probleme grave avec hijacker.starpage.aop

Question

salut j'ai un probleme avec hijacker.starpage.aop 

il a desactivité mon antivirus....et mes protections pc !!! je ne peux meme plus restauré mon systeme ! ni me connecter a un internet ! j'ai pu le detecter avec AVG anti spyware , mis en qurantaine et suprimmer il etait dans SYSTEME VOLUME INFORMATION

aidez moi SVP !!!

Utilisateur anonyme · Answer

Bonsoir

Fais ceci sur la machine infecté, si t'as un support pour transferer des donnés ; mp3, clé usb, ..

Télécharge HijackThis : 
---> http://www.trendsecure.com/portal/en-US/threat_analytics/HiJackThis_v2.exe

Installe le dans son propre dossier :
- clic droit sur le bureau, tu choisis "nouveau dossier" puis installe-le à l'intérieur.
Fais un clic droit sur Hijackthis, choisis "renommer" puis marque ceci : abcde.exe 
Double-clic sur HijackThis. Clic sur "I Accept" puis clic sur "do a system scan and save logfile" 
Puis copie et colle ici le rapport qu'il va te générer.

Démo pour HijackThis si besoin  :
http://pageperso.aol.fr/balltrap34/demohijack.htm

manu59000 · Answer

je n'arrive meme pas a aller en mode sans echec

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 03:59:29, on 28/08/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
c:\i386\acer\emanager\anbmserv.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\wlancfg.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\PowerKey.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\CtrlVol.exe
C:\Program Files\Launch Manager\OSDCtrl.exe
C:\Program Files\Launch Manager\Wbutton.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\program files\msn messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\drivers\hidr.exe
C:\Documents and Settings\anthony volckaert\Bureau\HiJackThis_v2.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O4 - HKLM\..\Run: [preload] C:\Windows\RUNXMLPL.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
O4 - HKLM\..\Run: [PowerKey] "C:\Program Files\Launch Manager\PowerKey.exe"
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\HotkeyApp.exe
O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
O4 - HKLM\..\Run: [LMgrOSD] C:\Program Files\Launch Manager\OSDCtrl.exe
O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
O4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MsnMsgr] "c:\program files\msn messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Moniteur & Configuration.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZN
O8 - Extra context menu item: &Télécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: Tout t&élécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddList.html
O8 - Extra context menu item: Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Télécharger tout avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O21 - SSODL: LiveUpdate - {44822785-F05B-9ED7-5C42-913B853C45AF} - (no file)
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - c:\i386\acer\emanager\anbmserv.exe
O23 - Service: AVG Anti-Spyware Guard - Unknown owner - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe (file missing)
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Fax - Unknown owner - C:\WINDOWS\system32\fxssvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Unknown owner - C:\WINDOWS\wlancfg.exe
O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe

Utilisateur anonyme · Answer

Télécharge ELIBAGLA sur ton bureau: 
http://www.zonavirus.com/datos/archivos/Descargas/Utilidades%20SATINFO/EliBaglA.exe 

Double-clic sur Elibagla.exe laisse coché la case "eliminar ficheros automaticamente" et clic sur"explorar" 
Laisse-le travailler, dès qu'il a terminé colle le rapport ici, que tu pourras trouver aussi à cet endroit 
dans c:\infosat.txt

manu59000 · Answer

Tue Aug 28 04:15:30 2007
EliBagle v10.47  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):
Eliminada Carpeta "%WinDir%\exefld"
Restaurada Clave: "SafeBoot\Minimal y Network"

	  Tue Aug 28 04:16:01 2007
EliBagle v10.47  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

	  Tue Aug 28 04:20:06 2007
EliBagle v10.47  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

	  Tue Aug 28 04:21:04 2007
EliBagle v10.47  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):

	  Tue Aug 28 04:21:10 2007
EliBagle v10.47  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

Utilisateur anonyme · Answer

t'es sûr qu'il est entier ton rapport là ? !

manu59000 · Answer

ben oui j'ai fais ce que tu m'as dis.......apres analyse j'ai clic sur salir puit recupéré le docutexte dans C et voila

Utilisateur anonyme · Answer

oki ;-)

Maintenant, cherche ce processus ci-dessous en gras et supprime-le

C:\WINDOWS\system32\drivers\hidr.exe

S'il résiste supprime le en mode sans échec, il devrait refonctionner.


Ensuite, 
¤ Télécharge ce programme puis double clic dessus (ferme ton antivirus s'il te détecte quoi que ce soit)
http://www.suspectfile.com/systemscan/

* Coche uniquement ces cases, décoche tout le reste :

- Recent Files, 60 days
- Registry Run Key

Puis clic sur scan now, soit patient.
Une fois qu'il aura terminé, un rapport va s'ouvrir, copie et colle son contenu ici et vérifie qu'il soit bien en entier, si besoin crée deux messages.

manu59000 · Answer

j'ai pas trouver HIDR :(:(:( et je ne peux me mettre en mode sans echec, ça bloque :( , en tout cas MERCI bcp de m'aider


SystemScan - www.suspectfile.com - ver. 3.2.0

Running on: Windows XP HOME Edition, Service Pack 2 (2600.5.1)
System directory: C:\WINDOWS

Date: 28/08/2007
Time: 04:59:34
  
Output limited to: 
 -Recent files
 -Registry Run Keys

===================== Recent files (60 days old)=====================

----- recent files in C:\
28/08/2007 03:54:12      1610612736 byte      0 days old -- pagefile.sys
28/08/2007 04:34:20           1341 byte      0 days old -- InfoSat.txt
28/08/2007 04:59:36 (DIR)        0 byte      0 days old -- suspectfile

----- recent files in C:\WINDOWS\
15/08/2007 14:42:16 (DIR)        0 byte     13 days old -- $NtUninstallKB936782_WMP10$
15/08/2007 14:42:46 (DIR)        0 byte     13 days old -- $NtUninstallKB937143$
15/08/2007 14:43:00 (DIR)        0 byte     13 days old -- $NtUninstallKB938127$
15/08/2007 14:44:36 (DIR)        0 byte     13 days old -- $NtUninstallKB938829$
15/08/2007 14:44:42 (DIR)        0 byte     13 days old -- $NtUninstallKB921503$
15/08/2007 14:44:52 (DIR)        0 byte     13 days old -- $NtUninstallKB938828$
15/08/2007 14:45:00 (DIR)        0 byte     13 days old -- $NtUninstallKB936021$
28/08/2007 03:52:28          32564 byte      0 days old -- SchedLgU.Txt
28/08/2007 03:54:20           2048 byte      0 days old -- bootstat.dat
28/08/2007 03:54:28           3730 byte      0 days old -- ModemLog_SoftV90 Data Fax Modem with SmartCP.txt
28/08/2007 03:55:18             97 byte      0 days old -- ComponentList.xml
28/08/2007 04:52:06            116 byte      0 days old -- NeroDigital.ini

----- recent files in C:\WINDOWS\Downloaded Program Files\

----- recent files in C:\WINDOWS\system\

----- recent files in C:\WINDOWS\system32\
11/07/2007 17:48:58          73142 byte     48 days old -- perfc00C.dat
11/07/2007 17:48:58         461470 byte     48 days old -- perfh00C.dat
11/07/2007 17:48:58         962528 byte     48 days old -- PerfStringBackup.INI
11/07/2007 17:48:58          60052 byte     48 days old -- perfc009.dat
11/07/2007 17:48:58         394614 byte     48 days old -- perfh009.dat
30/07/2007 19:18:40          33624 byte     29 days old -- wups.dll
30/07/2007 19:18:48          21336 byte     29 days old -- wuaueng.dll.mui
30/07/2007 19:18:58          30072 byte     29 days old -- mucltui.dll.mui
30/07/2007 19:19:04         207736 byte     29 days old -- muweb.dll
30/07/2007 19:19:04          38232 byte     29 days old -- wucltui.dll.mui
30/07/2007 19:19:10         271224 byte     29 days old -- mucltui.dll
30/07/2007 19:19:12          43352 byte     29 days old -- wups2.dll
30/07/2007 19:19:16          53080 byte     29 days old -- wuauclt.exe
30/07/2007 19:19:20          92504 byte     29 days old -- cdm.dll
30/07/2007 19:19:28         216408 byte     29 days old -- wuaucpl.cpl
30/07/2007 19:19:28         203096 byte     29 days old -- wuweb.dll
30/07/2007 19:19:32         325976 byte     29 days old -- wucltui.dll
30/07/2007 19:19:36         549720 byte     29 days old -- wuapi.dll
30/07/2007 19:19:42        1712984 byte     29 days old -- wuaueng.dll
30/07/2007 19:19:52          30040 byte     29 days old -- wuapi.dll.mui
30/07/2007 19:20:06          30040 byte     29 days old -- wuaucpl.cpl.mui
03/08/2007 06:34:10       16789464 byte     25 days old -- MRT.exe
28/08/2007 03:38:30           3121 byte      0 days old -- CONFIG.NT
28/08/2007 03:54:12         257535 byte      0 days old -- OODBS.lor
28/08/2007 03:55:14           1158 byte      0 days old -- wpa.dbl

----- recent files in C:\WINDOWS\system32\drivers\

----- recent files in C:\WINDOWS	emp\
28/08/2007 03:55:12            255 byte      0 days old -- WGAErrLog.txt
28/08/2007 03:55:16            409 byte      0 days old -- WGANotify.settings
28/08/2007 03:55:18           1817 byte      0 days old -- XMLaunchLog.txt

----- recent files in C:\Program Files\
30/06/2007 23:01:46 (DIR)        0 byte     59 days old -- Grisoft
15/07/2007 14:37:40 (DIR)        0 byte     44 days old -- Project64 1.6
13/08/2007 02:31:20 (DIR)        0 byte     15 days old -- Media Player Classic
15/08/2007 14:42:36 (DIR)        0 byte     13 days old -- MSXML 4.0

----- recent files in C:\Program Files\Fichiers communs\

----- recent files in C:\Documents and Settings\anthony volckaert\Application Data\
30/07/2007 23:30:26 (DIR)        0 byte     29 days old -- Grisoft

----- recent files in C:\DOCUME~1\ANTHON~1\LOCALS~1\Temp\
28/08/2007 04:42:34 (DIR)        0 byte      0 days old -- AAWTMP
28/08/2007 04:58:52 (DIR)        0 byte      0 days old -- nsdA.tmp
28/08/2007 04:58:56          16384 byte      0 days old -- ~DF7365.tmp

===================== REGISTRY SCAN =====================


-----HKLM\Software\Microsoft\Windows\CurrentVersion\Run-----

[Run]
  "preload"="C:\Windows\RUNXMLPL.exe"
  "SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
  "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
  "Broadcom Wireless Manager UI"="C:\WINDOWS\system32\WLTRAY"
  "SoundMan"="SOUNDMAN.EXE"
  "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
  "LaunchAp"="C:\Program Files\Launch Manager\LaunchAp.exe"
  "PowerKey"="\"C:\Program Files\Launch Manager\PowerKey.exe\""
  "LManager"="C:\Program Files\Launch Manager\HotkeyApp.exe"
  "CtrlVol"="C:\Program Files\Launch Manager\CtrlVol.exe"
  "LMgrOSD"="C:\Program Files\Launch Manager\OSDCtrl.exe"
  "Wbutton"="\"C:\Program Files\Launch Manager\Wbutton.exe\""
  "eRecoveryService"="C:\Windows\System32\Check.exe"
  "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe"
  "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe"
  "TkBellExe"="\"C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe\"  -osboot"
  "QuickTime Task"="\"C:\Program Files\QuickTime\qttask.exe\" -atboottime"
  "SunJavaUpdateSched"="\"C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe\""
  "UnlockerAssistant"="\"C:\Program Files\Unlocker\UnlockerAssistant.exe\""
  "!AVG Anti-Spyware"="\"C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe\" /minimized"

-----HKCU\Software\Microsoft\Windows\CurrentVersion\Run-----

[Run]
  @SACL=
  "MsnMsgr"="\"c:\program files\msn messenger\msnmsgr.exe\" /background"
  "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

-----HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run-----

[Run]
  "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE"

-----HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run-----

[Run]

-----HKCU\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run-----

-----HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows-----

[Windows]
  "AppInit_DLLs"=""

-----HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad-----

[ShellServiceObjectDelayLoad]
  "PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
    #### HKCR\CLSID\{7849596a-48ea-486e-8937-a2a3009f31a9}\InprocServer32 @=expand:"%SystemRoot%\system32\SHELL32.dll"
  "CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
    #### HKCR\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32 @=expand:"%SystemRoot%\system32\SHELL32.dll"
  "WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
    #### HKCR\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\InprocServer32 @=expand:"%SystemRoot%\system32\webcheck.dll"
  "SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"
    #### HKCR\CLSID\{35CEC8A3-2BE6-11D2-8773-92E220524153}\InprocServer32 @="C:\WINDOWS\system32\stobject.dll"
  "LiveUpdate"="{44822785-F05B-9ED7-5C42-913B853C45AF}"
  "UPnPMonitor"="{e57ce738-33e8-4c51-8354-bb4de9d215d1}"
    #### HKCR\CLSID\{e57ce738-33e8-4c51-8354-bb4de9d215d1}\InprocServer32 @="C:\WINDOWS\system32\upnpui.dll"

-----HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks-----

[ShellExecuteHooks]
  "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
    #### HKCR\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}\InprocServer32 @="shell32.dll"
  "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"
    #### HKCR\CLSID\{57B86673-276A-48B2-BAE7-C6DBB3020EB8}\InprocServer32 @="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll"

-----HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon-----

[Winlogon]
  "Shell"="Explorer.exe"
  "System"=""
  "Userinit"="C:\WINDOWS\system32\userinit.exe,"
  "VmApplet"="rundll32 shell32,Control_RunDLL \"sysdm.cpl\""
  "UIHost"=expand:"logonui.exe"
  "LogonType"=dword:00000001
  "WinStationsDisabled"="0"

[Winlogon\GPExtensions]

[Winlogon\GPExtensions\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}]
  "@="Quota du disque Microsoft"
  "DllName"=expand:"dskquota.dll"

[Winlogon\GPExtensions\{4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}]
  "@="Mappage de zones Internet Explorer"
  "DllName"=expand:"iedkcs32.dll"

[Winlogon\GPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}]
  "DllName"=expand:"scecli.dll"
  "@="Security"

[Winlogon\GPExtensions\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}]
  "DllName"=expand:"iedkcs32.dll"
  "@="Personnalisation de Internet Explorer"

[Winlogon\GPExtensions\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}]
  "DllName"=expand:"scecli.dll"
  "@="EFS recovery"

[Winlogon\GPExtensions\{C631DF4C-088F-4156-B058-4375F0853CD8}]
  "@="Microsoft Offline Files"
  "DllName"=expand:"%SystemRoot%\System32\cscui.dll"

[Winlogon\GPExtensions\{c6dc5466-785a-11d2-84d0-00c04fb169f7}]
  "@="Installation de logiciel"
  "DllName"=expand:"appmgmts.dll"

[Winlogon\Notify]

[Winlogon\Notify\AtiExtEvent]
  "DLLName"="Ati2evxx.dll"
  "Lock"="AtiLockEvent"
  "Logoff"="AtiLogoffEvent"
  "Logon"="AtiLogonEvent"
  "Disconnect"="AtiDisConnectEvent"
  "Reconnect"="AtiReConnectEvent"
  "Safe"=dword:00000000
  "StartScreenSaver"="AtiStartScreenSaverEvent"
  "StartShell"="AtiStartShellEvent"
  "Startup"="AtiStartupEvent"
  "StopScreenSaver"="AtiStopScreenSaverEvent"
  "Unlock"="AtiUnLockEvent"

[Winlogon\Notify\crypt32chain]
  "DllName"=expand:"crypt32.dll"
  "Logoff"="ChainWlxLogoffEvent"

[Winlogon\Notify\cryptnet]
  "DllName"=expand:"cryptnet.dll"
  "Logoff"="CryptnetWlxLogoffEvent"

[Winlogon\Notify\cscdll]
  "DLLName"="cscdll.dll"
  "Logon"="WinlogonLogonEvent"
  "Logoff"="WinlogonLogoffEvent"
  "ScreenSaver"="WinlogonScreenSaverEvent"
  "Startup"="WinlogonStartupEvent"
  "StartShell"="WinlogonStartShellEvent"

