Rootkit.win32 problème!

Salut,
J'ai lancé Sécuritoo et mon ordi l'a détecté ds C:/Windows/syst32:Drivers/IP6FW.SYS

Je viens aussi de mettre le rapport d'erreur.

C'est pas gagné. Quand je vais sur ton lien et que j'essaye de télécharger hijackthis , j'ai direct "Internet explorer ne peut afficher cette page, que je laisse le téléchargement se faire seul ou que je clique sur les liens http et ftp.
Que faire?

Voilà le rapport
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 17:38:46, on 31/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
C:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
C:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
C:\Program Files\Securitoo\av_fw\Anti-Virus\FSGK32.EXE
C:\Program Files\Securitoo\av_fw\fswsclds.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Securitoo\av_fw\Anti-Virus\fssm32.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Nikon\Wireless Camera Setup Utility\NkPtpEnum.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
C:\Program Files\Securitoo\av_fw\Common\FSMB32.EXE
C:\Program Files\Securitoo\av_fw\Common\FCH32.EXE
C:\Program Files\Securitoo\av_fw\Common\FAMEH32.EXE
C:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
C:\Program Files\Securitoo\av_fw\Anti-Virus\fsav32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\MESSAG~1\StartMessager.exe
C:\Program Files\Securitoo\av_fw\Common\FSM32.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\HbTools\Bin\4.8.4.0\HbtOEAddOn.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Hbtools\HBTV\HBTV.exe
C:\program files\divx\divx pro codec\gain_trickler_3202.exe
C:\Program Files\HbTools\Bin\4.8.4.0\HbtWeatherOnTray.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\vVX3000.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Securitoo\av_fw\backweb\1044199\Program\BackWeb-1044199.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HbTools\Bin\4.8.4.0\HbtSrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\WISPTIS.EXE
C:\Documents and Settings\Famille_2\Bureau\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: TVEngine Helper /fleok=1D8A83A5C2E6107C91A475760EA83FA5EF80752B9499803B2A2303766A - {4B18DD50-C996-44fc-AC52-0FECFF82ED58} - c:\program files\hbtools\hbtv\hbtvhelper.dll
O2 - BHO: HbTools - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\HbTools\Bin\4.8.4.0\HbtHostIE.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: (no name) - {d869742a-e5d2-4624-96c7-aae26170665e} - C:\Program Files\PowerCodec\isaddon.dll (file missing)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: H&otbar - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\HbTools\Bin\4.8.4.0\HbtHostIE.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Securitoo\av_fw\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Securitoo\av_fw\TNB\TNBUtil.exe" /CHECKALL
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HbTools] C:\Program Files\HbTools\Bin\4.8.4.0\HbtOEAddOn.exe
O4 - HKLM\..\Run: [sqtmjyiw] C:\WINDOWS\system32\xrrokepy.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Trickler] "c:\program files\divx\divx pro codec\gain_trickler_3202.exe"
O4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\HbTools\Bin\4.8.4.0\HbtWeatherOnTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKLM\..\Policies\Explorer\Run: [isamonitor.exe] C:\Program Files\PowerCodec\isamonitor.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://mangaclem.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u1-windows-i586-jc.cab
O20 - Winlogon Notify: rpcc - C:\WINDOWS\system32\rpcc.dll (file missing)
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Securitoo AntiVirus Firewall (BackWeb Client - 1044199) - Unknown owner - C:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - Unknown owner - C:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Authentication Agent (FSAA) - Unknown owner - C:\Program Files\Securitoo\av_fw\Common\FSAA.EXE (file missing)
O23 - Service: fsbwsys - Unknown owner - C:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
O23 - Service: F-Secure Distributed Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
O23 - Service: F-Secure Windows Security Center Legacy Detection Service (Fswsclds) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\fswsclds.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: NkPtpEnumP2 - Nikon Corporation - C:\Program Files\Nikon\Wireless Camera Setup Utility\NkPtpEnum.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe

J'ai pas vu le "blbeta.exe" mais j'ai lancé le blacklight et là le scan est fini et il me met que rien trouvé.

07/31/07 17:55:12 [Info]: BlackLight Engine 1.0.64 initialized
07/31/07 17:55:12 [Info]: OS: 5.1 build 2600 (Service Pack 2)
07/31/07 17:55:13 [Note]: 7019 4
07/31/07 17:55:13 [Note]: 7005 0
07/31/07 17:55:18 [Note]: 7006 0
07/31/07 17:55:18 [Note]: 7011 2684
07/31/07 17:55:18 [Note]: 7026 0
07/31/07 17:55:18 [Note]: 7026 0
07/31/07 17:55:21 [Note]: FSRAW library version 1.7.1022
07/31/07 18:03:36 [Note]: 2000 1012
07/31/07 18:03:36 [Note]: 2000 1012
07/31/07 18:03:36 [Note]: 2000 1012
07/31/07 18:06:55 [Note]: 7007 0

Est ce que j'ai fait comme il fallait ou j'ai loupé une étape?

Excuse moi, mais j'avais perdu notre discussion? Qq& me l'a indiqué mais je ne sais toujours pas où elle a disparue. Je suis en train de regarder ce que tu m'a donné. A tte

Au fait, pour gagner du temps, est-ce que je peux lancer CCleaner et AVG en même temps?

En effet, Ccleaner vient de se terminer ;-)
Je lance l'autre!! Youhou

Au fait, il ne fallait pas redémarrer mon ordi entre deux? Pasq j'ai un mess d'avg qui veut pas se fermer "logiciel malveillant trouvé" et si je mets nettoyer, il veut redémarrer mon poste. Alors que je suis en train d'analyser mon ordi avec avg...
Bref ;-)

Tiens, voilà ccleaner n°1

Windows Registry Editor Version 5.00


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\DOCUME~1\\ADMINI~1\\LOCALS~1\\Temp\\dx90c\\Oct2005_xinput_x86.cab"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\DOCUME~1\\ADMINI~1\\LOCALS~1\\Temp\\xfire\\.svn\\prop-base\\xfire_installer_14819.jowood.exe.svn-base"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\DOCUME~1\\ADMINI~1\\LOCALS~1\\Temp\\xfire\\xfire_installer_14819.jowood.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\DOCUME~1\\ADMINI~1\\LOCALS~1\\Temp\\xfire\\.svn\\README.txt"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\DOCUME~1\\famille\\LOCALS~1\\Temp\\dx90c\\Oct2005_xinput_x86.cab"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\DOCUME~1\\famille\\LOCALS~1\\Temp\\xfire\\.svn\\prop-base\\xfire_installer_14819.jowood.exe.svn-base"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\DOCUME~1\\famille\\LOCALS~1\\Temp\\xfire\\xfire_installer_14819.jowood.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\DOCUME~1\\famille\\LOCALS~1\\Temp\\xfire\\.svn\\README.txt"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Real\\GToolbar\\BarControl.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\system32\\DIMM.DLL"=dword:00000005

