virus : barre au dessus de la page internet

Question

Bonjour, 
Bonjour, 
j'ai un virus a mon avis qui est: barra au dessus de la page internet il y a un encadré : " Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware..." 
avec hijackthis j'ai ca je sais pas quoi faire merci d'avance pour votre aide
comment le supprimer 
voila le nouveau rapport 
Logfile of Trend Micro HijackThis v2.0.2 
Scan saved at 20:16:04, on 21/11/2007 
Platform: Windows XP SP2 (WinNT 5.01.2600) 
MSIE: Internet Explorer v7.00 (7.00.6000.16544) 
Boot mode: Normal 

Running processes: 
C:\WINDOWS\System32\smss.exe 
C:\WINDOWS\SYSTEM32\winlogon.exe 
C:\WINDOWS\system32\services.exe 
C:\WINDOWS\system32\lsass.exe 
C:\WINDOWS\system32\Ati2evxx.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\System32\svchost.exe 
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 
C:\Program Files\Alwil Software\Avast4\ashServ.exe 
C:\WINDOWS\system32\spoolsv.exe 
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe 
C:\Program Files\Bonjour\mDNSResponder.exe 
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe 
C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe 
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe 
C:\WINDOWS\system32\svchost.exe 
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe 
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe 
C:\WINDOWS\SYSTEM32\Ati2evxx.exe 
C:\WINDOWS\System32\svchost.exe 
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe 
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe 
C:\Program Files\Apoint2K\Apoint.exe 
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe 
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe 
C:\Program Files\iTunes\iTunesHelper.exe 
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe 
C:\Program Files\QuickTime\qttask.exe 
C:\WINDOWS\system32undll32.exe 
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe 
C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe 
C:\WINDOWS\AGRSMMSG.exe 
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe 
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 
C:\WINDOWS\system32\ctfmon.exe 
C:\Program Files\Messenger\msmsgs.exe 
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe 
C:\Program Files\SAGEM\Topnet SAGEM F@st 800-840\dslmon.exe 
C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe 
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe 
C:\Program Files\WinZip\WZQKPICK.EXE 
C:\Program Files\iPod\bin\iPodService.exe 
C:\Program Files\Apoint2K\Apntex.exe 
C:\Program Files\HPQ\SHARED\HPQWMI.exe 
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe 
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe 
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe 
C:\Program Files\Internet Explorer\iexplore.exe 
C:\WINDOWS\explorer.exe 
C:\Program Files\hijackthis\HijackThis.exe 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/ 
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www8.hp.com/fr/fr/home.html 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens 
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll 
O2 - BHO: MSVPS System - {31E3F653-ED88-4355-B83E-FB263CD355E3} - C:\WINDOWS\popnetnpr.dll 
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll 
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe 
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe 
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray 
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe 
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe 
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe 
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe 
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe 
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start 
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe 
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause 
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime 
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent 
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup 
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start 
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" 
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll" 
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe 
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" 
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe 
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe 
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background 
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet 
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized 
O4 - HKCU\..\Run: [Noun pop] C:\DOCUME~1\ws\APPLIC~1\ACEMOR~1	rans proxy.exe 
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide 
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') 
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') 
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') 
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') 
O4 - Global Startup: Bluetooth Manager.lnk = ? 
O4 - Global Startup: DSLMON.lnk = ? 
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe 
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE 
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll 
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll 
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL 
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe 
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe 
O14 - IERESET.INF: START_PAGE_URL=https://www8.hp.com/fr/fr/home.html 
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab 
O17 - HKLM\System\CCS\Services\Tcpip\..\{C31D76B5-D258-40B2-AC56-4D52002C8F19}: NameServer = 213.150.176.196,193.95.66.11 
O21 - SSODL: rmvgor - {265EC516-9AB2-493E-BFDE-63EFF8AB8FA9} - C:\WINDOWSmvgor.dll 
O21 - SSODL: msmhost - {D91F049C-D8A6-4565-88A0-40C705B8B879} - C:\WINDOWS\msmhost.dll (file missing) 
O21 - SSODL: msmdev - {4B3548DA-0C68-40BD-8C4D-C45C1F3592AB} - C:\WINDOWS\msmdev.dll (file missing) 
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe 
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe 
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe 
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe 
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe 
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe 
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe 
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing) 
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe 
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe 
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe 
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe 
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe 
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE 
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe 
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe 
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe 
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

jorginho67 · Answer

salut !
tu n'as pas de pare feu ?
active au moins celui de windows ! on verra apres !
Clique sur ce lien :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
pour télécharger navilog1.exe.

Choisis Enregistrer

et enregistre-le sur ton bureau.

Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

Patiente jusqu'au message :
*** Analyse Termine le ..... ***
Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
Copie-colle l'intégralité du rapport dans ta réponse. Referme le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

.

mido2004 · Answer

voila la rapport:

Search Navipromo version 3.3.6 commencé le 21/11/2007 à 22:29:45,09

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Mise à jour le 14.11.2007 à 18h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11 


*** Recherche Programmes installés ***




*** Recherche dossiers dans C:\WINDOWS ***



*** Recherche dossiers dans C:\Program Files ***



*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




*** Recherche dossiers dans C:\Documents and Settings\ws\Application Data ***


*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun fichier trouvé dans :

- C:\WINDOWS\system32
- C:\DOCUME~1\WS\LOCALS~1\APPLIC~1



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans C:\WINDOWS\system32 *

* Recherche dans C:\DOCUME~1\WS\LOCALS~1\APPLIC~1 *



*** Recherche fichiers *** 




*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:

2)Recherche Heuristique :



3)Recherche Certificats :

Certificat Egroup absent !


*** Analyse terminée le 21/11/2007 à 22:30:28,95 ***

jorginho67 · Answer

Affiche tous les fichiers et dossiers :
clique sur démarrer/panneau de configuration (en affichage classique)/option des dossiers/affichage
Coche " afficher les dossiers et fichiers cachés "
Décoche la case " Masquer les fichiers protégés du système d'exploitation (recommandé) "
Décoche " masquer les extensions dont le type est connu "
Puis fais " appliquer"  pour valider les changements.
Et [Ok] 

Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

Patiente jusqu'au message :
*** Analyse Termine le ..... ***
Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
Copie-colle l'intégralité du rapport dans ta réponse. Referme le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

mido2004 · Answer

Bonjour, 
Search Navipromo version 3.3.6 commencé le 21/11/2007 à 22:58:37,56

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Mise à jour le 14.11.2007 à 18h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11 


*** Recherche Programmes installés ***




*** Recherche dossiers dans C:\WINDOWS ***



*** Recherche dossiers dans C:\Program Files ***



*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




*** Recherche dossiers dans C:\Documents and Settings\ws\Application Data ***


*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun fichier trouvé dans :

- C:\WINDOWS\system32
- C:\DOCUME~1\WS\LOCALS~1\APPLIC~1



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans C:\WINDOWS\system32 *

* Recherche dans C:\DOCUME~1\WS\LOCALS~1\APPLIC~1 *



*** Recherche fichiers *** 




*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:

2)Recherche Heuristique :



3)Recherche Certificats :

Certificat Egroup absent !


*** Analyse terminée le 21/11/2007 à 22:59:17,60 ***

jorginho67 · Answer

bon, ça ne donne rien 
refait un scan HIJACKTHIS stp et reposte le !

mido2004 · Answer

Bonjour, 
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:18:13, on 21/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Program Files\SAGEM\Topnet SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\HPQ\SHARED\HPQWMI.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\explorer.exe
C:\Program Files\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www8.hp.com/fr/fr/home.html
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: MSVPS System - {31E3F653-ED88-4355-B83E-FB263CD355E3} - C:\WINDOWS\popnetnpr.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [Noun pop] C:\DOCUME~1\ws\APPLIC~1\ACEMOR~1	rans proxy.exe
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: DSLMON.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www8.hp.com/fr/fr/home.html
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C31D76B5-D258-40B2-AC56-4D52002C8F19}: NameServer = 213.150.176.196,193.95.66.11
O21 - SSODL: rmvgor - {265EC516-9AB2-493E-BFDE-63EFF8AB8FA9} - C:\WINDOWSmvgor.dll
O21 - SSODL: msmhost - {A64E8363-D4D5-4B01-9A68-C1B325AA4F26} - C:\WINDOWS\msmhost.dll (file missing)
O21 - SSODL: msmdev - {9CA78D64-4DAF-4CD0-B49F-141EF70D6BAB} - C:\WINDOWS\msmdev.dll (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

mido2004 · Answer

Bonjour, 
up

jorginho67 · Answer

ne t'inquiete pas, tu n'es pas oublié(e) !

jorginho67 · Answer

Télécharge http://download.bleepingcomputer.com/sUBs/ComboFix.exe (par sUBs) sur le Bureau

    * Démarre en mode sans echec
    * Double clique combofix.exe.
    * Appuye sur la touche Y (Yes) pour démarrer le scan
    * Le rapport sera crée dans: C:\Combofix.txt
       poste le ...

green day · Answer

Bonsoir

pour suivre ;-)

++

jorginho67 · Answer

merci Green !
je reste en retrait, si ça ne t'embete pas !

green day · Answer

nan  ! nan ! nan ! reviens ici de suite ! :p

 je te laisse faire, et je complètrai au fur et à mesure !

tu verras : tu progresseras bien plus vite ! ;-)

si tu as des questions, n'hésites pas ! je ferai de mon mieux pour y répondre !