[Winlogon\Notify\ScCertProp]
  "DLLName"="wlnotify.dll"
  "Logon"="SCardStartCertProp"
  "Logoff"="SCardStopCertProp"
  "Lock"="SCardSuspendCertProp"
  "Unlock"="SCardResumeCertProp"
  "Enabled"=dword:00000001

[Winlogon\Notify\Schedule]
  "DllName"=expand:"wlnotify.dll"
  "StartShell"="SchedStartShell"
  "Logoff"="SchedEventLogOff"

[Winlogon\Notify\sclgntfy]
  "Logoff"="WLEventLogoff"
  "DllName"=expand:"sclgntfy.dll"

[Winlogon\Notify\SensLogn]
  "DLLName"="WlNotify.dll"
  "Lock"="SensLockEvent"
  "Logon"="SensLogonEvent"
  "Logoff"="SensLogoffEvent"
  "Safe"=dword:00000001
  "MaxWait"=dword:00000258
  "StartScreenSaver"="SensStartScreenSaverEvent"
  "StopScreenSaver"="SensStopScreenSaverEvent"
  "Startup"="SensStartupEvent"
  "StartShell"="SensStartShellEvent"
  "PostShell"="SensPostShellEvent"
  "Disconnect"="SensDisconnectEvent"
  "Reconnect"="SensReconnectEvent"
  "Unlock"="SensUnlockEvent"

[Winlogon\Notify	ermsrv]
  "DllName"=expand:"wlnotify.dll"
  "Logoff"="TSEventLogoff"
  "Logon"="TSEventLogon"
  "PostShell"="TSEventPostShell"
  "StartShell"="TSEventStartShell"
  "Startup"="TSEventStartup"
  "MaxWait"=dword:00000258
  "Reconnect"="TSEventReconnect"
  "Disconnect"="TSEventDisconnect"

[Winlogon\Notify\WgaLogon]
  "Logon"="WLEventLogon"
  "Logoff"="WLEventLogoff"
  "Startup"="WLEventStartup"
  "StartScreenSaver"="WLEventStartScreenSaver"
  "StopScreenSaver"="WLEventStopScreenSaver"
  "Lock"="WLEventLock"
  "Unlock"="WLEventUnlock"
  "StartShell"="WLEventStartShell"
  "PostShell"="WLEventPostShell"
  "Disconnect"="WLEventDisconnect"
  "Reconnect"="WLEventReconnect"
  "SafeMode"=dword:00000001
  "MaxWait"=dword:ffffffff
  "DllName"=expand:"WgaLogon.dll"

[Winlogon\Notify\WgaLogon\Settings]

[Winlogon\Notify\wlballoon]
  "DLLName"="wlnotify.dll"
  "Logon"="RegisterTicketExpiredNotificationEvent"
  "Logoff"="UnregisterTicketExpiredNotificationEvent"

[Winlogon\SpecialAccounts]

[Winlogon\SpecialAccounts\UserList]
  "HelpAssistant"=dword:00000000
  "TsInternetUser"=dword:00000000
  "SQLAgentCmdExec"=dword:00000000
  "NetShowServices"=dword:00000000
  "IWAM_"=dword:00010000
  "IUSR_"=dword:00010000
  "VUSR_"=dword:00010000

-----HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon-----

[Winlogon]
  @SACL=
  "ParseAutoexec"="1"
  "ExcludeProfileDirs"="Local Settings;Temporary Internet Files;Historique;Temp"
  "BuildNumber"=dword:00000a28

-----HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options-----

[Image File Execution Options\Your Image File Name Here without a path]
  "Debugger"="ntsd -d"

-----HKLM\System\CurrentControlSet\Control\Session Manager\-----

[Session Manager]
  "BootExecute"=multi:"autocheck autochk *\00OODBS\00\00"

[Session Manager\SubSystems]
  "Windows"=expand:"%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16"

-----HKLM\SYSTEM\CurrentControlSet\Control\WOW-----

[WOW]
  "cmdline"=expand:"%SystemRoot%\system32
tvdm.exe"
  "wowcmdline"=expand:"%SystemRoot%\system32
tvdm.exe -a %SystemRoot%\system32\krnl386"

-----HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run-----

-----HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce-----

[RunOnce]

-----HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx-----

[RunOnceEx]

-----HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices-----

[RunServices]

-----HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce-----

[RunServicesOnce]

-----HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce-----

[RunOnce]

-----HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx-----

-----HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices-----

-----HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run-----

-----HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce-----

-----HKLM\Software\Microsoft\Command Processor\Autorun-----

-----HKCU\Software\Microsoft\Command Processor\Autorun-----

-----HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Load-----

-----HKLM\Software\Policies\Microsoft\Windows\System\Scripts\Startup-----

-----HKCU\Software\Policies\Microsoft\Windows\System\Scripts\Logon-----

-----HKLM\Software\Policies\Microsoft\Windows\System\Scripts\Logon-----

-----HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\Runonce-----

-----HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\Run-----

-----HKLM\System\CurrentControlSet\Control\Terminal Server\Wdsdpwd\StartupPrograms-----

-----HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\Runonce-----

-----HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler-----

[SharedTaskScheduler]
  "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
    #### HKCR\CLSID\{438755C2-A8BA-11D1-B96B-00A0C90312E1}\InprocServer32 @=expand:"%SystemRoot%\system32\browseui.dll"
  "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"
    #### HKCR\CLSID\{8C7461EF-2B13-11d2-BE35-3078302C2030}\InprocServer32 @=expand:"%SystemRoot%\system32\browseui.dll"

-----HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects-----

[Browser Helper Objects]
  @SACL=

[Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
    #### HKCR\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\InprocServer32 @="C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll"

[Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
    #### HKCR\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\InprocServer32 @="C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll"
  "NoExplorer"=dword:00000001

[Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
    #### HKCR\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}\InprocServer32 @="C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll"

[Browser Helper Objects\{9394EDE7-C8B5-483E-8773-474BF36AF6E4}]
    #### HKCR\CLSID\{9394EDE7-C8B5-483E-8773-474BF36AF6E4}\InprocServer32 @="C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll"

[Browser Helper Objects\{A5366673-E8CA-11D3-9CD9-0090271D075B}]

[Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
    #### HKCR\CLSID\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}\InprocServer32 @="C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll"

[Browser Helper Objects\{C56CB6B0-0D96-11D6-8C65-B2868B609932}]
    #### HKCR\CLSID\{C56CB6B0-0D96-11D6-8C65-B2868B609932}\InprocServer32 @="C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll"

-----HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks-----

[URLSearchHooks]
  @SACL=
  "{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=""
    #### HKCR\CLSID\{CFBFAE00-17A6-11D0-99CB-00C04FD64497}\InprocServer32 @=expand:"%SystemRoot%\system32\shdocvw.dll"

-----HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder-----

[startupfolder]

-----HKCU\Control Panel\Desktop\-----

[Desktop]
  "SCRNSAVE.EXE"="C:\WINDOWS\system32\scrnsave.scr"

[Desktop\WindowMetrics]

-----HKEY_CLASSES_ROOT\exefile\shell\open\command-----

[command]
  @="\"%1\" %*"

-----HKEY_CLASSES_ROOT\comfile\shell\open\command-----

[command]
  @="\"%1\" %*"

-----HKEY_CLASSES_ROOT\batfile\shell\open\command-----

[command]
  @="\"%1\" %*"

-----HKEY_CLASSES_ROOT\piffile\shell\open\command-----

[command]
  @="\"%1\" %*"

-----HKEY_CLASSES_ROOT\scrFile\shell\open\command-----

[command]
  @="\"%1\" /S"

-----HKEY_CLASSES_ROOT\htafile\shell\open\command-----

[Command]
  @="C:\WINDOWS\system32\mshta.exe \"%1\" %*"

-----HKEY_CLASSES_ROOT\logfile\shell\open\command-----

-----HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL-----

[URL]

[URL\DefaultPrefix]
  @="http://"

[URL\Prefixes]
  "ftp"="ftp://"
  "gopher"="gopher://"
  "home"="http://"
  "mosaic"="http://"
  "www"="http://"

-----HKLM\SYSTEM\CurrentControlSet\Control\Lsa-----

[Lsa]
  "Authentication Packages"=multi:"msv1_0\00\00"
  "Bounds"=hex:00,30,00,00,00,20,00,00
  "Security Packages"=multi:"kerberos\00msv1_0\00schannel\00wdigest\00\00"
  "ImpersonatePrivilegeUpgradeToolHasRun"=dword:00000001
  "LsaPid"=dword:000003b4
  "SecureBoot"=dword:00000001
  "auditbaseobjects"=dword:00000000
  "crashonauditfail"=dword:00000000
  "disabledomaincreds"=dword:00000000
  "everyoneincludesanonymous"=dword:00000000
  "fipsalgorithmpolicy"=dword:00000000
  "forceguest"=dword:00000001
  "fullprivilegeauditing"=hex:00
  "limitblankpassworduse"=dword:00000001
  "lmcompatibilitylevel"=dword:00000000
  "nodefaultadminowner"=dword:00000001
  "nolmhash"=dword:00000000
  "restrictanonymous"=dword:00000000
  "restrictanonymoussam"=dword:00000001
  "Notification Packages"=multi:"scecli\00\00"

[Lsa\AccessProviders]
  "ProviderOrder"=multi:"Windows NT Access Provider\00\00"

[Lsa\AccessProviders\Windows NT Access Provider]
  "ProviderPath"=expand:"%SystemRoot%\system32
tmarta.dll"

[Lsa\Audit]

[Lsa\Audit\PerUserAuditing]

[Lsa\Audit\PerUserAuditing\System]

[Lsa\Data]
  @Class="78a80904"
  "Pattern"=hex:c3,92,8e,8e,16,84,3b,39,ab,b8,a9,63,e3,e1,a4,f0,37,38,61,38,30,\
    39,30,34,00,00,00,00,5b,92,00,00,18,ca,06,00,99,d0,b5,71,04,ca,06,00,10,00,\
    00,00,00,00,00,00,06,54,82,ef,da,94,a8,28,b5,a6,d5,78

[Lsa\GBG]
  @Class="0694a7da"
  "GrafBlumGroup"=hex:2f,4d,3f,c0,85,f7,a5,3a,cf

[Lsa\JD]
  @Class="b5d5ef28"
  "Lookup"=hex:4a,70,d7,a6,f0,a4

[Lsa\Kerberos]

[Lsa\Kerberos\Domains]

[Lsa\Kerberos\SidCache]

[Lsa\msv1_0]
  "ntlmminclientsec"=dword:00000000
  "ntlmminserversec"=dword:00000000

[Lsa\Skew1]
  @Class="8254a600"
  "SkewMatrix"=hex:aa,d1,73,15,16,5c,e6,a8,9d,65,38,b9,ef,2f,ae,ed

[Lsa\SSO]

[Lsa\SSO\Passport1.4]
  "SSOURL"="http://www.passport.com"

[Lsa\SspiCache]
  "Time"=hex:8c,66,8b,20,b7,dd,c5,01

[Lsa\SspiCache\digest.dll]
  "Name"="Digest"
  "Comment"="Digest SSPI Authentication Package"
  "Capabilities"=dword:00004050
  "RpcId"=dword:0000ffff
  "Version"=dword:00000001
  "TokenSize"=dword:0000ffff
  "Time"=hex:00,60,a7,ad,a0,7a,c4,01
  "Type"=dword:00000031

[Lsa\SspiCache\msapsspc.dll]
  "Name"="DPA"
  "Comment"="DPA Security Package"
  "Capabilities"=dword:00000037
  "RpcId"=dword:00000011
  "Version"=dword:00000001
  "TokenSize"=dword:00000300
  "Time"=hex:00,60,a7,ad,a0,7a,c4,01
  "Type"=dword:00000031

[Lsa\SspiCache\msnsspc.dll]
  "Name"="MSN"
  "Comment"="MSN Security Package"
  "Capabilities"=dword:00000037
  "RpcId"=dword:00000012
  "Version"=dword:00000001
  "TokenSize"=dword:00000300
  "Time"=hex:00,60,a7,ad,a0,7a,c4,01
  "Type"=dword:00000031

-----HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess-----

[SharedAccess]
  "DependOnGroup"=multi:"\00"
  "DependOnService"=multi:"Netman\00WinMgmt\00\00"
  "Description"="Assure la traduction d'adresses de réseau, l'adressage, les services de résolution de noms et/ou les services de prévention d'intrusion pour un réseau de petite entreprise ou un réseau domestique."
  "DisplayName"="Pare-feu Windows / Partage de connexion Internet"
  "ErrorControl"=dword:00000001
  "ImagePath"=expand:"%SystemRoot%\system32\svchost.exe -k netsvcs"
  "ObjectName"="LocalSystem"
  "Start"=dword:00000002
  "Type"=dword:00000020

[SharedAccess\Epoch]
  "Epoch"=dword:000047c6

[SharedAccess\Parameters]
  "ServiceDll"=expand:"%SystemRoot%\System32\ipnathlp.dll"

[SharedAccess\Parameters\FirewallPolicy]

[SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications]

[SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
  "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
  "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:MSN Messenger 7.5"
  "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts]

[SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
  "1900:UDP"="1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007"
  "2869:TCP"="2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008"

[SharedAccess\Parameters\FirewallPolicy\StandardProfile]
  "EnableFirewall"=dword:00000001
  "DoNotAllowExceptions"=dword:00000000
  "DisableNotifications"=dword:00000000

[SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications]

[SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
  "C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
  "C:\Program Files\Messenger\MSMSGS.EXE"="C:\Program Files\Messenger\MSMSGS.EXE:*:Disabled:Windows Messenger"
  "C:\Program Files\MSN BackUp\MSNBackup.exe"="c:\documents and settings\anthony volckaert\mes documents\smiley central\msn-backup-emoticone\msn-backup-emoticone\msnbackup.exe:*:Disabled:18 July 2005"
  "C:\Program Files\JVTorrent\btdownloadgui.exe"="C:\Program Files\JVTorrent\btdownloadgui.exe:*:Enabled:btdownloadgui"
  "C:\Documents and Settings\anthony volckaert\Mes documents\MSN\MSN 7 -- Avatars animés et clin d'oeil\MCO install.exe"="c:\documents and settings\anthony volckaert\mes documents\smiley central\msn\msn 7 -- avatars animés et clin d'oeil\mco install.exe:*:Enabled:MCO install"
  "C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Disabled:BitComet - a BitTorrent Client"
  "C:\Documents and Settings\anthony volckaert\Mes documents\Smiley Central\MSN\MSN 7 -- Avatars animés et clin d'oeil\MCO install.exe"="C:\Documents and Settings\anthony volckaert\Mes documents\Smiley Central\MSN\MSN 7 -- Avatars animés et clin d'oeil\MCO install.exe:*:Disabled:MCO install"
  "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:MSN Messenger 7.5"
  "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
  "C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"

[SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts]

[SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
  "1900:UDP"="1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007"
  "2869:TCP"="2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008"
  "139:TCP"="139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004"
  "445:TCP"="445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005"
  "137:UDP"="137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001"
  "138:UDP"="138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002"
  "3389:TCP"="3389:TCP:*:Disabled:@xpsp2res.dll,-22009"
  "14957:TCP"="14957:TCP:*:Enabled:BitComet 14957 TCP"
  "14957:UDP"="14957:UDP:*:Enabled:BitComet 14957 UDP"

[SharedAccess\Setup]
  "ServiceUpgrade"=dword:00000001

[SharedAccess\Setup\InterfacesUnfirewalledAtUpdate]
  "All"=dword:00000001

-----HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Firewall\-----

-----HKEY_LOCAL_MACHINE\SOFTWARE\Winsock2-----

-----HKLM\Software\Microsoft\Ole-----

[Ole]
  "DefaultLaunchPermission"=hex:01,00,04,80,5c,00,00,00,6c,00,00,00,00,00,00,00,\
    14,00,00,00,02,00,48,00,03,00,00,00,00,00,18,00,1f,00,00,00,01,02,00,00,00,\
    00,00,05,20,00,00,00,20,02,00,00,00,00,14,00,0b,00,00,00,01,01,00,00,00,00,\
    00,05,04,00,00,00,00,00,14,00,0b,00,00,00,01,01,00,00,00,00,00,05,12,00,00,\
    00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,01,02,00,00,00,00,00,05,\
    20,00,00,00,20,02,00,00
  "MachineLaunchRestriction"=hex:01,00,04,80,48,00,00,00,58,00,00,00,00,00,00,00,\
    14,00,00,00,02,00,34,00,02,00,00,00,00,00,18,00,1f,00,00,00,01,02,00,00,00,\
    00,00,05,20,00,00,00,20,02,00,00,00,00,14,00,0b,00,00,00,01,01,00,00,00,00,\
    00,01,00,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,01,02,00,\
    00,00,00,00,05,20,00,00,00,20,02,00,00
  "MachineAccessRestriction"=hex:01,00,04,80,44,00,00,00,54,00,00,00,00,00,00,00,\
    14,00,00,00,02,00,30,00,02,00,00,00,00,00,14,00,03,00,00,00,01,01,00,00,00,\
    00,00,05,07,00,00,00,00,00,14,00,07,00,00,00,01,01,00,00,00,00,00,01,00,00,\
    00,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,01,02,00,00,00,00,00,\
    05,20,00,00,00,20,02,00,00
  "EnableDCOM"="Y"