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\system32\\pxwma.dll"=dword:00000003

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\CoverDesigner\\covered-deu.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\system32\\msxml3a.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\System.Windows.Forms.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\System.EnterpriseServices.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\Microsoft.JScript.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\Microsoft.Vsa.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\System.Drawing.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\mscoree.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\mscorlib.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\System.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\Microsoft.Vsa.Vb.CodeDOMProcessor.tlb"=dword:00001000

[HKEY_CLASSES_ROOT\.wan]


[HKEY_CLASSES_ROOT\idcfile]
@=""


[HKEY_CLASSES_ROOT\OISemffile]
@=""


[HKEY_CLASSES_ROOT\OIStiffile]
@=""


[HKEY_CLASSES_ROOT\OISwmffile]
@=""


[HKEY_CLASSES_ROOT\SysmonLogManager.Snapin]


[HKEY_CLASSES_ROOT\WMPCD]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.info]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.info\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mtv]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mtv\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\bmp]
"Application"="NeroPhotoSnapViewer.Files7.bmp"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\cut]
"Application"="NeroPhotoSnapViewer.Files7.cut"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\dds]
"Application"="NeroPhotoSnapViewer.Files7.dds"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\dib]
"Application"="NeroCoverDesigner.Files7.DIB"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\gif]
"Application"="NeroPhotoSnapViewer.Files7.gif"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\ico]
"Application"="NeroPhotoSnapViewer.Files7.ico"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\iff]
"Application"="NeroPhotoSnapViewer.Files7.iff"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\jfif]
"Application"="NeroPhotoSnapViewer.Files7.jfif"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\jif]
"Application"="NeroPhotoSnapViewer.Files7.JIF"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\jng]
"Application"="NeroPhotoSnapViewer.Files7.jng"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\jpe]
"Application"="NeroPhotoSnapViewer.Files7.jpe"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\jpeg]
"Application"="NeroPhotoSnapViewer.Files7.jpeg"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\jpg]
"Application"="NeroPhotoSnapViewer.Files7.jpg"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\koa]
"Application"="NeroPhotoSnapViewer.Files7.koa"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\lbm]
"Application"="NeroPhotoSnapViewer.Files7.lbm"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\ljp]
"Application"="NeroPhotoSnapViewer.Files7.ljp"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\mng]
"Application"="NeroPhotoSnapViewer.Files7.mng"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\ncw]
"Application"="NeroPhotoSnapViewer.Files7.ncw"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\OpenWithList]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\pbm]
"Application"="NeroPhotoSnapViewer.Files7.pbm"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\pcd]
"Application"="NeroPhotoSnapViewer.Files7.pcd"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\pcx]
"Application"="NeroPhotoSnapViewer.Files7.pcx"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\png]
"Application"="NeroPhotoSnapViewer.Files7.png"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\ppm]
"Application"="NeroPhotoSnapViewer.Files7.pps"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\psd]
"Application"="NeroPhotoSnapViewer.Files7.psd"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\tga]
"Application"="NeroPhotoSnapViewer.Files7.tga"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\tif]
"Application"="NeroPhotoSnapViewer.Files7.tif"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\tiff]
"Application"="NeroPhotoSnapViewer.Files7.tiff"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\wbm]
"Application"="NeroPhotoSnapViewer.Files7.wbm"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\wbmp]
"Application"="NeroPhotoSnapViewer.Files7.wbmp"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\wmf]
"Application"="NeroPhotoSnapViewer.Files7.wmf"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\wpg]
"Application"="NeroPhotoSnapViewer.Files7.wpg"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\xbm]
"Application"="NeroPhotoSnapViewer.Files7.xbm"


[HKEY_CLASSES_ROOT\ADCS]
@="Conteneur de classe Annuaire"

[HKEY_CLASSES_ROOT\ADCS\CLSID]
@="{89E30300-764D-11d0-B282-00A0C90F56FC}"


[HKEY_CLASSES_ROOT\Applications\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero CoverDesigner"

[HKEY_CLASSES_ROOT\Applications\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe\" \"%1\""


[HKEY_CLASSES_ROOT\Applications\shell\play]
@="&Jouer"
"FriendlyAppName"="Nero ShowTime"

[HKEY_CLASSES_ROOT\Applications\shell\play\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe\" \"%1\""


[HKEY_CLASSES_ROOT\CameraWindowComp.Document]
@="Harnes Document"

[HKEY_CLASSES_ROOT\CameraWindowComp.Document\CLSID]
@="C:\\Program Files\\Canon\\ZoomBrowser EX\\CameraWindow\\CameraWindowComp.exe"


[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost]

[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost\CLSID]
@="{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}"


[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost.2]
@="Microsoft COM+ Runtime Meta Data"

[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost.2\CLSID]
@="{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}"


[HKEY_CLASSES_ROOT\Connection Manager Profile\DefaultIcon]
@="C:\\WINDOWS\\system32\\CMMGR32.EXE,1"


[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\open]

[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\open\command]
@="C:\\WINDOWS\\system32\\CMMGR32.EXE \"%1\""


[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\Settings...]

[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\Settings...\command]
@="C:\\WINDOWS\\system32\\CMMGR32.EXE /settings \"%1\""


[HKEY_CLASSES_ROOT\CoverDesigner.Files7.cdc\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero CoverDesigner"

[HKEY_CLASSES_ROOT\CoverDesigner.Files7.cdc\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe\" \"%1\""


[HKEY_CLASSES_ROOT\CoverDesigner.Files7.ncd\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero CoverDesigner"

[HKEY_CLASSES_ROOT\CoverDesigner.Files7.ncd\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe\" \"%1\""


[HKEY_CLASSES_ROOT\dcsfile\DefaultIcon]
@="C:\\Program Files\\Fichiers communs\\Microsoft Shared\\Web Folders\\pkmres.dll,11"


[HKEY_CLASSES_ROOT\DirectAnimation.PathControl]
@="Microsoft DirectAnimation Path"

[HKEY_CLASSES_ROOT\DirectAnimation.PathControl\CLSID]
@="{D7A7D7C3-D47F-11D0-89D3-00A0C90833E6}"


[HKEY_CLASSES_ROOT\DirectAnimation.Sequence]
@="Microsoft DirectAnimation Sequence"

[HKEY_CLASSES_ROOT\DirectAnimation.Sequence\CLSID]
@="{4F241DB1-EE9F-11D0-9824-006097C99E51}"


[HKEY_CLASSES_ROOT\DirectAnimation.SequencerControl]
@="Microsoft DirectAnimation Sequencer"

[HKEY_CLASSES_ROOT\DirectAnimation.SequencerControl\CLSID]
@="{B0A6BAE2-AAF0-11D0-A152-00A0C908DB96}"


[HKEY_CLASSES_ROOT\DirectAnimation.SpriteControl]
@="Microsoft DirectAnimation Sprite"