;-))

jorginho67 · Answer

ouis, ouais, bien sur !!
j'ai pas voulu dire que je te laissait le " bébé " dans les bras ...

mido2004 · Answer

Bonjour, ComboFix 07-11-19.3 - ws 2007-11-22 16:06:23.1 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.114 [GMT 1:00] Running from: C:\Documents and Settings\ws\Bureau\ComboFix.exe * Created a new restore point . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\dat.txt C:\WINDOWS s.txt C:\WINDOWS\search_res.txt . ((((((((((((((((((((((((((((( Fichiers créés 2007-10-22 to 2007-11-22 )))))))))))))))))))))))))))))))))))) . 2007-11-21 22:27 d-------- C:\Program Files\Navilog1 2007-11-20 20:17 d-------- C:\Program Files\Alwil Software 2007-11-20 20:17 801,144 --a------ C:\WINDOWS\system32\aswBoot.exe 2007-11-20 20:17 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx 2007-11-20 20:17 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr 2007-11-20 20:17 94,416 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys 2007-11-20 20:17 92,848 --a------ C:\WINDOWS\system32\drivers\aswmon.sys 2007-11-20 20:17 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys 2007-11-20 20:17 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys 2007-11-20 20:17 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys 2007-11-20 20:04 d-------- C:\Program Files\Smitfraud fx 2007-11-20 18:52 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe 2007-11-20 18:52 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe 2007-11-20 18:52 51,200 --a------ C:\WINDOWS\system32\dumphive.exe 2007-11-20 18:52 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe 2007-11-20 16:26 319,488 --a------ C:\WINDOWS\popnetnpr.dll 2007-11-20 16:26 278,528 --a------ C:\WINDOWS mvgor.dll 2007-11-20 16:26 188,416 --a------ C:\WINDOWS\jokwmp.dll 2007-11-20 16:26 151,552 --a------ C:\WINDOWS ethop.exe 2007-11-20 10:00 d-------- C:\Documents and Settings\ws\Application Data\Azureus 2007-11-20 10:00 d-------- C:\Documents and Settings\All Users\Application Data\Azureus 2007-11-18 21:26 d-------- C:\Documents and Settings\All Users\Application Data\FLEXnet 2007-11-18 21:12 d-------- C:\Program Files\Bonjour 2007-11-18 20:53 d-------- C:\Program Files\Fichiers communs\Macrovision Shared 2007-11-17 22:41 d-------- C:\Program Files\BitZip 2007-11-17 22:41 d-------- C:\Documents and Settings\ws\Application Data\.BitZip 2007-11-10 00:07 d-------- C:\Documents and Settings\ws\Application Data\Sonic 2007-11-08 08:50 4,692 --a------ C:\WINDOWS\system32 mp.reg 2007-11-08 08:50 0 --a------ C:\WINDOWS\system32 mp.txt 2007-11-07 21:56 d-------- C:\Program Files\Panda Security 2007-11-07 21:56 446,464 --a------ C:\WINDOWS\system32\HHActiveX.dll 2007-11-07 21:34 d-------- C:\Program Files\Nero 2007-11-07 21:34 d-------- C:\Documents and Settings\All Users\Application Data\Nero 2007-11-07 20:32 d-a------ C:\Documents and Settings\All Users\Application Data\TEMP 2007-11-03 00:24 d-------- C:\Documents and Settings\All Users\Application Data\Avg7 2007-10-26 15:15 d-------- C:\Documents and Settings\ws\Application Data\Printer Info Cache 2007-10-26 15:15 d-------- C:\Documents and Settings\ws\Application Data\Image Zone Express 2007-10-24 21:26 d-------- C:\Program Files\Sun 2007-10-24 20:52 68,830,616 --a------ C:\jdk-6u3-windows-i586-p.exe . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-20 19:48 --------- d-----w C:\Program Files\Fichiers communs\Panda Software 2007-11-18 20:09 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2007-11-17 21:47 --------- d-----w C:\Documents and Settings\ws\Application Data\.BitZip 2007-11-17 12:58 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-11-12 20:42 --------- d-----w C:\Program Files\DivX 2007-11-11 14:57 --------- d-----w C:\Program Files\Windows Media Connect 2 2007-11-07 20:37 --------- d-----w C:\Program Files\Fichiers communs\Ahead 2007-11-03 19:41 --------- d-----w C:\Program Files\mIRC 2007-11-02 23:22 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft 2007-10-31 19:42 --------- d-----w C:\Program Files\eMule 2007-10-27 12:24 --------- d-----w C:\Program Files\Hp 2007-10-27 12:23 --------- d-----w C:\Program Files\FOX Video Converter 2007-10-25 16:56 8,510,976 ----a-w C:\WINDOWS\system32\dllcache\shell32.dll 2007-10-24 20:25 --------- d-----w C:\Program Files\Java 2007-10-20 20:38 --------- d-----w C:\Documents and Settings\All Users\Application Data\sentinel 2007-10-20 20:36 --------- d-----w C:\Documents and Settings\All Users\Application Data\Backup 2007-10-20 20:20 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec 2007-10-19 14:55 --------- d-----w C:\Program Files\Speed Video Converter 2007-10-18 17:42 81,920 ----a-w C:\Documents and Settings\ws\Application Data\ezpinst.exe 2007-10-18 17:42 47,360 ----a-w C:\WINDOWS\system32\drivers\pcouffin.sys 2007-10-18 17:42 47,360 ----a-w C:\Documents and Settings\ws\Application Data\pcouffin.sys 2007-10-18 17:42 --------- d-----w C:\Documents and Settings\ws\Application Data\Vso 2007-10-11 16:08 --------- d-----w C:\Program Files\Veoh Networks 2007-10-03 17:53 --------- d-----w C:\Program Files\Xinox Software 2007-10-03 17:52 805 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.INF 2007-10-03 17:52 60,800 ----a-w C:\WINDOWS\system32\S32EVNT1.DLL 2007-10-03 17:52 123,952 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.SYS 2007-10-03 17:52 10,740 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.CAT 2007-10-03 17:52 --------- d-----w C:\Program Files\Symantec 2007-09-29 01:27 208,327 ----a-w C:\panda.exe 2007-09-27 18:50 --------- d-----w C:\Program Files\Fichiers communs\DVDVIDEOSOFT 2007-09-27 18:50 --------- d-----w C:\Program Files\DVDVIDEOSOFT 2007-09-17 18:23 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll 2007-09-17 18:23 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll 2007-09-17 18:22 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll 2007-09-17 18:22 739,840 ----a-w C:\WINDOWS\system32\DivX.dll 2007-09-11 23:14 156,992 ----a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe 2007-07-01 12:52 1,367,553 ----a-w C:\Program Files\mirc621.exe 2007-05-31 18:31 9,516,033 ----a-w C:\Program Files\vlc- media player 0.8.6b-win32.exe 2006-07-11 13:19 0 ---ha-w C:\Documents and Settings\ws\Application Data\wklnhst.dat . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{31E3F653-ED88-4355-B83E-FB263CD355E3}] 2007-11-20 15:33 319488 --a------ C:\WINDOWS\popnetnpr.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 09:00] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24] "Yahoo! Pager"="C:\Program Files\Yahoo!\Messenger\ypager.exe" [] "BitTorrent"="C:\Program Files\BitTorrent\bittorrent.exe" [] "Noun pop"="C:\DOCUME~1\ws\APPLIC~1\ACEMOR~1 rans proxy.exe" [] "Veoh"="C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" [2007-11-13 15:48] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-06-20 20:15] "SoundMAXPnP"="C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-10-14 08:11] "SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" [2004-08-06 07:27] "Apoint"="C:\Program Files\Apoint2K\Apoint.exe" [2005-02-08 17:38] "hpWirelessAssistant"="C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe" [2005-05-04 09:59] "HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 22:12] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2004-10-13 15:04] "LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 12:54] "eabconfg.cpl"="C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe" [2004-12-03 12:24] "Cpqset"="C:\Program Files\HPQ\Default Settings\cpqset.exe" [2005-03-29 13:45] "BearShare"="C:\Program Files\BearShare\BearShare.exe" [] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-08-17 20:24] "BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-05 09:00 C:\WINDOWS\system32\bthprops.cpl] "ISUSPM Startup"="C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 15:50] "ISUSScheduler"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2004-07-27 15:50] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 18:51] "Symantec PIF AlertEng"="C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 17:30] "AGRSMMSG"="AGRSMMSG.exe" [2005-04-13 11:12 C:\WINDOWS\AGRSMMSG.exe] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11] "NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2007-03-01 15:57] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-09-06 12:06] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 09:00] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe [2004-12-21 19:42:30] DSLMON.lnk - C:\Program Files\SAGEM\Topnet SAGEM F@st 800-840\dslmon.exe [2007-08-21 07:35:16] HP Digital Imaging Monitor.lnk - C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe [2005-05-11 22:23:26] WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE [2007-03-14 18:17:04] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] "rmvgor"= {265EC516-9AB2-493E-BFDE-63EFF8AB8FA9} - C:\WINDOWS mvgor.dll [2007-11-20 15:33 278528] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\avldr] avldr.dll S2 IKANLOADER2;General Purpose USB Driver (e4ldr.sys);C:\WINDOWS\system32\Drivers\e4ldr.sys S3 e4usbaw;USB ADSL2 WAN Adapter;C:\WINDOWS\system32\DRIVERS\e4usbaw.sys S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM);C:\WINDOWS\system32\DRIVERS\ss_bus.sys S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter;C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers;C:\WINDOWS\system32\DRIVERS\ss_mdm.sys [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{36dadd01-8de2-11db-8593-0015004fa4b2}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c345c560-85eb-11db-857b-0015004fa4b2}] \Shell\AutoRun\command - E:\RunDll32.exe *Newly Created Service* - CATCHME . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2007-11-22 15:00:07 C:\WINDOWS\Tasks\A4D67031910E18F9.job" - c:\docume~1\ws\applic~1\acemor~1\Aim Pile Great.exe . ************************************************************************** catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-22 16:12:53 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... HKLM\Software\Microsoft\Windows\CurrentVersion\Run Cpqset = C:\Program Files\HPQ\Default Settings\cpqset.exe??????????b????|?`???? ???B?????????????hLC? ?????? scanning hidden files ... ************************************************************************** . Completion time: 2007-11-22 16:14:04 . --- E O F ---