[Ole\AppCompat]

[Ole\AppCompat\ActivationSecurityCheckExemptionList]
  "{A50398B8-9075-4FBF-A7A1-456BF21937AD}"="1"
  "{AD65A69D-3831-40D7-9629-9B0B50A93843}"="1"
  "{0040D221-54A1-11D1-9DE0-006097042D69}"="1"
  "{2A6D72F1-6E7E-4702-B99C-E40D3DED33C3}"="1"

-----HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\-----

-----HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\-----

[Security Center]
  "FirstRunDisabled"=dword:00000001
  "AntiVirusDisableNotify"=dword:00000000
  "FirewallDisableNotify"=dword:00000000
  "UpdatesDisableNotify"=dword:00000000
  "AntiVirusOverride"=dword:00000000
  "FirewallOverride"=dword:00000000

[Security Center\Monitoring]

[Security Center\Monitoring\AhnlabAntiVirus]

[Security Center\Monitoring\ComputerAssociatesAntiVirus]

[Security Center\Monitoring\KasperskyAntiVirus]

[Security Center\Monitoring\McAfeeAntiVirus]

[Security Center\Monitoring\McAfeeFirewall]

[Security Center\Monitoring\PandaAntiVirus]

[Security Center\Monitoring\PandaFirewall]

[Security Center\Monitoring\SophosAntiVirus]

[Security Center\Monitoring\SymantecAntiVirus]

[Security Center\Monitoring\SymantecFirewall]

[Security Center\Monitoring\TinyFirewall]

[Security Center\Monitoring\TrendAntiVirus]

[Security Center\Monitoring\TrendFirewall]

[Security Center\Monitoring\ZoneLabsFirewall]

-----HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore\-----

[SystemRestore]
  "DisableSR"=dword:00000000
  "CreateFirstRunRp"=dword:00000001
  "DSMin"=dword:000000c8
  "DSMax"=dword:00000190
  "RPSessionInterval"=dword:00000000
  "RPGlobalInterval"=dword:00015180
  "RPLifeInterval"=dword:0076a700
  "CompressionBurst"=dword:0000003c
  "TimerInterval"=dword:00000078
  "DiskPercent"=dword:0000000c
  "ThawInterval"=dword:00000384
  "RestoreDiskSpaceError"=dword:00000000
  "RestoreStatus"=dword:00000000
  "RestoreSafeModeStatus"=dword:00000000

[SystemRestore\Cfg]
  "DiskPercent"=dword:0000000c
  "MachineGuid"="{004AA4CB-CEFA-470B-84B6-7AE41AC1EA5D}"

[SystemRestore\SnapshotCallbacks]
  @=""

-----HKEY_CURRENT_USER\Software\VB and VBA Program Settings-----

[VB and VBA Program Settings]

[VB and VBA Program Settings\CCleaner]

[VB and VBA Program Settings\CCleaner\Options]

[VB and VBA Program Settings\eurobarre]

[VB and VBA Program Settings\eurobarre\eurobarre]

[VB and VBA Program Settings\MSNBackup]

[VB and VBA Program Settings\MSNBackup\Setup]

[VB and VBA Program Settings\NettoyeurTitan]

[VB and VBA Program Settings\NettoyeurTitan\parametres]

-----HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\-----

[MountPoints2]
  @SACL=

[MountPoints2\C]
  "BaseClass"="Drive"

[MountPoints2\D]
  "BaseClass"="Drive"

[MountPoints2\E]
  "BaseClass"="Drive"

[MountPoints2\F]
  "BaseClass"="Drive"
  "_AutorunStatus"=hex:01,00,01,00,00,01,00,df,df,5f,df,5f,5f,5f,5f,df,df,5f,5f,\
    5f,df,df,df,5f,5f,5f,df,df,df,5f,5f,df,5f,5f,5f,5f,5f,cf,5f,5f,5f,5f,5f,cf,\
    cf,5f,5f,5f,5f,cf,cf,cf,cf,cf,df,df,df,5f,df,df,00,5f,5f,5f,5f,5f,5f,5f,5f,\
    5f,5f,00,01,00,00,00,08,00,00,00

[MountPoints2\G]
  "BaseClass"="Drive"

[MountPoints2\{00758adc-2e1c-11dc-9687-000e9bbfd290}]
  "BaseClass"="Drive"
  "_AutorunStatus"=hex:01,00,01,00,00,01,00,df,df,5f,df,5f,5f,5f,5f,df,df,5f,5f,\
    5f,df,df,df,5f,5f,5f,df,df,df,5f,5f,df,5f,5f,5f,5f,5f,00,5f,5f,5f,5f,5f,cf,\
    cf,5f,5f,5f,5f,01,01,00,ee,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,\
    ff,ff,00,00,10,00,00,08,02,00,00

[MountPoints2\{00758adc-2e1c-11dc-9687-000e9bbfd290}\shell]
  @="None"

[MountPoints2\{00758adc-2e1c-11dc-9687-000e9bbfd290}\shell\Autoplay]
  "MUIVerb"="@shell32.dll,-8504"

[MountPoints2\{00758adc-2e1c-11dc-9687-000e9bbfd290}\shell\Autoplay\DropTarget]
  "CLSID"="{f26a669a-bcbb-4e37-abf9-7325da15f931}"
    #### HKCR\CLSID\{f26a669a-bcbb-4e37-abf9-7325da15f931}\InprocServer32 @=expand:"%SystemRoot%\system32\SHELL32.dll"

[MountPoints2\{0576d4be-a769-11d9-92ec-806d6172696f}]
  @SACL=
  "BaseClass"="Drive"

[MountPoints2\{0576d4bf-a769-11d9-92ec-806d6172696f}]
  @SACL=
  "BaseClass"="Drive"

[MountPoints2\{0576d4c0-a769-11d9-92ec-806d6172696f}]
  @SACL=
  "BaseClass"="Drive"

[MountPoints2\{2cc56d60-a826-11d9-a688-806d6172696f}]
  @SACL=
  "BaseClass"="Drive"

[MountPoints2\{2cc56d61-a826-11d9-a688-806d6172696f}]
  @SACL=
  "BaseClass"="Drive"

[MountPoints2\{354a7564-a850-11d9-84fa-806d6172696f}]
  @SACL=
  "BaseClass"="Drive"

[MountPoints2\{354a7565-a850-11d9-84fa-806d6172696f}]
  @SACL=
  "BaseClass"="Drive"

[MountPoints2\{41926b6a-4042-11dc-96a1-000e9bbfd290}]
  "BaseClass"="Drive"
  "_AutorunStatus"=hex:01,00,01,00,00,01,00,df,df,5f,df,5f,5f,5f,5f,df,df,5f,5f,\
    5f,df,df,df,5f,5f,5f,df,df,df,5f,5f,df,5f,5f,5f,5f,5f,01,00,01,01,ee,ff,ff,\
    ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,\
    ff,ff,00,00,10,00,00,08,06,00,00

[MountPoints2\{41926b6a-4042-11dc-96a1-000e9bbfd290}\shell]
  @="None"

[MountPoints2\{41926b6a-4042-11dc-96a1-000e9bbfd290}\shell\Autoplay]
  "MUIVerb"="@shell32.dll,-8504"

[MountPoints2\{41926b6a-4042-11dc-96a1-000e9bbfd290}\shell\Autoplay\DropTarget]
  "CLSID"="{f26a669a-bcbb-4e37-abf9-7325da15f931}"
    #### HKCR\CLSID\{f26a669a-bcbb-4e37-abf9-7325da15f931}\InprocServer32 @=expand:"%SystemRoot%\system32\SHELL32.dll"

[MountPoints2\{53346aae-6ef1-11da-9367-000ae4e0a63b}]
  "BaseClass"="Drive"
  "_AutorunStatus"=hex:01,00,01,00,00,00,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,\
    ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,\
    ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,\
    ff,ff,00,00,10,00,00,08,00,00,00

[MountPoints2\{53346aae-6ef1-11da-9367-000ae4e0a63b}\shell]
  @="None"

[MountPoints2\{53346aae-6ef1-11da-9367-000ae4e0a63b}\shell\Autoplay]
  "MUIVerb"="@shell32.dll,-8504"

[MountPoints2\{53346aae-6ef1-11da-9367-000ae4e0a63b}\shell\Autoplay\DropTarget]
  "CLSID"="{f26a669a-bcbb-4e37-abf9-7325da15f931}"
    #### HKCR\CLSID\{f26a669a-bcbb-4e37-abf9-7325da15f931}\InprocServer32 @=expand:"%SystemRoot%\system32\SHELL32.dll"

[MountPoints2\{6accfdf8-a84e-11d9-9cdc-806d6172696f}]
  @SACL=
  "BaseClass"="Drive"

[MountPoints2\{6accfdf9-a84e-11d9-9cdc-806d6172696f}]
  @SACL=
  "BaseClass"="Drive"

[MountPoints2\{6f24a1dc-a829-11d9-8c70-806d6172696f}]
  @SACL=
  "BaseClass"="Drive"

[MountPoints2\{7a1c0300-7894-11da-937e-000ae4e0a63b}]
  "BaseClass"="Drive"
  "_AutorunStatus"=hex:01,00,01,00,00,01,00,df,df,5f,df,5f,5f,5f,5f,df,df,5f,5f,\
    5f,df,df,df,5f,5f,5f,df,df,df,5f,5f,df,5f,5f,5f,5f,5f,01,00,01,01,ee,ff,ff,\
    ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,\
    ff,ff,00,00,10,00,00,08,07,00,00
  "_CommentFromDesktopINI"=""

[MountPoints2\{7a1c0300-7894-11da-937e-000ae4e0a63b}\shell]
  @="None"

[MountPoints2\{7a1c0300-7894-11da-937e-000ae4e0a63b}\shell\Autoplay]
  "MUIVerb"="@shell32.dll,-8504"

[MountPoints2\{7a1c0300-7894-11da-937e-000ae4e0a63b}\shell\Autoplay\DropTarget]
  "CLSID"="{f26a669a-bcbb-4e37-abf9-7325da15f931}"
    #### HKCR\CLSID\{f26a669a-bcbb-4e37-abf9-7325da15f931}\InprocServer32 @=expand:"%SystemRoot%\system32\SHELL32.dll"

[MountPoints2\{87f519ec-a82b-11d9-a45b-806d6172696f}]
  @SACL=
  "BaseClass"="Drive"

[MountPoints2\{88bffa2c-a75e-11d9-8b1e-806d6172696f}]
  @SACL=
  "BaseClass"="Drive"

[MountPoints2\{88bffa2d-a75e-11d9-8b1e-806d6172696f}]
  @SACL=
  "BaseClass"="Drive"

[MountPoints2\{9495008f-a765-11d9-afbf-806d6172696f}]
  @SACL=
  "BaseClass"="Drive"

[MountPoints2\{9f1fa382-025b-11da-91d4-806d6172696f}]
  "BaseClass"="Drive"
  "_CommentFromDesktopINI"=""

[MountPoints2\{9f1fa383-025b-11da-91d4-806d6172696f}]
  "BaseClass"="Drive"
  "_CommentFromDesktopINI"=""

[MountPoints2\{9f1fa384-025b-11da-91d4-806d6172696f}]
  "BaseClass"="Drive"
  "_AutorunStatus"=hex:01,00,01,00,00,01,00,df,df,5f,cf,5f,5f,5f,5f,cf,cf,5f,5f,\
    5f,cf,cf,cf,5f,5f,5f,cf,cf,cf,5f,5f,cf,5f,5f,5f,5f,5f,00,5f,5f,5f,5f,5f,df,\
    df,5f,5f,5f,5f,01,01,00,ee,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,\
    ff,ff,00,60,00,00,00,08,04,00,00
  "_CommentFromDesktopINI"="Contient des fichiers musicaux et d'autres fichiers audio."

[MountPoints2\{9f1fa384-025b-11da-91d4-806d6172696f}\_Autorun]

[MountPoints2\{9f1fa384-025b-11da-91d4-806d6172696f}\_Autorun\DefaultIcon]
  @="E:\setup.exe,0"

[MountPoints2\{a7fda4ce-24b2-11dc-967c-000e9bbfd290}]
  "BaseClass"="Drive"
  "_AutorunStatus"=hex:01,00,01,00,00,01,00,df,df,5f,df,5f,5f,5f,5f,df,df,5f,5f,\
    5f,df,df,df,5f,5f,5f,df,df,df,5f,5f,df,5f,5f,5f,5f,5f,00,5f,5f,5f,5f,5f,cf,\
    cf,5f,5f,5f,5f,01,01,00,ee,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,\
    ff,ff,00,00,10,00,00,08,02,00,00

[MountPoints2\{a7fda4ce-24b2-11dc-967c-000e9bbfd290}\shell]
  @="None"

[MountPoints2\{a7fda4ce-24b2-11dc-967c-000e9bbfd290}\shell\Autoplay]
  "MUIVerb"="@shell32.dll,-8504"

[MountPoints2\{a7fda4ce-24b2-11dc-967c-000e9bbfd290}\shell\Autoplay\DropTarget]
  "CLSID"="{f26a669a-bcbb-4e37-abf9-7325da15f931}"
    #### HKCR\CLSID\{f26a669a-bcbb-4e37-abf9-7325da15f931}\InprocServer32 @=expand:"%SystemRoot%\system32\SHELL32.dll"

[MountPoints2\{d5092ae0-1237-11da-91df-000e9bbfd290}]
  "BaseClass"="Drive"
  "_AutorunStatus"=hex:01,00,01,00,00,01,00,df,df,5f,df,5f,5f,5f,5f,df,df,5f,5f,\
    5f,df,df,df,5f,5f,5f,df,df,df,5f,5f,df,5f,5f,5f,5f,5f,00,5f,5f,5f,5f,5f,cf,\
    cf,5f,5f,5f,5f,01,01,00,ee,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,\
    ff,ff,00,00,10,00,00,08,02,00,00

[MountPoints2\{d5092ae0-1237-11da-91df-000e9bbfd290}\shell]
  @="None"

[MountPoints2\{d5092ae0-1237-11da-91df-000e9bbfd290}\shell\Autoplay]
  "MUIVerb"="@shell32.dll,-8504"

[MountPoints2\{d5092ae0-1237-11da-91df-000e9bbfd290}\shell\Autoplay\DropTarget]
  "CLSID"="{f26a669a-bcbb-4e37-abf9-7325da15f931}"
    #### HKCR\CLSID\{f26a669a-bcbb-4e37-abf9-7325da15f931}\InprocServer32 @=expand:"%SystemRoot%\system32\SHELL32.dll"

[MountPoints2\{d5092ae1-1237-11da-91df-000e9bbfd290}]
  "BaseClass"="Drive"

[MountPoints2\{ecdd165e-a761-11d9-9609-806d6172696f}]
  @SACL=
  "BaseClass"="Drive"

[MountPoints2\{edfbb14e-1e9f-11d9-9d2d-806d6172696f}]
  @SACL=
  "BaseClass"="Drive"

[MountPoints2\{edfbb14f-1e9f-11d9-9d2d-806d6172696f}]
  @SACL=
  "BaseClass"="Drive"

[MountPoints2\{edfbb150-1e9f-11d9-9d2d-806d6172696f}]
  @SACL=
  "BaseClass"="Drive"

[MountPoints2\{ee9ee00f-d675-11db-9610-000e9bbfd290}]
  "BaseClass"="Drive"
  "_AutorunStatus"=hex:01,00,01,00,00,01,00,df,df,5f,df,5f,5f,5f,5f,df,df,5f,5f,\
    5f,df,df,df,5f,5f,5f,df,df,df,5f,5f,df,5f,5f,5f,5f,5f,01,00,01,01,ee,ff,ff,\
    ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,\
    ff,ff,00,01,00,00,00,08,07,00,00
  "_CommentFromDesktopINI"=""

