY_CLASSES_ROOT\CLSID\{2B26AEBA-25CB-419C-87FB-8880A77964F4}]
@="EpsonToolBandComm Class"

[HKEY_CLASSES_ROOT\CLSID\{2B26AEBA-25CB-419C-87FB-8880A77964F4}\InprocServer32]
@="C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll"
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{2B26AEBA-25CB-419C-87FB-8880A77964F4}\ProgID]
@="EpsonToolBand.EpsonToolBandComm.1"

[HKEY_CLASSES_ROOT\CLSID\{2B26AEBA-25CB-419C-87FB-8880A77964F4}\P

lousol · Answer

j abandonne
merci kan meme

plouf plouf · Answer

Salut lousol ,
Pourquoi souhaites tu abandonnés !?
au cas où ..choisis l'option 1 un de smitfraudfix
A+
Plouf Plouf

plouf plouf · Answer

Coucou ,
C desesperant !!!!
certes mais avec une p'tite dose de patience on peut y arriver ;-)
merci @ toi de supporter les mauvais caractere kom le mien !!! lol
lol de rien , ça devrait aller , t'inquiétes pas .
Maintenant redemarres l'ordinateur ,en mode sans echec (au démarrage de l'ordinateur, tapoter F8)
Doubles clique/Smitfraudfix.cmd
Sélectionnes2 dans le menu et réponds O (oui) a tout et postes le rapport , stp .
Bon courage ;-)
a+
Plouf Plouf

plouf plouf · Answer

Re :-)
Peux tu remettre un hijackthis , stp.
a+
Plouf Plouf

plouf plouf · Answer

c'est bien continuons ;-)
Prends connaissance du contenu le lien suivant:
http://www.f-secure.com/products/license-terms/eult_fra.pdf


Tu as donc pris connaissance et accepté les conditions d'utilisations du programme blacklight qui est inclus dans le dossier compressé navilog1.zip que tu vas télécharger.

Maintenant fais un clic droit sur ce lien :

http://perso.orange.fr/il.mafioso/Navifix/navilog1.zip


Enregistrer la cible (du lien) sous. et enregistres-le sur ton bureau.

Fais un clic droit sur navilog1.zip et choisis "tout extraire"

Ensuite double clique sur navilog1.bat

Laisses-toi guider.

Au menu principal, choisis 1 et valides.
(Ne fais pas le choix 2 sans notre avis/accord)

Patientes jusqu'au message :

*** Analyse Termine le ..***

Appuies sur une touche comme demandé, le bloc note va s'ouvrir.

Copies-colles l'intégralité dans une réponse.

Refermes le bloc note.

Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

Bon courage ;-)
a+
Plouf Plouf

plouf plouf · Answer

Coucou lousol,
 peux tu faire ceci :
¤Démarre en mode sans échec :
Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter
Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
(Si F8 ne marche pas utilise la touche F5).

Double clique sur navilog1.bat
Laisses-toi guider. Au menu principal, choisis 2 et valides.
Indique le mode de nettoyage "automatique"
Laisses toi guider et réponds aux questions éventuelles
Ton bureau va disparaitre, c'est normal.
Patientes jusqu'au message :
*** Nettoyage Termine le ..... ***
Appuies sur une touche comme demandé, le blocnote va s'ouvrir.
Sauvegardes le rapport de manière à le retrouver
Refermes le blocnote. Ton bureau va réapparaitre
Redémarres normalement et copies-colles l'intégralité dans une réponse.
Le rapport est en outre sauvegardé à la racine du disque (cleannavi.txt)

PS:Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.
Puis rends-toi à l'onglet "processus". Cliques en haut à gauche sur fichiers et choisis "exécuter"
Tapes explorer et valides. Celà te fera apparaitre ton bureau

a+
Plouf Plouf

plouf plouf · Answer

re ;-)
C noté je ferai tout ça kan je serai rentrée ... suis au taff 
ok..
pas de problème !
a+:-)
Plouf Plouf

plouf plouf · Answer

Bonjour lousol,
1° peux tu préciser , (ou en sont tes soucis stp.) , s'il en reste..
2° peux tu remettre , un rapport hijackthis .
A+
Plouf Plouf

plouf plouf · Answer

Coucou ,
Ton mari était /a eu ces pubs..avant où aprés que tu ne passes navilog option 2 !?

En attendant ,peux-tu relancer ,hijacthis et fixer ces lignes , stp
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://a1540.g.akamai.net/
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://finoufinette.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - https://bitdefender.solutions-antivirus.com/scan8/oscan8.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.extrafilm.fr/net/Import/ImageUploader3.cab
O16 - DPF: {EB6D7E70-AAA9-40D9-BA05-F214089F2275} (Vitalize Class) - https://www.clickteam.com/ 

Pour l'ordi du boulot oui , effectues la méthode , préliminaire de désinfection , jusqu'au #5 et postes les rapport , dans une autre question , pour la suite on verra aprés
a+;-)
Plouf Plouf

plouf plouf · Answer

ah , la madâme n'a pas lu , la méthode préliminaire de désinfection :-)) sinon , tu saurais ce que veux dire fixer les lignes lol
Voici en image http://pageperso.aol.fr/balltrap34/demohijack.htm ce que cela signifie ( merci à balltrap pour cette réalisation)
2° peux tu faire analyser ceci :C:\WINDOWS\system32\spoolsv.exe 
(autorises l'affichage des dossiers et fichiers cachés)
ici http://www.virustotal.com/en/virustotalx.html colles le rapport / le forum ,stp :-)
a+
Plouf Plouf

plouf plouf · Answer

ok pas de soucis ;-)
a demain ;-)
Plouf Plouf

plouf plouf · Answer

Coucou Quentin -)
D'aprés le forum , gnt le processus spoolsv serait bon !?https://www.generation-nt.com/
Peux tu m'éclairer sur ce point précis , stp . j'ai un doute..
Merci
Bonne soirée ;-)
a+
Plouf Plouf
-
" C'est quand on n'a plus d'espoir qu'il ne faut désespérer de rien. "
(Sénèque)."PloufPlouf" alias PloufPlouf²;-)

lousol · Answer

coucou plouf plouf,

suis entrain de scanner mon pc du boulot avec AVG et il en a trouvé un ke je ne sais pas si il faut vraiment le nettoyer :