mido2004 · Answer

Bonjour, ComboFix 07-11-19.3 - ws 2007-11-22 16:06:23.1 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.114 [GMT 1:00] Running from: C:\Documents and Settings\ws\Bureau\ComboFix.exe * Created a new restore point . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\dat.txt C:\WINDOWS s.txt C:\WINDOWS\search_res.txt . ((((((((((((((((((((((((((((( Fichiers créés 2007-10-22 to 2007-11-22 )))))))))))))))))))))))))))))))))))) . 2007-11-21 22:27 d-------- C:\Program Files\Navilog1 2007-11-20 20:17 d-------- C:\Program Files\Alwil Software 2007-11-20 20:17 801,144 --a------ C:\WINDOWS\system32\aswBoot.exe 2007-11-20 20:17 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx 2007-11-20 20:17 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr 2007-11-20 20:17 94,416 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys 2007-11-20 20:17 92,848 --a------ C:\WINDOWS\system32\drivers\aswmon.sys 2007-11-20 20:17 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys 2007-11-20 20:17 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys 2007-11-20 20:17 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys 2007-11-20 20:04 d-------- C:\Program Files\Smitfraud fx 2007-11-20 18:52 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe 2007-11-20 18:52 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe 2007-11-20 18:52 51,200 --a------ C:\WINDOWS\system32\dumphive.exe 2007-11-20 18:52 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe 2007-11-20 16:26 319,488 --a------ C:\WINDOWS\popnetnpr.dll 2007-11-20 16:26 278,528 --a------ C:\WINDOWS mvgor.dll 2007-11-20 16:26 188,416 --a------ C:\WINDOWS\jokwmp.dll 2007-11-20 16:26 151,552 --a------ C:\WINDOWS ethop.exe 2007-11-20 10:00 d-------- C:\Documents and Settings\ws\Application Data\Azureus 2007-11-20 10:00 d-------- C:\Documents and Settings\All Users\Application Data\Azureus 2007-11-18 21:26 d-------- C:\Documents and Settings\All Users\Application Data\FLEXnet 2007-11-18 21:12 d-------- C:\Program Files\Bonjour 2007-11-18 20:53 d-------- C:\Program Files\Fichiers communs\Macrovision Shared 2007-11-17 22:41 d-------- C:\Program Files\BitZip 2007-11-17 22:41 d-------- C:\Documents and Settings\ws\Application Data\.BitZip 2007-11-10 00:07 d-------- C:\Documents and Settings\ws\Application Data\Sonic 2007-11-08 08:50 4,692 --a------ C:\WINDOWS\system32 mp.reg 2007-11-08 08:50 0 --a------ C:\WINDOWS\system32 mp.txt 2007-11-07 21:56 d-------- C:\Program Files\Panda Security 2007-11-07 21:56 446,464 --a------ C:\WINDOWS\system32\HHActiveX.dll 2007-11-07 21:34 d-------- C:\Program Files\Nero 2007-11-07 21:34 d-------- C:\Documents and Settings\All Users\Application Data\Nero 2007-11-07 20:32 d-a------ C:\Documents and Settings\All Users\Application Data\TEMP 2007-11-03 00:24 d-------- C:\Documents and Settings\All Users\Application Data\Avg7 2007-10-26 15:15 d-------- C:\Documents and Settings\ws\Application Data\Printer Info Cache 2007-10-26 15:15 d-------- C:\Documents and Settings\ws\Application Data\Image Zone Express 2007-10-24 21:26 d-------- C:\Program Files\Sun 2007-10-24 20:52 68,830,616 --a------ C:\jdk-6u3-windows-i586-p.exe . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-20 19:48 --------- d-----w C:\Program Files\Fichiers communs\Panda Software 2007-11-18 20:09 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2007-11-17 21:47 --------- d-----w C:\Documents and Settings\ws\Application Data\.BitZip 2007-11-17 12:58 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-11-12 20:42 --------- d-----w C:\Program Files\DivX 2007-11-11 14:57 --------- d-----w C:\Program Files\Windows Media Connect 2 2007-11-07 20:37 --------- d-----w C:\Program Files\Fichiers communs\Ahead 2007-11-03 19:41 --------- d-----w C:\Program Files\mIRC 2007-11-02 23:22 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft 2007-10-31 19:42 --------- d-----w C:\Program Files\eMule 2007-10-27 12:24 --------- d-----w C:\Program Files\Hp 2007-10-27 12:23 --------- d-----w C:\Program Files\FOX Video Converter 2007-10-25 16:56 8,510,976 ----a-w C:\WINDOWS\system32\dllcache\shell32.dll 2007-10-24 20:25 --------- d-----w C:\Program Files\Java 2007-10-20 20:38 --------- d-----w C:\Documents and Settings\All Users\Application Data\sentinel 2007-10-20 20:36 --------- d-----w C:\Documents and Settings\All Users\Application Data\Backup 2007-10-20 20:20 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec 2007-10-19 14:55 --------- d-----w C:\Program Files\Speed Video Converter 2007-10-18 17:42 81,920 ----a-w C:\Documents and Settings\ws\Application Data\ezpinst.exe 2007-10-18 17:42 47,360 ----a-w C:\WINDOWS\system32\drivers\pcouffin.sys 2007-10-18 17:42 47,360 ----a-w C:\Documents and Settings\ws\Application Data\pcouffin.sys 2007-10-18 17:42 --------- d-----w C:\Documents and Settings\ws\Application Data\Vso 2007-10-11 16:08 --------- d-----w C:\Program Files\Veoh Networks 2007-10-03 17:53 --------- d-----w C:\Program Files\Xinox Software 2007-10-03 17:52 805 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.INF 2007-10-03 17:52 60,800 ----a-w C:\WINDOWS\system32\S32EVNT1.DLL 2007-10-03 17:52 123,952 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.SYS 2007-10-03 17:52 10,740 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.CAT 2007-10-03 17:52 --------- d-----w C:\Program Files\Symantec 2007-09-29 01:27 208,327 ----a-w C:\panda.exe 2007-09-27 18:50 --------- d-----w C:\Program Files\Fichiers communs\DVDVIDEOSOFT 2007-09-27 18:50 --------- d-----w C:\Program Files\DVDVIDEOSOFT 2007-09-17 18:23 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll 2007-09-17 18:23 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll 2007-09-17 18:22 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll 2007-09-17 18:22 739,840 ----a-w C:\WINDOWS\system32\DivX.dll 2007-09-11 23:14 156,992 ----a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe 2007-07-01 12:52 1,367,553 ----a-w C:\Program Files\mirc621.exe 2007-05-31 18:31 9,516,033 ----a-w C:\Program Files\vlc- media player 0.8.6b-win32.exe 2006-07-11 13:19 0 ---ha-w C:\Documents and Settings\ws\Application Data\wklnhst.dat . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{31E3F653-ED88-4355-B83E-FB263CD355E3}] 2007-11-20 15:33 319488 --a------ C:\WINDOWS\popnetnpr.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 09:00] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24] "Yahoo! Pager"="C:\Program Files\Yahoo!\Messenger\ypager.exe" [] "BitTorrent"="C:\Program Files\BitTorrent\bittorrent.exe" [] "Noun pop"="C:\DOCUME~1\ws\APPLIC~1\ACEMOR~1 rans proxy.exe" [] "Veoh"="C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" [2007-11-13 15:48] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-06-20 20:15] "SoundMAXPnP"="C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-10-14 08:11] "SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" [2004-08-06 07:27] "Apoint"="C:\Program Files\Apoint2K\Apoint.exe" [2005-02-08 17:38] "hpWirelessAssistant"="C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe" [2005-05-04 09:59] "HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 22:12] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2004-10-13 15:04] "LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 12:54] "eabconfg.cpl"="C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe" [2004-12-03 12:24] "Cpqset"="C:\Program Files\HPQ\Default Settings\cpqset.exe" [2005-03-29 13:45] "BearShare"="C:\Program Files\BearShare\BearShare.exe" [] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-08-17 20:24] "BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-05 09:00 C:\WINDOWS\system32\bthprops.cpl] "ISUSPM Startup"="C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 15:50] "ISUSScheduler"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2004-07-27 15:50] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 18:51] "Symantec PIF AlertEng"="C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 17:30] "AGRSMMSG"="AGRSMMSG.exe" [2005-04-13 11:12 C:\WINDOWS\AGRSMMSG.exe] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11] "NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2007-03-01 15:57] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-09-06 12:06] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 09:00] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe [2004-12-21 19:42:30] DSLMON.lnk - C:\Program Files\SAGEM\Topnet SAGEM F@st 800-840\dslmon.exe [2007-08-21 07:35:16] HP Digital Imaging Monitor.lnk - C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe [2005-05-11 22:23:26] WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE [2007-03-14 18:17:04] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] "rmvgor"= {265EC516-9AB2-493E-BFDE-63EFF8AB8FA9} - C:\WINDOWS mvgor.dll [2007-11-20 15:33 278528] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\avldr] avldr.dll S2 IKANLOADER2;General Purpose USB Driver (e4ldr.sys);C:\WINDOWS\system32\Drivers\e4ldr.sys S3 e4usbaw;USB ADSL2 WAN Adapter;C:\WINDOWS\system32\DRIVERS\e4usbaw.sys S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM);C:\WINDOWS\system32\DRIVERS\ss_bus.sys S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter;C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers;C:\WINDOWS\system32\DRIVERS\ss_mdm.sys [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{36dadd01-8de2-11db-8593-0015004fa4b2}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c345c560-85eb-11db-857b-0015004fa4b2}] \Shell\AutoRun\command - E:\RunDll32.exe *Newly Created Service* - CATCHME . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2007-11-22 15:00:07 C:\WINDOWS\Tasks\A4D67031910E18F9.job" - c:\docume~1\ws\applic~1\acemor~1\Aim Pile Great.exe . ************************************************************************** catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-22 16:12:53 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... HKLM\Software\Microsoft\Windows\CurrentVersion\Run Cpqset = C:\Program Files\HPQ\Default Settings\cpqset.exe??????????b????|?`???? ???B?????????????hLC? ?????? scanning hidden files ... ************************************************************************** . Completion time: 2007-11-22 16:14:04 . --- E O F ---