[MountPoints2\{fd54b8ce-f0f3-11db-9635-000e9bbfd290}]
  "BaseClass"="Drive"
  "_AutorunStatus"=hex:01,00,01,00,00,01,00,df,df,5f,df,5f,5f,5f,5f,df,df,5f,5f,\
    5f,df,df,df,5f,5f,5f,df,df,df,5f,5f,df,5f,5f,5f,5f,5f,cf,5f,5f,5f,5f,5f,cf,\
    cf,5f,5f,5f,5f,cf,cf,cf,cf,cf,cf,cf,cf,5f,cf,cf,cf,5f,5f,5f,5f,5f,5f,5f,5f,\
    5f,5f,00,00,10,00,00,00,00,00,00

[MountPoints2\{fd54b8ce-f0f3-11db-9635-000e9bbfd290}\shell]
  @="None"

[MountPoints2\{fd54b8ce-f0f3-11db-9635-000e9bbfd290}\shell\Autoplay]
  "MUIVerb"="@shell32.dll,-8504"

[MountPoints2\{fd54b8ce-f0f3-11db-9635-000e9bbfd290}\shell\Autoplay\DropTarget]
  "CLSID"="{f26a669a-bcbb-4e37-abf9-7325da15f931}"
    #### HKCR\CLSID\{f26a669a-bcbb-4e37-abf9-7325da15f931}\InprocServer32 @=expand:"%SystemRoot%\system32\SHELL32.dll"

-----HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions-----

[AdvancedOptions]

-----HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions-----

-----HKLM\Software\Microsoft\Active Setup\Installed Components-----

[Installed Components]

[Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
  "@="IE7 Uninstall Stub"
  "ComponentID"="IEUDINIT"
  "StubPath"="C:\WINDOWS\system32\ieudinit.exe"

[Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
    #### HKCR\CLSID\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}\InprocServer32 @="C:\WINDOWS\system32\wmpdxm.dll"
  "Stubpath"="C:\WINDOWS\inf\unregmp2.exe /ShowWMP"
  "@="Microsoft Windows Media Player"
  "ComponentID"="WMPACCESS"

[Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
  "@="Internet Explorer"
  "ComponentID"="IEACCESS"
  "StubPath"=expand:"%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE"

[Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS]
  "@="Personnalisation du navigateur"
  "ComponentID"="BRANDING.CAB"
  "StubPath"="RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP"

[Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
  "@="Outlook Express"
  "ComponentID"="OEACCESS"
  "StubPath"=expand:"%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE"

[Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}]
  "@="Java (Sun)"
  "ComponentID"="JAVAVM"
  "KeyFileName"="C:\Program Files\Java\jre1.6.0_01\binegutils.dll"

[Installed Components\{0E92DD42-76F5-4EF2-B381-F9C1D72BE23D}]
  "@="Security Update for Microsoft .NET Framework 2.0 (KB922770)"
  "ComponentID"="KB922770"

[Installed Components\{10072CEC-8CC1-11D1-986E-00A0C955B42F}]
  "@="Rendu VML (Vector Graphics Rendering)"
  "ComponentID"="MSVML"

[Installed Components\{166B1BCA-3F9C-11CF-8075-444553540000}]
    #### HKCR\CLSID\{166B1BCA-3F9C-11CF-8075-444553540000}\InprocServer32 @="C:\WINDOWS\system32\Macromed\Director\SwDir.dll"
  "ComponentID"="Director"
  "@="Macromedia Shockwave Director 10.0"

[Installed Components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}]
    #### HKCR\CLSID\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}\InprocServer32 @="C:\WINDOWS\system32\wmpdxm.dll"
  "ComponentID"="NetShow"
  "StubPath"=""

[Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
    #### HKCR\CLSID\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}\InprocServer32 @="C:\WINDOWS\system32\wmpdxm.dll"
  "ComponentID"="Microsoft Windows Media Player"
  "StubPath"=""
  "@="Lecteur Windows Media Microsoft 6.4"

[Installed Components\{283807B5-2C60-11D0-A31D-00AA00B92C03}]
    #### HKCR\CLSID\{283807B5-2C60-11D0-A31D-00AA00B92C03}\InprocServer32 @="C:\WINDOWS\system32\danim.dll"
  "@="DirectAnimation"
  "ComponentID"="DirectAnimation"

[Installed Components\{2A202491-F00D-11cf-87CC-0020AFEECF20}]
  "ComponentID"="Director"
  "@="Macromedia Shockwave Director 10.0"

[Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
  "@="Themes Setup"
  "ComponentID"="Theme Component"
  "StubPath"=expand:"%SystemRoot%\system32egsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32	hemeui.dll"

[Installed Components\{30528230-99F7-4BB4-88D8-FA1D4F56A2AB}]
    #### HKCR\CLSID\{30528230-99F7-4BB4-88D8-FA1D4F56A2AB}\InprocServer32 @="C:\WINDOWS\Downloaded Program Files\yinsthelper.dll"

[Installed Components\{347B0667-C7ED-429B-BDE3-CC8D3BACAA31}]
    #### HKCR\CLSID\{347B0667-C7ED-429B-BDE3-CC8D3BACAA31}\InprocServer32 @="C:\WINDOWS\Downloaded Program Files\yinsthelper.dll"

[Installed Components\{36f8ec70-c29a-11d1-b5c7-0000f8051515}]
  "@="Liaison de données Dynamic HTML pour Java"
  "ComponentID"="TridataJava"

[Installed Components\{3af36230-a269-11d1-b5bf-0000f8051515}]
  "@="Logiciel de navigation hors connexion"
  "ComponentID"="MobilePk"

[Installed Components\{3bf42070-b3b1-11d1-b5c5-0000f8051515}]
  "@="Uniscribe"
  "ComponentID"="USP10"

[Installed Components\{4278c270-a269-11d1-b5bf-0000f8051515}]
  "@="Création avancée"
  "ComponentID"="AdvAuth"

[Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
  "@="Microsoft Outlook Express 6"
  "ComponentID"="MailNews"
  "StubPath"=expand:"\"%ProgramFiles%\Outlook Express\setup50.exe\" /APP:OE /CALLER:WINNT /user /install"

[Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
  "@="NetMeeting 3.01"
  "ComponentID"="NetMeeting"
  "StubPath"="rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT"

[Installed Components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}]
  "@="DirectShow"
  "ComponentID"="activemovie"

[Installed Components\{44BBA855-CC51-11CF-AAFA-00AA00B6015F}]
  "@="DirectDrawEx"
  "ComponentID"="DirectDrawEx"

[Installed Components\{45ea75a0-a269-11d1-b5bf-0000f8051515}]
  "@="Aide sur Internet Explorer"
  "ComponentID"="HelpCont"

[Installed Components\{4f216970-c90c-11d1-b5c7-0000f8051515}]
  "@="Classes Java DirectAnimation"
  "ComponentID"="DAJava"

[Installed Components\{4f645220-306d-11d2-995d-00c04f98bbc9}]
  "@="Microsoft Windows Script 5.6"
  "ComponentID"="MSVBScript"

[Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
  "KeyFileName"="C:\Program Files\Messenger\msmsgs.exe"
  "@="Windows Messenger 4.7"
  "ComponentID"="Messenger"
  "StubPath"="rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser"

[Installed Components\{5A8D6EE0-3E18-11D0-821E-444553540000}]
  "(Default)"="Internet Connection Wizard"
  "ComponentID"="ICW"

[Installed Components\{5fd399c0-a70a-11d1-9948-00c04f98bbc9}]
  "@="Outils d'installation Internet Explorer"
  "ComponentID"="GenSetup"

[Installed Components\{630b1da0-b465-11d1-9948-00c04f98bbc9}]
  "@="Améliorations pour la navigation"
  "ComponentID"="ExtraPack"
  "KeyFileName"="C:\WINDOWS\system32\msieftp.dll"

[Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    #### HKCR\CLSID\{6BF52A52-394A-11d3-B153-00C04F79FAA6}\InprocServer32 @="C:\WINDOWS\system32\wmp.dll"
  "@="Microsoft Windows Media Player"
  "ComponentID"="Microsoft Windows Media Player"
  "StubPath"="rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub"

[Installed Components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}]
  "@="Accès au site MSN"
  "ComponentID"="MSN_Auth"

[Installed Components\{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}]
  "ComponentID"=".NETFramework"
  "@=".NET Framework"

[Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
  "@="Carnet d'adresses 6"
  "ComponentID"="WAB"
  "StubPath"=expand:"\"%ProgramFiles%\Outlook Express\setup50.exe\" /APP:WAB /CALLER:WINNT /user /install"

[Installed Components\{8056AC9E-49C5-4375-9ADE-B2F862C9DF51}]
  "ComponentID"="KB928365"
  "@="Security Update for Microsoft .NET Framework 2.0 (KB928365)"

[Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
  "@="Mise à jour du Bureau Windows"
  "ComponentID"="IE4Shell_NT"
  "StubPath"=expand:"regsvr32.exe /s /n /i:U shell32.dll"

[Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
  "@="Internet Explorer 6"
  "ComponentID"="BASEIE40_W2K"
  "StubPath"=expand:"%SystemRoot%\system32\ie4uinit.exe"

[Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}\AuthorizedCDFPrefix]

[Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
  "StubPath"="C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install"
  "ComponentID"="DOTNETFRAMEWORKS"

[Installed Components\{8b15971b-5355-4c82-8c07-7e181ea07608}]
  "@="Fax"
  "ComponentID"="Fax"
  "StubPath"="rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\fxsocm.inf,Fax.Install.PerUser"

[Installed Components\{9381D8F2-0288-11D0-9501-00AA00B911A5}]
  "@="Liaison de données Dynamic HTML"
  "ComponentID"="Tridata"

[Installed Components\{94de52c8-2d59-4f1b-883e-79663d2d9a8c}]
  "@="Fax Provider"
  "ComponentID"="Fax Provider"
  "StubPath"=""

[Installed Components\{967B098A-042D-4367-BAC9-8BC11684174F}]
  "@="Security Update for Microsoft .NET Framework 2.0 (KB917283)"
  "ComponentID"="KB917283"

[Installed Components\{ACC563BC-4266-43f0-B6ED-9D38C4202C7E}]

[Installed Components\{C9E9A340-D1F1-11D0-821E-444553540600}]
  "@="Polices de base Internet Explorer"
  "ComponentID"="Fontcore"

[Installed Components\{CC2A9BA0-3BDD-11D0-821E-444553540000}]
  "@="Planificateur de tâches"
  "ComponentID"="MSTASK"

[Installed Components\{CDD7975E-60F8-41d5-8149-19E51D6F71D0}]
  "ComponentID"="Windows Movie Maker v2.1"

[Installed Components\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
  "@="Adobe Flash Player 9 ActiveX"
  "ComponentID"="Flash"

[Installed Components\{de5aed00-a4bf-11d1-9948-00c04f98bbc9}]
  "@="Aide HTML"
  "ComponentID"="HTMLHelp"

[Installed Components\{E92B03AB-B707-11d2-9CBD-0000F87A369E}]
  "@="Active Directory Service Interface"
  "ComponentID"="ADSI"

-----Comparing registry keys CCS1 vs CCS2 -----
> Value:  HKEY_LOCAL_MACHINE\system\controlset002\services

Result compared: Identical


-----Comparing registry keys CCS1 vs CCS3 -----
> Value:  HKEY_LOCAL_MACHINE\system\controlset003\services

Result compared: Identical


==========================================
Scan completed in 0,4 minutes
End of report

manu59000 · Answer

bon j'vais dormir ! je re vers 14h , aidez SVP ! mon probleme est grave ! j'peux rien instaler en anti virus c bloqué, ni redemarré en sans echec ni restauré le pc !  sinon ça rame pas et mes documents sont intacte

Utilisateur anonyme · Answer

Bizarre, je regarderai le rapport après, fais ceci avant

¤  Télécharge ComboFix sur ton bureau
---> http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Ferme ton navigateur web avant d'exécuter ce programme.
Double-clic dessus et appuye sur "1" pour continuer
Attends quelques minutes..
Un rapport va s'ouvrir enregistre son contenu, puis copie et colle le ici .

PS : il se peut qu'il y est un autre rapport colle son contenu ici aussi.

manu59000 · Answer

le lien que tu me donnes fonctionne pas :( et j'rajoutes que j'peux aller sur internet avec mon pc, le wifi est bloqué aussi

je suis sur le pc de mon pere là , merci bcp de m'aider

manu59000 · Answer

et j'rajoutes que j'peux PAS aller sur internet avec mon pc, c un acer aspire portable qui a tjrs tres bien fonctionner

Utilisateur anonyme · Answer

Grrr 

Télécharge ComboScan sur ton Bureau. 
---> http://www.techsupportforum.com/sectools/Deckard/dss.exe
Ferme toutes les applications en cours ; antivirus, pare-feu, etc ..
Double-clic sur comboscan.exe  A la fenêtre qui s'affiche, clic sur OK. 
Soit patient ..
Le rapport Comboscan.txt s'affichera, copie et colle le contenu de ce fichier ici.
Attention, il peut avoir deux, trois rapports mets les tous ici stp

manu59000 · Answer

Deckard's System Scanner v20070826.66
Run by anthony volckaert on 2007-08-28 15:22:27
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.

-- Last 4 Restore Point(s) --
4: 2007-08-28 13:22:42 UTC - RP791 - Deckard's System Scanner Restore Point
3: 2007-08-28 03:35:37 UTC - RP790 - Installed AVG 7.5
2: 2007-08-28 03:30:43 UTC - RP789 - Installed Windows Defender
1: 2007-08-28 03:13:43 UTC - RP788 - Point de vérification système

Backed up registry hives.
Performed disk cleanup.

[color=red]System Drive C: has 3.36 GiB (less than 15%) free.[/color]

-- HijackThis Clone ------------------------------------------------------------

Emulating logfile of HijackThis v1.99.1
Scan saved at 2007-08-28 15:23:47
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (6.00.2900.2180)

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\WLTRYSVC.EXE
C:\WINDOWS\system32\BCMWLTRY.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\I386\Acer\eManager\anbmServ.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\wlancfg.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Launch Manager\Powerkey.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\ctrlvol.exe
C:\Program Files\Launch Manager\WButton.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\802.11 Wireless LAN\WlanMonitor.exe
C:\Documents and Settings\anthony volckaert\Bureau\dss.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://home.microsoft.com/access/autosearch.asp?p=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R1 - HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.bing.com/spresults.aspx
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O4 - HKEY_LOCAL_MACHINE\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKEY_LOCAL_MACHINE\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKEY_LOCAL_MACHINE\..\Run: [PowerKey] "C:\Program Files\Launch Manager\PowerKey.exe"
O4 - HKEY_LOCAL_MACHINE\..\Run: [LManager] C:\Program Files\Launch Manager\HotkeyApp.exe
O4 - HKEY_LOCAL_MACHINE\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
O4 - HKEY_LOCAL_MACHINE\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
O4 - HKEY_LOCAL_MACHINE\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKEY_LOCAL_MACHINE\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKEY_LOCAL_MACHINE\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKEY_LOCAL_MACHINE\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKEY_LOCAL_MACHINE\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKEY_LOCAL_MACHINE\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKEY_LOCAL_MACHINE\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKCU\..\Run: [MsnMsgr] "c:\program files\msn messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Arovax AntiSpyware] C:\Program Files\Arovax AntiSpyware\arovaxantispyware.exe /s
O4 - Startup: Moniteur & Configuration.lnk = C:\Program Files\802.11 Wireless LAN\WlanMonitor.exe
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZN
O8 - Extra context menu item: &Télécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: Tout t&élécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddList.html
O8 - Extra context menu item: Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Télécharger tout avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: Diagnostiquer les problèmes de connexion... - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O21 - SSODL: LiveUpdate - {44822785-F05B-9ED7-5C42-913B853C45AF} - (no file)
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\I386\Acer\eManager\anbmServ.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - "C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"
O23 - Service: avast! Antivirus - Unknown owner - "C:\Program Files\Alwil Software\Avast4\ashServ.exe"
O23 - Service: avast! Mail Scanner - Unknown owner - "C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service
O23 - Service: avast! Web Scanner - Unknown owner - "C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service
O23 - Service: AVG Anti-Spyware Guard - Unknown owner - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - "C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe"
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\WINDOWS\wlancfg.exe SVC
O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe %SystemRoot%\System32\bcmwltry.exe

-- File Associations -----------------------------------------------------------

All associations okay.

