Virus methode préliminaire de désnfection

Fermé

aliepeet Messages postés 27 Date d'inscription lundi 9 juin 2008 Statut Membre Dernière intervention 17 juillet 2010 - 9 juin 2008 à 03:16
^^Marie^^ Messages postés 113901 Date d'inscription mardi 6 septembre 2005 Statut Membre Dernière intervention 28 août 2020 - 11 juin 2008 à 07:47

Bonjour,

Je viens sur ce site depuis longtps, j'ai beaucoup de problemes sur mon ordi,et je vais en prendre un autre en septembre, mais j'aimerais me débarasser de tous mes virus, spyware, trojans...et lorque je suis allée sur cette page:
http://www.commentcamarche.net/faq/sujet 3174 virus methode preliminaire de desinfection version fr
J'ai effectué toute la marche à suivre et je dois donc afficher le resultat des scans..Mais j'ai un peu peur de balancer çà sur le forum?Est-ce que je dois supprimer les logiciels utilisés pour ces tests?
Y a t il un risqueau niveau confidentialité?

Merci de me répondre!

Alieet

NB: ordi portable HP de 2005, systeme d'expl. = XP

A voir également:

Virus methode préliminaire de désnfection
Youtu.be virus - Accueil - Guide virus
Svchost.exe virus - Guide
Faux message virus ordinateur - Accueil - Arnaque
Tinyurl.com virus - Forum Virus
Virus mcafee - Accueil - Piratage

7 réponses

Réponse 1 / 7

^^Marie^^ Messages postés 113901 Date d'inscription mardi 6 septembre 2005 Statut Membre Dernière intervention 28 août 2020 3 275
9 juin 2008 à 20:12

Bonsoir

C 'est tout ?
http://www.commentcamarche.net/faq/sujet 3174 virus methode preliminaire de desinfection version fr

Fait
Cleaner
AVG ► poste le rapport
Hijacthis ► poste le rapport

aliepeet Messages postés 27 Date d'inscription lundi 9 juin 2008 Statut Membre Dernière intervention 17 juillet 2010
10 juin 2008 à 16:37

BONJOUR!

Je t'envoie le rapport hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:47:32, on 09/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\WINDOWS\system32\hphmon05.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\Program Files\TF1Vision\TF1vision.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\VAV\vav.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Documents and Settings\Internet et MSN\Local Settings\Temporary Internet Files\Content.IE5\7VHLSKV2\install_3968_MXw1fHx8fHx8fA_[1].exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/ymj/*http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.oracle.com/sun/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HP Software Update] "c:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
O4 - HKLM\..\Run: [e-TF1] C:\Program Files\TF1Vision\TF1vision.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Antivirus] C:\Program Files\VAV\vav.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [BM2596996e] Rundll32.exe "C:\WINDOWS\system32\monsqngu.dll",s
O4 - HKLM\..\Run: [26a5aaf2] rundll32.exe "C:\WINDOWS\system32\gqmbkxfn.dll",b
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Antivirus] C:\Program Files\VAV\vav.exe
O4 - HKCU\..\Run: [Windows update loader] C:\Windows\xpupdate.exe
O4 - HKCU\..\Run: [TheSpyBot] C:\Program Files\TheSpyBot\TheSpyBot.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: DW_Start.lnk = C:\WINDOWS\system32\jnwnw64l.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www8.hp.com/fr/fr/home.html
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://www.m6video.fr/1click/install/files/installer2.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by104w.bay104.mail.live.com/mail/resources/MsnPUpld.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{E84A4C7F-7E4C-4947-92C3-0B6DBFAEE94B}: NameServer = 194.49.160.1,195.154.209.1
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Unknown owner - C:\Program Files\Sygate\SPF\smc.exe (file missing)
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

aliepeet Messages postés 27 Date d'inscription lundi 9 juin 2008 Statut Membre Dernière intervention 17 juillet 2010
10 juin 2008 à 22:32

suite de la réponse je te reposte le rapport ccleaner qui n'est pas passé en entier je crois...

NETTOYAGE COMPLET - (32.520 secs)
------------------------------------------------------------------------------------------
27,3MB supprimés.
------------------------------------------------------------------------------------------

Détails des fichiers effacés
------------------------------------------------------------------------------------------
Fichiers Temporaires d'Internet Explorer (fichiers 1514) 25,7MB
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@rad.msn[2].txt 680 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@82.98.235[7].txt 70 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@affiliates.nexpartner[2].txt 293 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@67.205.95[3].txt 438 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@vlaze[2].txt 434 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@85.17.166[3].txt 166 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@scanner.vav-scanner[3].txt 170 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@speedbit[2].txt 270 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@live[3].txt 514 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@www.dailymotion[1].txt 75 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@adstronic[1].txt 125 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@64.22.123[2].txt 106 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@ads.react2media[3].txt 340 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@windowsmarketplace[3].txt 263 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@em.gad-network[3].txt 159 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@ads.vlaze[1].txt 105 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@fr.msn[2].txt 563 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@banner.cotedazurpalace[3].txt 290 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@adnetserver[3].txt 332 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@85.12.43[3].txt 273 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@login.live[3].txt 181 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@82.98.235[8].txt 70 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@detoxitnow[1].txt 78 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@em.pc-on-internet[2].txt 75 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@google[3].txt 135 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@82.98.235[5].txt 98 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@msn[4].txt 345 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@thespybotpromo[2].txt 78 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@scanner.shredderscan[1].txt 253 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@web-mediaplayer[2].txt 279 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@www.smooki[1].txt 101 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@zune[3].txt 235 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@www.primecasino[2].txt 77 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@xiti[2].txt 107 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@adtrgt[5].txt 1,23KB
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@sdv[1].txt 243 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@quantserve[3].txt 199 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@cotedazurpalace[3].txt 474 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@www.web-mediaplayer[2].txt 121 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@commentcamarche[4].txt 118 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@www.checkmystats.com[3].txt 226 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@83.149.75[1].txt 69 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@media6degrees[2].txt 121 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@85.12.43[2].txt 100 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@ooshop[1].txt 111 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@srv1.e-statistic[2].txt 87 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@c.live[1].txt 74 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@89.188.16[3].txt 69 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@splendor-casino[1].txt 78 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@dailymotion[2].txt 253 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@89.188.16[7].txt 69 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@rad.live[3].txt 700 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@www.windowslive[1].txt 82 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@software-traffic[3].txt 89 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@p.live[2].txt 104 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@82.98.235[6].txt 76 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@yahoo[3].txt 166 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@ad.zanox[1].txt 258 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@msn[3].txt 432 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@analytics.gameforge[5].txt 95 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@89.188.16[8].txt 67 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@google[2].txt 136 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@32vegas[1].txt 138 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@3suisses[2].txt 272 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@67.205.95[1].txt 312 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@82.98.235[1].txt 233 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@82.98.235[2].txt 98 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@82.98.235[3].txt 167 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@82.98.235[4].txt 76 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@83.149.75[2].txt 68 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@85.12.43[1].txt 101 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@85.17.166[1].txt 168 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@89.188.16[1].txt 69 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@89.188.16[2].txt 159 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@89.188.16[4].txt 163 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@89.188.16[5].txt 234 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@89.188.16[6].txt 261 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@adnetserver[2].txt 329 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@ads.react2media[2].txt 398 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@adtrgt[1].txt 945 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@adtrgt[2].txt 945 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@adtrgt[4].txt 906 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@adultfriendfinder[1].txt 494 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@affiliates.digitalriver[2].txt 279 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@analytics.gameforge[1].txt 402 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@analytics.gameforge[2].txt 95 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@analytics.gameforge[4].txt 499 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@apmebf[1].txt 176 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@banner.32vegas[2].txt 228 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@banner.cotedazurpalace[2].txt 207 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@bitdefender.eptimum[1].txt 109 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@bitdefender[2].txt 135 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@bountycpa[1].txt 342 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@cc-dt[1].txt 109 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@commentcamarche[2].txt 119 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@commentcamarche[3].txt 119 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@cotedazurpalace[1].txt 114 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@crwdcntrl[2].txt 457 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@dailymotion[1].txt 269 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@eas.apm.emediate[2].txt 188 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@edt02[1].txt 516 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@element5[1].txt 89 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@em.gad-network[1].txt 226 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@em.pc-on-internet[1].txt 84 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@emjcd[1].txt 174 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@eurosport[1].txt 177 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@expedia[1].txt 292 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@fr.f1-live[4].txt 263 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@go.gratisnetwork[2].txt 84 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@google[1].txt 129 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@h.live[1].txt 69 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@imgfarm[1].txt 72 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@linksynergy[2].txt 109 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@live.f1-live[1].txt 268 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@live[1].txt 509 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@live[2].txt 512 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@login.live[2].txt 181 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@msn[1].txt 338 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@nbjmp[2].txt 359 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@netfinanceconsult[1].txt 108 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@offers.gratisnetwork[2].txt 412 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@p.live[1].txt 104 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@perfspot[1].txt 525 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@perfspot[2].txt 387 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@primecasino[1].txt 345 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@primecasino[2].txt 268 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@quantserve[2].txt 203 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@rad.live[2].txt 700 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@s2d6[2].txt 110 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@scanner.privacy-watcher[2].txt 177 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@scanner.shredderscan[2].txt 162 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@scanner.shredderscan[3].txt 256 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@scanner.vav-scanner[1].txt 260 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@sdv[2].txt 481 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@shareit[2].txt 88 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@software-traffic[1].txt 86 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@speedbit[1].txt 267 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@srv1.e-statistic[1].txt 173 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@tagheuer[1].txt 272 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@tf1[2].txt 359 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@thespybotpromo[1].txt 76 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@vip.f1-live[2].txt 204 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@vip.f1-live[3].txt 329 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@web-mediaplayer[1].txt 326 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@webfetti[1].txt 353 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@website[2].txt 632 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@windowsmarketplace[1].txt 262 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@windowsmarketplace[2].txt 263 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@www.checkmystats.com[2].txt 231 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@www.dailymotion[2].txt 132 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@www.engineseeker[2].txt 199 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@www.jackpotmadness[1].txt 124 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@www.primecasino[1].txt 79 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@www.primosearch[1].txt 138 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@www.rgjmp[1].txt 429 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@www.trendsecure[1].txt 153 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@www.web-mediaplayer[1].txt 129 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@xiti[1].txt 106 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@yahoo[2].txt 162 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@youtube[1].txt 347 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@zune[2].txt 235 bytes
Marqué pour l'effacement: C:\Documents and Settings\Internet et MSN\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Marqué pour l'effacement: C:\Documents and Settings\Internet et MSN\Cookies\index.dat
Marqué pour l'effacement: C:\Documents and Settings\Internet et MSN\Local Settings\Historique\History.IE5\desktop.ini
Marqué pour l'effacement: C:\Documents and Settings\Internet et MSN\Local Settings\Historique\History.IE5\index.dat
C:\Documents and Settings\Internet et MSN\Recent\BTS AS formation.lnk 357 bytes
C:\Documents and Settings\Internet et MSN\Recent\Candidature BTS banque.lnk 542 bytes
C:\Documents and Settings\Internet et MSN\Recent\CV.lnk 405 bytes
C:\Documents and Settings\Internet et MSN\Recent\hijackthis scan.lnk 614 bytes
C:\Documents and Settings\Internet et MSN\Recent\USB.lnk 312 bytes
Poubelle vidée (4 fichiers) 1,50MB
C:\WINDOWS\TEMP\Perflib_Perfdata_8c.dat 16,00KB
C:\Documents and Settings\Internet et MSN\Local Settings\Temp\D653F3EC.TMP 127 bytes
C:\WINDOWS\system32\wbem\Logs\FrameWork.log 780 bytes
C:\WINDOWS\system32\wbem\Logs\wbemess.log 7,18KB
C:\WINDOWS\system32\wbem\Logs\wmiprov.log 201 bytes
C:\WINDOWS\0.log 0 bytes
C:\WINDOWS\comsetup.log 2,26KB
C:\WINDOWS\FaxSetup.log 6,63KB
C:\WINDOWS\iis6.log 986 bytes
C:\WINDOWS\imsins.log 1,85KB
C:\WINDOWS\msgsocm.log 479 bytes
C:\WINDOWS\ntdtcsetup.log 1,56KB
C:\WINDOWS\ocgen.log 5,59KB
C:\WINDOWS\ocmsn.log 469 bytes
C:\WINDOWS\setupact.log 0 bytes
C:\WINDOWS\setupapi.log 10,26KB
C:\WINDOWS\setuperr.log 0 bytes
C:\WINDOWS\tsoc.log 3,83KB
C:\WINDOWS\WindowsUpdate.log 3,56KB
C:\Documents and Settings\Internet et MSN\Application Data\Microsoft\Office\Recent\CV.lnk 377 bytes
C:\Documents and Settings\Internet et MSN\Application Data\Microsoft\Office\Recent\Desktop.ini 95 bytes
C:\Documents and Settings\Internet et MSN\Application Data\Microsoft\Office\Recent\index.dat 81 bytes
C:\Documents and Settings\Internet et MSN\Application Data\Microsoft\Office\Recent\Mes documents.lnk 665 bytes
C:\Documents and Settings\Internet et MSN\Application Data\Microsoft\Office\Recent\sexy nouvelle.lnk 805 bytes
C:\Documents and Settings\Internet et MSN\Application Data\Microsoft\Office\Recent\USB.lnk 312 bytes
C:\Documents and Settings\Internet et MSN\Application Data\Google\Local Search History\google%2Eweb.w 240 bytes
C:\Documents and Settings\Internet et MSN\Application Data\Macromedia\Flash Player\#SharedObjects\T69PEYWD\www.dailymotion.com\flash\dmplayer\dmplayer-fr.swf\dmplayer.sol 89 bytes
C:\Documents and Settings\Internet et MSN\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.dailymotion.com\settings.sol 89 bytes
C:\Documents and Settings\Internet et MSN\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol 442 bytes
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\logfile.txt 560 bytes
------------------------------------------------------------------------------------------
ensuite le rapport hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:31:39, on 10/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\WINDOWS\system32\hphmon05.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\Program Files\TF1Vision\TF1vision.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/ymj/*http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.oracle.com/sun/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HP Software Update] "c:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
O4 - HKLM\..\Run: [e-TF1] C:\Program Files\TF1Vision\TF1vision.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [BM2596996e] Rundll32.exe "C:\WINDOWS\system32\monsqngu.dll",s
O4 - HKLM\..\Run: [26a5aaf2] rundll32.exe "C:\WINDOWS\system32\dhffudxu.dll",b
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Windows update loader] C:\Windows\xpupdate.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: DW_Start.lnk = C:\WINDOWS\system32\jnwnw64l.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www8.hp.com/fr/fr/home.html
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} - http://www.m6video.fr/1click/install/files/installer2.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by104w.bay104.mail.live.com/mail/resources/MsnPUpld.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{E84A4C7F-7E4C-4947-92C3-0B6DBFAEE94B}: NameServer = 194.49.160.1,195.154.209.1
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Unknown owner - C:\Program Files\Sygate\SPF\smc.exe (file missing)
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