jorginho67 · Answer

salut !
excuse pour le retard .
regarde  ceci  suis la procedure et poste les logs au fur et à mesure stp.

mido2004 · Answer

Bonjour, 
stp dans ccleaner j'ai pas l'icone erreur (j'ai  nettoyeur, registre, outil,option)

jorginho67 · Answer

desinstale le, il se peut que le lien be soit plus bon, fais comme suit
Ccleaner (gratuit)
Téléchargement :
https://www.01net.com/
Tuto :
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

Lors de l’installation, [décoche] l’option qui t’installerait la barre Yahoo !

->Lance CCleaner.

Suppression des fichiers temporaires

Va dans la section "Options" situé dans la marge gauche.
Décoche "Avancé"
Retourne ensuite dans la section "Nettoyeur"
Fais bien attention de cocher toutes ces cases dans la marge gauche (Internet Explorer/Windows Explorer/Système)
• Clique sur [Analyse]
• Patiente le temps du scan, qui peut prendre un peu de temps si c'est la première fois.
• Une fois le scan terminé, clique sur [Lancer le Nettoyage]

mido2004 · Answer

Bonjour, 
le lien que vous m'avez donner ne marche plus mais j'ai essayer ca https://www.01net.com/outils/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/tele32599.html 
et ca la meme chose y a pas erreur

mido2004 · Answer

Bonjour, 
le lien que vous m'avez donner ne marche plus mais j'ai essayer ca https://www.01net.com/outils/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/tele32599.html 
et ca la meme chose y a pas erreur

jorginho67 · Answer

apres l'analyse, " corriger les erreurs "  en bas a droite de la fenetre

mido2004 · Answer

Bonjour, 
voila les deux fichier de ccleaner:

Windows Registry Editor Version 5.00


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\InterVideo\Common\Bin\IVIPromotion.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\USWebUncoated.icc"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\AppleRGB.icc"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\ColorMatchRGB.icc"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\EuroscaleCoated.icc"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\EuroscaleUncoated.icc"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\JapanStandard.icc"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\sRGB Color Space Profile.icm"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\USSheetfedCoated.icc"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\USSheetfedUncoated.icc"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\USWebCoatedSWOP.icc"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\AdobeRGB1998.icc"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Non-Recommended\WideGamutRGB.icc"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Non-Recommended\NTSC1953.icc"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Non-Recommended\PAL_SECAM.icc"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Non-Recommended\SMPTE-C.icc"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Non-Recommended\CIERGB.icc"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Non-Recommended\Photoshop5DefaultCMYK.icc"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Non-Recommended\Photoshop4DefaultCMYK.icc"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\Program Files\Nero\Nero 7\Core\VMPEGEncNDX.dll"=dword:00000001

[HKEY_CLASSES_ROOT\.kys]
@="Photoshop.KYSFile.9"

[HKEY_CLASSES_ROOT\.pdd]
@="Photoshop.PDDFile.9"

[HKEY_CLASSES_ROOT\OISemffile]
@=""

[HKEY_CLASSES_ROOT\OIStiffile]
@=""

[HKEY_CLASSES_ROOT\OISwmffile]
@=""

[HKEY_CLASSES_ROOT\SysmonLogManager.Snapin]

[HKEY_CLASSES_ROOT\VisualSourceSafe]