-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R1 Hotkey - c:\windows\system32\drivers\hotkey.sys
R1 UBHelper - c:\windows\system32\drivers\ubhelper.sys
R2 AegisP (AEGIS Protocol (IEEE 802.1x) v3.2.0.3) - c:\windows\system32\drivers\aegisp.sys <Not Verified; Meetinghouse Data Communications; AEGIS Client 3.2.0.3>
R2 hmonitor - c:\windows\system32\drivers\hmonitor.sys
R2 MDC8021X (AEGIS Protocol (IEEE 802.1x) v2.3.0.0) - c:\windows\system32\drivers\mdc8021x.sys <Not Verified; Meetinghouse Data Communications; AEGIS Client 2.3.1>
R2 osaio - c:\windows\system32\drivers\osaio.sys <Not Verified; Avocent/OSA Technologies Inc.; Windows (R) Server 2003 DDK driver>
R2 osanbm - c:\windows\system32\drivers\osanbm.sys <Not Verified; Windows (R) 2000 DDK provider; OSA int15 Driver>
R3 NTIDrvr (Upper Class Filter Driver) - c:\windows\system32\drivers\ntidrvr.sys <Not Verified; NewTech Infosystems, Inc.; >
R3 PCANDIS5 (PCANDIS5 NDIS Protocol Driver) - c:\windows\system32\pcandis5.sys <Not Verified; Printing Communications Assoc., Inc. (PCAUSA); PCAUSA Rawether for Windows>
R3 pfc (Padus ASPI Shell) - c:\windows\system32\drivers\pfc.sys <Not Verified; Padus, Inc.; Padus(R) ASPI Shell>
R3 POWERKEY - c:\program files\launch manager\powerkey.sys

S1 InCDPass - c:\windows\system32\drivers\incdpass.sys (file missing)
S1 InCDRm (InCD Reader) - c:\windows\system32\drivers\incdrm.sys (file missing)
S1 Wbutton - c:\windows\system32\drivers\wbutton.sys (file missing)
S3 ATMEL FVNETusb (AR)(R) (ATMEL FVNETusb (AR)(R) Service for WLAN USB Adaptor (AR)) - c:\windows\system32\drivers\vnetusbr.sys <Not Verified; ATMEL; 802.11b Compliant USB Wireless Network Adapter>
S3 driverhardwarev2 - c:\program files\hardwaredetection\driverhardwarev2.sys
S4 InCDFs (InCD File System) - c:\windows\system32\drivers\incdfs.sys (file missing)

-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 anbmService (Notebook Manager Service) - c:\i386\acer\emanager\anbmserv.exe <Not Verified; OSA Technologies Inc.; Acer eManager for Notebook>
R2 O&O Defrag - c:\windows\system32\oodag.exe <Not Verified; O&O Software GmbH; O&O Defrag>
R2 Wlancfg (Service de lancement de WlanCfg) - c:\windows\wlancfg.exe svc <Not Verified; Inventel; Application WLANCfg>

S2 aswUpdSv (avast! iAVS4 Control Service) - "c:\program files\alwil software\avast4\aswupdsv.exe" (file missing)
S2 avast! Antivirus - "c:\program files\alwil software\avast4\ashserv.exe" (file missing)
S2 AVG Anti-Spyware Guard - c:\program files\grisoft\avg anti-spyware 7.5\guard.exe (file missing)
S4 avast! Mail Scanner - "c:\program files\alwil software\avast4\ashmaisv.exe" /service (file missing)
S4 avast! Web Scanner - "c:\program files\alwil software\avast4\ashwebsv.exe" /service (file missing)

-- Device Manager: Disabled ----------------------------------------------------

No disabled devices found.

-- Scheduled Tasks -------------------------------------------------------------

2007-08-28 14:59:28 330 --ah----- C:\WINDOWS\Tasks\MP Scheduled Scan.job
2007-08-24 17:16:02 432 --a------ C:\WINDOWS\Tasks\Maintenance en 1 clic.job
2007-08-21 07:18:02 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job

-- Files created between 2007-07-28 and 2007-08-28 -----------------------------

2007-08-28 05:30:43 0 d-------- C:\Program Files\Windows Defender
2007-08-28 05:28:39 0 d-------- C:\Documents and Settings\All Users\Application Data\Arovax
2007-08-28 05:28:38 0 d-------- C:\Program Files\Arovax AntiSpyware
2007-08-28 04:06:03 0 dr-h----- C:\Documents and Settings\anthony volckaert\Recent
2007-08-15 14:42:35 0 d-------- C:\Program Files\MSXML 4.0
2007-08-13 02:31:19 0 d-------- C:\Program Files\Media Player Classic
2007-07-30 23:30:25 0 d-------- C:\Documents and Settings\anthony volckaert\Application Data\Grisoft

-- Find3M Report ---------------------------------------------------------------

2007-07-15 14:37:40 0 d-------- C:\Program Files\Project64 1.6
2007-07-11 17:48:58 461470 --a------ C:\WINDOWS\system32\perfh00C.dat
2007-07-11 17:48:58 73142 --a------ C:\WINDOWS\system32\perfc00C.dat
2007-06-15 17:23:32 99970 --a------ C:\WINDOWS\UninstallFirefox.exe
2007-06-15 17:23:26 5380 --a------ C:\WINDOWS\mozver.dat

-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [23/02/2005 18:13 C:\WINDOWS\SOUNDMAN.EXE]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [05/04/2005 21:05]
"PowerKey"="C:\Program Files\Launch Manager\PowerKey.exe" [30/08/2002 15:02]
"LManager"="C:\Program Files\Launch Manager\HotkeyApp.exe" [29/03/2005 11:08]
"CtrlVol"="C:\Program Files\Launch Manager\CtrlVol.exe" [28/01/2004 17:48]
"Wbutton"="C:\Program Files\Launch Manager\Wbutton.exe" [03/03/2005 17:39]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [09/07/2001 10:50]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" []
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [12/12/2005 05:21]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [19/01/2007 23:29]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [14/03/2007 03:43]
"UnlockerAssistant"="C:\Program Files\Unlocker\UnlockerAssistant.exe" [07/09/2006 19:19]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [03/11/2006 19:20]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\program files\msn messenger\msnmsgr.exe" [13/08/2005 22:32]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [05/08/2004 05:00]
"Arovax AntiSpyware"="C:\Program Files\Arovax AntiSpyware\arovaxantispyware.exe" [07/07/2007 11:40]

C:\Documents and Settings\anthony volckaert\Menu D‚marrer\Programmes\D‚marrage\
Moniteur & Configuration.lnk - C:\Program Files\802.11 Wireless LAN\WlanMonitor.exe [07/04/2003 19:38:28]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sglfb.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\tga.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"C:\Program Files\QuickTime\qttask.exe" -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\XpDis0Conf]
C:\PROGRA~1\Belkin\BELKIN~1\Tool\WinXPDisableZeroConfigation.exe VEN_14E4&DEV_4320&SUBSYS_70111799 /d

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

-- Hosts -----------------------------------------------------------------------

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD

60 more entries in hosts file.

-- End of Deckard's System Scanner: finished at 2007-08-28 15:25:13 ------------

Utilisateur anonyme · Answer

Bon, on va faire le nettoyage ;-)

¤ Je te conseille de désinstaller :

- Flashet (cause spyware) NetTransport est très bien.
- Java jre1.6.0_01 (obsoléte)
- Arovax AntiSpyware (perso, je fais pas confiance à ce programme) 
- Hardwaredetection


¤ Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked"

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll 
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O4 - HKLM\..\Run: [preload] C:\Windows\RUNXMLPL.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot 
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime 
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present 
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present 
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZN
O8 - Extra context menu item: Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm 
O8 - Extra context menu item: Télécharger tout avec FlashGet - C:\Program Files\FlashGet\jc_all.htm 
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll 
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe 
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe 
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) 
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
msgrchkr.cab31267.cab 
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab 
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab 
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab 
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab 
O21 - SSODL: LiveUpdate - {44822785-F05B-9ED7-5C42-913B853C45AF} - (no file)



¤ Clic sur démarrer, poste de travail, C:, program files, cherche et supprime ces dossiers, s'il résiste à la suppression utilise ton programme Unlocker

- FLASHGET
- Java
- Arovax AntiSpyware
- hardwaredetection


¤ Clic sur démarrer, rechercher, tous les fichiers et dossiers, cherche et supprime :

- RUNXMLPL.exe



¤ Clic sur démarrer, panneau de configuration, connexions et réseau internet, options internet, vas dans l'onglet: 
- "Général" clci sur le bouton "Supprimer" puis clic sur "Tout supprimer"
- "Sécurité" et clic sur "niveau par défaut" 
- même chose avec l'onglet "Confidentialité" 
- "Contenu" effacer le SSL
- puis dans l'onglet "Avancé" clique sur "paramétres par défaut" puis "réinitialiser"

Appliquer, puis ok.



¤ Fais ce nettoyage:  à faire réguliérement 

*Télécharge et installe CCleaner (n'installe pas la barre d'outil Yahoo)
---> https://www.clubic.com/telecharger-fiche14492-ccleaner.html

- Dans la colonne de gauche clic sur "erreurs" coches toutes les cases, puis clic en bas sur "chercher des erreurs" une fois terminé, clic sur "réparer les erreurs" et tu auras un message pour sauvegarder ta base de registre tu clic "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs.
Les sauvegardes que tu aura faites, tu pourras les supprimer si ton ordinateur n'a plus de problèmes.

- Relance Ccleaner, vas dans l'onglet "nettoyeur" présent sur la gauche, decoches la derniere case (Avancé si elle est cochée) puis clic sur "lancer le nettoyage"
 
Si tu as besoin d'aide avec Ccleaner, regarde ce tutoriel :
http://redir.fr/gmll



¤ Télécharge HostsXpert
http://www.funkytoad.com/download/HostsXpert.zip

Dézippe-le sur ton bureau, double clic sur hoster.exe
Sur la droite clic sur "Restore Microsoft's Hosts file"
Puis ferme le programme.



¤ Puis pour essaye de remettre, les priviléges par défaut, exécute ceci

Télécharge SDFix sur ton bureau 
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe 

Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. 
Redémarre ton ordinateur en mode sans échec (redemarrage + tapotte sans arret sur F8 des que l'ordi s'allume) 
Ouvre le dossier SDFix qui vient d'être créé sur le Bureau et double clique sur RunThis.bat pour lancer le script. 
Appuie sur Y pour commencer le processus de nettoyage. 
Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer. 
Appuie sur une touche pour redémarrer le PC. 
Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers. 
Après le chargement du Bureau, l'outil terminera son travail et affichera Finished. 
Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau. 
Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt. 

Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum.



Crée une nouvelle connexion internet pour voir ce que cela donne ;-)

manu59000 · Answer

merci bcp je vais faire toussa ! mais je sais pas si ça peut aider , AVG m'a trouvé le virus dans "systeme information volume" ce sont des fichier caché qui sont dans chacun de mes disck dur et dedans il me semble qu'il a des fichies qui concerne mes anti virus c'est bcp de fichier en .EXE et justement quand je veux lancer avats il me dit qu'il manque un fichier avast.EXE ça a un rapport ???

manu59000 · Answer

voila j'ai tout fait mais j'ai pas trouvé certain fichier les voici: 
 
Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked" 

O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file) 
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\fgiebar.dll 
O4 - HKLM\..\Run: [preload] C:\Windows\RUNXMLPL.exe 
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe 
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present 
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present 
O8 - Extra context menu item: Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm 
O8 - Extra context menu item: Télécharger tout avec FlashGet - C:\Program Files\FlashGet\jc_all.htm 
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe 
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe 

msgrchkr.cab31267.cab 


¤ Clic sur démarrer, panneau de configuration, connexions et réseau internet, options internet, vas dans l'onglet: 
- "Général" clci sur le bouton "Supprimer" puis clic sur "Tout supprimer" 
 - puis dans l'onglet "Avancé" clique sur "paramétres par défaut" puis "réinitialiser" 



sinon ca a été et voici le rapport mais y a pas d'amelioration....et je en sais pas crée de nouvelle connexion internet , je me connecte avec internet via mon modem wifi de mon portable en utilisant windows mais j'peux pas acceder a STATUT et quand j'fais rechercher reseau wifi il ne bloque tjrs :( il detecte pas ma BOX


voici le rapport: 


SDFix: Version 1.100

Run by administrateur on 28/08/2007 at 17:10

Microsoft Windows XP [version 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services: 


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...


Normal Mode:
Checking Files: 

No Trojan Files Found




Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found. 

C:\WINDOWS\system32
No streams found. 

C:\WINDOWS\system32\svchost.exe
No streams found.
 
C:\WINDOWS\system32
toskrnl.exe
No streams found.
 


                                 Final Check:

Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\MSMSGS.EXE"="C:\Program Files\Messenger\MSMSGS.EXE:*:Disabled:Windows Messenger"
"C:\Program Files\MSN BackUp\MSNBackup.exe"="c:\documents and settings\anthony volckaert\mes documents\smiley central\msn-backup-emoticone\msn-backup-emoticone\msnbackup.exe:*:Disabled:18 July 2005"
"C:\Program Files\JVTorrent\btdownloadgui.exe"="C:\Program Files\JVTorrent\btdownloadgui.exe:*:Enabled:btdownloadgui"
"C:\Documents and Settings\\Mes documents\MSN\MSN 7 -- Avatars anim‚s et clin d'oeil\MCO install.exe"="c:\documents and settings\anthony volckaert\mes documents\smiley central\msn\msn 7 -- avatars anim‚s et clin d'oeil\mco install.exe:*:Enabled:MCO install"
"C:\Documents and Settings\\Mes documents\MSN\MSN 7 -- Avatars anim‚s et clin d'oeil\MCO install.exe"="c:\documents and settings\anthony volckaert\mes documents\smiley central\msn\msn 7 -- avatars anim‚s et clin d'oeil\mco install.exe:*:Enabled:MCO install"
"C:\Documents and Settings\\Mes documents\MSN\MSN 7 -- Avatars anim‚s et clin d'oeil\MCO install.exe"="c:\documents and settings\anthony volckaert\mes documents\smiley central\msn\msn 7 -- avatars anim‚s et clin d'oeil\mco install.exe:*:Enabled:MCO install"
"C:\Documents and Settings\\Mes documents\MSN\MSN 7 -- Avatars anim‚s et clin d'oeil\MCO install.exe"="c:\documents and settings\anthony volckaert\mes documents\smiley central\msn\msn 7 -- avatars anim‚s et clin d'oeil\mco install.exe:*:Enabled:MCO install"
"C:\Documents and Settings\\Mes documents\MSN\MSN 7 -- Avatars anim‚s et clin d'oeil\MCO install.exe"="c:\documents and settings\anthony volckaert\mes documents\smiley central\msn\msn 7 -- avatars anim‚s et clin d'oeil\mco install.exe:*:Enabled:MCO install"
"C:\Documents and Settings\\Mes documents\MSN\MSN 7 -- Avatars anim‚s et clin d'oeil\MCO install.exe"="c:\documents and settings\anthony volckaert\mes documents\smiley central\msn\msn 7 -- avatars anim‚s et clin d'oeil\mco install.exe:*:Enabled:MCO install"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:MSN Messenger 7.5"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

Remaining Files:
---------------


Files with Hidden Attributes:

C:\WINDOWS\system32\NTICDMK7.dll
C:\WINDOWS\system32\NTIMPEG2.dll
C:\WINDOWS\system32\NTIMP3.dll
C:\WINDOWS\system32\NTIFCD3.dll
C:\WINDOWS\system32\NTIBUN4.dll
C:\Documents and Settings\Mes documents\emu_gbc\emu_gbc\gbload\fmoll.dll\fmod.dll\desktop.ini
C:\Documents and Settings\Mes documents\emu_gbc\emu_gbc\gbload\fmoll.dll\fmod.dll	chat STIN\Thumbs.db
C:\Documents and Settings\Mes documents\emu_gbc\emu_gbc\gbload\fmoll.dll\fmod.dll	chat STIN\desktop.ini
C:\Documents and Settings\Mes documents\emu_gbc\emu_gbc\gbload\fmoll.dll\fmod.dll\ptidd\desktop.ini
C:\Documents and Settings\Mes documents\emu_gbc\emu_gbc\gbload\fmoll.dll\fmod.dll\7\7 bis\desktop.ini
C:\Documents and Settings\Mes documents\emu_gbc\emu_gbc\gbload\fmoll.dll\fmod.dll\ma kelly\desktop.ini
C:\Documents and Settings\Mes documents\emu_gbc\emu_gbc\gbload\fmoll.dll\contact msn\Thumbs.db