Réponse 2 / 7

hacked62 Messages postés 96 Date d'inscription samedi 7 juin 2008 Statut Membre Dernière intervention 9 juillet 2008 5
9 juin 2008 à 03:18

OUI

avec les virus il y a toujour des rique de confidentialiter ....

je te propose comme je le propose a tout lmonde efface tout c'est dob d'anti virus et telecharge

"nod32" ou encore "avast" voila

fait un scan avec 1 de c'est 2 anti virus et la tu sera plus trankille ....

hacked

aliepeet Messages postés 27 Date d'inscription lundi 9 juin 2008 Statut Membre Dernière intervention 17 juillet 2010
9 juin 2008 à 03:36

J'ai déjà avast, mais j'ai quand même des virus, ou je ne sais quoi d'autre...L'ordi est ralenti, des pubs pr différents anti-virus apparaissent et stop le travail en cours en proposant des analyses, windows me dit que mes informations ne sont pas protégées..etc
il a buggé deux fi c'est grâce aux restaurations que je l'ai sauvé...Là encore en écrivant, il y a plein de lettres qui ne passent pas quand je les tape!!Mais si je publie mes rapports de scans, quelqu'un peut m'aider?

Réponse 3 / 7

Utilisateur anonyme
9 juin 2008 à 03:49

salut

oui on est là pour ça ^^ t'en fais pas

bises

hacked62 Messages postés 96 Date d'inscription samedi 7 juin 2008 Statut Membre Dernière intervention 9 juillet 2008 5
9 juin 2008 à 04:32

FORMATAGE

formate ton pc et la croi moi qui'il va reprendre un bon cou de jeune le monstre ;)

je ne vois que cette solution les virus on du henvahir ton sys 32

erff sale ....

voial formate mais tout se que tu ve garder sur un dd exetrn ou une cle usb ou encore grave les ...

c'est la meilleur sollution =)

aliepeet Messages postés 27 Date d'inscription lundi 9 juin 2008 Statut Membre Dernière intervention 17 juillet 2010 > hacked62 Messages postés 96 Date d'inscription samedi 7 juin 2008 Statut Membre Dernière intervention 9 juillet 2008
9 juin 2008 à 15:02

Bonjour tous!

Je voulais savoir si je peux envoyer mes rapports de scan sur le forum pour que vous m'aidiez à comrendre ce qui ne va pas sur mon ordi??
Avast n'arrête pas d'intervenir à propos de virus ou cheval de troie dans le dossier "Win 32", de plus, jai accepté de télécharger un module de l'antivirus vista 2008, depuis il y a une fentre qui n'arrête pas de s'ouvrir, il me dit qu'il y a une attaque detecté, propose un scan, et ue fois le scan finit, pour le supprimer, il fo bien évidement acheter une licence...Qd je vais dans ajout ou suppr de programme, je ne trouve pas l'antivirus vista, donc je ne peux pas le supprimer!!
Quelqu'un peut m'aider?Sinon, il y a plein de lettres qui ne passent pas sur mon clavier...
Et je narrive pas a activer adaware et ses mises à jour

J'en ai marre!Les ordis sont censés nous simplifier la vie mais en fait c'est une vraie prise de tête!

Réponse 4 / 7

^^Marie^^ Messages postés 113901 Date d'inscription mardi 6 septembre 2005 Statut Membre Dernière intervention 28 août 2020 3 275
9 juin 2008 à 15:23

salut

Je voulais savoir si je peux envoyer mes rapports de scan sur le forum pour que vous m'aidiez à comrendre ce qui ne va pas sur mon ordi??

Envoie els rapports STP

aliepeet Messages postés 27 Date d'inscription lundi 9 juin 2008 Statut Membre Dernière intervention 17 juillet 2010
9 juin 2008 à 15:31

coucou marie

je les ai envoyé sur le forum

merci
bises

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question

Réponse 5 / 7

^^Marie^^ Messages postés 113901 Date d'inscription mardi 6 septembre 2005 Statut Membre Dernière intervention 28 août 2020 3 275
9 juin 2008 à 15:49

Copie les ici...

Je ferme les autres

aliepeet Messages postés 27 Date d'inscription lundi 9 juin 2008 Statut Membre Dernière intervention 17 juillet 2010
9 juin 2008 à 16:18

ok voici:

Bonjour,
J'envois mes trois rapports comme indiqué dans la methode préliminaire:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\HPQ\\Safety and Comfort Guide\\PchCabInstall.vbs"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\HPQ\\Safety and Comfort Guide\\ahpregw.cab"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\system32\\MSIMRT.DLL"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\system32\\DIMM.DLL"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\system32\\QTPlugin.OCX"=dword:000003e6

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\Microsoft.NET\\Framework\\v2.0.50727\\ndpsetup.ico"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\system32\\msxml3a.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Documents and Settings\\All Users\\Application Data\\YAHOO\\YMP\\LabelLic.xml"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\System32\\NeroCheck.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\Aiff.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\DefConvertor.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\msa.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\Vqf.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\wav.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\Lib\\DriveLocker.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\Lib\\NeroCBUI.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\DSFilter\\NeFileSrc.ax"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\DSFilter\\NeRender.ax"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\system32\\ImagX7.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\Lib\\apreg.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\DSFilter\\NeAudio.ax"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\DSFilter\\NeAMR.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\DSFilter\\NeVideo.ax"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\Aac.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\aacenc32.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\DSFilter\\NDParser.ax"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\DSFilter\\NeQTDec.ax"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\DSFilter\\aacplus.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\Lib\\AdvrCntr.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\Lib\\NeroIPP.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\ogg.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\CoverDesigner\\Templates\\Data.nct"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\CoverDesigner\\LSTemplates\\Audio_Content.nct"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\CoverDesigner\\covered-deu.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\CoverDesigner\\covered-jpn.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\CoverDesigner\\CoverEdCtrl.ocx"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\system32\\TwnLib20.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\CoverDesigner\\CoverDes.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\Nero BackItUp\\BackItUp.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\Nero BackItUp\\BackItUp-Deu.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\Nero StartSmart\\NeroStartSmart.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\WMPBurn\\WMPBurn.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\Nero BackItUp\\BackItUp-Jpn.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\mp3PP.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\mp3PRO.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\lame_enc.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"c:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\Microsoft.Vsa.Vb.CodeDOMProcessor.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"c:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\mscoree.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"c:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\mscorlib.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"c:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\System.Drawing.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"c:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\System.EnterpriseServices.tlb";=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"c:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\Microsoft.Vsa.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"c:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\Microsoft.JScript.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"c:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\System.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"c:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\System.Windows.Forms.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Documents and Settings\\All Users\\Application Data\\Adobe\\Photoshop Album\\Catalogues\\My Catalog.psa"=dword:00000001

[HKEY_CLASSES_ROOT\.7z]

[HKEY_CLASSES_ROOT\.ace]

[HKEY_CLASSES_ROOT\.arj]

[HKEY_CLASSES_ROOT\.bz]

[HKEY_CLASSES_ROOT\.bz2]

[HKEY_CLASSES_ROOT\.ids]

[HKEY_CLASSES_ROOT\.iso]

[HKEY_CLASSES_ROOT\.lha]

[HKEY_CLASSES_ROOT\.lzh]

[HKEY_CLASSES_ROOT\.mst]

[HKEY_CLASSES_ROOT\.taz]

[HKEY_CLASSES_ROOT\.tbz]

[HKEY_CLASSES_ROOT\.tbz2]

[HKEY_CLASSES_ROOT\.uu]

[HKEY_CLASSES_ROOT\.uue]

[HKEY_CLASSES_ROOT\.vfo]

[HKEY_CLASSES_ROOT\.vfs]

[HKEY_CLASSES_ROOT\.xxe]

[HKEY_CLASSES_ROOT\ATLPlugin.ATL3DShapeSphere=]

[HKEY_CLASSES_ROOT\FMObex.Semc.FMObjectProperties=]

[HKEY_CLASSES_ROOT\FMObexServer.Sony]

[HKEY_CLASSES_ROOT\ObexAuthenticationServiceDll.Sony]

[HKEY_CLASSES_ROOT\ObexOperationDll.Sony]

[HKEY_CLASSES_ROOT\OISbmpfile]

[HKEY_CLASSES_ROOT\OISemffile]

[HKEY_CLASSES_ROOT\OISgiffile]

[HKEY_CLASSES_ROOT\OISpngfile]

[HKEY_CLASSES_ROOT\OIStiffile]

[HKEY_CLASSES_ROOT\OISwmffile]

[HKEY_CLASSES_ROOT\PclePlayout.PlayoutFactoryHAL=]

[HKEY_CLASSES_ROOT\s]

[HKEY_CLASSES_ROOT\WMPCD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\OpenWithList]

[HKEY_CLASSES_ROOT\acrobat\DefaultIcon]

[HKEY_CLASSES_ROOT\AcroExch.Lang\DefaultIcon]

[HKEY_CLASSES_ROOT\ADCS]

[HKEY_CLASSES_ROOT\ADCS\CLSID]

[HKEY_CLASSES_ROOT\ATLPlugin.ATL3DPage_d2.1]

[HKEY_CLASSES_ROOT\ATLPlugin.ATL3DPage_d2.1\CLSID]

[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost]

[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost\CLSID]

[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost.2]

[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost.2\CLSID]

[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\Settings...]