[HKEY_CLASSES_ROOT\WMPCD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AMR]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AMR\OpenWithList]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bas]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bas\OpenWithList]
"a"="VB6.EXE"
"MRUList"="a"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.class]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.class\OpenWithList]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CTG]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CTG\OpenWithList]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cut]
"Application"="NeroPhotoSnapViewer.Files7.cut"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dds]
"Application"="NeroPhotoSnapViewer.Files7.dds"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.des]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.des\OpenWithList]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.divx]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.divx\OpenWithList]
"a"="ShowTime.exe"
"MRUList"="acb"
"b"="wmplayer.exe"
"c"="vlc.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.divx\OpenWithProgids]
"divxFile"=hex(0):
"NeroShowTime.Files7.divx"=hex(0):
"divx_auto_file"=hex(0):

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.enc]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.enc\OpenWithList]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.frm]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.frm\OpenWithList]
"a"="VB6.EXE"
"MRUList"="a"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.frm\OpenWithProgids]
"VisualBasic.Form"=hex(0):

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff]
"Application"="NeroPhotoSnapViewer.Files7.iff"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jng]
"Application"="NeroPhotoSnapViewer.Files7.jng"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.joboptions]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.joboptions\OpenWithList]
"a"="Acrodist.exe"
"MRUList"="a"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.joboptions\OpenWithProgids]
"AcroDistJobOptions"=hex(0):

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.koa]
"Application"="NeroPhotoSnapViewer.Files7.koa"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kvw]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kvw\OpenWithList]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm]
"Application"="NeroPhotoSnapViewer.Files7.lbm"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ljp]
"Application"="NeroPhotoSnapViewer.Files7.ljp"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MCO]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MCO\OpenWithList]
"a"="iexplore.exe"
"MRUList"="a"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mng]
"Application"="NeroPhotoSnapViewer.Files7.mng"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd]
"Application"="NeroPhotoSnapViewer.Files7.pcd"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx]
"Application"="NeroPhotoSnapViewer.Files7.pcx"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pf]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pf\OpenWithList]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PH]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PH\OpenWithList]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sis]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sis\OpenWithList]
"a"="iexplore.exe"
"MRUList"="a"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.si_]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.si_\OpenWithList]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sqm]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sqm\OpenWithList]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tmp]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tmp\OpenWithList]
"a"="WINWORD.EXE"
"MRUList"="a"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.torrent]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.torrent\OpenWithList]
"a"="iexplore.exe"
"MRUList"="cba"
"b"="vlc.exe"
"c"="Azureus.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.torrent\OpenWithProgids]
"bittorrent"=hex(0):
"Azureus"=hex(0):

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.uha]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.uha\OpenWithList]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.USR]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.USR\OpenWithList]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vbp]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vbp\OpenWithList]
"a"="VB6.EXE"
"MRUList"="a"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vbp\OpenWithProgids]
"VisualBasic.Project"=hex(0):

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vbw]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vbw\OpenWithList]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm]
"Application"="NeroPhotoSnapViewer.Files7.xbm"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlsx]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlsx\OpenWithList]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xtm]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xtm\OpenWithList]
"a"="iexplore.exe"
"MRUList"="a"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\bmp]
"Application"="NeroPhotoSnapViewer.Files7.bmp"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\cut]
"Application"="NeroPhotoSnapViewer.Files7.cut"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\dds]
"Application"="NeroPhotoSnapViewer.Files7.dds"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\dib]
"Application"="NeroPhotoSnapViewer.Files7.dib"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\gif]
"Application"="NeroPhotoSnapViewer.Files7.gif"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\ico]
"Application"="NeroPhotoSnapViewer.Files7.ico"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\iff]
"Application"="NeroPhotoSnapViewer.Files7.iff"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\jfif]
"Application"="NeroPhotoSnapViewer.Files7.jfif"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\jif]
"Application"="NeroPhotoSnapViewer.Files7.jif"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\jng]
"Application"="NeroPhotoSnapViewer.Files7.jng"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\jpe]
"Application"="NeroPhotoSnapViewer.Files7.jpe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\jpeg]
"Application"="NeroPhotoSnapViewer.Files7.jpeg"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\jpg]
"Application"="NeroPhotoSnapViewer.Files7.jpg"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\koa]
"Application"="NeroPhotoSnapViewer.Files7.koa"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\lbm]
"Application"="NeroPhotoSnapViewer.Files7.lbm"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\ljp]
"Application"="NeroPhotoSnapViewer.Files7.ljp"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\mng]
"Application"="NeroPhotoSnapViewer.Files7.mng"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\OpenWithList]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\pbm]
"Application"="NeroPhotoSnapViewer.Files7.pbm"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\pcd]
"Application"="NeroPhotoSnapViewer.Files7.pcd"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\pcx]
"Application"="NeroPhotoSnapViewer.Files7.pcx"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\png]
"Application"="NeroPhotoSnapViewer.Files7.png"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\ppm]
"Application"="NeroPhotoSnapViewer.Files7.ppm"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\psd]
"Application"="NeroPhotoSnapViewer.Files7.psd"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts	ga]
"Application"="NeroPhotoSnapViewer.Files7.tga"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts	if]
"Application"="NeroPhotoSnapViewer.Files7.tif"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts	iff]
"Application"="NeroPhotoSnapViewer.Files7.tiff"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\wbm]
"Application"="NeroPhotoSnapViewer.Files7.wbm"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\wbmp]
"Application"="NeroPhotoSnapViewer.Files7.wbmp"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\wmf]
"Application"="NeroPhotoSnapViewer.Files7.wmf"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\wpg]
"Application"="NeroPhotoSnapViewer.Files7.wpg"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\xbm]
"Application"="NeroPhotoSnapViewer.Files7.xbm"

[HKEY_CLASSES_ROOT\.asp\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,15"

[HKEY_CLASSES_ROOT\.asr\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,41"

[HKEY_CLASSES_ROOT\.pmg\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,45"

[HKEY_CLASSES_ROOT\.qry\shell\open]

[HKEY_CLASSES_ROOT\.qry\shell\open\command]
@="C:\Program Files\Fichiers communs\Microsoft Shared\VBA\msqry32.exe %1"

[HKEY_CLASSES_ROOT\acrobat\DefaultIcon]
@="C:\Program Files\Adobe\Reader 8.0\Acrobat\AcroRd32.exe"

[HKEY_CLASSES_ROOT\ADCS]
@="Conteneur de classe Annuaire"

[HKEY_CLASSES_ROOT\ADCS\CLSID]
@="{89E30300-764D-11d0-B282-00A0C90F56FC}"

[HKEY_CLASSES_ROOT\AudioEffectLibrary.CCOMNSScopeImpl.1]
@="AudioEffectLibrary Object"

[HKEY_CLASSES_ROOT\AudioEffectLibrary.CCOMNSScopeImpl.1\CLSID]
@="{8D126D37-252F-1263-61C3-30BE7FC32FC5}"

[HKEY_CLASSES_ROOT\AudioEffectLibrary.CtorAct.1]
@="AudioEffectLibrary Object"

[HKEY_CLASSES_ROOT\AudioEffectLibrary.CtorAct.1\CLSID]
@="{A03DDBEB-DFFA-FE6F-870C-207C8E7BC38A}"

[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost]

[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost\CLSID]
@="{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}"

[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost.2]
@="Microsoft COM+ Runtime Meta Data"

[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost.2\CLSID]
@="{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}"

[HKEY_CLASSES_ROOT\Connection Manager Profile\DefaultIcon]
@="C:\WINDOWS\system32\CMMGR32.EXE,1"

[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\open]

[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\open\command]
@="C:\WINDOWS\system32\CMMGR32.EXE \"%1\""

[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\Settings...]