                                 Finished

manu59000 · Answer

je relance

manu59000 · Answer

aidez moi svp , mon pc  c toute ma vie , j'angoisse bcp !!!! please !!!!!!!!

manu59000 · Answer

boule de patte ! aide stp

Utilisateur anonyme · Answer

Fas la première chose qui est indiqué ici (vérification d'erreur) dis-moi ce que ça donne
https://kerio.probb.fr/t50-vrifier-et-rparer-les-erreurs-sous-windows-2000-xp-et-vista

manu59000 · Answer

voila c enfin fini !!! mais y a aucun changement , sur mon bureau on m'a juste dit que windows avait recupéré une erreur grave

Utilisateur anonyme · Answer

As-tu ton Cd XP ?

manu59000 · Answer

alors.....je sais pas , j'ai acheter mon PC neuf ! avec XP d'instaler , avec mon pc j'ai eu 3 CD acer 1 SYSTEME et 2 recorver, je presume que c ça

Utilisateur anonyme · Answer

Ouai, mais avec ça je doute que tu puisses réparer ton système, je pense que c'est pour remettra la configuration sortie d'usine, faudrait confirmation ..

j'sais essayer de trouver autre  chose ;-)

manu59000 · Answer

" je pense que c'est pour remettra la configuration sortie d'usine, faudrait confirmation .." 
 j'ai pas compris ce que tu as dis mais tu es tres gentil ! c tres sympa de t'occuper de moi :)

Utilisateur anonyme · Answer

Je disais que tes Cd serviront pas à rèparer Windows, mais en gros complétement le réinstaller en effacant tes données ;-)

manu59000 · Answer

ben justement j'voudrais vraiment eviter de formater dans la mesure ou mon pc est tres TRES personalisé et j'ai bcp bcp de donné ! bcp de programme mais bon j'ai heureusement un disc dur EXTERNE de 300go donc si jamais j'pourrais tout mettre dans mon DD externe SEULEMENT j'ai peur que mon DD externe sois aussi infecter en faite ce virus supprime mes fichies apllication qui finisse en EXE je les voit meme disparaitre sous mes yeux ! et dans chacun de mes DD meme externe il se cré en fichier caché un fichié systele information volume et dedans y a des fichiers etrange mais en rapporte avec des anti virus.....donc je sais pas quoi faire :(:(:( 

mais sinon pour le formatage.....je l'ai jamais fait, àa me fait tres peur de pas retrouver mon pc comme avant, c fiable le formatage ? le pc va pas un peu moin bien qu'au debut ???

merci bcp de m'aider t'es super sympa

Utilisateur anonyme · Answer

System Volume Information est la restauration du système 

Cette action effacera tous les points infectés ou non :

Clic sur "demarrer", cliques droit sur "poste de travail", "propriétés", onglet "restauration du système"

¤ coches la case "desactiver la restauration du systéme sur tous les lecteurs", puis clic ur "appliquer" 
¤ décoches la case et clic sur "appliquer" puis "ok".

manu59000 · Answer

voila j'ai fais ce que tu m'as dit , je redemarre ?

Utilisateur anonyme · Answer

J'aime pas jouer sur deux tableaux, demande sur l'autre forum qu'il continue à t'aider moi j'arrête là.

C'est abuser du temps des personnes qui vous viennent en aide pour rien, sympa quand même .. bref

manu59000 · Answer

oh non me laisse pas tomber......j'ai demané sur un autre forum pcq je sais plus koi faire......faut pas le prendre mal comme ça

manu59000 · Answer

boule de patte !! au s'cour !!!!! je t'en suplie , continue a m'aider !!!!! je pensais pas que tu m'en voudrait si je demandais ailleur......

manu59000 · Answer

je relance mon topic en esperant qu'on m'aide ! je comprend pas pk tu m'en veux boule de patte , j'voulais pas te facher , j'ai vraiment besion de toi.....stp aide moi.......j'ai poster un autre topic parce que je sais pas koi faire en attendant :( c tout , j'veux pas te faire perdre ton temps.....alors sois gentil j'deprime

manu59000 · Answer

boulle de patte !!!!! pitié !!! aide moi.....je me send abandonné.....je ferais tout ce que tu veux

Utilisateur anonyme · Answer

lol (^_^)

Où en est ta bestiole ? Elle te mange encore tes .exe ?

manu59000 · Answer

ben ouais :(:(:(:( y a rien de mieux , j'peux pas d'instaler d'anti virus :( mon wifi ne marche pas et voila

Utilisateur anonyme · Answer

Télécharge Gmer
---> http://www2.gmer.net/gmer.zip

Déconnecte toi d'internet si possible et ferme tous les programmes. 
Décompresse le fichier zip et double-clic sur gmer.exe 
IMPORTANT: Si une alerte de ton antivirus apparaît pour le fichier gmer.sys ou gmer.exe, laisse le s'executer. 
Clic sur l'onglet "rootkit" 
A droite, coche "Files" et "Services" 
Clic sur Scan 
Lorsque le scan est terminé, clic sur "copy" 

Ouvre le bloc-note et clic sur le Menu Edition puis Coller 
Le rapport doit alors apparaître. 
Enregistre le fichier sur ton bureau puis  copie et colle le contenu ici.

manu59000 · Answer

GMER 1.0.13.12551 - http://www.gmer.net
Rootkit scan 2007-08-30 14:38:36
Windows 5.1.2600 Service Pack 2


---- System - GMER 1.0.13 ----

SSDT            86D1687A                                                                                                                                                                                                                                                                                                                                                                                                                ZwCreateFile
SSDT            86D16BBE                                                                                                                                                                                                                                                                                                                                                                                                                ZwEnumerateKey
SSDT            86D1690A                                                                                                                                                                                                                                                                                                                                                                                                                ZwEnumerateValueKey
SSDT            \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys                                                                                                                                                                                                                                                                                                                                                             ZwOpenProcess
SSDT            86D16E5E                                                                                                                                                                                                                                                                                                                                                                                                                ZwQueryDirectoryFile
SSDT            86D1722C                                                                                                                                                                                                                                                                                                                                                                                                                ZwQueryKey
SSDT            86D17004                                                                                                                                                                                                                                                                                                                                                                                                                ZwQuerySystemInformation
SSDT            \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys                                                                                                                                                                                                                                                                                                                                                             ZwTerminateProcess

---- Kernel code sections - GMER 1.0.13 ----

?               C:\WINDOWS\system32\Drivers\mchInjDrv.sys                                                                                                                                                                                                                                                                                                                                                                               Le fichier spécifié est introuvable.

---- User code sections - GMER 1.0.13 ----

.text           C:\WINDOWS\Explorer.EXE[1012] SHELL32.dll!SHFileOperationW                                                                                                                                                                                                                                                                                                                                                              7CA7FD0A 5 Bytes  JMP 00C41102 C:\Program Files\Unlocker\UnlockerHook.dll
.text           C:\WINDOWS\system32\wuauclt.exe[1740] kernel32.dll!FreeLibrary + 15                                                                                                                                                                                                                                                                                                                                                     7C80ABF3 4 Bytes  [ 45, 54, EF, F4 ]
.text           C:\WINDOWS\system32\wscntfy.exe[2292] kernel32.dll!FreeLibrary + 15                                                                                                                                                                                                                                                                                                                                                     7C80ABF3 4 Bytes  [ 45, 54, EF, F4 ]
.text           C:\Documents and Settings\admi\Bureau\gmer.exe[3432] kernel32.dll!FreeLibrary + 15                                                                                                                                                                                                                                                                                                                         7C80ABF3 4 Bytes  [ 45, 54, EF, F4 ]
.text           C:\WINDOWS\system32\NOTEPAD.EXE[3816] kernel32.dll!FreeLibrary + 15                                                                                                                                                                                                                                                                                                                                                     7C80ABF3 4 Bytes  [ 45, 54, EF, F4 ]

---- Devices - GMER 1.0.13 ----

AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_CREATE                                                                                                                                                                                                                                                                                                                                                                                  [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_CREATE_NAMED_PIPE                                                                                                                                                                                                                                                                                                                                                                       [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_CLOSE                                                                                                                                                                                                                                                                                                                                                                                   [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_READ                                                                                                                                                                                                                                                                                                                                                                                    [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_WRITE                                                                                                                                                                                                                                                                                                                                                                                   [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_INFORMATION                                                                                                                                                                                                                                                                                                                                                                       [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_SET_INFORMATION                                                                                                                                                                                                                                                                                                                                                                         [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_EA                                                                                                                                                                                                                                                                                                                                                                                [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_SET_EA                                                                                                                                                                                                                                                                                                                                                                                  [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_FLUSH_BUFFERS                                                                                                                                                                                                                                                                                                                                                                           [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_VOLUME_INFORMATION                                                                                                                                                                                                                                                                                                                                                                [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_SET_VOLUME_INFORMATION                                                                                                                                                                                                                                                                                                                                                                  [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_DIRECTORY_CONTROL                                                                                                                                                                                                                                                                                                                                                                       [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_FILE_SYSTEM_CONTROL                                                                                                                                                                                                                                                                                                                                                                     [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_DEVICE_CONTROL                                                                                                                                                                                                                                                                                                                                                                          [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_INTERNAL_DEVICE_CONTROL                                                                                                                                                                                                                                                                                                                                                                 [F731B2C0] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_SHUTDOWN                                                                                                                                                                                                                                                                                                                                                                                [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_LOCK_CONTROL                                                                                                                                                                                                                                                                                                                                                                            [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_CLEANUP                                                                                                                                                                                                                                                                                                                                                                                 [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_CREATE_MAILSLOT                                                                                                                                                                                                                                                                                                                                                                         [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_SECURITY                                                                                                                                                                                                                                                                                                                                                                          [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_SET_SECURITY                                                                                                                                                                                                                                                                                                                                                                            [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_POWER                                                                                                                                                                                                                                                                                                                                                                                   [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_SYSTEM_CONTROL                                                                                                                                                                                                                                                                                                                                                                          [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_DEVICE_CHANGE                                                                                                                                                                                                                                                                                                                                                                           [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_QUOTA                                                                                                                                                                                                                                                                                                                                                                             [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Ip IRP_MJ_SET_QUOTA                                                                                                                                                                                                                                                                                                                                                                               [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_CREATE                                                                                                                                                                                                                                                                                                                                                                                 [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_CREATE_NAMED_PIPE                                                                                                                                                                                                                                                                                                                                                                      [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_CLOSE                                                                                                                                                                                                                                                                                                                                                                                  [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_READ                                                                                                                                                                                                                                                                                                                                                                                   [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_WRITE                                                                                                                                                                                                                                                                                                                                                                                  [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_INFORMATION                                                                                                                                                                                                                                                                                                                                                                      [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_SET_INFORMATION                                                                                                                                                                                                                                                                                                                                                                        [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_EA                                                                                                                                                                                                                                                                                                                                                                               [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_SET_EA                                                                                                                                                                                                                                                                                                                                                                                 [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_FLUSH_BUFFERS                                                                                                                                                                                                                                                                                                                                                                          [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_VOLUME_INFORMATION                                                                                                                                                                                                                                                                                                                                                               [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_SET_VOLUME_INFORMATION                                                                                                                                                                                                                                                                                                                                                                 [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_DIRECTORY_CONTROL                                                                                                                                                                                                                                                                                                                                                                      [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_FILE_SYSTEM_CONTROL                                                                                                                                                                                                                                                                                                                                                                    [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_DEVICE_CONTROL                                                                                                                                                                                                                                                                                                                                                                         [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_INTERNAL_DEVICE_CONTROL                                                                                                                                                                                                                                                                                                                                                                [F731B2C0] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_SHUTDOWN                                                                                                                                                                                                                                                                                                                                                                               [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_LOCK_CONTROL                                                                                                                                                                                                                                                                                                                                                                           [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_CLEANUP                                                                                                                                                                                                                                                                                                                                                                                [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_CREATE_MAILSLOT                                                                                                                                                                                                                                                                                                                                                                        [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_SECURITY                                                                                                                                                                                                                                                                                                                                                                         [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_SET_SECURITY                                                                                                                                                                                                                                                                                                                                                                           [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_POWER                                                                                                                                                                                                                                                                                                                                                                                  [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_SYSTEM_CONTROL                                                                                                                                                                                                                                                                                                                                                                         [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_DEVICE_CHANGE                                                                                                                                                                                                                                                                                                                                                                          [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_QUOTA                                                                                                                                                                                                                                                                                                                                                                            [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Tcp IRP_MJ_SET_QUOTA                                                                                                                                                                                                                                                                                                                                                                              [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_CREATE                                                                                                                                                                                                                                                                                                                                                                                 [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_CREATE_NAMED_PIPE                                                                                                                                                                                                                                                                                                                                                                      [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_CLOSE                                                                                                                                                                                                                                                                                                                                                                                  [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_READ                                                                                                                                                                                                                                                                                                                                                                                   [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_WRITE                                                                                                                                                                                                                                                                                                                                                                                  [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_INFORMATION                                                                                                                                                                                                                                                                                                                                                                      [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_SET_INFORMATION                                                                                                                                                                                                                                                                                                                                                                        [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_EA                                                                                                                                                                                                                                                                                                                                                                               [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_SET_EA                                                                                                                                                                                                                                                                                                                                                                                 [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_FLUSH_BUFFERS                                                                                                                                                                                                                                                                                                                                                                          [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_VOLUME_INFORMATION                                                                                                                                                                                                                                                                                                                                                               [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_SET_VOLUME_INFORMATION                                                                                                                                                                                                                                                                                                                                                                 [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_DIRECTORY_CONTROL                                                                                                                                                                                                                                                                                                                                                                      [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_FILE_SYSTEM_CONTROL                                                                                                                                                                                                                                                                                                                                                                    [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_DEVICE_CONTROL                                                                                                                                                                                                                                                                                                                                                                         [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_INTERNAL_DEVICE_CONTROL                                                                                                                                                                                                                                                                                                                                                                [F731B2C0] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_SHUTDOWN                                                                                                                                                                                                                                                                                                                                                                               [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_LOCK_CONTROL                                                                                                                                                                                                                                                                                                                                                                           [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_CLEANUP                                                                                                                                                                                                                                                                                                                                                                                [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_CREATE_MAILSLOT                                                                                                                                                                                                                                                                                                                                                                        [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_SECURITY                                                                                                                                                                                                                                                                                                                                                                         [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_SET_SECURITY                                                                                                                                                                                                                                                                                                                                                                           [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_POWER                                                                                                                                                                                                                                                                                                                                                                                  [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_SYSTEM_CONTROL                                                                                                                                                                                                                                                                                                                                                                         [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_DEVICE_CHANGE                                                                                                                                                                                                                                                                                                                                                                          [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_QUOTA                                                                                                                                                                                                                                                                                                                                                                            [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\Udp IRP_MJ_SET_QUOTA                                                                                                                                                                                                                                                                                                                                                                              [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_CREATE                                                                                                                                                                                                                                                                                                                                                                               [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_CREATE_NAMED_PIPE                                                                                                                                                                                                                                                                                                                                                                    [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_CLOSE                                                                                                                                                                                                                                                                                                                                                                                [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_READ                                                                                                                                                                                                                                                                                                                                                                                 [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_WRITE                                                                                                                                                                                                                                                                                                                                                                                [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_INFORMATION                                                                                                                                                                                                                                                                                                                                                                    [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_SET_INFORMATION                                                                                                                                                                                                                                                                                                                                                                      [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_EA                                                                                                                                                                                                                                                                                                                                                                             [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_SET_EA                                                                                                                                                                                                                                                                                                                                                                               [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_FLUSH_BUFFERS                                                                                                                                                                                                                                                                                                                                                                        [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_VOLUME_INFORMATION                                                                                                                                                                                                                                                                                                                                                             [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_SET_VOLUME_INFORMATION                                                                                                                                                                                                                                                                                                                                                               [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_DIRECTORY_CONTROL                                                                                                                                                                                                                                                                                                                                                                    [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_FILE_SYSTEM_CONTROL                                                                                                                                                                                                                                                                                                                                                                  [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_DEVICE_CONTROL                                                                                                                                                                                                                                                                                                                                                                       [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_INTERNAL_DEVICE_CONTROL                                                                                                                                                                                                                                                                                                                                                              [F731B2C0] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_SHUTDOWN                                                                                                                                                                                                                                                                                                                                                                             [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_LOCK_CONTROL                                                                                                                                                                                                                                                                                                                                                                         [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_CLEANUP                                                                                                                                                                                                                                                                                                                                                                              [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_CREATE_MAILSLOT                                                                                                                                                                                                                                                                                                                                                                      [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_SECURITY                                                                                                                                                                                                                                                                                                                                                                       [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_SET_SECURITY                                                                                                                                                                                                                                                                                                                                                                         [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_POWER                                                                                                                                                                                                                                                                                                                                                                                [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_SYSTEM_CONTROL                                                                                                                                                                                                                                                                                                                                                                       [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_DEVICE_CHANGE                                                                                                                                                                                                                                                                                                                                                                        [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_QUOTA                                                                                                                                                                                                                                                                                                                                                                          [F731B8E6] aswTdi.SYS
AttachedDevice  \Driver\Tcpip \Device\RawIp IRP_MJ_SET_QUOTA                                                                                                                                                                                                                                                                                                                                                                            [F731B8E6] aswTdi.SYS