[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\Settings...\command]

[HKEY_CLASSES_ROOT\dcsfile\DefaultIcon]

[HKEY_CLASSES_ROOT\dip_auto_file\DefaultIcon]

[HKEY_CLASSES_ROOT\dip_auto_file\shell\open]

[HKEY_CLASSES_ROOT\dip_auto_file\shell\open\command]

[HKEY_CLASSES_ROOT\DirectAnimation.PathControl]

[HKEY_CLASSES_ROOT\DirectAnimation.PathControl\CLSID]

[HKEY_CLASSES_ROOT\DirectAnimation.Sequence]

[HKEY_CLASSES_ROOT\DirectAnimation.Sequence\CLSID]

[HKEY_CLASSES_ROOT\DirectAnimation.SequencerControl]

[HKEY_CLASSES_ROOT\DirectAnimation.SequencerControl\CLSID]

[HKEY_CLASSES_ROOT\DirectAnimation.SpriteControl]

[HKEY_CLASSES_ROOT\DirectAnimation.SpriteControl\CLSID]

[HKEY_CLASSES_ROOT\DirectAnimation.StructuredGraphicsControl]

[HKEY_CLASSES_ROOT\DirectAnimation.StructuredGraphicsControl\CLSID]

[HKEY_CLASSES_ROOT\Dossier deJascPaintShopPhotoAlbum5\shell\BurnCD]

[HKEY_CLASSES_ROOT\Dossier deJascPaintShopPhotoAlbum5\shell\BurnCD\command]

[HKEY_CLASSES_ROOT\ecsfile\DefaultIcon]

[HKEY_CLASSES_ROOT\ed2k\DefaultIcon]

[HKEY_CLASSES_ROOT\ed2k\shell\open]

[HKEY_CLASSES_ROOT\ed2k\shell\open\command]

[HKEY_CLASSES_ROOT\eMule\DefaultIcon]

[HKEY_CLASSES_ROOT\eMule\shell\open]

[HKEY_CLASSES_ROOT\eMule\shell\open\command]

[HKEY_CLASSES_ROOT\fcsfile\DefaultIcon]

[HKEY_CLASSES_ROOT\GEOVIEW.BMARC]

[HKEY_CLASSES_ROOT\GEOVIEW.BMARC\CLSID]

[HKEY_CLASSES_ROOT\GEOVIEW.BMAREA]

[HKEY_CLASSES_ROOT\GEOVIEW.BMAREA\CLSID]

[HKEY_CLASSES_ROOT\GEOVIEW.BMCIRCLE]

[HKEY_CLASSES_ROOT\GEOVIEW.BMCIRCLE\CLSID]

[HKEY_CLASSES_ROOT\GEOVIEW.BMCOORDSYSTEM]

[HKEY_CLASSES_ROOT\GEOVIEW.BMCOORDSYSTEM\CLSID]

[HKEY_CLASSES_ROOT\GEOVIEW.BMLAYER]

[HKEY_CLASSES_ROOT\GEOVIEW.BMLAYER\CLSID]

[HKEY_CLASSES_ROOT\GEOVIEW.BMLINE]

[HKEY_CLASSES_ROOT\GEOVIEW.BMLINE\CLSID]

[HKEY_CLASSES_ROOT\GEOVIEW.BMOBJECT]

[HKEY_CLASSES_ROOT\GEOVIEW.BMOBJECT\CLSID]

[HKEY_CLASSES_ROOT\GEOVIEW.BMPOINT]

[HKEY_CLASSES_ROOT\GEOVIEW.BMPOINT\CLSID]

[HKEY_CLASSES_ROOT\GEOVIEW.BMPOLYARC]

[HKEY_CLASSES_ROOT\GEOVIEW.BMPOLYARC\CLSID]

[HKEY_CLASSES_ROOT\GEOVIEW.BMPOLYGON]

[HKEY_CLASSES_ROOT\GEOVIEW.BMPOLYGON\CLSID]

[HKEY_CLASSES_ROOT\GEOVIEW.BMPOLYLINE]

[HKEY_CLASSES_ROOT\GEOVIEW.BMPOLYLINE\CLSID]

[HKEY_CLASSES_ROOT\GEOVIEW.BMPOLYPOLYGON]

[HKEY_CLASSES_ROOT\GEOVIEW.BMPOLYPOLYGON\CLSID]

[HKEY_CLASSES_ROOT\GEOVIEW.BMPOLYPOLYLINE]

[HKEY_CLASSES_ROOT\GEOVIEW.BMPOLYPOLYLINE\CLSID]

[HKEY_CLASSES_ROOT\GEOVIEW.BMPTXY]

[HKEY_CLASSES_ROOT\GEOVIEW.BMPTXY\CLSID]

[HKEY_CLASSES_ROOT\GEOVIEW.BMTEXT]

[HKEY_CLASSES_ROOT\GEOVIEW.BMTEXT\CLSID]

[HKEY_CLASSES_ROOT\GEOVIEW.BMWINRECT]

[HKEY_CLASSES_ROOT\GEOVIEW.BMWINRECT\CLSID]

[HKEY_CLASSES_ROOT\Google Earth.etafile\DefaultIcon]

[HKEY_CLASSES_ROOT\Google Earth.etafile\shell\open]

[HKEY_CLASSES_ROOT\Google Earth.etafile\shell\open\command]

[HKEY_CLASSES_ROOT\Google Earth.kmlfile\DefaultIcon]

[HKEY_CLASSES_ROOT\Google Earth.kmlfile\shell\open]

[HKEY_CLASSES_ROOT\Google Earth.kmlfile\shell\open\command]

[HKEY_CLASSES_ROOT\Google Earth.kmzfile\DefaultIcon]

[HKEY_CLASSES_ROOT\Google Earth.kmzfile\shell\open]

[HKEY_CLASSES_ROOT\Google Earth.kmzfile\shell\open\command]

[HKEY_CLASSES_ROOT\MailFileAtt]

[HKEY_CLASSES_ROOT\MailFileAtt\CLSID]

[HKEY_CLASSES_ROOT\mapifvbx.object]

[HKEY_CLASSES_ROOT\mapifvbx.object\Clsid]

[HKEY_CLASSES_ROOT\mapifvbx.object.1]

[HKEY_CLASSES_ROOT\mapifvbx.object.1\Clsid]

[HKEY_CLASSES_ROOT\Microsoft.ActiveXPlugin]

[HKEY_CLASSES_ROOT\Microsoft.ActiveXPlugin\CLSID]

[HKEY_CLASSES_ROOT\Microsoft.ActiveXPlugin\CurVer]

[HKEY_CLASSES_ROOT\Microsoft.ActiveXPlugin\NotInsertable]

[HKEY_CLASSES_ROOT\Microsoft.ActiveXPlugin.1]

[HKEY_CLASSES_ROOT\Microsoft.ActiveXPlugin.1\CLSID]

[HKEY_CLASSES_ROOT\Microsoft.ActiveXPlugin.1\NotInsertable]

[HKEY_CLASSES_ROOT\MMJB.MMZ\DefaultIcon]

[HKEY_CLASSES_ROOT\msbackupfile\DefaultIcon]

[HKEY_CLASSES_ROOT\msbackupfile\shell\Open]

[HKEY_CLASSES_ROOT\msbackupfile\shell\Open\Command]

[HKEY_CLASSES_ROOT\mvd_auto_file\DefaultIcon]

[HKEY_CLASSES_ROOT\mvd_auto_file\shell\open]

[HKEY_CLASSES_ROOT\mvd_auto_file\shell\open\command]

[HKEY_CLASSES_ROOT\NBBACKUPType\DefaultIcon]

[HKEY_CLASSES_ROOT\NBBACKUPType\shell\open]

[HKEY_CLASSES_ROOT\NBBACKUPType\shell\open\command]

[HKEY_CLASSES_ROOT\NBCOMPRESSType\DefaultIcon]

[HKEY_CLASSES_ROOT\NBCOMPRESSType\shell\open]

[HKEY_CLASSES_ROOT\NBCOMPRESSType\shell\open\command]

[HKEY_CLASSES_ROOT\NBJOBType\DefaultIcon]

[HKEY_CLASSES_ROOT\NBJOBType\shell\open]

[HKEY_CLASSES_ROOT\NBJOBType\shell\open\command]

[HKEY_CLASSES_ROOT\ncsfile\DefaultIcon]

[HKEY_CLASSES_ROOT\Nero Cover Designer.Document\DefaultIcon]

[HKEY_CLASSES_ROOT\Nero Cover Designer.Document\shell\open]

[HKEY_CLASSES_ROOT\Nero Cover Designer.Document\shell\open\Application]

[HKEY_CLASSES_ROOT\Nero Cover Designer.Document\shell\open\command]

[HKEY_CLASSES_ROOT\Nero Cover Designer.Document\shell\open\ddeexec]

[HKEY_CLASSES_ROOT\Nero Cover Designer.Document\shell\open\ddeexec\Application]

[HKEY_CLASSES_ROOT\Nero Cover Designer.Template\DefaultIcon]

[HKEY_CLASSES_ROOT\Nero Cover Designer.Template\shell\open]

[HKEY_CLASSES_ROOT\Nero Cover Designer.Template\shell\open\command]

[HKEY_CLASSES_ROOT\Nero Cover Designer.Template\shell\open\ddeexec]

[HKEY_CLASSES_ROOT\Nero Cover Designer.Template\shell\open\ddeexec\Application]

[HKEY_CLASSES_ROOT\Nero.AutoPlay2\shell\HandleCDBurningOnArrival_CDAudio]

[HKEY_CLASSES_ROOT\Nero.AutoPlay2\shell\HandleCDBurningOnArrival_CDAudio\command]

[HKEY_CLASSES_ROOT\Nero.AutoPlay2\shell\HandleCDBurningOnArrival_DataDisc]

[HKEY_CLASSES_ROOT\Nero.AutoPlay2\shell\HandleCDBurningOnArrival_DataDisc\command]

[HKEY_CLASSES_ROOT\Nero.AutoPlay2\shell\HandleCDBurningOnArrival_LaunchNeroStartSmart]

[HKEY_CLASSES_ROOT\Nero.AutoPlay2\shell\HandleCDBurningOnArrival_LaunchNeroStartSmart\command]

[HKEY_CLASSES_ROOT\Nero.AutoPlay2\shell\PlayCDAudioOnArrival_AudioToNeroDigital]

[HKEY_CLASSES_ROOT\Nero.AutoPlay2\shell\PlayCDAudioOnArrival_AudioToNeroDigital\command]

[HKEY_CLASSES_ROOT\Nero.AutoPlay2\shell\PlayCDAudioOnArrival_CopyCD]

[HKEY_CLASSES_ROOT\Nero.AutoPlay2\shell\PlayCDAudioOnArrival_CopyCD\command]

[HKEY_CLASSES_ROOT\Nero.AutoPlay2\shell\PlayCDAudioOnArrival_RipCD]

[HKEY_CLASSES_ROOT\Nero.AutoPlay2\shell\PlayCDAudioOnArrival_RipCD\command]

[HKEY_CLASSES_ROOT\NeroAACType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroAACType\shell\open]

[HKEY_CLASSES_ROOT\NeroAACType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroAACType\shell\print]

[HKEY_CLASSES_ROOT\NeroAACType\shell\print\command]

[HKEY_CLASSES_ROOT\NeroAACType\shell\printto]

[HKEY_CLASSES_ROOT\NeroAACType\shell\printto\command]

[HKEY_CLASSES_ROOT\NeroAudioType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroAudioType\shell\open]

[HKEY_CLASSES_ROOT\NeroAudioType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroAudioType\shell\print]

[HKEY_CLASSES_ROOT\NeroAudioType\shell\print\command]

[HKEY_CLASSES_ROOT\NeroAudioType\shell\printto]

[HKEY_CLASSES_ROOT\NeroAudioType\shell\printto\command]

[HKEY_CLASSES_ROOT\NeroCDCoverType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroCDCoverType\shell\open]

[HKEY_CLASSES_ROOT\NeroCDCoverType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroCDCoverType\shell\open\ddeexec]

[HKEY_CLASSES_ROOT\NeroCDExtraType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroCDExtraType\shell\open]

[HKEY_CLASSES_ROOT\NeroCDExtraType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroCDExtraType\shell\print]

[HKEY_CLASSES_ROOT\NeroCDExtraType\shell\print\command]

[HKEY_CLASSES_ROOT\NeroCDExtraType\shell\printto]

[HKEY_CLASSES_ROOT\NeroCDExtraType\shell\printto\command]

[HKEY_CLASSES_ROOT\NeroCDROMBootType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroCDROMBootType\shell\open]

[HKEY_CLASSES_ROOT\NeroCDROMBootType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroCDROMBootType\shell\print]

[HKEY_CLASSES_ROOT\NeroCDROMBootType\shell\print\command]

[HKEY_CLASSES_ROOT\NeroCDROMBootType\shell\printto]

[HKEY_CLASSES_ROOT\NeroCDROMBootType\shell\printto\command]

[HKEY_CLASSES_ROOT\NeroCDROMEFIBootType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroCDROMEFIBootType\shell\open]

[HKEY_CLASSES_ROOT\NeroCDROMEFIBootType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroCDROMEFIBootType\shell\print]

[HKEY_CLASSES_ROOT\NeroCDROMEFIBootType\shell\print\command]

[HKEY_CLASSES_ROOT\NeroCDROMEFIBootType\shell\printto]

[HKEY_CLASSES_ROOT\NeroCDROMEFIBootType\shell\printto\command]

[HKEY_CLASSES_ROOT\NeroCDROMHybridType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroCDROMHybridType\shell\open]

[HKEY_CLASSES_ROOT\NeroCDROMHybridType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroCDROMHybridType\shell\print]

[HKEY_CLASSES_ROOT\NeroCDROMHybridType\shell\print\command]

[HKEY_CLASSES_ROOT\NeroCDROMHybridType\shell\printto]

[HKEY_CLASSES_ROOT\NeroCDROMHybridType\shell\printto\command]

[HKEY_CLASSES_ROOT\NeroCDROMType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroCDROMType\shell\open]

[HKEY_CLASSES_ROOT\NeroCDROMType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroCDROMType\shell\print]

[HKEY_CLASSES_ROOT\NeroCDROMType\shell\print\command]

[HKEY_CLASSES_ROOT\NeroCDROMType\shell\printto]

[HKEY_CLASSES_ROOT\NeroCDROMType\shell\printto\command]

[HKEY_CLASSES_ROOT\NeroCopyType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroCopyType\shell\open]

[HKEY_CLASSES_ROOT\NeroCopyType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroCopyType\shell\print]

[HKEY_CLASSES_ROOT\NeroCopyType\shell\print\command]

[HKEY_CLASSES_ROOT\NeroCopyType\shell\printto]