[HKEY_CLASSES_ROOT\DirectAnimation.SpriteControl\CLSID]
@="{FD179533-D86E-11D0-89D6-00A0C90833E6}"


[HKEY_CLASSES_ROOT\DirectAnimation.StructuredGraphicsControl]
@="Microsoft DirectAnimation Structured Graphics"

[HKEY_CLASSES_ROOT\DirectAnimation.StructuredGraphicsControl\CLSID]
@="{369303C2-D7AC-11D0-89D5-00A0C90833E6}"


[HKEY_CLASSES_ROOT\ecsfile\DefaultIcon]
@="C:\\Program Files\\Fichiers communs\\Microsoft Shared\\Web Folders\\pkmres.dll,10"


[HKEY_CLASSES_ROOT\fcsfile\DefaultIcon]
@="C:\\Program Files\\Fichiers communs\\Microsoft Shared\\Web Folders\\pkmres.dll,12"


[HKEY_CLASSES_ROOT\FinalBIG.Document\DefaultIcon]
@="C:\\DOCUME~1\\famille\\MESDOC~1\\DOSSIE~1\\CODESJ~1\\btm\\FINALB~1.EXE,1"


[HKEY_CLASSES_ROOT\FinalBIG.Document\shell\open]

[HKEY_CLASSES_ROOT\FinalBIG.Document\shell\open\command]
@="C:\\DOCUME~1\\famille\\MESDOC~1\\DOSSIE~1\\CODESJ~1\\btm\\FINALB~1.EXE /dde"

[HKEY_CLASSES_ROOT\FinalBIG.Document\shell\open\ddeexec]
@="[open(\"%1\")]"


[HKEY_CLASSES_ROOT\FinalBIG.Document\shell\print]

[HKEY_CLASSES_ROOT\FinalBIG.Document\shell\print\command]
@="C:\\DOCUME~1\\famille\\MESDOC~1\\DOSSIE~1\\CODESJ~1\\btm\\FINALB~1.EXE /dde"

[HKEY_CLASSES_ROOT\FinalBIG.Document\shell\print\ddeexec]
@="[print(\"%1\")]"


[HKEY_CLASSES_ROOT\FinalBIG.Document\shell\printto]

[HKEY_CLASSES_ROOT\FinalBIG.Document\shell\printto\command]
@="C:\\DOCUME~1\\famille\\MESDOC~1\\DOSSIE~1\\CODESJ~1\\btm\\FINALB~1.EXE /dde"

[HKEY_CLASSES_ROOT\FinalBIG.Document\shell\printto\ddeexec]
@="[printto(\"%1\",\"%2\",\"%3\",\"%4\")]"


[HKEY_CLASSES_ROOT\MailFileAtt]
@=""

[HKEY_CLASSES_ROOT\MailFileAtt\CLSID]
@="{00020D05-0000-0000-C000-000000000046}"


[HKEY_CLASSES_ROOT\mapifvbx.object]
@="MAPIForm object"

[HKEY_CLASSES_ROOT\mapifvbx.object\Clsid]
@="{41116C00-8B90-101B-96CD-00AA003B14FC}"


[HKEY_CLASSES_ROOT\mapifvbx.object.1]
@="MAPIForm object (V 1.0)"

[HKEY_CLASSES_ROOT\mapifvbx.object.1\Clsid]
@="{41116C00-8B90-101B-96CD-00AA003B14FC}"


[HKEY_CLASSES_ROOT\ncsfile\DefaultIcon]
@="C:\\Program Files\\Fichiers communs\\Microsoft Shared\\Web Folders\\pkmres.dll,14"


[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\AudioToNeroDigital_PlayCDAudioOnArrival]
@="Convertir des CD audio en Nero Digital Audio"

[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\AudioToNeroDigital_PlayCDAudioOnArrival\command]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe /Dialog:SaveTracks %L"


[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\CDAudio_HandleCDBurningOnArrival]
@="Créer CD Audio"

[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\CDAudio_HandleCDBurningOnArrival\command]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe /New:AudioCD"


[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\CopyCD_MixedContentOnArrival]
@="Copier CD"

[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\CopyCD_MixedContentOnArrival\command]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe /Dialog:DiscCopy %L"


[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\CopyCD_PlayCDAudioOnArrival]
@="Copier CD"

[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\CopyCD_PlayCDAudioOnArrival\command]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe /New:DiscCopy"


[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\CopyCD_PlayMusicFilesOnArrival]
@="Copier CD"

[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\CopyCD_PlayMusicFilesOnArrival\command]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe /Dialog:DiscCopy %L"


[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\DataDisc_HandleCDBurningOnArrival]
@="Créer disque de données"

[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\DataDisc_HandleCDBurningOnArrival\command]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe /New:ISODisc"


[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\LaunchNeroStartSmart_HandleCDBurningOnArrival]
@="Créer votre propre disque"

[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\LaunchNeroStartSmart_HandleCDBurningOnArrival\command]
@="C:\\Program Files\\Nero\\Nero 7\\Nero StartSmart\\NeroStartSmart.exe /AutoPlay"


[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\PlayAudioCD_PlayMusicFilesOnArrival]
@="Lire le fichier audio"

[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\PlayAudioCD_PlayMusicFilesOnArrival\command]
@="C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe /Play %L"


[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\PlayDVD_PlayDVDMovieOnArrival]
@="Lire la vidéo"

[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\PlayDVD_PlayDVDMovieOnArrival\command]
@="C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe /Play %L"


[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\PlayDVD_PlayVideoFilesOnArrival]
@="Lire la vidéo"

[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\PlayDVD_PlayVideoFilesOnArrival\command]
@="C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe /Play %L"


[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\RipCD_PlayCDAudioOnArrival]
@="Convertir des CD audio en fichiers audio"

[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\RipCD_PlayCDAudioOnArrival\command]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe /Dialog:SaveTracks %L"


[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\TranscodeVideo_PlayDVDMovieOnArrival]
@="Recoder DVD-Vidéo"

[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\TranscodeVideo_PlayDVDMovieOnArrival\command]
@="C:\\Program Files\\Nero\\Nero 7\\Nero Recode\\Recode.exe /New:CopyDVDVideo"


[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\VideoCapture_VideoCameraArrival]
@="Capture vidéo"

[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\VideoCapture_VideoCameraArrival\command]
@="C:\\Program Files\\Nero\\Nero 7\\Nero Vision\\NeroVision.exe /New:VideoCapture"


[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\ViewPhotos_ShowPicturesOnArrival]
@="Visualiser vos photos"

[HKEY_CLASSES_ROOT\Nero.AutoPlay7\shell\ViewPhotos_ShowPicturesOnArrival\command]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe /"


[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nba\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero BackItUp\\BackItUp.exe,6"


[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nba\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero BackItUp"

[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nba\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero BackItUp\\BackItUp.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nbi\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero BackItUp\\BackItUp.exe,3"


[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nbi\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero BackItUp"

[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nbi\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero BackItUp\\BackItUp.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nbt\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero BackItUp\\BackItUp.exe,7"