[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\Settings...\command]
@="C:\WINDOWS\system32\CMMGR32.EXE /settings \"%1\""

[HKEY_CLASSES_ROOT\dcsfile\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,11"

[HKEY_CLASSES_ROOT\DirectAnimation.PathControl]
@="Microsoft DirectAnimation Path"

[HKEY_CLASSES_ROOT\DirectAnimation.PathControl\CLSID]
@="{D7A7D7C3-D47F-11D0-89D3-00A0C90833E6}"

[HKEY_CLASSES_ROOT\DirectAnimation.Sequence]
@="Microsoft DirectAnimation Sequence"

[HKEY_CLASSES_ROOT\DirectAnimation.Sequence\CLSID]
@="{4F241DB1-EE9F-11D0-9824-006097C99E51}"

[HKEY_CLASSES_ROOT\DirectAnimation.SequencerControl]
@="Microsoft DirectAnimation Sequencer"

[HKEY_CLASSES_ROOT\DirectAnimation.SequencerControl\CLSID]
@="{B0A6BAE2-AAF0-11D0-A152-00A0C908DB96}"

[HKEY_CLASSES_ROOT\DirectAnimation.SpriteControl]
@="Microsoft DirectAnimation Sprite"

[HKEY_CLASSES_ROOT\DirectAnimation.SpriteControl\CLSID]
@="{FD179533-D86E-11D0-89D6-00A0C90833E6}"

[HKEY_CLASSES_ROOT\DirectAnimation.StructuredGraphicsControl]
@="Microsoft DirectAnimation Structured Graphics"

[HKEY_CLASSES_ROOT\DirectAnimation.StructuredGraphicsControl\CLSID]
@="{369303C2-D7AC-11D0-89D5-00A0C90833E6}"

[HKEY_CLASSES_ROOT\DSP.DSP]
@="DSP Class"

[HKEY_CLASSES_ROOT\DSP.DSP\CLSID]
@="{9C123EA9-AEC9-4f75-BBC0-7565FA1398966}"

[HKEY_CLASSES_ROOT\DSP.DSP\CurVer]
@="DSP.DSP.1"

[HKEY_CLASSES_ROOT\DSP.DSPDMOProp_Chorus.1]
@="DSPDMOProp_Chorus Class"

[HKEY_CLASSES_ROOT\DSP.DSPDMOProp_Chorus.1\CLSID]
@="{6F63B172-5543-4593-91CE-EDBA65B9FACDB}"

[HKEY_CLASSES_ROOT\ecsfile\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,10"

[HKEY_CLASSES_ROOT\fcsfile\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,12"

[HKEY_CLASSES_ROOT\Google Earth.etafile\shell\open]

[HKEY_CLASSES_ROOT\Google Earth.etafile\shell\open\command]
@="C:\Program Files\Google\Google Earth Pro\googleearth.exe \"%1\""

[HKEY_CLASSES_ROOT\Google Earth.kmlfile\DefaultIcon]
@="C:\Program Files\Google\Google Earth Pro\kml_file.ico"

[HKEY_CLASSES_ROOT\Google Earth.kmlfile\shell\open]

[HKEY_CLASSES_ROOT\Google Earth.kmlfile\shell\open\command]
@="C:\Program Files\Google\Google Earth Pro\googleearth.exe \"%1\""

[HKEY_CLASSES_ROOT\Google Earth.kmzfile\DefaultIcon]
@="C:\Program Files\Google\Google Earth Pro\kmz_file.ico"

[HKEY_CLASSES_ROOT\Google Earth.kmzfile\shell\open]

[HKEY_CLASSES_ROOT\Google Earth.kmzfile\shell\open\command]
@="C:\Program Files\Google\Google Earth Pro\googleearth.exe \"%1\""

[HKEY_CLASSES_ROOT\iHDPlayer.CiHDPlayer.1]
@="CiHDPlayer Class"

[HKEY_CLASSES_ROOT\iHDPlayer.CiHDPlayer.1\CLSID]
@="702A4E71-DCE4-4db4-B311-8349C7DDB22E}"

[HKEY_CLASSES_ROOT\ImageReady.Application.Workspace\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\ImageReady.exe,7"

[HKEY_CLASSES_ROOT\Magnet\DefaultIcon]
@="C:\Program Files\Azureus\Azureus.exe,0"

[HKEY_CLASSES_ROOT\Magnet\shell\open]

[HKEY_CLASSES_ROOT\Magnet\shell\open\command]
@="\"C:\Program Files\Azureus\Azureus.exe\" \"%1\""

[HKEY_CLASSES_ROOT\MailFileAtt]
@=""

[HKEY_CLASSES_ROOT\MailFileAtt\CLSID]
@="{00020D05-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\mapifvbx.object]
@="MAPIForm object"

[HKEY_CLASSES_ROOT\mapifvbx.object\Clsid]
@="{41116C00-8B90-101B-96CD-00AA003B14FC}"

[HKEY_CLASSES_ROOT\mapifvbx.object.1]
@="MAPIForm object (V 1.0)"

[HKEY_CLASSES_ROOT\mapifvbx.object.1\Clsid]
@="{41116C00-8B90-101B-96CD-00AA003B14FC}"

[HKEY_CLASSES_ROOT\MovieEditor.Document\DefaultIcon]
@="C:\PROGRA~1\Samsung\SAMSUN~1\MOVIEE~1.EXE,0"

[HKEY_CLASSES_ROOT\MovieEditor.Document\shell\open]

[HKEY_CLASSES_ROOT\MovieEditor.Document\shell\open\command]
@="C:\PROGRA~1\Samsung\SAMSUN~1\MOVIEE~1.EXE \"%1\""

[HKEY_CLASSES_ROOT\MovieEditor.Document\shell\print]

[HKEY_CLASSES_ROOT\MovieEditor.Document\shell\print\command]
@="C:\PROGRA~1\Samsung\SAMSUN~1\MOVIEE~1.EXE /p \"%1\""

[HKEY_CLASSES_ROOT\MovieEditor.Document\shell\printto]

[HKEY_CLASSES_ROOT\MovieEditor.Document\shell\printto\command]
@="C:\PROGRA~1\Samsung\SAMSUN~1\MOVIEE~1.EXE /pt \"%1\" \"%2\" \"%3\" \"%4\""

[HKEY_CLASSES_ROOT\msbackupfile\DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6e,00,74,00,\
  62,00,61,00,63,00,6b,00,75,00,70,00,2e,00,65,00,78,00,65,00,2c,00,31,00,30,\
  00,00,00

[HKEY_CLASSES_ROOT\msbackupfile\shell\Open]
@="&Ouvrir"

[HKEY_CLASSES_ROOT\msbackupfile\shell\Open\Command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6e,00,74,00,\
  62,00,61,00,63,00,6b,00,75,00,70,00,2e,00,65,00,78,00,65,00,00,00

[HKEY_CLASSES_ROOT\MSDataReportRuntimeLib.ExportFormat]
@="ExportFormat Object"

[HKEY_CLASSES_ROOT\MSDataReportRuntimeLib.ExportFormat\CLSID]
@="{21D93911-CB0F-11D0-84AC-00A0C90DC8A9}"

[HKEY_CLASSES_ROOT\MSDataReportRuntimeLib.ExportFormat\CurVer]
@="MSDataReportRuntimeLib.ExportFormat.1"

[HKEY_CLASSES_ROOT\MSDataReportRuntimeLib.ExportFormat.1]
@="ExportFormat Object"

[HKEY_CLASSES_ROOT\MSDataReportRuntimeLib.ExportFormat.1\CLSID]
@="{21D93911-CB0F-11D0-84AC-00A0C90DC8A9}"

[HKEY_CLASSES_ROOT\MSDataReportRuntimeLib.ExportFormats]
@="ExportFormats Object"

[HKEY_CLASSES_ROOT\MSDataReportRuntimeLib.ExportFormats\CLSID]
@="{21D93913-CB0F-11D0-84AC-00A0C90DC8A9}"

[HKEY_CLASSES_ROOT\MSDataReportRuntimeLib.ExportFormats\CurVer]
@="MSDataReportRuntimeLib.ExportFormats.1"

[HKEY_CLASSES_ROOT\MSDataReportRuntimeLib.ExportFormats.1]
@="ExportFormats Object"

[HKEY_CLASSES_ROOT\MSDataReportRuntimeLib.ExportFormats.1\CLSID]
@="{21D93913-CB0F-11D0-84AC-00A0C90DC8A9}"

[HKEY_CLASSES_ROOT
csfile\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,14"

[HKEY_CLASSES_ROOT\NMUIEngine.NMUIResourceLoaderHarddisk]
@="NMUIResourceLoaderHarddisk Class"

[HKEY_CLASSES_ROOT\NMUIEngine.NMUIResourceLoaderHarddisk\CLSID]
@="{03DC5606-EA66-4f02-AB52-2065524B03821}"

[HKEY_CLASSES_ROOT\NMUIEngine.NMUIResourceLoaderHarddisk\CurVer]
@="NMUIEngine.NMUIResourceLoaderHarddisk.1"

[HKEY_CLASSES_ROOT\Photoshop.ActionsFile\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,31"

[HKEY_CLASSES_ROOT\Photoshop.ActionsFile\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.ActionsFile\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.AdobePlugin\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,2"