Not-A-Virus.downloader.Win32.Winfixer.o

peux tu m'eclairer stp ?

plouf plouf · Answer

Coucou lousol
1)Pour le pc , tu boulot creer un autre post , stp sinon on risque de ce mélanger les posts aprés merci , de ta compréhention :-)

2)Ou en es-tu avec ton post de la maison !?
vous avez toujours des pubs ce jour toi et ton mari!?
Bonne journée
a+
Plouf Plouf

plouf plouf · Answer

Coucou,
nan plus de pub C super merciii
c'est que tu as fait du bon travail :-)
Tu vois , toi qui voulais abandonner en début de post , faut admettre que ça aurait été dommage , pour toi et ton pc , non !?;-)
Contente pour toi , si tu n'as plu de pubs  ..
pour moi tout est bon micciiii bcp à toi
mais de rien , lousol , surtout qu'en + tu as l'air , d'être quelqu'un de sympa ..un peu impatiente lol !? au début mais sympa , tout de même ;-)
Bonne continuation à toi  (si jamais on ne se croise plu ..!?)
a+
Plouf Plouf

plouf plouf · Answer

Coucou Lousol ,
Bon ben je vois que réponse , cloturée , c'est réponse zappée ..loll!
c'est gentil ..ça lol
Plouf Plouf

plouf plouf · Answer

Coucou ,
non non tu as bien fait de creer un autre post , simplement tu avais oublié un post jusqu'a maintenant le <38> tu vois !?

Je serais bien venu t'aider pour ton pc du boulot mais j'ai vu que tu as déja quelqu'un , donc se sera peut etre pour une prochaine fois lol

je vais m occuper de mes choupettes là 
Elles ont quel àge ;-)
Bien amicalement à toi
Plouf Plouf

plouf plouf · Answer

Coucou lousol ,
Lou-Ann 5 ans 1/2 et Solène 16 mois et toi tu as des enfants ?
1)Oula a cet age là ,tu dois avoir beaucoup de vie dans la maison lol
mais je pense que c'est que du bonheur ;-)
Pour ma part , je n'en ai point .
2) Tu t'en sors avec ton pc , du boulot !?
courage.
amicalement bien a toi .

lousol · Answer

coucou plouf plouf,

vuii tu as raison ke du bonheur par contre pour mon prob au taffff 
vu ke personne ne donne suite
vu ke je ne suis pas du tout  d'un naturel impatient lol

ben suis allée demander de l aide sur un autre forum Ils ont commencés à bien me depanner mais aujourd hui G T en deplacement toute la journée pour boulot donc G po pu m en occupé

bibi @ toi @ bientôt

plouf plouf · Answer

Coucou Lousol,
vu ke personne ne donne suite
vu ke je ne suis pas du tout d'un naturel impatient lol
Ben si puisque "boulepate62" a repondu a ce  post..

ben suis allée demander de l aide sur un autre forum Ils ont commencés à bien me depanner 
Je crois que ça va faire plaisir a ccm ..
Au pire des cas tu aurais pu faire remonter le post en question en mettant up !?Enfin bon le principal c'est que tu retrouves un pc désinfecté 
.
bien a toi .
Bisous et a bientot pit'être lol
a+
Plouf Plouf

plouf plouf · Answer

Kikoo ,dis moi je comprends pas : Au pire des cas tu aurais pu faire remonter le post en question en mettant up  C koi mettre "up" ?
Ben tu mets simplement , un up sur le post en question et ça le fera remonter et rappellera surement au helper qui t'a pris en charge , que tu as eencore des soucis !? ( c'est pour le cas où il aurait oublié !? ça arrive parfois ..)
Bon appétit
a+
Plouf Plouf

plouf plouf · Answer

on fais koment pour mettre un "up" ??? bouuuuhhh ...
Tu plaisante là !? lol
Tu fais simplement comme si tu écrivais dans un post et tu mets "Up" voilà tout lol
a+

plouf plouf · Answer

Si la plaisanterie ne fait pas partie de tes moeurs , j'en suis désolée , 
cela dit te ""vexer"" n'était pas mon but 
suis vexée aussi ..
Bye !

plouf plouf · Answer

Dixit lousol :Ben nan je plaisantais pas jamais entendu parler de ça ...

merci suis vexée !!! 
Adieu lol
Avec plaisir lol

plouf plouf · Answer

ohlalalal je plaisantais pas kan je disais ne po comprendre le up !!!! pffff et je plaisantais kan je disais etre vexée 
mdr !!
merci encore de m avoir aidé
Il n'y a vraiment pas de quoi , d'ailleurs je l'avais déjà oublié ! 
Bonne continuation @toi et tes choupettes  ..
Plouf plouf

Publicités intempestives

30 réponses

Discussions similaires

Newsletters