[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nbt\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero BackItUp"

[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nbt\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero BackItUp\\BackItUp.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nco\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero BackItUp\\BackItUp.exe,4"


[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nco\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero BackItUp"

[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nco\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero BackItUp\\BackItUp.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nc_\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero BackItUp\\BackItUp.exe,9"


[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nc_\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero BackItUp"

[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nc_\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero BackItUp\\BackItUp.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nda\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero BackItUp\\BackItUp.exe,24"


[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nda\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero BackItUp"

[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nda\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero BackItUp\\BackItUp.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nef\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero BackItUp\\BackItUp.exe,23"


[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nef\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero BackItUp"

[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nef\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero BackItUp\\BackItUp.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nji\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero BackItUp\\BackItUp.exe,5"


[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nji\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero BackItUp"

[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.nji\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero BackItUp\\BackItUp.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.njt\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero BackItUp\\BackItUp.exe,8"


[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.njt\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero BackItUp"

[HKEY_CLASSES_ROOT\NeroBackItUp.Files7.njt\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero BackItUp\\BackItUp.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.cue\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,5"


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.cue\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Burning ROM"

[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.cue\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nhf\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,3"


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nhf\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Burning ROM"

[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nhf\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nhv\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,8"


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nhv\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Burning ROM"

[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nhv\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nmd\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,8"


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nmd\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Burning ROM"

[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nmd\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nr3\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,15"


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nr3\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Burning ROM"

[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nr3\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nr4\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,18"


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nr4\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Burning ROM"

[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nr4\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nra\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,4"


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nra\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Burning ROM"

[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nra\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrb\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,2"


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrb\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Burning ROM"

[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrb\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrc\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,2"


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrc\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Burning ROM"

[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrc\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrd\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,8"


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrd\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Burning ROM"

[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrd\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nre\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,17"


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nre\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Burning ROM"

[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nre\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrg\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,5"


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrg\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Burning ROM"

[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrg\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrh\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,3"


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrh\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Burning ROM"

[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrh\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nri\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,2"


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nri\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Burning ROM"

[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nri\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrm\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,7"


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrm\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Burning ROM"

[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrm\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrs\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,2"


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrs\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Burning ROM"

[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrs\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nru\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,2"


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nru\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Burning ROM"

[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nru\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrv\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,8"


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrv\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Burning ROM"

[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrv\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrw\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,16"


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrw\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Burning ROM"

[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nrw\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nsd\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,8"


[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nsd\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Burning ROM"

[HKEY_CLASSES_ROOT\NeroBurningROM.Files7.nsd\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.bmp\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe,1"


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.bmp\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero CoverDesigner"

[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.bmp\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.cdc\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe,1"


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.cdc\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero CoverDesigner"

[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.cdc\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.dib\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe,1"


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.dib\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero CoverDesigner"

[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.dib\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.gif\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe,1"


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.gif\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero CoverDesigner"

[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.gif\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.jif\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe,1"


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.jif\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero CoverDesigner"

[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.jif\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.jpg\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe,1"


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.jpg\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero CoverDesigner"

[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.jpg\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.ncd\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe,1"


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.ncd\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero CoverDesigner"

[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.ncd\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.ncw\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe,1"


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.ncw\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero CoverDesigner"

[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.ncw\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.pcx\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe,1"


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.pcx\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero CoverDesigner"

[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.pcx\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.png\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe,1"


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.png\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero CoverDesigner"

[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.png\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.tga\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe,1"


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.tga\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero CoverDesigner"

[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.tga\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.tif\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe,1"


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.tif\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero CoverDesigner"

[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.tif\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.wmf\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe,1"


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.wmf\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero CoverDesigner"

[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.wmf\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.wpg\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe,1"


[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.wpg\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero CoverDesigner"

[HKEY_CLASSES_ROOT\NeroCoverDesigner.Files7.wpg\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero CoverDesigner\\CoverDes.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroExpress.Files7.cue\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,5"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nab\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,29"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nab\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Express"

[HKEY_CLASSES_ROOT\NeroExpress.Files7.nab\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nhf\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,3"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nhv\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,8"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nmd\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,8"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nr3\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,15"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nr4\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,18"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nra\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,4"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nrb\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,2"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nrc\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,2"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nrd\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,8"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nre\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,17"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nrg\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,5"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nrh\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,3"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nri\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,2"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nrj\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,27"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nrj\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero Express"

[HKEY_CLASSES_ROOT\NeroExpress.Files7.nrj\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nrm\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,7"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nrs\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,2"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nru\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,2"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nrv\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,8"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nrw\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,16"


[HKEY_CLASSES_ROOT\NeroExpress.Files7.nsd\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Core\\nero.exe,8"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.bmp\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe,1"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.bmp\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero PhotoSnap Viewer"

[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.bmp\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.cut\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe,1"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.cut\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero PhotoSnap Viewer"

[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.cut\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.dds\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe,1"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.dds\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero PhotoSnap Viewer"

[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.dds\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.gif\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe,1"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.gif\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero PhotoSnap Viewer"

[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.gif\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.ico\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe,1"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.ico\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero PhotoSnap Viewer"

[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.ico\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.iff\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe,1"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.iff\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero PhotoSnap Viewer"

[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.iff\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.jif\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe,1"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.jif\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero PhotoSnap Viewer"

[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.jif\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.jng\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe,1"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.jng\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero PhotoSnap Viewer"

[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.jng\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.koa\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe,1"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.koa\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero PhotoSnap Viewer"

[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.koa\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.lbm\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe,1"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.lbm\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero PhotoSnap Viewer"

[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.lbm\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.ljp\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe,1"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.ljp\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero PhotoSnap Viewer"

[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.ljp\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.mng\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe,1"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.mng\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero PhotoSnap Viewer"

[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.mng\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.ncw\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe,1"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.ncw\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero PhotoSnap Viewer"

[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.ncw\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.pbm\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe,1"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.pbm\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero PhotoSnap Viewer"

[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.pbm\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.pcd\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe,1"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.pcd\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero PhotoSnap Viewer"

[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.pcd\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.pcx\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe,1"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.pcx\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero PhotoSnap Viewer"

[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.pcx\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.ppm\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe,1"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.ppm\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero PhotoSnap Viewer"

[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.ppm\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.tga\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe,1"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.tga\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero PhotoSnap Viewer"

[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.tga\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.wbm\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe,1"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.wbm\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero PhotoSnap Viewer"

[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.wbm\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.wbmp\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe,1"


[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.wbmp\shell\open]
@="&Ouvrir"
"FriendlyAppName"="Nero PhotoSnap Viewer"

[HKEY_CLASSES_ROOT\NeroPhotoSnapViewer.Files7.wbmp\shell\open\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero PhotoSnap\\PhotoSnapViewer.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.aac\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe,0"