[HKEY_CLASSES_ROOT\NeroCopyType\shell\printto\command]

[HKEY_CLASSES_ROOT\NeroCueSheetType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroCueSheetType\shell\open]

[HKEY_CLASSES_ROOT\NeroCueSheetType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroCueSheetType\shell\print]

[HKEY_CLASSES_ROOT\NeroCueSheetType\shell\print\command]

[HKEY_CLASSES_ROOT\NeroCueSheetType\shell\printto]

[HKEY_CLASSES_ROOT\NeroCueSheetType\shell\printto\command]

[HKEY_CLASSES_ROOT\NeroDVDVideoType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroDVDVideoType\shell\open]

[HKEY_CLASSES_ROOT\NeroDVDVideoType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroDVDVideoType\shell\print]

[HKEY_CLASSES_ROOT\NeroDVDVideoType\shell\print\command]

[HKEY_CLASSES_ROOT\NeroDVDVideoType\shell\printto]

[HKEY_CLASSES_ROOT\NeroDVDVideoType\shell\printto\command]

[HKEY_CLASSES_ROOT\NeroErrorType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroErrorType\shell\open]

[HKEY_CLASSES_ROOT\NeroErrorType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroErrorType\shell\print]

[HKEY_CLASSES_ROOT\NeroErrorType\shell\print\command]

[HKEY_CLASSES_ROOT\NeroErrorType\shell\printto]

[HKEY_CLASSES_ROOT\NeroErrorType\shell\printto\command]

[HKEY_CLASSES_ROOT\NeroHDBackupType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroHDBackupType\shell\open]

[HKEY_CLASSES_ROOT\NeroHDBackupType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroHDBackupType\shell\print]

[HKEY_CLASSES_ROOT\NeroHDBackupType\shell\print\command]

[HKEY_CLASSES_ROOT\NeroHDBackupType\shell\printto]

[HKEY_CLASSES_ROOT\NeroHDBackupType\shell\printto\command]

[HKEY_CLASSES_ROOT\NeroHDBVideoType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroHDBVideoType\shell\open]

[HKEY_CLASSES_ROOT\NeroHDBVideoType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroHDBVideoType\shell\print]

[HKEY_CLASSES_ROOT\NeroHDBVideoType\shell\print\command]

[HKEY_CLASSES_ROOT\NeroHDBVideoType\shell\printto]

[HKEY_CLASSES_ROOT\NeroHDBVideoType\shell\printto\command]

[HKEY_CLASSES_ROOT\NeroHFSType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroHFSType\shell\open]

[HKEY_CLASSES_ROOT\NeroHFSType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroHFSType\shell\print]

[HKEY_CLASSES_ROOT\NeroHFSType\shell\print\command]

[HKEY_CLASSES_ROOT\NeroHFSType\shell\printto]

[HKEY_CLASSES_ROOT\NeroHFSType\shell\printto\command]

[HKEY_CLASSES_ROOT\NeroImageType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroImageType\shell\open]

[HKEY_CLASSES_ROOT\NeroImageType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroImageType\shell\print]

[HKEY_CLASSES_ROOT\NeroImageType\shell\print\command]

[HKEY_CLASSES_ROOT\NeroImageType\shell\printto]

[HKEY_CLASSES_ROOT\NeroImageType\shell\printto\command]

[HKEY_CLASSES_ROOT\NerominiDVDType\DefaultIcon]

[HKEY_CLASSES_ROOT\NerominiDVDType\shell\open]

[HKEY_CLASSES_ROOT\NerominiDVDType\shell\open\command]

[HKEY_CLASSES_ROOT\NerominiDVDType\shell\print]

[HKEY_CLASSES_ROOT\NerominiDVDType\shell\print\command]

[HKEY_CLASSES_ROOT\NerominiDVDType\shell\printto]

[HKEY_CLASSES_ROOT\NerominiDVDType\shell\printto\command]

[HKEY_CLASSES_ROOT\NeroMixedModeType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroMixedModeType\shell\open]

[HKEY_CLASSES_ROOT\NeroMixedModeType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroMixedModeType\shell\print]

[HKEY_CLASSES_ROOT\NeroMixedModeType\shell\print\command]

[HKEY_CLASSES_ROOT\NeroMixedModeType\shell\printto]

[HKEY_CLASSES_ROOT\NeroMixedModeType\shell\printto\command]

[HKEY_CLASSES_ROOT\NeroMP3Type\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroMP3Type\shell\open]

[HKEY_CLASSES_ROOT\NeroMP3Type\shell\open\command]

[HKEY_CLASSES_ROOT\NeroMP3Type\shell\print]

[HKEY_CLASSES_ROOT\NeroMP3Type\shell\print\command]

[HKEY_CLASSES_ROOT\NeroMP3Type\shell\printto]

[HKEY_CLASSES_ROOT\NeroMP3Type\shell\printto\command]

[HKEY_CLASSES_ROOT\NeroSuperVideoType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroSuperVideoType\shell\open]

[HKEY_CLASSES_ROOT\NeroSuperVideoType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroUDFISOType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroUDFISOType\shell\open]

[HKEY_CLASSES_ROOT\NeroUDFISOType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroUDFISOType\shell\print]

[HKEY_CLASSES_ROOT\NeroUDFISOType\shell\print\command]

[HKEY_CLASSES_ROOT\NeroUDFISOType\shell\printto]

[HKEY_CLASSES_ROOT\NeroUDFISOType\shell\printto\command]

[HKEY_CLASSES_ROOT\NeroUDFType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroUDFType\shell\open]

[HKEY_CLASSES_ROOT\NeroUDFType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroUDFType\shell\print]

[HKEY_CLASSES_ROOT\NeroUDFType\shell\print\command]

[HKEY_CLASSES_ROOT\NeroUDFType\shell\printto]

[HKEY_CLASSES_ROOT\NeroUDFType\shell\printto\command]

[HKEY_CLASSES_ROOT\NeroVideoType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroVideoType\shell\open]

[HKEY_CLASSES_ROOT\NeroVideoType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroVideoType\shell\print]

[HKEY_CLASSES_ROOT\NeroVideoType\shell\print\command]

[HKEY_CLASSES_ROOT\NeroVideoType\shell\printto]

[HKEY_CLASSES_ROOT\NeroVideoType\shell\printto\command]

[HKEY_CLASSES_ROOT\NeroWMAType\DefaultIcon]

[HKEY_CLASSES_ROOT\NeroWMAType\shell\open]

[HKEY_CLASSES_ROOT\NeroWMAType\shell\open\command]

[HKEY_CLASSES_ROOT\NeroWMAType\shell\print]

[HKEY_CLASSES_ROOT\NeroWMAType\shell\print\command]

[HKEY_CLASSES_ROOT\NeroWMAType\shell\printto]

[HKEY_CLASSES_ROOT\NeroWMAType\shell\printto\command]

[HKEY_CLASSES_ROOT\ProgressLog.ProgressLogCtrl]

[HKEY_CLASSES_ROOT\ProgressLog.ProgressLogCtrl\CLSID]

[HKEY_CLASSES_ROOT\ProgressLog.ProgressLogCtrl\CurVer]

[HKEY_CLASSES_ROOT\ProgressLog.ProgressLogCtrl.1]

[HKEY_CLASSES_ROOT\ProgressLog.ProgressLogCtrl.1\CLSID]

[HKEY_CLASSES_ROOT\QuickTime.3g2\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.3g2\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.3g2\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.3gp\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.3gp\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.3gp\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.3gp2\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.3gp2\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.3gp2\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.3gpp\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.3gpp\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.3gpp\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.aac\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.aac\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.aac\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.AC3\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.AC3\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.AC3\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.adts\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.adts\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.adts\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.aif\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.aif\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.aif\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.aifc\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.aifc\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.aifc\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.aiff\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.aiff\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.aiff\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.amc\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.amc\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.amc\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.AMR\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.AMR\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.AMR\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.au\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.au\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.au\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.avi\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.avi\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.avi\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.bwf\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.bwf\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.bwf\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.caf\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.caf\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.caf\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.cdda\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.cdda\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.cdda\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.cel\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.cel\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.cel\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.dif\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.dif\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.dif\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.dv\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.dv\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.dv\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.flc\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.flc\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.flc\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.fli\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.fli\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.fli\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.gif\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.gif\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.gif\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.gsm\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.gsm\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.gsm\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.kar\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.kar\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.kar\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.m15\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.m15\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.m15\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.m1a\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.m1a\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.m1a\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.m1s\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.m1s\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.m1s\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.m1v\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.m1v\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.m1v\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.m3u\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.m3u\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.m3u\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.m3url\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.m3url\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.m3url\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.m4a\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.m4a\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.m4a\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.m4b\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.m4b\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.m4b\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.m4p\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.m4p\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.m4p\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.m4v\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.m4v\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.m4v\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.m75\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.m75\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.m75\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.mid\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.mid\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.mid\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.midi\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.midi\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.midi\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.mov\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.mov\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.mov\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.mp2\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.mp2\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.mp2\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.mp3\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.mp3\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.mp3\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.mp4\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.mp4\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.mp4\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.mpa\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.mpa\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.mpa\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.mpeg\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.mpeg\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.mpeg\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.mpg\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.mpg\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.mpg\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.mpm\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.mpm\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.mpm\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.mpv\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.mpv\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.mpv\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.mqv\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.mqv\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.mqv\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.qcp\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.qcp\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.qcp\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.qht\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.qht\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.qht\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.qhtm\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.qhtm\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.qhtm\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.qt\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.qt\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.qt\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.qtl\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.qtl\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.qtl\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.rts\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.rts\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.rts\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.rtsp\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.rtsp\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.rtsp\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.sd2\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.sd2\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.sd2\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.sdp\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.sdp\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.sdp\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.sdv\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.sdv\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.sdv\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.smf\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.smf\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.smf\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.smi\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.smi\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.smi\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.smil\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.smil\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.smil\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.sml\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.sml\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.sml\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.snd\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.snd\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.snd\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.swa\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.swa\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.swa\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.ulw\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.ulw\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.ulw\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.vfw\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.vfw\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.vfw\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTime.wav\DefaultIcon]

[HKEY_CLASSES_ROOT\QuickTime.wav\shell\open]

[HKEY_CLASSES_ROOT\QuickTime.wav\shell\open\command]

[HKEY_CLASSES_ROOT\QuickTimePlayerAddition\DefaultIcon]

[HKEY_CLASSES_ROOT\Studio.Document\DefaultIcon]

[HKEY_CLASSES_ROOT\Studio.Document\shell\open]

[HKEY_CLASSES_ROOT\Studio.Document\shell\open\command]

[HKEY_CLASSES_ROOT\SymWriter.pdb]

[HKEY_CLASSES_ROOT\SymWriter.pdb\CLSID]

[HKEY_CLASSES_ROOT\tcsfile\DefaultIcon]

[HKEY_CLASSES_ROOT\TypeAACNero\DefaultIcon]

[HKEY_CLASSES_ROOT\TypeAACNero\shell\open]

[HKEY_CLASSES_ROOT\TypeAACNero\shell\open\command]

[HKEY_CLASSES_ROOT\TypeAACNero\shell\print]

[HKEY_CLASSES_ROOT\TypeAACNero\shell\print\command]

[HKEY_CLASSES_ROOT\TypeAACNero\shell\printto]

[HKEY_CLASSES_ROOT\TypeAACNero\shell\printto\command]

[HKEY_CLASSES_ROOT\TypeAmorceCRROMNero\DefaultIcon]

[HKEY_CLASSES_ROOT\TypeAmorceCRROMNero\shell\open]

[HKEY_CLASSES_ROOT\TypeAmorceCRROMNero\shell\open\command]

[HKEY_CLASSES_ROOT\TypeAmorceCRROMNero\shell\print]

[HKEY_CLASSES_ROOT\TypeAmorceCRROMNero\shell\print\command]

[HKEY_CLASSES_ROOT\TypeAmorceCRROMNero\shell\printto]

[HKEY_CLASSES_ROOT\TypeAmorceCRROMNero\shell\printto\command]

[HKEY_CLASSES_ROOT\TypeCDROMNero\DefaultIcon]

[HKEY_CLASSES_ROOT\TypeCDROMNero\shell\open]

[HKEY_CLASSES_ROOT\TypeCDROMNero\shell\open\command]

[HKEY_CLASSES_ROOT\TypeCDROMNero\shell\print]

[HKEY_CLASSES_ROOT\TypeCDROMNero\shell\print\command]

[HKEY_CLASSES_ROOT\TypeCDROMNero\shell\printto]

[HKEY_CLASSES_ROOT\TypeCDROMNero\shell\printto\command]

[HKEY_CLASSES_ROOT\TypeErreurNero\DefaultIcon]

[HKEY_CLASSES_ROOT\TypeErreurNero\shell\open]

[HKEY_CLASSES_ROOT\TypeErreurNero\shell\open\command]

[HKEY_CLASSES_ROOT\TypeErreurNero\shell\print]

[HKEY_CLASSES_ROOT\TypeErreurNero\shell\print\command]

[HKEY_CLASSES_ROOT\TypeErreurNero\shell\printto]