Device          \Driver\srosa \Device\srosa IRP_MJ_CREATE                                                                                                                                                                                                                                                                                                                                                                               86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_CREATE_NAMED_PIPE                                                                                                                                                                                                                                                                                                                                                                    86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_CLOSE                                                                                                                                                                                                                                                                                                                                                                                86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_READ                                                                                                                                                                                                                                                                                                                                                                                 86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_WRITE                                                                                                                                                                                                                                                                                                                                                                                86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_QUERY_INFORMATION                                                                                                                                                                                                                                                                                                                                                                    86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_SET_INFORMATION                                                                                                                                                                                                                                                                                                                                                                      86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_QUERY_EA                                                                                                                                                                                                                                                                                                                                                                             86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_SET_EA                                                                                                                                                                                                                                                                                                                                                                               86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_FLUSH_BUFFERS                                                                                                                                                                                                                                                                                                                                                                        86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_QUERY_VOLUME_INFORMATION                                                                                                                                                                                                                                                                                                                                                             86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_SET_VOLUME_INFORMATION                                                                                                                                                                                                                                                                                                                                                               86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_DIRECTORY_CONTROL                                                                                                                                                                                                                                                                                                                                                                    86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_FILE_SYSTEM_CONTROL                                                                                                                                                                                                                                                                                                                                                                  86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_DEVICE_CONTROL                                                                                                                                                                                                                                                                                                                                                                       86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_INTERNAL_DEVICE_CONTROL                                                                                                                                                                                                                                                                                                                                                              86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_SHUTDOWN                                                                                                                                                                                                                                                                                                                                                                             86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_LOCK_CONTROL                                                                                                                                                                                                                                                                                                                                                                         86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_CLEANUP                                                                                                                                                                                                                                                                                                                                                                              86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_CREATE_MAILSLOT                                                                                                                                                                                                                                                                                                                                                                      86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_QUERY_SECURITY                                                                                                                                                                                                                                                                                                                                                                       86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_SET_SECURITY                                                                                                                                                                                                                                                                                                                                                                         86D236E6
Device          \Driver\srosa \Device\srosa IRP_MJ_POWER

manu59000 · Answer

Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Microsoft Shared\Textconv\HTML32.CNV                                                                                                                                                                                                                                                                           2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Microsoft Shared\Textconv\WRD6EX32.CNV                                                                                                                                                                                                                                                                         1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Microsoft Shared\Textconv\WORKS332.CNV                                                                                                                                                                                                                                                                         1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Microsoft Shared\Textconv\Works532.cnv                                                                                                                                                                                                                                                                         1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Microsoft Shared\Textconv\wkcvqd.dll                                                                                                                                                                                                                                                                           1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Microsoft Shared\Textconv\wkcvqrtf.dll                                                                                                                                                                                                                                                                         1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Microsoft Shared\Textconv\Works632.cnv                                                                                                                                                                                                                                                                         1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Microsoft Shared\Textconv\wkcvqd01.dll                                                                                                                                                                                                                                                                         1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Microsoft Shared\Textconv\wkcvqr01.dll                                                                                                                                                                                                                                                                         1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Microsoft Shared\Equation\eqnedt32.exe                                                                                                                                                                                                                                                                         1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Microsoft Works\1036\wkgl70.dll                                                                                                                                                                                                                                                                                                 1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Microsoft Shared\Note-It
ote-it.exe                                                                                                                                                                                                                                                                           1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Microsoft Shared\Note-It
ote-it.hlp                                                                                                                                                                                                                                                                           1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\lfbmp11n.dll                                                                                                                                                                                                                                                                                                                 2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\LFCMP11n.DLL                                                                                                                                                                                                                                                                                                                 2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\lfeps11n.dll                                                                                                                                                                                                                                                                                                                 2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\lffax11n.dll                                                                                                                                                                                                                                                                                                                 2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\lfgif11n.dll                                                                                                                                                                                                                                                                                                                 2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\lfpcd11n.dll                                                                                                                                                                                                                                                                                                                 2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\lfpcx11n.dll                                                                                                                                                                                                                                                                                                                 2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\Lfpng11n.dll                                                                                                                                                                                                                                                                                                                 2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\lfpsd11n.dll                                                                                                                                                                                                                                                                                                                 2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\lftga11n.dll                                                                                                                                                                                                                                                                                                                 2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\lftif11n.dll                                                                                                                                                                                                                                                                                                                 2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\lfwmf11n.dll                                                                                                                                                                                                                                                                                                                 2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\LTDIS11n.dll                                                                                                                                                                                                                                                                                                                 2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\ltfil11n.DLL                                                                                                                                                                                                                                                                                                                 2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\ltimg11n.dll                                                                                                                                                                                                                                                                                                                 2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\ltkrn11n.dll                                                                                                                                                                                                                                                                                                                 2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\Ltwvc11n.dll                                                                                                                                                                                                                                                                                                                 2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\PCDLIB32.DLL                                                                                                                                                                                                                                                                                                                 2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Microsoft Shared\WordArt\Wrdart32.exe                                                                                                                                                                                                                                                                          1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Microsoft Shared\WordArt\Wrdart32.hlp                                                                                                                                                                                                                                                                          1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\Pubole32.dll                                                                                                                                                                                                                                                                                                                 1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Microsoft Shared\MSDraw\msdraw.exe                                                                                                                                                                                                                                                                             1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\mfcans32.dll                                                                                                                                                                                                                                                                                                                 1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\mfcuia32.dll                                                                                                                                                                                                                                                                                                                 1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\msvci70.dll                                                                                                                                                                                                                                                                                                                  3
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\msvcp70.dll                                                                                                                                                                                                                                                                                                                  3
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\msvcr70.dll                                                                                                                                                                                                                                                                                                                  3
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Microsoft Shared\Proof\csapi3t1.dll                                                                                                                                                                                                                                                                            2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Microsoft Shared\Proof\ctapi3t2.dll                                                                                                                                                                                                                                                                            2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Microsoft Works\MSPFR32.DLL                                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Microsoft Works\MSSP_FR.LEX                                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Microsoft Works\MSTHFR32.DLL                                                                                                                                                                                                                                                                                                    2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Microsoft Works\MSTH_FR.LEX                                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Microsoft Works\msthes3.dll                                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Microsoft Works\msth3br.lex                                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Microsoft Works\Mspnl32.dll                                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Microsoft Works\Mssp_nl.lex                                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Microsoft Works\Msthnl32.dll                                                                                                                                                                                                                                                                                                    2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Microsoft Works\Msth_nl.lex                                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\atl71.dll                                                                                                                                                                                                                                                                                                                    1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\mfc70.dll                                                                                                                                                                                                                                                                                                                    1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\mfc70u.dll                                                                                                                                                                                                                                                                                                                   1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\comdlg32.ocx                                                                                                                                                                                                                                                                                                                 1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\mscomct2.ocx                                                                                                                                                                                                                                                                                                                 1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\mscomctl.ocx                                                                                                                                                                                                                                                                                                                 1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\msvbvm60.dll                                                                                                                                                                                                                                                                                                                 2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\AudioPlugins\aacenc32.dll                                                                                                                                                                                                                                                                                2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\aacplus.dll                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\dvddisc.dll                                                                                                                                                                                                                                                                                     1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\em2v.dll                                                                                                                                                                                                                                                                                        1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\Lib\MultiChannel.dll                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NDParser.ax                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter
dvddisc.dll                                                                                                                                                                                                                                                                                    2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeAcEnc.dll                                                                                                                                                                                                                                                                                     1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeAMR.dll                                                                                                                                                                                                                                                                                       2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeAudCD.ax                                                                                                                                                                                                                                                                                      2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeAudio.ax                                                                                                                                                                                                                                                                                      2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeAudioConv.ax                                                                                                                                                                                                                                                                                  2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeCapture.ax                                                                                                                                                                                                                                                                                    2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeDVD.ax                                                                                                                                                                                                                                                                                        2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeDVSplitter.ax                                                                                                                                                                                                                                                                                 2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeEm2a.dll                                                                                                                                                                                                                                                                                      1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeFileSourceAsync.ax                                                                                                                                                                                                                                                                            2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeFileSrc.ax                                                                                                                                                                                                                                                                                    2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeFSource.ax                                                                                                                                                                                                                                                                                    2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeNDAud.ax                                                                                                                                                                                                                                                                                      2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeNDGui.dll                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeNDMux.ax                                                                                                                                                                                                                                                                                      2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeNDVid.ax                                                                                                                                                                                                                                                                                      2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NePhotoSource.ax                                                                                                                                                                                                                                                                                2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NePSMuxer.ax                                                                                                                                                                                                                                                                                    2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeQTDec.ax                                                                                                                                                                                                                                                                                      2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeRender.ax                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeResize.ax                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter
eroadb.dll                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter
eroapl.dll                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeroFormatConv.ax                                                                                                                                                                                                                                                                               2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\Lib\NeroIPP.dll                                                                                                                                                                                                                                                                                          2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\Lib\NeroMediaCon.dll                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeroVideoProc.ax                                                                                                                                                                                                                                                                                2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeSceneDetector.ax                                                                                                                                                                                                                                                                              2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeSplitter.ax                                                                                                                                                                                                                                                                                   2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeVcd.ax                                                                                                                                                                                                                                                                                        2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeVCR.ax                                                                                                                                                                                                                                                                                        2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeVcr.dll                                                                                                                                                                                                                                                                                       1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeVideo.ax                                                                                                                                                                                                                                                                                      2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\DSFilter\NeVideoAnalyzer.ax                                                                                                                                                                                                                                                                              2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\System32\NeroCheck.exe                                                                                                                                                                                                                                                                                                                2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\AudioPlugins\Aiff.dll                                                                                                                                                                                                                                                                                    2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\AudioPlugins\DefConvertor.dll                                                                                                                                                                                                                                                                            2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\AudioPlugins\msa.dll                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\AudioPlugins\wav.dll                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\Lib\DriveLocker.dll                                                                                                                                                                                                                                                                                      2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\Lib\NeroCBUI.dll                                                                                                                                                                                                                                                                                         2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\ImagX7.dll                                                                                                                                                                                                                                                                                                                   2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\Lib\apreg.dll                                                                                                                                                                                                                                                                                            1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\AudioPlugins\Aac.dll                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\Lib\AdvrCntr.dll                                                                                                                                                                                                                                                                                         1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\AudioPlugins\ogg.dll                                                                                                                                                                                                                                                                                     2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\Lib\specialoffer.exe                                                                                                                                                                                                                                                                                     1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Ahead\CoverDesigner\Templates\Data.nct                                                                                                                                                                                                                                                                                          1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Ahead\CoverDesigner\Templates\Audio_Content.nct                                                                                                                                                                                                                                                                                 1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Ahead\CoverDesigner\NeroCoverDesigner_fra.chm                                                                                                                                                                                                                                                                                   1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Ahead\CoverDesigner\CoverEdCtrl.ocx                                                                                                                                                                                                                                                                                             1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\TwnLib20.dll                                                                                                                                                                                                                                                                                                                 1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Ahead\CoverDesigner\CoverDes.exe                                                                                                                                                                                                                                                                                                1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Ahead\Nero BackItUp\BackItUp.exe                                                                                                                                                                                                                                                                                                1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Ahead\Nero BackItUp\NeroBackItUp_Fra.chm                                                                                                                                                                                                                                                                                        1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart.exe                                                                                                                                                                                                                                                                                        1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart_fra.chm                                                                                                                                                                                                                                                                                    1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Ahead\WMPBurn\WMPBurn.exe                                                                                                                                                                                                                                                                                                       1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\AudioPlugins\mp3PP.dll                                                                                                                                                                                                                                                                                   2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\AudioPlugins\mp3PRO.dll                                                                                                                                                                                                                                                                                  2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Ahead\AudioPlugins\lame_enc.dll                                                                                                                                                                                                                                                                                2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\psapi.dll                                                                                                                                                                                                                                                                                                                    9
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\WINDOWS\system32\actskin4.ocx                                                                                                                                                                                                                                                                                                                 9
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Update_OB1puninst.exe                                                                                                                                                                                                                                                                                   1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Update_OBnqu3270.dll                                                                                                                                                                                                                                                                                    1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Update_OBnup3270.dll                                                                                                                                                                                                                                                                                    1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Update_OB\upgr3270.dll                                                                                                                                                                                                                                                                                    1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Update_OB\upgrdhlp.exe                                                                                                                                                                                                                                                                                    1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Update_OB\setu3270.dll                                                                                                                                                                                                                                                                                    1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Update_OB\lang\faust_fr.dll                                                                                                                                                                                                                                                                               1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Update_OB\lang\athnoui_fr.dll                                                                                                                                                                                                                                                                             1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Update_OB\faus3270.dll                                                                                                                                                                                                                                                                                    1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Update_OB\RealOneMessageCenter.exe                                                                                                                                                                                                                                                                        1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe                                                                                                                                                                                                                                                                                   1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Update_OBnad3201.dll                                                                                                                                                                                                                                                                                    1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Update_OB\pnmi3270.dll                                                                                                                                                                                                                                                                                    1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Update_OBnms3270.dll                                                                                                                                                                                                                                                                                    1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Update_OBnxproc.exe                                                                                                                                                                                                                                                                                     1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Update_OB
prfxins.dll                                                                                                                                                                                                                                                                                    1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Commonpun3260.dll                                                                                                                                                                                                                                                                                       2
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Plugins\authmgr.dll                                                                                                                                                                                                                                                                                       1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Plugins\cdda3260.dll                                                                                                                                                                                                                                                                                      1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Plugins\clbascauth.dll                                                                                                                                                                                                                                                                                    1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Plugins\httpfsys.dll                                                                                                                                                                                                                                                                                      1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Plugins\hxsdp.dll                                                                                                                                                                                                                                                                                         1
Reg             \Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls@C:\Program Files\Fichiers communs\Real\Plugins\memfsys.dll                                                                                                                                                                                                                                                                                       1
Reg             \Regist

manu59000 · Answer

merde ! y a pas tout c un rapport de 1 mo environ :(:(:(:(:( j'vais couper , mais je connais pas  la limite aussi ;:(

manu59000 · Answer

j'arriverais jamais le rapport est bcp trop long , il me faudra au moin 10 post pour tout mettre.....je le fait ou pas boule de patte ?

manu59000 · Answer

salut boule de patte c encore moi.....desolée de tjrs t'embeté mais tjrs rien de neuf :(:(:( sauf que en mode sans echec , mon anti virus repond :) avast et spybot vont bien :) j'ai pu scané avant le demarrage avec avast et voici le rapport:

08/11/2005 05:08
Scanner tous les disques locaux
Fichier C:\WINDOWS\system32
kek.dll est infecte par Win32:StartPage-101 [Trj]
Scan interrompu


Nombre de dossiers vus: 342
Nombre de fichiers testes: 11759
Nombre de fichiers infectes: 1