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.aac\shell\play]
@="&Jouer"
"FriendlyAppName"="Nero ShowTime"

[HKEY_CLASSES_ROOT\NeroShowTime.Files7.aac\shell\play\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.ac3\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe,0"


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.ac3\shell\play]
@="&Jouer"
"FriendlyAppName"="Nero ShowTime"

[HKEY_CLASSES_ROOT\NeroShowTime.Files7.ac3\shell\play\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.aif\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe,0"


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.aif\shell\play]
@="&Jouer"
"FriendlyAppName"="Nero ShowTime"

[HKEY_CLASSES_ROOT\NeroShowTime.Files7.aif\shell\play\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.aiff\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe,0"


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.aiff\shell\play]
@="&Jouer"
"FriendlyAppName"="Nero ShowTime"

[HKEY_CLASSES_ROOT\NeroShowTime.Files7.aiff\shell\play\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.asf\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe,0"


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.asf\shell\play]
@="&Jouer"
"FriendlyAppName"="Nero ShowTime"

[HKEY_CLASSES_ROOT\NeroShowTime.Files7.asf\shell\play\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.avi\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe,0"


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.avi\shell\play]
@="&Jouer"
"FriendlyAppName"="Nero ShowTime"

[HKEY_CLASSES_ROOT\NeroShowTime.Files7.avi\shell\play\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.avs\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe,0"


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.avs\shell\play]
@="&Jouer"
"FriendlyAppName"="Nero ShowTime"

[HKEY_CLASSES_ROOT\NeroShowTime.Files7.avs\shell\play\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.bup\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe,0"


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.bup\shell\play]
@="&Jouer"
"FriendlyAppName"="Nero ShowTime"

[HKEY_CLASSES_ROOT\NeroShowTime.Files7.bup\shell\play\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.cda\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe,0"


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.cda\shell\play]
@="&Jouer"
"FriendlyAppName"="Nero ShowTime"

[HKEY_CLASSES_ROOT\NeroShowTime.Files7.cda\shell\play\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.dat\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe,0"


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.dat\shell\play]
@="&Jouer"
"FriendlyAppName"="Nero ShowTime"

[HKEY_CLASSES_ROOT\NeroShowTime.Files7.dat\shell\play\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.divx\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe,0"


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.divx\shell\play]
@="&Jouer"
"FriendlyAppName"="Nero ShowTime"

[HKEY_CLASSES_ROOT\NeroShowTime.Files7.divx\shell\play\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.dv\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe,0"


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.dv\shell\play]
@="&Jouer"
"FriendlyAppName"="Nero ShowTime"

[HKEY_CLASSES_ROOT\NeroShowTime.Files7.dv\shell\play\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.dvr-ms\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe,0"


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.dvr-ms\shell\play]
@="&Jouer"
"FriendlyAppName"="Nero ShowTime"

[HKEY_CLASSES_ROOT\NeroShowTime.Files7.dvr-ms\shell\play\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.ifo\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe,0"


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.ifo\shell\play]
@="&Jouer"
"FriendlyAppName"="Nero ShowTime"

[HKEY_CLASSES_ROOT\NeroShowTime.Files7.ifo\shell\play\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.m2p\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe,0"


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.m2p\shell\play]
@="&Jouer"
"FriendlyAppName"="Nero ShowTime"

[HKEY_CLASSES_ROOT\NeroShowTime.Files7.m2p\shell\play\command]
@="\"C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe\" \"%1\""


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.m2t\DefaultIcon]
@="C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe,0"


[HKEY_CLASSES_ROOT\NeroShowTime.Files7.m2t\shell\play]
@="&Jouer"
"FriendlyAppName"="Nero ShowTime"

[HKEY_CLASSES_ROOT\NeroShowTime.Files7.m2t\shell\p

Oui, ça c'est fait. Et là je t'envoie le rapport de bitdefender.
Faut-il que je relance le hijackthis?

BitDefender Online Scanner



Scan report generated at: Tue, Jul 31, 2007 - 21:03:41





Scan path: A:\;C:\;D:\;E:\;







Statistics

Time
00:58:25

Files
233612

Folders
7499

Boot Sectors
2

Archives
2107

Packed Files
25158




Results

Identified Viruses
2

Infected Files
4

Suspect Files
0

Warnings
0

Disinfected
0

Deleted Files
4




Engines Info

Virus Definitions
641805

Engine build
AVCORE v1.0 (build 2410) (i386) (Jun 12 2007 21:08:27)

Scan plugins
14

Archive plugins
38

Unpack plugins
6

E-mail plugins
6

System plugins
1




Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions


Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes




Scanned File
Status

C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067946.exe=>(NSIS o)=>zlib_nsis0001
Infected with: Trojan.Hotbar.A

C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067946.exe=>(NSIS o)=>zlib_nsis0001
Disinfection failed

C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067946.exe=>(NSIS o)=>zlib_nsis0001
Deleted

C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067946.exe=>(NSIS o)
Update failed

C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067951.exe
Infected with: Trojan.Downloader.Winfixer.O

C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067951.exe
Disinfection failed

C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067951.exe
Deleted

C:\WINDOWS\system32\lmqeppgh.exe=>(NSIS o)=>lzma_nsis0005=>(NSIS o)=>zlib_nsis0001
Infected with: Trojan.Hotbar.A

C:\WINDOWS\system32\lmqeppgh.exe=>(NSIS o)=>lzma_nsis0005=>(NSIS o)=>zlib_nsis0001
Disinfection failed

C:\WINDOWS\system32\lmqeppgh.exe=>(NSIS o)=>lzma_nsis0005=>(NSIS o)=>zlib_nsis0001
Deleted

C:\WINDOWS\system32\lmqeppgh.exe=>(NSIS o)=>lzma_nsis0005=>(NSIS o)
Update failed

C:\WINDOWS\system32\lmqeppgh.exe=>(NSIS o)=>lzma_nsis0005=>(NSIS o)=>zlib_nsis0006=>(NSIS g)=>zlib_nsis0001
Infected with: Trojan.Hotbar.A

C:\WINDOWS\system32\lmqeppgh.exe=>(NSIS o)=>lzma_nsis0005=>(NSIS o)=>zlib_nsis0006=>(NSIS g)=>zlib_nsis0001
Disinfection failed

C:\WINDOWS\system32\lmqeppgh.exe=>(NSIS o)=>lzma_nsis0005=>(NSIS o)=>zlib_nsis0006=>(NSIS g)=>zlib_nsis0001
Deleted

C:\WINDOWS\system32\lmqeppgh.exe=>(NSIS o)=>lzma_nsis0005=>(NSIS o)=>zlib_nsis0006=>(NSIS g)
Update failed


A voir, il reste encore des trucs!!! Des solutions? Parce que s'il faut otut reformater...
j'en suis incapable ;-)

En plus, j'ai toujours AVG anti Spyware qui a ouvert une fenêtre que je n'arrive pas à fermer avec le truc du logiciel malveillant trouvé. J'ai essayé nettoyer et mettre en quarantaine, nettoyer, ignorer, etc.. la fenêtre reste là. Comment je m'en débarasse?