[HKEY_CLASSES_ROOT\Photoshop.AdobePlugin\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.AdobePlugin\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.ArbitraryMapFile\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,13"

[HKEY_CLASSES_ROOT\Photoshop.ArbitraryMapFile\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.ArbitraryMapFile\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.ASVColAdjFile\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,34"

[HKEY_CLASSES_ROOT\Photoshop.ASVColAdjFile\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.ASVColAdjFile\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.AXTAdjColFile\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,32"

[HKEY_CLASSES_ROOT\Photoshop.AXTAdjColFile\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.AXTAdjColFile\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.BrushesFile\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,28"

[HKEY_CLASSES_ROOT\Photoshop.BrushesFile\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.BrushesFile\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.CHAFile\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,39"

[HKEY_CLASSES_ROOT\Photoshop.CHAFile\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.CHAFile\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.CINFile.9\shell\edit]

[HKEY_CLASSES_ROOT\Photoshop.CINFile.9\shell\edit\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.CINFile.9\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.CINFile.9\shell\open\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\" \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.CINFile.9\shell\preview]

[HKEY_CLASSES_ROOT\Photoshop.CINFile.9\shell\preview\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.ColorBooks\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,49"

[HKEY_CLASSES_ROOT\Photoshop.ColorSettings\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,44"

[HKEY_CLASSES_ROOT\Photoshop.ColorTableFile\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,12"

[HKEY_CLASSES_ROOT\Photoshop.ColorTableFile\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.ColorTableFile\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.CurvesFile\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,23"

[HKEY_CLASSES_ROOT\Photoshop.CurvesFile\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.CurvesFile\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.CustomFilterKernel\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,14"

[HKEY_CLASSES_ROOT\Photoshop.CustomFilterKernel\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.CustomFilterKernel\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.CustomShapes\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,7"

[HKEY_CLASSES_ROOT\Photoshop.CustomShapes\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.CustomShapes\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.DuotoneSettingsFile\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,26"

[HKEY_CLASSES_ROOT\Photoshop.DuotoneSettingsFile\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.DuotoneSettingsFile\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.EPSFile.9\shell\edit]

[HKEY_CLASSES_ROOT\Photoshop.EPSFile.9\shell\edit\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.EPSFile.9\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.EPSFile.9\shell\open\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\" \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.EPSFile.9\shell\preview]

[HKEY_CLASSES_ROOT\Photoshop.EPSFile.9\shell\preview\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.FileInfo\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,35"

[HKEY_CLASSES_ROOT\Photoshop.FileInfo\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.FileInfo\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.Gradients\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,38"

[HKEY_CLASSES_ROOT\Photoshop.Gradients\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.Gradients\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.HalftoneScreens\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,17"

[HKEY_CLASSES_ROOT\Photoshop.HalftoneScreens\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.HalftoneScreens\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.HueSatFile\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,25"

[HKEY_CLASSES_ROOT\Photoshop.HueSatFile\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.HueSatFile\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.IRActions\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\ImageReady.exe,6"

[HKEY_CLASSES_ROOT\Photoshop.IRSettings\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\ImageReady.exe,7"

[HKEY_CLASSES_ROOT\Photoshop.LevelsFile\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,24"

[HKEY_CLASSES_ROOT\Photoshop.LevelsFile\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.LevelsFile\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.MonitorSetupFile\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,9"

[HKEY_CLASSES_ROOT\Photoshop.MonitorSetupFile\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.MonitorSetupFile\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.Patterns\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,42"

[HKEY_CLASSES_ROOT\Photoshop.Patterns\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.Patterns\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.PDPFile.9\shell\edit]

[HKEY_CLASSES_ROOT\Photoshop.PDPFile.9\shell\edit\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.PDPFile.9\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.PDPFile.9\shell\open\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\" \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.PDPFile.9\shell\preview]

[HKEY_CLASSES_ROOT\Photoshop.PDPFile.9\shell\preview\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.PICTFile.9\shell\edit]

[HKEY_CLASSES_ROOT\Photoshop.PICTFile.9\shell\edit\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.PICTFile.9\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.PICTFile.9\shell\open\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\" \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.PICTFile.9\shell\preview]

[HKEY_CLASSES_ROOT\Photoshop.PICTFile.9\shell\preview\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.PlugIn\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.PlugIn\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.PNGFile.9\shell\edit]

[HKEY_CLASSES_ROOT\Photoshop.PNGFile.9\shell\edit\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\ImageReady.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.PNGFile.9\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.PNGFile.9\shell\open\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\ImageReady.exe\" \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.PNGFile.9\shell\preview]

[HKEY_CLASSES_ROOT\Photoshop.PNGFile.9\shell\preview\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\ImageReady.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.PreferencesFile\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,10"

[HKEY_CLASSES_ROOT\Photoshop.PreferencesFile\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.PreferencesFile\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.PrintingInksFile\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,22"

[HKEY_CLASSES_ROOT\Photoshop.PrintingInksFile\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.PrintingInksFile\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.ProofSetup\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,20"

[HKEY_CLASSES_ROOT\Photoshop.ProofSetup\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.ProofSetup\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.PSBFile.9\shell\edit]

[HKEY_CLASSES_ROOT\Photoshop.PSBFile.9\shell\edit\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.PSBFile.9\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.PSBFile.9\shell\open\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\" \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.PSBFile.9\shell\preview]

[HKEY_CLASSES_ROOT\Photoshop.PSBFile.9\shell\preview\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.PXRFile.9\shell\edit]

[HKEY_CLASSES_ROOT\Photoshop.PXRFile.9\shell\edit\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.PXRFile.9\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.PXRFile.9\shell\open\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\" \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.PXRFile.9\shell\preview]

[HKEY_CLASSES_ROOT\Photoshop.PXRFile.9\shell\preview\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.RAWFile.9\shell\edit]

[HKEY_CLASSES_ROOT\Photoshop.RAWFile.9\shell\edit\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.RAWFile.9\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.RAWFile.9\shell\open\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\" \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.RAWFile.9\shell\preview]

[HKEY_CLASSES_ROOT\Photoshop.RAWFile.9\shell\preview\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.SCTFile.9\shell\edit]

[HKEY_CLASSES_ROOT\Photoshop.SCTFile.9\shell\edit\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.SCTFile.9\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.SCTFile.9\shell\open\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\" \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.SCTFile.9\shell\preview]

[HKEY_CLASSES_ROOT\Photoshop.SCTFile.9\shell\preview\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.SepTablesFile\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,20"

[HKEY_CLASSES_ROOT\Photoshop.SepTablesFile\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.SepTablesFile\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.ShapeCurves\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,8"

[HKEY_CLASSES_ROOT\Photoshop.ShapeCurves\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.ShapeCurves\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.Styles\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,43"

[HKEY_CLASSES_ROOT\Photoshop.Styles\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.Styles\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.SwatchesFile\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,27"

[HKEY_CLASSES_ROOT\Photoshop.SwatchesFile\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.SwatchesFile\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.TGAFile.9\shell\edit]

[HKEY_CLASSES_ROOT\Photoshop.TGAFile.9\shell\edit\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.TGAFile.9\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.TGAFile.9\shell\open\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\" \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.TGAFile.9\shell\preview]

[HKEY_CLASSES_ROOT\Photoshop.TGAFile.9\shell\preview\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.TIFFFile.9\shell\edit]

[HKEY_CLASSES_ROOT\Photoshop.TIFFFile.9\shell\edit\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.TIFFFile.9\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.TIFFFile.9\shell\open\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\" \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.TIFFFile.9\shell\preview]

[HKEY_CLASSES_ROOT\Photoshop.TIFFFile.9\shell\preview\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.ToolPresets\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,47"

[HKEY_CLASSES_ROOT\Photoshop.TransferFunctionsFile\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,18"

[HKEY_CLASSES_ROOT\Photoshop.TransferFunctionsFile\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.TransferFunctionsFile\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.VariationsFile\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,29"

[HKEY_CLASSES_ROOT\Photoshop.VariationsFile\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.VariationsFile\shell\open\command]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe"

[HKEY_CLASSES_ROOT\Photoshop.WBMFile.9\shell\edit]

[HKEY_CLASSES_ROOT\Photoshop.WBMFile.9\shell\edit\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\ImageReady.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.WBMFile.9\shell\open]

[HKEY_CLASSES_ROOT\Photoshop.WBMFile.9\shell\open\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\ImageReady.exe\" \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.WBMFile.9\shell\preview]