[HKEY_CLASSES_ROOT\TypeErreurNero\shell\printto\command]

[HKEY_CLASSES_ROOT\TypeImageNero\DefaultIcon]

[HKEY_CLASSES_ROOT\TypeImageNero\shell\open]

[HKEY_CLASSES_ROOT\TypeImageNero\shell\open\command]

[HKEY_CLASSES_ROOT\TypeImageNero\shell\print]

[HKEY_CLASSES_ROOT\TypeImageNero\shell\print\command]

[HKEY_CLASSES_ROOT\TypeImageNero\shell\printto]

[HKEY_CLASSES_ROOT\TypeImageNero\shell\printto\command]

[HKEY_CLASSES_ROOT\TypeModeMixteNero\DefaultIcon]

[HKEY_CLASSES_ROOT\TypeModeMixteNero\shell\open]

[HKEY_CLASSES_ROOT\TypeModeMixteNero\shell\open\command]

[HKEY_CLASSES_ROOT\TypeModeMixteNero\shell\print]

[HKEY_CLASSES_ROOT\TypeModeMixteNero\shell\print\command]

[HKEY_CLASSES_ROOT\TypeModeMixteNero\shell\printto]

[HKEY_CLASSES_ROOT\TypeModeMixteNero\shell\printto\command]

[HKEY_CLASSES_ROOT\TypeMP3Nero\DefaultIcon]

[HKEY_CLASSES_ROOT\TypeMP3Nero\shell\open]

[HKEY_CLASSES_ROOT\TypeMP3Nero\shell\open\command]

[HKEY_CLASSES_ROOT\TypeMP3Nero\shell\print]

[HKEY_CLASSES_ROOT\TypeMP3Nero\shell\print\command]

[HKEY_CLASSES_ROOT\TypeMP3Nero\shell\printto]

[HKEY_CLASSES_ROOT\TypeMP3Nero\shell\printto\command]

[HKEY_CLASSES_ROOT\TypeUDFISONero\DefaultIcon]

[HKEY_CLASSES_ROOT\TypeUDFISONero\shell\open]

[HKEY_CLASSES_ROOT\TypeUDFISONero\shell\open\command]

[HKEY_CLASSES_ROOT\TypeUDFISONero\shell\print]

[HKEY_CLASSES_ROOT\TypeUDFISONero\shell\print\command]

[HKEY_CLASSES_ROOT\TypeUDFISONero\shell\printto]

[HKEY_CLASSES_ROOT\TypeUDFISONero\shell\printto\command]

[HKEY_CLASSES_ROOT\TypeUDFNero\DefaultIcon]

[HKEY_CLASSES_ROOT\TypeUDFNero\shell\open]

[HKEY_CLASSES_ROOT\TypeUDFNero\shell\open\command]

[HKEY_CLASSES_ROOT\TypeUDFNero\shell\print]

[HKEY_CLASSES_ROOT\TypeUDFNero\shell\print\command]

[HKEY_CLASSES_ROOT\TypeUDFNero\shell\printto]

[HKEY_CLASSES_ROOT\TypeUDFNero\shell\printto\command]

[HKEY_CLASSES_ROOT\TypeWMANero\DefaultIcon]

[HKEY_CLASSES_ROOT\TypeWMANero\shell\open]

[HKEY_CLASSES_ROOT\TypeWMANero\shell\open\command]

[HKEY_CLASSES_ROOT\TypeWMANero\shell\print]

[HKEY_CLASSES_ROOT\TypeWMANero\shell\print\command]

[HKEY_CLASSES_ROOT\TypeWMANero\shell\printto]

[HKEY_CLASSES_ROOT\TypeWMANero\shell\printto\command]

[HKEY_CLASSES_ROOT\urn:content-classes:catalog\DefaultIcon]

[HKEY_CLASSES_ROOT\urn:content-classes:catalog-settings\DefaultIcon]

[HKEY_CLASSES_ROOT\urn:content-classes:contentclassdef\DefaultIcon]

[HKEY_CLASSES_ROOT\urn:content-classes:exchange55startaddress\DefaultIcon]

[HKEY_CLASSES_ROOT\urn:content-classes:exchangestartaddress\DefaultIcon]

[HKEY_CLASSES_ROOT\urn:content-classes:filestartaddress\DefaultIcon]

[HKEY_CLASSES_ROOT\urn:content-classes:management\DefaultIcon]

[HKEY_CLASSES_ROOT\urn:content-classes:notesstartaddress\DefaultIcon]

[HKEY_CLASSES_ROOT\urn:content-classes:remoteworkspacestartaddress\DefaultIcon]

[HKEY_CLASSES_ROOT\urn:content-classes:webstartaddress\DefaultIcon]

[HKEY_CLASSES_ROOT\urn:content-classes:wizard/addcontentclass\DefaultIcon]

[HKEY_CLASSES_ROOT\urn:content-classes:wizard/addsearchcontentlocation\DefaultIcon]

[HKEY_CLASSES_ROOT\urn:content-classes:workspace-settings\DefaultIcon]

[HKEY_CLASSES_ROOT\urn:content-classes:workspaceconfiguration\DefaultIcon]

[HKEY_CLASSES_ROOT\urn:content-classes:workspacestartaddress\DefaultIcon]

[HKEY_CLASSES_ROOT\VDLX.Document\shell\open]

[HKEY_CLASSES_ROOT\VDLX.Document\shell\open\command]

[HKEY_CLASSES_ROOT\VDLX.Document\shell\open\ddeexec]

[HKEY_CLASSES_ROOT\Wallpaper.WallpaperManager]

[HKEY_CLASSES_ROOT\Wallpaper.WallpaperManager\CLSID]

[HKEY_CLASSES_ROOT\Wallpaper.WallpaperManager\CurVer]

[HKEY_CLASSES_ROOT\Wallpaper.WallpaperManager.1]

[HKEY_CLASSES_ROOT\Wallpaper.WallpaperManager.1\CLSID]

[HKEY_CLASSES_ROOT\wcsfile\DefaultIcon]

[HKEY_CLASSES_ROOT\YPager.Messenger]

[HKEY_CLASSES_ROOT\YPager.Messenger\CLSID]

[HKEY_CLASSES_ROOT\YPager.Messenger\CurVer]

[HKEY_CLASSES_ROOT\zapfile\DefaultIcon]

[HKEY_CLASSES_ROOT\CLSID\{0083AA80-357D-11D4-876E-CA5F65139036}]

[HKEY_CLASSES_ROOT\CLSID\{0083AA80-357D-11D4-876E-CA5F65139036}\InprocServer32]
"ThreadingModel"="Both"

[HKEY_CLASSES_ROOT\CLSID\{00E1F738-1122-47D4-8B13-5F9229E839FF}]

[HKEY_CLASSES_ROOT\CLSID\{00E1F738-1122-47D4-8B13-5F9229E839FF}\InprocServer32]

[HKEY_CLASSES_ROOT\CLSID\{00E1F738-1122-47D4-8B13-5F9229E839FF}\ProgID]

[HKEY_CLASSES_ROOT\CLSID\{00E1F738-1122-47D4-8B13-5F9229E839FF}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{00E1F738-1122-47D4-8B13-5F9229E839FF}\TypeLib]

[HKEY_CLASSES_ROOT\CLSID\{00E1F738-1122-47D4-8B13-5F9229E839FF}\VersionIndependentProgID]

[HKEY_CLASSES_ROOT\CLSID\{0302A95D-FC12-47E9-8413-B453AE137785}]
"AppID"="{ED512BE6-6629-4FB4-953D-D0C353847163}"

[HKEY_CLASSES_ROOT\CLSID\{0302A95D-FC12-47E9-8413-B453AE137785}\InprocServer32]
"ThreadingModel"="apartment"

[HKEY_CLASSES_ROOT\CLSID\{0302A95D-FC12-47E9-8413-B453AE137785}\ProgID]

[HKEY_CLASSES_ROOT\CLSID\{0302A95D-FC12-47E9-8413-B453AE137785}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{0302A95D-FC12-47E9-8413-B453AE137785}\TypeLib]

[HKEY_CLASSES_ROOT\CLSID\{0302A95D-FC12-47E9-8413-B453AE137785}\VersionIndependentProgID]

[HKEY_CLASSES_ROOT\CLSID\{041287C6-DD49-11D3-AB88-00A024B5DE6F}]
"AppID"="{041287C4-DD49-11D3-AB88-00A024B5DE6F}"

[HKEY_CLASSES_ROOT\CLSID\{041287C6-DD49-11D3-AB88-00A024B5DE6F}\LocalServer32]

[HKEY_CLASSES_ROOT\CLSID\{041287C6-DD49-11D3-AB88-00A024B5DE6F}\ProgID]

[HKEY_CLASSES_ROOT\CLSID\{041287C6-DD49-11D3-AB88-00A024B5DE6F}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{041287C6-DD49-11D3-AB88-00A024B5DE6F}\TypeLib]

[HKEY_CLASSES_ROOT\CLSID\{041287C6-DD49-11D3-AB88-00A024B5DE6F}\VersionIndependentProgID]

[HKEY_CLASSES_ROOT\CLSID\{041287CB-DD49-11D3-AB88-00A024B5DE6F}]
"AppID"="{041287C4-DD49-11D3-AB88-00A024B5DE6F}"

[HKEY_CLASSES_ROOT\CLSID\{041287CB-DD49-11D3-AB88-00A024B5DE6F}\LocalServer32]

[HKEY_CLASSES_ROOT\CLSID\{041287CB-DD49-11D3-AB88-00A024B5DE6F}\ProgID]

[HKEY_CLASSES_ROOT\CLSID\{041287CB-DD49-11D3-AB88-00A024B5DE6F}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{041287CB-DD49-11D3-AB88-00A024B5DE6F}\TypeLib]

[HKEY_CLASSES_ROOT\CLSID\{041287CB-DD49-11D3-AB88-00A024B5DE6F}\VersionIndependentProgID]

[HKEY_CLASSES_ROOT\CLSID\{070655DC-6AD9-4BB3-A7F9-78359689FBD7}]

[HKEY_CLASSES_ROOT\CLSID\{070655DC-6AD9-4BB3-A7F9-78359689FBD7}\Control]

[HKEY_CLASSES_ROOT\CLSID\{070655DC-6AD9-4BB3-A7F9-78359689FBD7}\InprocServer32]
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{070655DC-6AD9-4BB3-A7F9-78359689FBD7}\MiscStatus]

[HKEY_CLASSES_ROOT\CLSID\{070655DC-6AD9-4BB3-A7F9-78359689FBD7}\MiscStatus\1]

[HKEY_CLASSES_ROOT\CLSID\{070655DC-6AD9-4BB3-A7F9-78359689FBD7}\ProgID]

[HKEY_CLASSES_ROOT\CLSID\{070655DC-6AD9-4BB3-A7F9-78359689FBD7}\ToolboxBitmap32]

[HKEY_CLASSES_ROOT\CLSID\{070655DC-6AD9-4BB3-A7F9-78359689FBD7}\TypeLib]

[HKEY_CLASSES_ROOT\CLSID\{070655DC-6AD9-4BB3-A7F9-78359689FBD7}\Version]

[HKEY_CLASSES_ROOT\CLSID\{0724F708-270F-4E80-85A6-F4472D5126CC}]

[HKEY_CLASSES_ROOT\CLSID\{0724F708-270F-4E80-85A6-F4472D5126CC}\InprocServer32]
"ThreadingModel"="Both"

[HKEY_CLASSES_ROOT\CLSID\{0b1511cd-37ee-4f0a-9647-cb2785b68a29}]

[HKEY_CLASSES_ROOT\CLSID\{0b1511cd-37ee-4f0a-9647-cb2785b68a29}\InprocServer32]
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{0b1511cd-37ee-4f0a-9647-cb2785b68a29}\ProgID]

[HKEY_CLASSES_ROOT\CLSID\{0b1511cd-37ee-4f0a-9647-cb2785b68a29}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{0b1511cd-37ee-4f0a-9647-cb2785b68a29}\TypeLib]

[HKEY_CLASSES_ROOT\CLSID\{0b1511cd-37ee-4f0a-9647-cb2785b68a29}\VersionIndependentProgID]

[HKEY_CLASSES_ROOT\CLSID\{0B785C4A-8E74-4db2-87A7-2D5BF9C6E55C}]

[HKEY_CLASSES_ROOT\CLSID\{0B785C4A-8E74-4db2-87A7-2D5BF9C6E55C}\InprocServer32]

[HKEY_CLASSES_ROOT\CLSID\{0E654C56-D988-472B-9D03-BA6CCC9E7EAF}]

[HKEY_CLASSES_ROOT\CLSID\{0E654C56-D988-472B-9D03-BA6CCC9E7EAF}\InprocServer32]
"ThreadingModel"="Both"

[HKEY_CLASSES_ROOT\CLSID\{0edcdb7d-cd9e-44e6-9e9a-adbaa85540e8}]

[HKEY_CLASSES_ROOT\CLSID\{0edcdb7d-cd9e-44e6-9e9a-adbaa85540e8}\InprocServer32]
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{0edcdb7d-cd9e-44e6-9e9a-adbaa85540e8}\ProgID]