Avant de faire ça, j'aimerais bien savoir à quoi ça va servir. Est-ce que ça va supprimer des fichiers ou des programmes? Enfin, c'est quoi le but du truc?
Et pour le message avg qui voulait pas s'enlever, j'ai réussi, c'est bon.

Juste un détail : ça veut dire quoi poster le rapport qui se trouve ici C:\rapport_clean.txt ?
Je dois juste écrire "C:\rapport_clean.txt" ou je dois aller chercher le rapport de tout à l'heure?
Parce que le rapport de tout à l'h moi c'est ce fichier là que j'ai mis dans mes documents.
C'est quoi le bon truc à faire?

PS : Heureusement que tu es patient ;-)

Je voulais dire, ce fichier là : "CCleanersasauvegarde registre2 cc_20070731_1849"

Je suis allée voir sur C: pour trouver le rapport à envoyer. Mais le seul truc en version texte que j'ai c'est ça :
v1.40.520
- Fixed problem with Vista UAC compatibility.
- Fixed bug in Secure Delete when emptying Recycle Bin.
- Fixed bug in Secure Delete with 0 byte files.
- Fixed bug in Uninstall Tool with non-standard entries.
- Resource file loading optimizations.
- Updated Windows Live toolbar cleaning.
- Added Bulgarian translation.
- Updated several translations.
- Updated installer engine.
- Minor bug fixes.

v1.39.502
- Rewritten secure deletion code, now over 2x faster.
- Performance improvements deleting Internet Cache.
- Fixed bug in Recycle Bin cleaning.
- Fixed overflow error with a large number of temp files.
- Added AntiVir PE Classic and Premium cleaning.
- Removed PerfectDisk 8.0 cleaning.
- Optimized file size for language DLLs.
- Added Bosnian translation.
- Added Macedonian translation.
- Updated several translations.
- Minor bug fixes.

Est ce que c'est ça que je dois mettre?

Ou le truc que j'ai sauvegardé dans mes docs (icône feuille blanche avec carrés bleux - quand je dble cliq dessus, ça me demande si je veux rajouter ces infos au registre - de quel registre il parle??? - en plus, ce type de doc avec carrés bleux, j'en ai 2 pasq il était indiqué de refaire la manip avec Ccleaner jusqu'à ce qu'on ai plus rien, soit 2 fois pour moi) Qu'est ce que je fais?

Nos messages se sont encore croisés ;-)

Bon, tu as vu ce que je t'ai mis? J'ai bien compris que le fichier enregistrés dans mes docs soit CCleanersasauvegarde registre2 cc_20070731_1849 et CCleanersasauvegarde registre cc_20070731_1849 (qui sont les fichiers avec carrés bleus comme icône) --> Je supprime!

Par contre, rien dans C: qui s'appelle rapport clean...

Bon, je suis désolée de te faire passer autant de temps sur ce truc, mais voilà, moi yen a pas comprendre.
J'ai bien ouvert ton fichier zippé avec la fenêtre noire, mais ce que je capte pas c'est cette histoire de "poster le rapport qui est ici dans C: rapport clean.

- j'ai pas de fichier qui s'appelle "rapport clean" dans C: ! ;-(
Est ce que je dois juste écrire rapport clean ou est ce que je dois copier coller le fichier qui s'appelle comme ça (et que je ne trouve pas)

Au secours ;-)

Fichier décompressé!
Quand je double cliq sur le fichier clean, je trouve ça : des scripts de commande windows NT dont un qui s'appelle clean.

Et quand je clique sur le script appelé clean, je tombe sur une fenêtre noire V100 par Maleka_morte traduction ruby et je dois choisir une des options
1 recherche de fichiers infectieux
2 nettoyage
Q quitter.

C'est ça?

C'est fait, tu as vu le rapport?

Maintenant, j'étaeins mon ordi et je clique à fond sur F8 pour relancer clean et faire option2.
Ca me stresse cette histoire de virus ;-)

Et voilà le rapport
SmitFraudFix v2.207

Rapport fait à 23:45:21,43, 31/07/2007
Executé à partir de C:\Documents and Settings\Famille_2\Bureau\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
C:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
C:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
C:\Program Files\Securitoo\av_fw\Anti-Virus\FSGK32.EXE
C:\Program Files\Securitoo\av_fw\fswsclds.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Securitoo\av_fw\Anti-Virus\fssm32.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Nikon\Wireless Camera Setup Utility\NkPtpEnum.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
C:\Program Files\Securitoo\av_fw\Common\FSMB32.EXE
C:\Program Files\Securitoo\av_fw\Common\FCH32.EXE
C:\Program Files\Securitoo\av_fw\Common\FAMEH32.EXE
C:\Program Files\Securitoo\av_fw\Anti-Virus\fsav32.exe
C:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\MESSAG~1\StartMessager.exe
C:\Program Files\Securitoo\av_fw\Common\FSM32.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\vVX3000.exe
C:\Program Files\Securitoo\av_fw\backweb\1044199\Program\BackWeb-1044199.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Famille_2


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Famille_2\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\FAMILL~1\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

C:\Program Files\PowerCodec\ PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: 802.11 USB Wireless LAN Adapter - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.1.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{4AF12D92-2B12-4E9B-AF56-ACC564267DC7}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{4AF12D92-2B12-4E9B-AF56-ACC564267DC7}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

C'est quoi la prochaine étape?
Merci d'assurer autant en tout cas...

OK, je fais ça.
Vu l'heure, c'est vrai que je vais peut-être pas relancer l'avg ce soir...on verra ma motiv', et ma fatigue. Et la tienne aussi ;-)
Allez, je me lance

Voilà le raport n°2
SmitFraudFix v2.207

Rapport fait à 0:01:59,85, 01/08/2007
Executé à partir de C:\Documents and Settings\Famille_2\Bureau\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

C:\Program Files\PowerCodec\ supprimé

»»»»»»»»»»»»»»»»»»»»»»»» DNS



»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

Nettoyage terminé.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

PAR CONTRE!!!!! J'ai plus mon fond d'écran!

Oui, je t'ai dit, je suis stressée des virus. Et puis j'aime pas ce que je comprends pas, mais j'ai déjà remis mon fond d'écran ;-)
Pour l'instant l'avg me met 6 objets infectés...

La boulette!
Après nouvelle analyse avec AVG, j'ai supprimé certaines applications mais les autres ont été ignorées et pas moyen de les supprimer maintenant.
Je refais une analyse demain pasq là, j'en peux plus!!