----------------------------------------
30/08/2007 23:17
Scanner tous les disques locaux
Fichier C:\WINDOWS\system32\dllcache\chkdsk.exe Erreur 0xC000000F
Fichier C:\WINDOWS\system32\dllcache
toskrnl.exe Erreur 0xC000000F
Fichier C:\WINDOWS\system32\chkdsk.exe Erreur 0xC000000F
Fichier C:\WINDOWS\system32
toskrnl.exe Erreur 0xC000000F
Fichier C:\Documents and Settings\anthony volckaert\Mes documents\Avast4\copyx64.exe Erreur 0xC000000F
Fichier C:\Documents and Settings\Mes documents\Avast4\ashAvast.exe Erreur 0xC000000F
Fichier C:\Documents and Settings\Mes documents\Avast4\ashChest.exe Erreur 0xC000000F
Fichier C:\Documents and Settings\Mes documents\Avast4\ashDisp.exe Erreur 0xC000000F
Fichier C:\Documents and Settings\Mes documents\Avast4\ashLogV.exe Erreur 0xC000000F
Fichier C:\Documents and Settings\Mes documents\Avast4\ashMaiSv.exe Erreur 0xC000000F
Fichier C:\Documents and Settings\Mes documents\Avast4\ashPopWz.exe Erreur 0xC000000F
Fichier C:\Documents and Settings\Mes documents\Avast4\ashQuick.exe Erreur 0xC000000F
Fichier C:\Documents and Settings\Mes documents\Avast4\ashServ.exe Erreur 0xC000000F
Fichier C:\Documents and Settings\Mes documents\Avast4\ashSimp2.exe Erreur 0xC000000F
Fichier C:\Documents and Settings\Mes documents\Avast4\ashSimpl.exe Erreur 0xC000000F
Fichier C:\Documents and Settings\Mes documents\Avast4\ashSkPcc.exe Erreur 0xC000000F
Fichier C:\Documents and Settings\Mes documents\Avast4\ashSkPck.exe Erreur 0xC000000F
Fichier C:\Documents and Settings\Mes documents\Avast4\ashWebSv.exe Erreur 0xC000000F
Fichier C:\Documents and Settings\Mes documents\Avast4\aswRegSvr.exe Erreur 0xC000000F
Fichier C:\Documents and Settings\Mes documents\Avast4\aswUpdSv.exe Erreur 0xC000000F
Fichier C:\Documents and Settings\Mes documents\Avast4\sched.exe Erreur 0xC000000F
Fichier C:\Program Files\Alwil Software\Avast4\copyx64.exe Erreur 0xC000000F
Fichier C:\Program Files\Alwil Software\Avast4\ashAvast.exe Erreur 0xC000000F
Fichier C:\Program Files\Alwil Software\Avast4\ashChest.exe Erreur 0xC000000F
Fichier C:\Program Files\Alwil Software\Avast4\ashDisp.exe Erreur 0xC000000F
Fichier C:\Program Files\Alwil Software\Avast4\ashLogV.exe Erreur 0xC000000F
Fichier C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe Erreur 0xC000000F
Fichier C:\Program Files\Alwil Software\Avast4\ashPopWz.exe Erreur 0xC000000F
Fichier C:\Program Files\Alwil Software\Avast4\ashQuick.exe Erreur 0xC000000F
Fichier C:\Program Files\Alwil Software\Avast4\ashServ.exe Erreur 0xC000000F
Fichier C:\Program Files\Alwil Software\Avast4\ashSimp2.exe Erreur 0xC000000F
Fichier C:\Program Files\Alwil Software\Avast4\ashSimpl.exe Erreur 0xC000000F
Fichier C:\Program Files\Alwil Software\Avast4\ashSkPcc.exe Erreur 0xC000000F
Fichier C:\Program Files\Alwil Software\Avast4\ashSkPck.exe Erreur 0xC000000F
Fichier C:\Program Files\Alwil Software\Avast4\ashWebSv.exe Erreur 0xC000000F
Fichier C:\Program Files\Alwil Software\Avast4\aswRegSvr.exe Erreur 0xC000000F
Fichier C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe Erreur 0xC000000F
Fichier C:\Program Files\Alwil Software\Avast4\sched.exe Erreur 0xC000000F
Fichier C:\Program Files\Spybot - Search & Destroy\blindman.exe Erreur 0xC000000F
Fichier C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe Erreur 0xC000000F
Fichier C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe Erreur 0xC000000F
Fichier C:\Program Files\Spybot - Search & Destroy\Update.exe Erreur 0xC000000F
Fichier C:\Sysinfo\WORKS70\COMMON\APERþu.WSB Erreur 0xC0000034

Nombre de dossiers vus: 6317
Nombre de fichiers testes: 78946
Nombre de fichiers infectes: 0

manu59000 · Answer

help

Utilisateur anonyme · Answer

Relis ceci :

Télécharge Gmer 
---> http://www2.gmer.net/gmer.zip 

Déconnecte toi d'internet si possible et ferme tous les programmes. 
Décompresse le fichier zip et double-clic sur gmer.exe 
IMPORTANT: Si une alerte de ton antivirus apparaît pour le fichier gmer.sys ou gmer.exe, laisse le s'executer. 

Clic sur l'onglet "rootkit" 
A droite, coche "Files" et "Services"  tu décoches tout le reste
Clic sur Scan 
Lorsque le scan est terminé, clic sur "copy" 

* Clic sur démarrer, executer, tape : cmd
Le bloc-note  va s'ouvrir, clic sur le Menu Edition puis Coller 
Le rapport doit alors apparaître. 
Enregistre le fichier sur ton bureau puis copie et colle le contenu ici.

manu59000 · Answer

je t'ai deja dis que ça me met un rapprt de 1mo !!! c bcp trop long ! j'vais devoir le couper en 10 fois au moin, et encore si j'en oublies pas en chemin....tu veux vraiment que je fasse ça ????

manu59000 · Answer

voila le rapport , j'ai coché que les deux cases comme tu m'as dis.......


GMER 1.0.13.12551 - http://www.gmer.net
Rootkit scan 2007-08-31 15:48:49
Windows 5.1.2600 Service Pack 2


---- Services - GMER 1.0.13 ----

Service  C:\WINDOWS\system32\drivers\srosa.sys (*** hidden *** )                                                              [SYSTEM] srosa   <-- ROOTKIT !!!

---- Files - GMER 1.0.13 ----

File     C:\WINDOWS\system32\drivers\hidr.exe                                                                                 
File     C:\WINDOWS\system32\drivers\srosa.sys                                                                                                 <-- ROOTKIT !!!
File     C:\WINDOWS\ime\shared                                                                                                
File     C:\WINDOWS\ime\sharedes                                                                                            
File     C:\WINDOWS\ime\sharedes\padrs804.dll                                                                               
File     C:\WINDOWS\ime\shared\imlang.dll                                                                                     
File     C:\Documents and Settings\NetworkService\Application Data\Symantec\Shared                                            
File     C:\Documents and Settings\NetworkService\Application Data\Symantec\Shared\MyProfile.UserProfile                      
File     C:\Documents and Settings\anthony volckaert\Application Data\Symantec\Shared                                         
File     C:\Documents and Settings\anthony volckaert\Application Data\Symantec\Shared\Sessions                                
File     C:\Documents and Settings\anthony volckaert\Application Data\Symantec\Shared\Sessions\20050825202604531.liveReg      
File     C:\Documents and Settings\anthony volckaert\Application Data\Symantec\Shared\MyProfile.UserProfile                   
File     C:\Program Files\Movie Maker\Shared                                                                                  
File     C:\Program Files\Movie Maker\Shared\Empty.txt                                                                        
File     C:\Program Files\Movie Maker\Shared\Filters.xml                                                                      
File     C:\Program Files\Movie Maker\Shared
ews.png                                                                         
File     C:\Program Files\Movie Maker\Shared\paint.png                                                                        
File     C:\Program Files\Movie Maker\Shared\Sample1.jpg                                                                      
File     C:\Program Files\Movie Maker\Shared\Sample2.jpg                                                                      
File     C:\Program Files\Movie Maker\Shared\Profiles                                                                         
File     C:\Program Files\Movie Maker\Shared\Profiles\Blank.txt                                                               
File     C:\Program Files\MSN Apps\Shared                                                                                     
File     C:\Program Files\MSN Apps\Shared\unicows.dll                                                                         
File     C:\Program Files\MSN Apps\Shared\01.05.0000.1009                                                                     
File     C:\Program Files\MSN Apps\Shared\01.05.0000.1009\fr                                                                  
File     C:\Program Files\MSN Apps\Shared\01.05.0000.1009\fr\mkttools.dll                                                     
File     C:\Program Files\MSN Apps\Shared\01.05.0000.1009\fr\marketstrings.cab                                                
File     C:\Deckard\System Scanner\20070828152801\backup\DOCUME~1\ANTHON~1\LOCALS~1\Temp\AAWTMP\C2914468\28427F\Shared        
File     C:\Deckard\System Scanner\20070828152801\backup\DOCUME~1\ANTHON~1\LOCALS~1\Temp\AAWTMP\C2914468\28427F\Shared\Cache  
File     C:\Deckard\System Scanner\20070828152801\backup\DOCUME~1\ANTHON~1\LOCALS~1\Temp\AAWTMP\C2914468\D0260\Shared         
File     C:\Deckard\System Scanner\20070828152801\backup\DOCUME~1\ANTHON~1\LOCALS~1\Temp\AAWTMP\C2914468\D0260\Shared\Cache   
File     C:\Deckard\System Scanner\20070828152801\backup\DOCUME~1\ANTHON~1\LOCALS~1\Temp\AAWTMP\C2914468\381542\Shared        
File     C:\Deckard\System Scanner\20070828152801\backup\DOCUME~1\ANTHON~1\LOCALS~1\Temp\AAWTMP\C2914468\381542\Shared\Cache  
File     C:\Deckard\System Scanner\20070828152801\backup\DOCUME~1\ANTHON~1\LOCALS~1\Temp\AAWTMP\C2914468\1E6136\Shared        
File     C:\Deckard\System Scanner\20070828152801\backup\DOCUME~1\ANTHON~1\LOCALS~1\Temp\AAWTMP\C2914468\1E6136\Shared\Cache  
File     C:\Deckard\System Scanner\20070828152801\backup\DOCUME~1\ANTHON~1\LOCALS~1\Temp\AAWTMP\C2914468\3D32F8\Shared        
File     C:\Deckard\System Scanner\20070828152801\backup\DOCUME~1\ANTHON~1\LOCALS~1\Temp\AAWTMP\C2914468\3D32F8\Shared\Cache  
File     C:\Deckard\System Scanner\20070828152801\backup\DOCUME~1\ANTHON~1\LOCALS~1\Temp\AAWTMP\C2914468\24D69A\Shared        
File     C:\Deckard\System Scanner\20070828152801\backup\DOCUME~1\ANTHON~1\LOCALS~1\Temp\AAWTMP\C2914468\24D69A\Shared\Cache  
File     C:\Deckard\System Scanner\20070828152801\backup\DOCUME~1\ANTHON~1\LOCALS~1\Temp\AAWTMP\C2914468\D43B3\Shared         
File     C:\Deckard\System Scanner\20070828152801\backup\DOCUME~1\ANTHON~1\LOCALS~1\Temp\AAWTMP\C2914468\D43B3\Shared\Cache   
File     C:\Deckard\System Scanner\20070828152801\backup\DOCUME~1\ANTHON~1\LOCALS~1\Temp\AAWTMP\C2914468\3ED1AB\Shared        
File     C:\Deckard\System Scanner\20070828152801\backup\DOCUME~1\ANTHON~1\LOCALS~1\Temp\AAWTMP\C2914468\3ED1AB\Shared\Cache  

---- EOF - GMER 1.0.13 ----

Utilisateur anonyme · Answer

Bah voilà, tu vois ;-)

Télécharge OTMoveIt sur ton bureau
http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe

C:\WINDOWS\system32\drivers\hidr.exe 
C:\WINDOWS\system32\drivers\srosa.sys
C:\WINDOWS\system32\drivers\hidr.exe.xpx

Retourne dans OTMoveit, fais un clic droit dans la fenêtre "Paste List of Files/Folders to be moved" et choisis "coller".
Clic sur le boutton rouge Moveit et ferme OTMoveIt
Si un fichier ou un dossier ne peut être déplacer immédiatement il te sera demander de redémarrer ta machine pour finir l'exécution, si c'est le cas, clic sur "Yes"
Copie et colle le rapport qu'il va te générer ici stp. Le rapport d'OTMoveit se trouve dans ce dossier : C:\_OTMoveIt\MovedFiles


Puis essaye de connecter ton PC sans passer par le Wifi pour voir au moins si ça fonctionne.

Utilisateur anonyme · Answer

manu59000 · Answer

Bah voilà, tu vois ;-) 

Télécharge OTMoveIt sur ton bureau 
http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe 

C:\WINDOWS\system32\drivers\hidr.exe 
C:\WINDOWS\system32\drivers\srosa.sys 
C:\WINDOWS\system32\drivers\hidr.exe.xpx 

Retourne dans OTMoveit, fais un clic droit dans la fenêtre "Paste List of Files/Folders to be moved" et choisis "coller". 
Clic sur le boutton rouge Moveit et ferme OTMoveIt 
Si un fichier ou un dossier ne peut être déplacer immédiatement il te sera demander de redémarrer ta machine pour finir l'exécution, si c'est le cas, clic sur "Yes" 
Copie et colle le rapport qu'il va te générer ici stp. Le rapport d'OTMoveit se trouve dans ce dossier : C:\_OTMoveIt\MovedFiles 


Puis essaye de connecter ton PC sans passer par le Wifi pour voir au moins si ça fonctionne. 





tu es sur que tu as rien oublié ???? pour tu me donnes 3 C:/ ???

C:\WINDOWS\system32\drivers\hidr.exe 
C:\WINDOWS\system32\drivers\srosa.sys 
C:\WINDOWS\system32\drivers\hidr.exe.xpx

manu59000 · Answer

aucun des 3 na été trouvé :( c ecrit no found :(:(:(

Utilisateur anonyme · Answer

Comment ça trois C: ?

manu59000 · Answer

nan c bon j'ai compris , je crois..... il fallait copiers et collé les 3 fichiers 

C:\WINDOWS\system32\drivers\hidr.exe 
C:\WINDOWS\system32\drivers\srosa.sys 
C:\WINDOWS\system32\drivers\hidr.exe.xpx

je l'ai fais et il a rien trouvé

manu59000 · Answer

boule depatte j'en peux plus ! je te propose de m'aider via msn, j'peux cré une adresse et tu m'aide apres ça je te laisse tranquille promis..... ca marche ? pcq ça va faire 1 semaine et ça avance pas :(

Utilisateur anonyme · Answer

j'utilise plus msn donc c'est pas pour m'y recoller (^_^)

Retélécharge la dernière version ici, en bas de page clic sur Descargar Elibagla
http://www.zonavirus.com/datos/descargas/95/elibagla.asp

Redémarre en mode sans échec, exécute Elibagla, et clic sur Explorar, laisse le terminer, enregistre le rapport une fois qu'il a terminé puis colle le contenu ici

manu59000 · Answer

Tue Aug 28 04:15:30 2007
EliBagle v10.47  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):
Eliminada Carpeta "%WinDir%\exefld"
Restaurada Clave: "SafeBoot\Minimal y Network"

	  Tue Aug 28 04:16:01 2007
EliBagle v10.47  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

	  Tue Aug 28 04:20:06 2007
EliBagle v10.47  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

	  Tue Aug 28 04:21:04 2007
EliBagle v10.47  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):

	  Tue Aug 28 04:21:10 2007
EliBagle v10.47  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

	  Tue Aug 28 04:34:17 2007
EliBagle v10.47  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):

	  Tue Aug 28 04:34:19 2007
EliBagle v10.47  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

	  Sat Sep 01 13:44:02 2007
EliBagle v10.48  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):

	  Sat Sep 01 13:44:09 2007
EliBagle v10.48  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\


voila le rapport, tjrs rien de bien :( j'espere que tu es tres doué pcq mon virus est un gros :(

manu59000 · Answer

salut j'ecris pour dire que mon probleme est en partie resolu , j'peux me connecter sur le net et instaler un anti virus :) le plus dur est reparé seulement mon pc deconne un peu....il est plus comme avant mais c un peu normal....je m'y ferais , j'vais voir ce que je peux faire

mais MERCI BCP A boule de patte malgres tout !!! j'sais pas vraiment comment j'ai reparé mon pc, j'ai du scané une fois de pluss et ct la bonne !!! voila

Probleme grave avec hijacker.starpage.aop

57 réponses

Votre réponse

Discussions similaires

Newsletters