[HKEY_CLASSES_ROOT\CLSID\{0edcdb7d-cd9e-44e6-9e9a-adbaa85540e8}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{0edcdb7d-cd9e-44e6-9e9a-adbaa85540e8}\TypeLib]

[HKEY_CLASSES_ROOT\CLSID\{0edcdb7d-cd9e-44e6-9e9a-adbaa85540e8}\VersionIndependentProgID]

[HKEY_CLASSES_ROOT\CLSID\{138130AF-A79B-45D5-B4AA-87697457BA87}]

[HKEY_CLASSES_ROOT\CLSID\{138130AF-A79B-45D5-B4AA-87697457BA87}\InprocServer32]
"ThreadingModel"="Both"

[HKEY_CLASSES_ROOT\CLSID\{14AF36A0-23BD-48E4-8B37-517C24B09FC9}]

[HKEY_CLASSES_ROOT\CLSID\{14AF36A0-23BD-48E4-8B37-517C24B09FC9}\InprocServer32]
"ThreadingModel"="Both"

[HKEY_CLASSES_ROOT\CLSID\{1588A1C4-D709-4F78-8C3F-E1EEBFDE98B8}]

[HKEY_CLASSES_ROOT\CLSID\{1588A1C4-D709-4F78-8C3F-E1EEBFDE98B8}\InprocServer32]

[HKEY_CLASSES_ROOT\CLSID\{1796A329-04C1-4C07-B28E-E4A807935C06}]
"AppID"="{46A99B9C-4AC8-4EE9-AF7D-D02816CEC314}"

[HKEY_CLASSES_ROOT\CLSID\{1796A329-04C1-4C07-B28E-E4A807935C06}\LocalServer32]

[HKEY_CLASSES_ROOT\CLSID\{1796A329-04C1-4C07-B28E-E4A807935C06}\ProgID]

[HKEY_CLASSES_ROOT\CLSID\{1796A329-04C1-4C07-B28E-E4A807935C06}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{1796A329-04C1-4C07-B28E-E4A807935C06}\TypeLib]

[HKEY_CLASSES_ROOT\CLSID\{1796A329-04C1-4C07-B28E-E4A807935C06}\VersionIndependentProgID]

[HKEY_CLASSES_ROOT\CLSID\{1810360D-0FC7-474B-ABC1-84E96BF51D2F}]
"AppID"="{EADB5B4B-D99B-4B18-9BCA-108EAAE88F24}"

[HKEY_CLASSES_ROOT\CLSID\{1810360D-0FC7-474B-ABC1-84E96BF51D2F}\LocalServer32]

[HKEY_CLASSES_ROOT\CLSID\{1810360D-0FC7-474B-ABC1-84E96BF51D2F}\ProgID]

[HKEY_CLASSES_ROOT\CLSID\{190B0C37-E066-11D3-AB88-00A024B5DE6F}]
"AppID"="{041287C4-DD49-11D3-AB88-00A024B5DE6F}"

[HKEY_CLASSES_ROOT\CLSID\{190B0C37-E066-11D3-AB88-00A024B5DE6F}\LocalServer32]

[HKEY_CLASSES_ROOT\CLSID\{190B0C37-E066-11D3-AB88-00A024B5DE6F}\ProgID]

[HKEY_CLASSES_ROOT\CLSID\{190B0C37-E066-11D3-AB88-00A024B5DE6F}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{190B0C37-E066-11D3-AB88-00A024B5DE6F}\TypeLib]

[HKEY_CLASSES_ROOT\CLSID\{190B0C37-E066-11D3-AB88-00A024B5DE6F}\VersionIndependentProgID]

[HKEY_CLASSES_ROOT\CLSID\{1A239250-B650-4B63-B4CF-7FCC4DC07DC6}]
"AppID"="{46A99B9C-4AC8-4EE9-AF7D-D02816CEC314}"

[HKEY_CLASSES_ROOT\CLSID\{1A239250-B650-4B63-B4CF-7FCC4DC07DC6}\LocalServer32]

[HKEY_CLASSES_ROOT\CLSID\{1A239250-B650-4B63-B4CF-7FCC4DC07DC6}\ProgID]

[HKEY_CLASSES_ROOT\CLSID\{1A239250-B650-4B63-B4CF-7FCC4DC07DC6}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{1A239250-B650-4B63-B4CF-7FCC4DC07DC6}\TypeLib]

[HKEY_CLASSES_ROOT\CLSID\{1A239250-B650-4B63-B4CF-7FCC4DC07DC6}\VersionIndependentProgID]

[HKEY_CLASSES_ROOT\CLSID\{1AEDB68D-18A7-4CA9-B41B-3CE7E59FAB24}]
"AppID"="{46A99B9C-4AC8-4EE9-AF7D-D02816CEC314}"

[HKEY_CLASSES_ROOT\CLSID\{1AEDB68D-18A7-4CA9-B41B-3CE7E59FAB24}\LocalServer32]

[HKEY_CLASSES_ROOT\CLSID\{1AEDB68D-18A7-4CA9-B41B-3CE7E59FAB24}\ProgID]

[HKEY_CLASSES_ROOT\CLSID\{1AEDB68D-18A7-4CA9-B41B-3CE7E59FAB24}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{1AEDB68D-18A7-4CA9-B41B-3CE7E59FAB24}\TypeLib]

[HKEY_CLASSES_ROOT\CLSID\{1AEDB68D-18A7-4CA9-B41B-3CE7E59FAB24}\VersionIndependentProgID]

[HKEY_CLASSES_ROOT\CLSID\{1C508980-77FB-411F-93CB-83E3B5392394}]

[HKEY_CLASSES_ROOT\CLSID\{1C508980-77FB-411F-93CB-83E3B5392394}\InprocServer32]

[HKEY_CLASSES_ROOT\CLSID\{1C508980-77FB-411F-93CB-83E3B5392394}\ProgID]

[HKEY_CLASSES_ROOT\CLSID\{1C508980-77FB-411F-93CB-83E3B5392394}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{1C508980-77FB-411F-93CB-83E3B5392394}\TypeLib]

[HKEY_CLASSES_ROOT\CLSID\{1C508980-77FB-411F-93CB-83E3B5392394}\VersionIndependentProgID]

[HKEY_CLASSES_ROOT\CLSID\{1c613f47-70c5-4551-a264-f7254139854c}]

[HKEY_CLASSES_ROOT\CLSID\{1c613f47-70c5-4551-a264-f7254139854c}\InprocServer32]
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{1c613f47-70c5-4551-a264-f7254139854c}\ProgID]

[HKEY_CLASSES_ROOT\CLSID\{1c613f47-70c5-4551-a264-f7254139854c}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{1c613f47-70c5-4551-a264-f7254139854c}\TypeLib]

[HKEY_CLASSES_ROOT\CLSID\{1c613f47-70c5-4551-a264-f7254139854c}\VersionIndependentProgID]

[HKEY_CLASSES_ROOT\CLSID\{1E404D48-670A-4085-A6A0-D195793DDD33}]

[HKEY_CLASSES_ROOT\CLSID\{1E404D48-670A-4085-A6A0-D195793DDD33}\InProcServer32]
"ThreadingModel"="Both"

[HKEY_CLASSES_ROOT\CLSID\{2018C303-E3F2-4455-AA1A-773F84F10902}]
"AppID"="{5DF1991D-0670-4D2C-9321-E9E650969320}"

[HKEY_CLASSES_ROOT\CLSID\{2018C303-E3F2-4455-AA1A-773F84F10902}\InprocServer32]
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{2018C303-E3F2-4455-AA1A-773F84F10902}\ProgID]

[HKEY_CLASSES_ROOT\CLSID\{2018C303-E3F2-4455-AA1A-773F84F10902}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{2018C303-E3F2-4455-AA1A-773F84F10902}\TypeLib]

[HKEY_CLASSES_ROOT\CLSID\{2018C303-E3F2-4455-AA1A-773F84F10902}\VersionIndependentProgID]

[HKEY_CLASSES_ROOT\CLSID\{2293107A-87F9-4BE1-858E-FF1D96956D82}]

[HKEY_CLASSES_ROOT\CLSID\{2293107A-87F9-4BE1-858E-FF1D96956D82}\InprocServer32]

[HKEY_CLASSES_ROOT\CLSID\{2447902A-29D9-4101-8C63-55D46C78CBC5}]

[HKEY_CLASSES_ROOT\CLSID\{2447902A-29D9-4101-8C63-55D46C78CBC5}\InprocServer32]

[HKEY_CLASSES_ROOT\CLSID\{24BA3CAF-4BE8-4AEC-A7C8-6F47D5684602}]

[HKEY_CLASSES_ROOT\CLSID\{24BA3CAF-4BE8-4AEC-A7C8-6F47D5684602}\Control]

[HKEY_CLASSES_ROOT\CLSID\{24BA3CAF-4BE8-4AEC-A7C8-6F47D5684602}\InprocServer32]
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{24BA3CAF-4BE8-4AEC-A7C8-6F47D5684602}\MiscStatus]

[HKEY_CLASSES_ROOT\CLSID\{24BA3CAF-4BE8-4AEC-A7C8-6F47D5684602}\MiscStatus\1]

[HKEY_CLASSES_ROOT\CLSID\{24BA3CAF-4BE8-4AEC-A7C8-6F47D5684602}\ProgID]

[HKEY_CLASSES_ROOT\CLSID\{24BA3CAF-4BE8-4AEC-A7C8-6F47D5684602}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{24BA3CAF-4BE8-4AEC-A7C8-6F47D5684602}\ToolboxBitmap32]

[HKEY_CLASSES_ROOT\CLSID\{24BA3CAF-4BE8-4AEC-A7C8-6F47D5684602}\TypeLib]

[HKEY_CLASSES_ROOT\CLSID\{24BA3CAF-4BE8-4AEC-A7C8-6F47D5684602}\Version]

[HKEY_CLASSES_ROOT\CLSID\{24BA3CAF-4BE8-4AEC-A7C8-6F47D5684602}\VersionIndependentProgID]

[HKEY_CLASSES_ROOT\CLSID\{26897554-A4D8-4973-B229-1179A879460D}]

[HKEY_CLASSES_ROOT\CLSID\{26897554-A4D8-4973-B229-1179A879460D}\InProcServer32]
"ThreadingModel"="Both"

[HKEY_CLASSES_ROOT\CLSID\{283AEB67-7D7B-4771-9B70-634CE1CBDA82}]

[HKEY_CLASSES_ROOT\CLSID\{283AEB67-7D7B-4771-9B70-634CE1CBDA82}\InprocServer32]

[HKEY_CLASSES_ROOT\CLSID\{283AEB67-7D7B-4771-9B70-634CE1CBDA82}\ProgID]

[HKEY_CLASSES_ROOT\CLSID\{283AEB67-7D7B-4771-9B70-634CE1CBDA82}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{283AEB67-7D7B-4771-9B70-634CE1CBDA82}\TypeLib]

[HKEY_CLASSES_ROOT\CLSID\{283AEB67-7D7B-4771-9B70-634CE1CBDA82}\VersionIndependentProgID]

[HKEY_CLASSES_ROOT\CLSID\{292AE934-4F49-40bb-9E7E-6F6398ED9C31}]

[HKEY

Réponse 6 / 7

^^Marie^^ Messages postés 113901 Date d'inscription mardi 6 septembre 2005 Statut Membre Dernière intervention 28 août 2020 3 275
10 juin 2008 à 17:52

AVG l'as tu paramétré de manière à mettre en quarantaine ?
tout est "ignoré"

Recommence le scan et poste le nouveau rapport stp mais avant assure toi de :

fait dans l'ordre stp. Tu sauvegardes le rapport APRES avoir mis les actions.

Puis sur l'onglet Paramètres,
sous : "Comment réagir "clique sur Actions recommandées. Sélectionne Quarantaine.

Reviens à l'onglet Analyse. Clique sur Analyse complète du système.

A la fin du scan, choisis l'option 3

"Appliquer toutes les actions " en bas.

Clique sur "Enregistrer le rapport".

Ceci génère un rapport en fichier texte qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.

Poste le.

reposte également un nouveau rapport hijackthis

aliepeet Messages postés 27 Date d'inscription lundi 9 juin 2008 Statut Membre Dernière intervention 17 juillet 2010
10 juin 2008 à 22:16

Désoléé du délais...