Bonne fin de soirée et peut-être à demain pour continuer à suivre tes conseils.
Chuss

PS le rapport malgré tout:

AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 00:59:57 01/08/2007

+ Résultat de l'analyse:



C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067946.exe -> Adware.180Solutions : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067947.exe -> Adware.180Solutions : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067949.dll -> Adware.Companion : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067924.exe -> Adware.Hotbar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067925.dll -> Adware.HotBar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067926.dll -> Adware.HotBar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067927.exe -> Adware.HotBar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067928.dll -> Adware.HotBar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067929.dll -> Adware.Hotbar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067930.dll -> Adware.HotBar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067931.dll -> Adware.HotBar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067932.exe -> Adware.HotBar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067933.exe -> Adware.HotBar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067934.dll -> Adware.Hotbar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067935.dll -> Adware.Hotbar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067936.exe -> Adware.HotBar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067937.exe -> Adware.HotBar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067938.exe -> Adware.HotBar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067939.dll -> Adware.HotBar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067940.dll -> Adware.HotBar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067941.dll -> Adware.Hotbar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067942.exe -> Adware.HotBar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067943.exe -> Adware.Hotbar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067944.exe -> Adware.HotBar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067945.exe -> Adware.HotBar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067963.dll -> Adware.HotBar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067964.dll -> Adware.HotBar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067965.dll -> Adware.Hotbar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067966.dll -> Adware.Hotbar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067968.dll -> Adware.HotBar : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067948.dll -> Adware.WinAntiVirus : Ignoré.
C:\System Volume Information\_restore{7E2CF3A5-650E-4970-A45F-D48816DBA0B1}\RP291\A0067950.exe -> Not-A-Virus.Downloader.Win32.WinFixer.m : Ignoré.
C:\Documents and Settings\Famille_2\Cookies\famille_2@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Famille_2\Cookies\famille_2@bluestreak[3].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Famille_2\Cookies\famille_2@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Famille_2\Cookies\famille_2@doubleclick[2].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Famille_2\Cookies\famille_2@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Nettoyé.
C:\Documents and Settings\Famille_2\Cookies\famille_2@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.


Fin du rapport

Salut Greenday, je ne sais pas si tu es là, mais impossible de me connecter au site depuis mon dernier message!
Du coup je suis allée sur un autre forum (désolée) mais là, j'ai personne qui me répond depuis début d'aprem et rootkit est toujours là (securitoo me l'a détecté encore une fois)
Du coup, je ne sais pas si toi tu peux m'aider et si je supprime mes messages sur l'autre forum???
Dis moi quoi ;-)

Bon alors, je préfère continuer avec toi ;-)

Le gars avec qui j'étais sur l'autre site m'a fait faire un combofix auss. Ci-joint ses instructions :

Ok. Supprime ledossier Brute Force Uninstaller ainsi que son petit fichier. (normalement, il est dans le même dossier, donc supprime simplement le dossier)

Télécharge ComboFix (place-le dans un dossier où tu pourras le retrouver facilement !)
Exécute-le.
Choisis l'option n°1.
Le bureau peut disparaître pendant le scan : c'est normal.
Après, il reviendra. S'il ne revient pas, fais ceci :
Appuie simultanément sur CTRL + ALT + SUPPR.
Le Gestionnaire des tâches s'ouvrent. Clique sur Fichier puis sur Exécuter. Tape explorer et valide. Le bureau s'affichera à nouveau. À la fin, il va créer un rapport situé à la racine de ton disque dur. (C:\ComboFix.txt) Ouvre-le et colle-le ici.

Et ci-joint le rapport de Combofix généré tout à l'h

ComboFix 07-07-30.2 - "Famille_2" 2007-08-02 15:14:28.1 [GMT 2:00] - NTFS
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.Vrai
* Created a new restore point


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinAntiVirus Pro 2006
C:\fwdrv.sys
C:\WINDOWS\system32\1_exception.nls
C:\WINDOWS\system32\stera.log


((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))


-------\LEGACY_FOPN
-------\LEGACY_VSPF
-------\LEGACY_VSPF_HK
-------\FOPN


((((((((((((((((((((((((( Files Created from 2007-07-02 to 2007-08-02 )))))))))))))))))))))))))))))))


2007-08-02 15:13 51,200 --a------ C:\WINDOWS\nircmd.exe
2007-07-31 23:45 53,248 --a------ C:\WINDOWS\system32\Process.exe
2007-07-31 23:45 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2007-07-31 23:45 4,012 --a------ C:\WINDOWS\system32\tmp.reg
2007-07-31 23:45 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2007-07-31 20:02 <REP> d-------- C:\WINDOWS\BDOSCAN8
2007-07-31 18:58 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-07-31 18:38 <REP> d-------- C:\Program Files\CCleaner


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-08-02 15:25 75266 --a------ C:\WINDOWS\system32\perfc00C.dat
2007-08-02 15:25 468072 --a------ C:\WINDOWS\system32\perfh00C.dat
2007-08-02 15:25 --------- d-------- C:\Program Files\Wanadoo
2007-08-02 15:10 --------- d-------- C:\Program Files\Yahoo!
2007-07-31 14:09 --------- d-------- C:\Program Files\eMule
2007-07-20 16:07 --------- d-------- C:\DOCUME~1\FAMILL~1\APPLIC~1\AdobeUM
2007-06-23 19:08 --------- d-------- C:\Program Files\Microsoft LifeCam
2007-06-14 11:02 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2007-05-16 17:13 683520 --a------ C:\WINDOWS\system32\inetcomm.dll
2007-05-12 23:26 120 --a------ C:\drmHeader.bin
2007-05-11 19:54 524288 --a------ C:\WINDOWS\system32\DivXsm.exe
2007-05-11 06:37 823296 --a------ C:\WINDOWS\system32\divx_xx0c.dll
2007-05-11 06:37 823296 --a------ C:\WINDOWS\system32\divx_xx07.dll
2007-05-11 06:37 802816 --a------ C:\WINDOWS\system32\divx_xx11.dll
2007-05-11 06:37 740442 --a------ C:\WINDOWS\system32\DivX.dll
2007-02-22 20:37 645670 --a------ C:\Program Files\uTorrent-1.6-install.exe
2006-10-13 21:04 3887 --a------ C:\Program Files\ABC-win32-v3[1][1].1.exe.torrent
2006-10-12 20:41 10163714 --a------ C:\Program Files\rmxvideoconverter.exe
2006-10-12 18:25 5940731 --a------ C:\Program Files\DVDXPlayerSetupPro_Fr.exe
2006-09-16 20:49 7742325 --a------ C:\Program Files\DivX 5.2.1 XP et 2000.exe
2006-09-16 20:27 867146 --a------ C:\Program Files\xvidcore-1.1.0-beta2.zip
2006-09-16 20:09 3534076 --a------ C:\Program Files\eMule0.47c-Installer.exe
2006-09-03 15:24 138672000 --a------ C:\Program Files\Nero-7.2.7.0_fra.exe
2006-08-30 20:37 278528 --a------ C:\Program Files\Fichiers communs\FDEUnInstaller.exe