[HKEY_CLASSES_ROOT\Photoshop.WBMFile.9\shell\preview\command]
@="\"C:\Program Files\Adobe\Adobe Photoshop CS2\2\ImageReady.exe\"  \"%1\""

[HKEY_CLASSES_ROOT\Photoshop.XMPFile\DefaultIcon]
@="C:\Program Files\Adobe\Adobe Photoshop CS2\2\Photoshop.exe,48"

[HKEY_CLASSES_ROOT\SymWriter.pdb]
@="Pdb based SymWriter"

[HKEY_CLASSES_ROOT\SymWriter.pdb\CLSID]
@="{520DC67A-752E-11D3-8D56-00C04F680B2B}"

[HKEY_CLASSES_ROOT	csfile\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,13"

[HKEY_CLASSES_ROOT\urn:content-classes:catalog\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,15"

[HKEY_CLASSES_ROOT\urn:content-classes:catalog-settings\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12471"

[HKEY_CLASSES_ROOT\urn:content-classes:contentclassdef\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-13101"

[HKEY_CLASSES_ROOT\urn:content-classes:exchange55startaddress\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12451"

[HKEY_CLASSES_ROOT\urn:content-classes:exchangestartaddress\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12451"

[HKEY_CLASSES_ROOT\urn:content-classes:filestartaddress\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12453"

[HKEY_CLASSES_ROOT\urn:content-classes:management\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,20"

[HKEY_CLASSES_ROOT\urn:content-classes:notesstartaddress\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12456"

[HKEY_CLASSES_ROOT\urn:content-classes:remoteworkspacestartaddress\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12454"

[HKEY_CLASSES_ROOT\urn:content-classes:webstartaddress\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12450"

[HKEY_CLASSES_ROOT\urn:content-classes:wizard/addcontentclass\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-13100"

[HKEY_CLASSES_ROOT\urn:content-classes:wizard/addsearchcontentlocation\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12461"

[HKEY_CLASSES_ROOT\urn:content-classes:workspace-settings\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12472"

[HKEY_CLASSES_ROOT\urn:content-classes:workspaceconfiguration\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12476"

[HKEY_CLASSES_ROOT\urn:content-classes:workspacestartaddress\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,-12454"

[HKEY_CLASSES_ROOT\VobSubFile\shell\subresync]
@="Edit with SubResync"

[HKEY_CLASSES_ROOT\VobSubFile\shell\subresync\command]
@="\"C:\Program Files\Gabest\VobSub\subresync.exe\" \"%1\""

[HKEY_CLASSES_ROOT\wcsfile\DefaultIcon]
@="C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmres.dll,9"

[HKEY_CLASSES_ROOT\ymsgr\shell\open]

[HKEY_CLASSES_ROOT\ymsgr\shell\open\command]
@="C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe %1"

[HKEY_CLASSES_ROOT\zapfile\DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,61,00,70,00,\
  70,00,6d,00,67,00,72,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,32,00,31,00,38,\
  00,00,00

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}]
@="ActiveXPlugin Object"

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\Control]

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\Implemented Categories]

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}]

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\InprocServer32]
@="C:\WINDOWS\system32\plugin.ocx"
%2

mido2004 · Answer

Bonjour, 
c'est le deuxieme fchier
Windows Registry Editor Version 5.00


[HKEY_CLASSES_ROOT\.8ba]
@="Photoshop.PlugIn"

[HKEY_CLASSES_ROOT\.8bc]
@="Photoshop.PlugIn"

[HKEY_CLASSES_ROOT\.8be]
@="Photoshop.PlugIn"

[HKEY_CLASSES_ROOT\.8bf]
@="Photoshop.PlugIn"

[HKEY_CLASSES_ROOT\.8bi]
@="Photoshop.PlugIn"

[HKEY_CLASSES_ROOT\.8bp]
@="Photoshop.PlugIn"

[HKEY_CLASSES_ROOT\.8bs]
@="Photoshop.PlugIn"

[HKEY_CLASSES_ROOT\.8bx]
@="Photoshop.PlugIn"

[HKEY_CLASSES_ROOT\.8by]
@="Photoshop.PlugIn"

[HKEY_CLASSES_ROOT\.8li]
@="Photoshop.PlugIn"

[HKEY_CLASSES_ROOT\.abr]
@="Photoshop.BrushesFile"

[HKEY_CLASSES_ROOT\.acb]
@="Photoshop.ColorBooks"

[HKEY_CLASSES_ROOT\.acf]
@="Photoshop.CustomFilterKernel"

[HKEY_CLASSES_ROOT\.aco]
@="Photoshop.SwatchesFile"

[HKEY_CLASSES_ROOT\.acv]
@="Photoshop.CurvesFile"

[HKEY_CLASSES_ROOT\.ado]
@="Photoshop.DuotoneSettingsFile"

[HKEY_CLASSES_ROOT\.ahs]
@="Photoshop.HalftoneScreens"

[HKEY_CLASSES_ROOT\.ahu]
@="Photoshop.HueSatFile"

[HKEY_CLASSES_ROOT\.alv]
@="Photoshop.LevelsFile"

[HKEY_CLASSES_ROOT\.amp]
@="Photoshop.ArbitraryMapFile"

[HKEY_CLASSES_ROOT\.ams]
@="Photoshop.MonitorSetupFile"

[HKEY_CLASSES_ROOT\.apl]
@="Photoshop.AdobePlugIn"

[HKEY_CLASSES_ROOT\.asl]
@="Photoshop.Styles"

[HKEY_CLASSES_ROOT\.ast]
@="Photoshop.SepTablesFile"

[HKEY_CLASSES_ROOT\.asv]
@="Photoshop.ASVColAdjFile"

[HKEY_CLASSES_ROOT\.atf]
@="Photoshop.TransferFunctionsFile"

[HKEY_CLASSES_ROOT\.atn]
@="Photoshop.ActionsFile"

[HKEY_CLASSES_ROOT\.ava]
@="Photoshop.VariationsFile"

[HKEY_CLASSES_ROOT\.axt]
@="Photoshop.AXTAdjColFile"

[HKEY_CLASSES_ROOT\.csf]
@="Photoshop.ColorSettings"

[HKEY_CLASSES_ROOT\.csh]
@="Photoshop.CustomShapes"

[HKEY_CLASSES_ROOT\.eta]
@="Google Earth.etafile"

[HKEY_CLASSES_ROOT\.ffo]
@="Photoshop.FileInfo"

[HKEY_CLASSES_ROOT\.grd]
@="Photoshop.Gradients"

[HKEY_CLASSES_ROOT\.iros]
@="Photoshop.IRSettings"

[HKEY_CLASSES_ROOT\.irs]
@="Photoshop.IRSettings"

[HKEY_CLASSES_ROOT\.isa]
@="Photoshop.IRActions"

[HKEY_CLASSES_ROOT\.kml]
@="Google Earth.kmlfile"

[HKEY_CLASSES_ROOT\.kmz]
@="Google Earth.kmzfile"

[HKEY_CLASSES_ROOT\.pat]
@="Photoshop.Patterns"

[HKEY_CLASSES_ROOT\.psf]
@="Photoshop.ProofSetup"

[HKEY_CLASSES_ROOT\.psp]
@="Photoshop.PreferencesFile"

[HKEY_CLASSES_ROOT\.shc]
@="Photoshop.ShapeCurves"

[HKEY_CLASSES_ROOT\.tpl]
@="Photoshop.ToolPresets"

[HKEY_CLASSES_ROOT\.wsp]
@="ImageReady.Application.Workspace"

[HKEY_CLASSES_ROOT\.xmp]
@="Photoshop.XMPFile"

mido2004 · Answer

Bonjour, 
j'ai fait la recherche avec avg mais y a pas supprimer y a que ignorer une fois que dois je faire ?

jorginho67 · Answer

c'est que AVG ne peut pas supprimer tes infections 

Clique sur ce lien :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
pour télécharger navilog1.exe.
Choisis Enregistrer
et enregistre-le sur ton bureau.

Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

Patiente jusqu'au message :
*** Analyse Termine le ..... ***
Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
Copie-colle l'intégralité du rapport dans ta réponse. Referme le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

Poste un nouveau rapport Hijackthis

green day · Answer

Salut

 poste aussi le rapport d'avg !!

++

Virus : barre au dessus de la page internet

26 réponses

Votre réponse

Discussions similaires

Newsletters