Alors en premier lieu, voici 2 registres ccleaner;

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\Downloaded Program Files\\installer2.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\HPQ\\Safety and Comfort Guide\\PchCabInstall.vbs"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\HPQ\\Safety and Comfort Guide\\ahpregw.cab"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\system32\\MSIMRT.DLL"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\system32\\DIMM.DLL"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\system32\\QTPlugin.OCX"=dword:000003e6

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\Microsoft.NET\\Framework\\v2.0.50727\\ndpsetup.ico"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\system32\\msxml3a.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Documents and Settings\\All Users\\Application Data\\YAHOO\\YMP\\LabelLic.xml"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\System32\\NeroCheck.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\Aiff.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\DefConvertor.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\msa.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\Vqf.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\wav.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\Lib\\DriveLocker.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\Lib\\NeroCBUI.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\DSFilter\\NeFileSrc.ax"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\DSFilter\\NeRender.ax"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\system32\\ImagX7.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\Lib\\apreg.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\DSFilter\\NeAudio.ax"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\DSFilter\\NeAMR.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\DSFilter\\NeVideo.ax"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\Aac.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\aacenc32.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\DSFilter\\NDParser.ax"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\DSFilter\\NeQTDec.ax"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\DSFilter\\aacplus.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\Lib\\AdvrCntr.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\Lib\\NeroIPP.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\ogg.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\CoverDesigner\\Templates\\Data.nct"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\CoverDesigner\\LSTemplates\\Audio_Content.nct"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\CoverDesigner\\covered-deu.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\CoverDesigner\\covered-jpn.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\CoverDesigner\\CoverEdCtrl.ocx"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\system32\\TwnLib20.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\CoverDesigner\\CoverDes.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\Nero BackItUp\\BackItUp.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\Nero BackItUp\\BackItUp-Deu.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\Nero StartSmart\\NeroStartSmart.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\WMPBurn\\WMPBurn.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Ahead\\Nero BackItUp\\BackItUp-Jpn.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\mp3PP.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\mp3PRO.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Program Files\\Fichiers communs\\Ahead\\AudioPlugins\\lame_enc.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"c:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\Microsoft.Vsa.Vb.CodeDOMProcessor.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"c:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\mscoree.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"c:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\mscorlib.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"c:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\System.Drawing.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"c:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\System.EnterpriseServices.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"c:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\Microsoft.Vsa.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"c:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\Microsoft.JScript.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"c:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\System.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"c:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\System.Windows.Forms.tlb"=dword:00001000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Documents and Settings\\All Users\\Application Data\\Adobe\\Photoshop Album\\Catalogues\\My Catalog.psa"=dword:00000001

[HKEY_CLASSES_ROOT\.7z]

[HKEY_CLASSES_ROOT\.ace]

[HKEY_CLASSES_ROOT\.arj]

[HKEY_CLASSES_ROOT\.bz]

[HKEY_CLASSES_ROOT\.bz2]

[HKEY_CLASSES_ROOT\.ids]

[HKEY_CLASSES_ROOT\.iso]

[HKEY_CLASSES_ROOT\.lha]

[HKEY_CLASSES_ROOT\.lzh]

[HKEY_CLASSES_ROOT\.mst]

[HKEY_CLASSES_ROOT\.taz]

[HKEY_CLASSES_ROOT\.tbz]

[HKEY_CLASSES_ROOT\.tbz2]

[HKEY_CLASSES_ROOT\.uu]

[HKEY_CLASSES_ROOT\.uue]

[HKEY_CLASSES_ROOT\.vfo]

[HKEY_CLASSES_ROOT\.vfs]

[HKEY_CLASSES_ROOT\.xxe]

[HKEY_CLASSES_ROOT\ATLPlugin.ATL3DShapeSphere=]

[HKEY_CLASSES_ROOT\FMObex.Semc.FMObjectProperties=]

[HKEY_CLASSES_ROOT\FMObexServer.Sony]

[HKEY_CLASSES_ROOT\ObexAuthenticationServiceDll.Sony]

[HKEY_CLASSES_ROOT\ObexOperationDll.Sony]

[HKEY_CLASSES_ROOT\OISbmpfile]

[HKEY_CLASSES_ROOT\OISemffile]

[HKEY_CLASSES_ROOT\OISgiffile]

[HKEY_CLASSES_ROOT\OISpngfile]

[HKEY_CLASSES_ROOT\OIStiffile]

[HKEY_CLASSES_ROOT\OISwmffile]

[HKEY_CLASSES_ROOT\PclePlayout.PlayoutFactoryHAL=]

[HKEY_CLASSES_ROOT\s]

[HKEY_CLASSES_ROOT\WMPCD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\OpenWithList]

[HKEY_CLASSES_ROOT\LimeWire\DefaultIcon]

[HKEY_CLASSES_ROOT\LimeWire\shell\open]

[HKEY_CLASSES_ROOT\LimeWire\shell\open\command]

[HKEY_CLASSES_ROOT\magnet\DefaultIcon]

[HKEY_CLASSES_ROOT\magnet\shell\open]

[HKEY_CLASSES_ROOT\magnet\shell\open\command]

[HKEY_CLASSES_ROOT\MMJB.MMZ\DefaultIcon]

[HKEY_CLASSES_ROOT\CLSID\{09CC593B-E8A9-4491-927D-A3E33534DDD4}]
"AppID"="{6E1E6AB9-6DCF-44C0-9D49-B51AFE8C027F}"

[HKEY_CLASSES_ROOT\CLSID\{09CC593B-E8A9-4491-927D-A3E33534DDD4}\InprocServer32]
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{09CC593B-E8A9-4491-927D-A3E33534DDD4}\ProgID]

[HKEY_CLASSES_ROOT\CLSID\{09CC593B-E8A9-4491-927D-A3E33534DDD4}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{09CC593B-E8A9-4491-927D-A3E33534DDD4}\TypeLib]

[HKEY_CLASSES_ROOT\CLSID\{09CC593B-E8A9-4491-927D-A3E33534DDD4}\VersionIndependentProgID]

[HKEY_CLASSES_ROOT\Applications\moviemk.exe]

[HKEY_CLASSES_ROOT\Applications\moviemk.exe\shell]
"FriendlyCache"="Movie Maker"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Help]
"nwindcs9.hlp"="C:\\Program Files\\Microsoft Office\\Office\\Samples\\"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Help]
"nwindcs9.cnt"="C:\\Program Files\\Microsoft Office\\Office\\Samples\\"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Help]
"nwind9.hlp"="C:\\Program Files\\Microsoft Office\\Office\\Samples\\"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Help]
"nwind9.cnt"="C:\\Program Files\\Microsoft Office\\Office\\Samples\\"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Help]
"nmplace.hlp"="C:\\Program Files\\Microsoft Office\\Office\\1036\\"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Help]
"sbcmpss.hlp"="C:\\Program Files\\Microsoft Office\\Office\\1036\\"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Help]
"snapview.hlp"="C:\\Program Files\\Microsoft Office\\Office\\1036\\"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Help]
"scanpst.hlp"="C:\\Program Files\\Fichiers communs\\SYSTEM\\MSMAPI\\1036\\"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\HTML Help]
"artgalry.chm"="C:\\Program Files\\Microsoft Office\\Office\\1036\\"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\Program Files\\Adobe\\Acrobat 6.0\\Reader\\"="1"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\Program Files\\Adobe\\Acrobat 6.0\\Reader\\ActiveX\\"=""

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\WINDOWS\\Microsoft.NET\\Framework\\v2.0.50727\\Microsoft .NET Framework 2.0\\"=""

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\Documents and Settings\\All Users\\Application Data\\SmartSound Software Inc\\Encoding\\"=""

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\Program Files\\Adobe\\Reader 8.0\\Setup Files\\{AC76BA86-7AD7-1036-7B44-A81000000003}\\"="1"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\WINDOWS\\Installer\\{AC76BA86-7AD7-1036-7B44-A81000000003}\\"=""

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\Program Files\\Yahoo!\\Yahoo! Music Jukebox\\skins\\"="1"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\Program Files\\Yahoo!\\Yahoo! Music Jukebox\\skins\\SlipStream\\"=""

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\Program Files\\Yahoo!\\Yahoo! Music Jukebox\\skins\\SlipStream\\theme\\"=""

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\WINDOWS\\winsxs\\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841\\"=""

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\WINDOWS\\winsxs\\Policies\\x86_policy.8.0.Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_x-ww_5f0bbcff\\"=""

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\Program Files\\Adobe\\Reader 8.0\\Update\\"=""

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\Program Files\\Sygate\\SPF\\"=""

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\Program Files\\Sygate\\"=""

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\Program Files\\Sygate\\SPF\\Help\\"=""

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\Program Files\\Sygate\\SPF\\Install\\"=""

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\Program Files\\Sygate\\SPF\\Netport\\"=""

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\Documents and Settings\\All Users\\Menu Démarrer\\Programmes\\Sygate Personal Firewall\\"=""

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Deewoo Network Manager]
"DisplayName"="Deewoo Network Manager removal"
"UninstallString"="C:\\WINDOWS\\system32\\ocntokdm.exe -UPop"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft .NET Framework 2.0]
"DisplayIcon"="C:\\WINDOWS\\system32\\msiexec.exe"
"DisplayName"="Microsoft .NET Framework 2.0"
"UninstallString"="C:\\WINDOWS\\Microsoft.NET\\Framework\\v2.0.50727\\Microsoft .NET Framework 2.0\\install.exe"
"VersionMinor"="0"
"VersionMajor"="2"
"Publisher"="Microsoft Corporation"
"InstallLocation"="C:\\WINDOWS\\Microsoft.NET\\Framework\\v2.0.50727\\"
"UninstallPath"="C:\\WINDOWS\\Microsoft.NET\\Framework\\v2.0.50727\\Microsoft .NET Framework 2.0\\install.exe"
"URLUpdateInfo"="https://visualstudio.microsoft.com/"
"HelpLink"="https://support.microsoft.com/ph/8291"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SudoPlanet]
"DisplayName"="SudoPlanet"
"UninstallString"="C:\\Program Files\\SudoPlanet\\uninst.exe"
"UninstallString2"="\"C:\\Program Files\\SudoPlanet\\uninst.exe\" /S"
"DisplayIcon"="C:\\Program Files\\SudoPlanet\\SudoPlanet.exe"
"DisplayVersion"="1.0"
"URLInfoAbout"="http://www.sudoplanet.com/"
"Publisher"="OOO «Favorit»"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Adobe Acrobat 4.0]
"SlowInfoCache"=hex:28,02,00,00,01,00,00,00,00,50,6d,00,00,00,00,00,a6,e6,e0,\
7b,53,3d,c5,01,05,00,00,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,\
61,00,6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,41,00,64,00,6f,00,62,\
00,65,00,5c,00,41,00,63,00,72,00,6f,00,62,00,61,00,74,00,20,00,34,00,2e,00,\
30,00,5c,00,52,00,65,00,61,00,64,00,65,00,72,00,5c,00,41,00,63,00,72,00,6f,\
00,52,00,64,00,33,00,32,00,2e,00,65,00,78,00,65,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}]
"SlowInfoCache"=hex:28,02,00,00,00,00,00,00,00,a0,71,00,00,00,00,00,00,00,00,\
00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\KB917283.T1_1ToU93_1]
"SlowInfoCache"=hex:28,02,00,00,00,00,00,00,ff,ff,ff,ff,ff,ff,ff,ff,00,00,00,\
00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\KB922770.T1_1ToU168_1]
"SlowInfoCache"=hex:28,02,00,00,00,00,00,00,ff,ff,ff,ff,ff,ff,ff,ff,00,00,00,\
00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\LiveReg]
"SlowInfoCache"=hex:28,02,00,00,01,00,00,00,00,e0,2d,00,00,00,00,00,ff,ff,ff,\
ff,ff,ff,ff,ff,02,00,00,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,\
61,00,6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,46,00,69,00,63,00,68,\
00,69,00,65,00,72,00,73,00,20,00,63,00,6f,00,6d,00,6d,00,75,00,6e,00,73,00,\
5c,00,53,00,79,00,6d,00,61,00,6e,00,74,00,65,00,63,00,20,00,53,00,68,00,61,\
00,72,00,65,00,64,00,5c,00,4c,00,69,00,76,00,65,00,52,00,65,00,67,00,5c,00,\
49,00,72,00,61,00,4c,00,72,00,53,00,68,00,6c,00,2e,00,65,00,78,00,65,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\LiveUpdate]
"SlowInfoCache"=hex:28,02,00,00,01,00,00,00,00,d0,51,00,00,00,00,00,ff,ff,ff,\
ff,ff,ff,ff,ff,02,00,00,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,\
61,00,6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,53,00,79,00,6d,00,61,\
00,6e,00,74,00,65,00,63,00,5c,00,4c,00,69,00,76,00,65,00,55,00,70,00,64,00,\
61,00,74,00,65,00,5c,00,41,00,4c,00,55,00,4e,00,4f,00,54,00,49,00,46,00,59,\
00,2e,00,45,00,58,00,45,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}]
"SlowInfoCache"=hex:28,02,00,00,00,00,00,00,00,74,2f,00,00,00,00,00,00,00,00,\
00,00,00,00,00,02,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{3877C2CD-F137-4144-BDB2-0A811492F920}]
"SlowInfoCache"=hex:28,02,00,00,00,00,00,00,ff,ff,ff,ff,ff,ff,ff,ff,00,00,00,\
00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{3E439F9C-CCF8-4AB8-8AE1-063F2042A78B}]
"SlowInfoCache"=hex:28,02,00,00,00,00,00,00,ff,ff,ff,ff,ff,ff,ff,ff,00,00,00,\
00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{7882C030-705A-45FF-A705-DC6089DC51BF}]
"SlowInfoCache"=hex:28,02,00,00,00,00,00,00,00,04,eb,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{9D4251DB-E86C-4A9B-BAEA-C9726BD7282B}]
"SlowInfoCache"=hex:28,02,00,00,00,00,00,00,ff,ff,ff,ff,ff,ff,ff,ff,00,00,00,\
00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A394E835-C8D6-4B4B-884B-D2709059F3BE}]
"SlowInfoCache"=hex:28,02,00,00,01,00,00,00,00,70,01,00,00,00,00,00,88,05,d7,\
4b,35,c3,c8,01,02,00,00,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,\
61,00,6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,4e,00,65,00,74,00,77,\
00,6f,00,72,00,6b,00,20,00,4d,00,6f,00,6e,00,69,00,74,00,6f,00,72,00,5c,00,\
6e,00,65,00,74,00,6d,00,6f,00,6e,00,2e,00,65,00,78,00,65,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{AC76BA86-7AD7-0000-2550-7A8C40000000}]
"SlowInfoCache"=hex:28,02,00,00,00,00,00,00,ff,ff,ff,ff,ff,ff,ff,ff,00,00,00,\
00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{AC76BA86-7AD7-1036-7B44-A00000000001}]
"SlowInfoCache"=hex:28,02,00,00,00,00,00,00,00,d8,48,03,00,00,00,00,00,00,00,\
00,00,00,00,00,02,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{AC76BA86-7AD7-1036-7B44-A70900000002}]
"SlowInfoCache"=hex:28,02,00,00,00,00,00,00,00,70,ca,04,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C6F1E87D-F3E1-4874-97EC-F87DAB6D6878}]
"SlowInfoCache"=hex:28,02,00,00,00,00,00,00,ff,ff,ff,ff,ff,ff,ff,ff,00,00,00,\
00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{CBBF4242-B809-3664-7ACA-18ED4EA7126F}]
"SlowInfoCache"=hex:28,02,00,00,00,00,00,00,ff,ff,ff,ff,ff,ff,ff,ff,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{DCE65B11-710D-4C54-9DE5-1A6A0BD2186B}]
"SlowInfoCache"=hex:28,02,00,00,01,00,00,00,00,d8,1d,00,00,00,00,00,72,65,63,\
27,03,4a,c7,01,00,00,00,00,43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,\
57,00,53,00,5c,00,49,00,6e,00,73,00,74,00,61,00,6c,00,6c,00,65,00,72,00,5c,\
00,7b,00,46,00,36,00,33,00,32,00,36,00,42,00,36,00,30,00,2d,00,31,00,42,00,\
31,00,44,00,2d,00,34,00,41,00,42,00,46,00,2d,00,42,00,46,00,43,00,44,00,2d,\
00,37,00,42,00,37,00,34,00,30,00,34,00,46,00,34,00,34,00,34,00,31,00,31,00,\
7d,00,5c,00,4d,00,73,00,62,00,6c,00,49,00,63,00,6f,00,2e,00,45,00,78,00,65,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