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nwiz"="nwiz.exe" [2006-02-09 02:06 C:\WINDOWS\system32\nwiz.exe]
"SoundMan"="SOUNDMAN.EXE" [2005-10-24 08:45 C:\WINDOWS\soundman.exe]
"MessagerStarter Wanadoo"="C:\PROGRA~1\MESSAG~1\StartMessager.exe" [2003-04-11 17:06]
"F-Secure Manager"="C:\Program Files\Securitoo\av_fw\Common\FSM32.exe" [2003-02-19 06:01]
"F-Secure TNB"="C:\Program Files\Securitoo\av_fw\TNB\TNBUtil.exe" [2003-05-09 11:30]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-05-22 19:14]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2004-05-12 15:18]
"WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-08-23 14:49]
"WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\GestMaj.exe" [2004-10-14 16:55]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-02-16 23:11]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-02-17 11:48]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
"LifeCam"="C:\Program Files\Microsoft LifeCam\LifeExp.exe" [2007-01-13 03:48]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25]
"NWEReboot"="" []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00]
"WOOKIT"="C:\PROGRA~1\Wanadoo\Shell.exe" [2004-08-23 14:50]
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 13:55]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2007-02-03 23:53]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" []

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Gamma Loader.exe.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2006-06-13 20:47:12]
D‚marrage rapide du logiciel HP Image Zone.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe [2004-05-28 23:06:36]
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2004-05-28 22:31:38]
Lancement rapide de Microsoft Office OneNote 2003.lnk - C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE [2005-03-17 15:06:14]
NkbMonitor.exe.lnk - C:\Program Files\Nikon\PictureProject\NkbMonitor.exe [2007-02-17 11:50:17]
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE [2006-05-16 19:12:51]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=0 (0x0)

R0 FSDFW;F-Secure Distributed Firewall Driver;C:\WINDOWS\system32\drivers\fsdfw.sys
R0 sfsync04;StarForce Protection Synchronization Driver (version 4.x);C:\WINDOWS\system32\drivers\sfsync04.sys
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x);C:\WINDOWS\system32\drivers\sfvfs02.sys
R1 AmdK8;AMD Processor Driver;C:\WINDOWS\system32\DRIVERS\AmdK8.sys
R2 atksgt;atksgt;C:\WINDOWS\system32\DRIVERS\atksgt.sys
R2 BackWeb Client - 1044199;Securitoo AntiVirus Firewall;C:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
R2 F-Secure Filter;F-Secure File System Filter;\??\C:\Program Files\Securitoo\av_fw\Anti-Virus\Win2K\FSfilter.sys
R2 F-Secure Gatekeeper;F-Secure Gatekeeper;\??\C:\Program Files\Securitoo\av_fw\Anti-Virus\Win2K\FSgk.sys
R2 F-Secure Recognizer;F-Secure File System Recognizer;\??\C:\Program Files\Securitoo\av_fw\Anti-Virus\Win2K\FSrec.sys
R2 FSpm;F-Secure Policy Manager;\??\C:\Program Files\Securitoo\av_fw\Common\FSPM.SYS
R2 Fswsclds;F-Secure Windows Security Center Legacy Detection Service;C:\Program Files\Securitoo\av_fw\fswsclds.exe
R2 lirsgt;lirsgt;C:\WINDOWS\system32\DRIVERS\lirsgt.sys
R2 MSCamSvc;MSCamSvc;"C:\Program Files\Microsoft LifeCam\MSCamS32.exe"
R2 NkPtpEnumP2;NkPtpEnumP2;"C:\Program Files\Nikon\Wireless Camera Setup Utility\NkPtpEnum.exe" -a -d="C:\Program Files\Nikon\Wireless Camera Setup Utility\NkPtpip.dll"
R3 SIS163u;SiS163 USB Wireless LAN Adapter Driver;C:\WINDOWS\system32\DRIVERS\sis163u.sys
R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys
R3 VBus;Virtual Bus;C:\WINDOWS\system32\DRIVERS\NkVBus.sys
R3 VX3000;VX-3000;C:\WINDOWS\system32\DRIVERS\VX3000.sys
S0 cercsr6;cercsr6;C:\WINDOWS\system32\drivers\cercsr6.sys
S3 GMSIPCI;GMSIPCI;\??\D:\INSTALL\GMSIPCI.SYS
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver;\??\C:\WINDOWS\system32\PCAMPR5.SYS
S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS


Contents of the 'Scheduled Tasks' folder
2007-08-02 12:53:01 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job

**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-08-02 15:23:47
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 2007-08-02 15:26:53 - machine was rebooted
C:\ComboFix-quarantined-files.txt ... 2007-08-02 15:26

--- E O F ---

Qu'est ce que tu en dis?

Au fait, avant il m'a fait faire ça :

Retourne dans HiJackThis, clique sur Do a system scan only. Repère ces lignes et coche-les :

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll (file missing)
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O20 - Winlogon Notify: rpcc - C:\WINDOWS\system32\rpcc.dll (file missing)

Clique ensuite sur fix checked.

Une question comme ça, pourquoi as-tu trois Barre d'outils de recherche ? (Microsoft, Yahoo et Google)

Reposte un rapport HiJackThis.

Et voici le rapport qui allé avec :
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 20:09:07, on 01/08/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
C:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
C:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
C:\Program Files\Securitoo\av_fw\Anti-Virus\FSGK32.EXE
C:\Program Files\Securitoo\av_fw\fswsclds.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Securitoo\av_fw\Anti-Virus\fssm32.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Nikon\Wireless Camera Setup Utility\NkPtpEnum.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
C:\Program Files\Securitoo\av_fw\Common\FSMB32.EXE
C:\Program Files\Securitoo\av_fw\Common\FCH32.EXE
C:\Program Files\Securitoo\av_fw\Common\FAMEH32.EXE
C:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
C:\Program Files\Securitoo\av_fw\Anti-Virus\fsav32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\MESSAG~1\StartMessager.exe
C:\Program Files\Securitoo\av_fw\Common\FSM32.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\WINDOWS\vVX3000.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Securitoo\av_fw\backweb\1044199\Program\BackWeb-1044199.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Famille_2\Bureau\HiJackThis_v2.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Securitoo\av_fw\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Securitoo\av_fw\TNB\TNBUtil.exe" /CHECKALL
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://mangaclem.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u1-windows-i586-jc.cab
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Securitoo AntiVirus Firewall (BackWeb Client - 1044199) - Unknown owner - C:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - Unknown owner - C:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Authentication Agent (FSAA) - Unknown owner - C:\Program Files\Securitoo\av_fw\Common\FSAA.EXE (file missing)
O23 - Service: fsbwsys - Unknown owner - C:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
O23 - Service: F-Secure Distributed Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
O23 - Service: F-Secure Windows Security Center Legacy Detection Service (Fswsclds) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\fswsclds.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: NkPtpEnumP2 - Nikon Corporation - C:\Program Files\Nikon\Wireless Camera Setup Utility\NkPtpEnum.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe

--
End of file - 12575 bytes