[HKEY_CURRENT_USER\Software\AntiVirus]

[HKEY_LOCAL_MACHINE\Software\Mozilla]

[HKEY_LOCAL_MACHINE\Software\MusicNet]

[HKEY_LOCAL_MACHINE\Software\RealNetworks]

[HKEY_LOCAL_MACHINE\Software\Sonic]

[HKEY_LOCAL_MACHINE\Software\Symantec]

[HKEY_LOCAL_MACHINE\Software\Trad-FR]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Antivirus"="C:\\Program Files\\VAV\\vav.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmcService"="C:\\PROGRA~1\\Sygate\\SPF\\smc.exe -startgui"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"lhgngmflfg"="c:\\windows\\system32\\lhgngmflfg.exe lhgngmflfg"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LSA Shellu"="C:\\Documents and Settings\\carriou\\lsass.exe"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Antivirus"="C:\\Program Files\\VAV\\vav.exe"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TheSpyBot"="C:\\Program Files\\TheSpyBot\\TheSpyBot.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Program Files\\VAV\\vav.exe"="Vista Antivirus 2008"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Documents and Settings\\Internet et MSN\\Local Settings\\Temporary Internet Files\\Content.IE5\\7VHLSKV2\\install_3968_MXw1fHx8fHx8fA_[1].exe"="install_3968_MXw1fHx8fHx8fA_[1]"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Program Files\\TheSpyBot\\TheSpyBot.exe"="TheSpyBot"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Program Files\\TheSpyBot\\Uninstall.exe"="Uninstall"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Documents and Settings\\Internet et MSN\\Local Settings\\Temporary Internet Files\\Content.IE5\\V8N5ZC2C\\avgas-setup-7.5.1.43[1].exe"="avgas-setup-7.5.1.43[1]"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Documents and Settings\\Internet et MSN\\Local Settings\\Temporary Internet Files\\Content.IE5\\WIXPGHZD\\HJTInstall[1].exe"="HijackThis"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Documents and Settings\\Internet et MSN\\Local Settings\\Temporary Internet Files\\Content.IE5\\ASMOO9I1\\wmp11-windowsxp-x86-FR-FR[1].exe"="wmp11-windowsxp-x86-FR-FR[1]"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Documents and Settings\\Internet et MSN\\Local Settings\\Temporary Internet Files\\Content.IE5\\45CM4FV4\\Lavasoft_Adaware_multi[1].exe"="Ad-Aware"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Documents and Settings\\Internet et MSN\\Local Settings\\Temporary Internet Files\\Content.IE5\\NJUFVJNJ\\ccsetup208[1].exe"="CCleaner Installer"

et le deuxieme

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\Installer.InstallerObj]

[HKEY_CLASSES_ROOT\Installer.InstallerObj\CLSID]

[HKEY_CLASSES_ROOT\Installer.InstallerObj\CurVer]

[HKEY_CLASSES_ROOT\Installer.InstallerObj.2]

[HKEY_CLASSES_ROOT\Installer.InstallerObj.2\CLSID]

et le rapport ccleaner

NETTOYAGE COMPLET - (32.520 secs)
------------------------------------------------------------------------------------------
27,3MB supprimés.
------------------------------------------------------------------------------------------

Détails des fichiers effacés
------------------------------------------------------------------------------------------
Fichiers Temporaires d'Internet Explorer (fichiers 1514) 25,7MB
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@rad.msn[2].txt 680 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@82.98.235[7].txt 70 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@affiliates.nexpartner[2].txt 293 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@67.205.95[3].txt 438 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@vlaze[2].txt 434 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@85.17.166[3].txt 166 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@scanner.vav-scanner[3].txt 170 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@speedbit[2].txt 270 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@live[3].txt 514 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@www.dailymotion[1].txt 75 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@adstronic[1].txt 125 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@64.22.123[2].txt 106 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@ads.react2media[3].txt 340 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@windowsmarketplace[3].txt 263 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@em.gad-network[3].txt 159 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@ads.vlaze[1].txt 105 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@fr.msn[2].txt 563 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@banner.cotedazurpalace[3].txt 290 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@adnetserver[3].txt 332 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@85.12.43[3].txt 273 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@login.live[3].txt 181 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@82.98.235[8].txt 70 bytes
C:\Documents and Settings\Internet et MSN\Cookies\internet_et_msn@detoxit

aliepeet Messages postés 27 Date d'inscription lundi 9 juin 2008 Statut Membre Dernière intervention 17 juillet 2010
10 juin 2008 à 22:39

et enfin mon dernier scan sur bitdefender

BitDefender Online Scanner

Scan report generated at: Mon, Jun 09, 2008 - 02:30:19

Scan path: C:\;D:\;

Statistics

Time
01:59:42

Files
252723

Folders
6612

Boot Sectors
2

Archives
8958

Packed Files
21117

Results

Identified Viruses
16

Infected Files
22

Suspect Files
0

Warnings
0

Disinfected
0

Deleted Files
21

Engines Info

Virus Definitions
1256958

Engine build
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)

Scan plugins
16

Archive plugins
42

Unpack plugins
7

E-mail plugins
6

System plugins
5

Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions

Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes

Scanned File
Status

C:\Documents and Settings\carriou\Application Data\Sun\Java\Deployment\cache\6.0\34\6df4ce22-29a2a78c=>NewURLClassLoader.class
Infected with: Java.Trojan.Exploit.Bytverify

C:\Documents and Settings\carriou\Application Data\Sun\Java\Deployment\cache\6.0\34\6df4ce22-29a2a78c=>NewURLClassLoader.class
Disinfection failed

C:\Documents and Settings\carriou\Application Data\Sun\Java\Deployment\cache\6.0\34\6df4ce22-29a2a78c=>NewURLClassLoader.class
Deleted

C:\Documents and Settings\carriou\Application Data\Sun\Java\Deployment\cache\6.0\34\6df4ce22-29a2a78c
Updated

C:\Documents and Settings\carriou\Local Settings\Temp\jar_cache11746.tmp=>NewURLClassLoader.class
Infected with: Java.Trojan.Exploit.Bytverify

C:\Documents and Settings\carriou\Local Settings\Temp\jar_cache11746.tmp=>NewURLClassLoader.class
Disinfection failed

C:\Documents and Settings\carriou\Local Settings\Temp\jar_cache11746.tmp=>NewURLClassLoader.class
Deleted

C:\Documents and Settings\carriou\Local Settings\Temp\jar_cache11746.tmp
Updated

C:\Program Files\VAV\vav.exe
Infected with: GenPack:Trojan.FakeAV.I

C:\Program Files\VAV\vav.exe
Disinfection failed

C:\Program Files\VAV\vav.exe
Delete failed

C:\smss.exe
Infected with: Dropped:Trojan.Downloader.VB.VPG

C:\smss.exe
Disinfection failed

C:\smss.exe
Deleted

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP489\A0167809.dll
Detected with: Adware.BHO.WRG

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP489\A0167809.dll
Deleted

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP489\A0167833.exe=>(NSIS 2g)=>bzip2_solid_nsis0002
Detected with: Adware.BHO.WRG

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP489\A0167833.exe=>(NSIS 2g)=>bzip2_solid_nsis0002
Deleted

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP489\A0167833.exe=>(NSIS 2g)
Update failed

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP489\A0167834.exe
Infected with: Trojan.Generic.271296

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP489\A0167834.exe
Deleted

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP489\A0167835.exe
Detected with: Adware.PlayMp3z.A

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP489\A0167835.exe
Disinfection failed

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP489\A0167835.exe
Deleted

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP491\A0194002.exe
Detected with: Adware.BHO.WRH

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP491\A0194002.exe
Deleted

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP491\A0194003.dll
Detected with: Adware.BHO.WRG

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP491\A0194003.dll
Deleted

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP491\A0194013.exe
Detected with: Adware.BHO.WRH

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP491\A0194013.exe
Deleted

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP491\A0194050.exe
Infected with: Trojan.Downloader.Matcash.J

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP491\A0194050.exe
Disinfection failed

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP491\A0194050.exe
Deleted

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP491\A0194051.dll
Infected with: MemScan:Trojan.Vundo.ENL

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP491\A0194051.dll
Disinfection failed

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP491\A0194051.dll
Deleted

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP491\A0194052.dll
Detected with: Adware.CommAd.A

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP491\A0194052.dll
Disinfection failed

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP491\A0194052.dll
Deleted

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP491\A0194053.exe
Infected with: Trojan.Generic.107114

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP491\A0194053.exe
Disinfection failed

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP491\A0194053.exe
Deleted

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP495\A0195208.exe
Infected with: Trojan.Generic.278812

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP495\A0195208.exe
Deleted

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP495\A0195210.exe
Infected with: Dropped:Trojan.Downloader.VB.VPG

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP495\A0195210.exe
Disinfection failed

C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP495\A0195210.exe
Deleted

C:\WINDOWS\Downloaded Program Files\installer2.dll
Detected with: Adware.Clickmedia.A

C:\WINDOWS\Downloaded Program Files\installer2.dll
Deleted

C:\WINDOWS\system32\gside.exe=>(NSIS o)=>bzip2_solid_nsis0002
Detected with: Adware.BHO.WRG

C:\WINDOWS\system32\gside.exe=>(NSIS o)=>bzip2_solid_nsis0002
Deleted

C:\WINDOWS\system32\gside.exe=>(NSIS o)
Update failed

C:\WINDOWS\system32\pac.txt
Infected with: Trojan.Downloader.VB.VPG

C:\WINDOWS\system32\pac.txt
Deleted

C:\WINDOWS\system32\yayxxuus.dll
Infected with: Trojan.Vundo.ERD

C:\WINDOWS\system32\yayxxuus.dll
Deleted

C:\WINDOWS\uninstall_nmon.vbs
Infected with: Trojan.Small.WY

C:\WINDOWS\uninstall_nmon.vbs
Deleted

Voilà, esperons que ceci éclairera ta lanterne, moi j'y comprends rien!! lol Merci beaucoup en tout cas!!

Réponse 7 / 7

^^Marie^^ Messages postés 113901 Date d'inscription mardi 6 septembre 2005 Statut Membre Dernière intervention 28 août 2020 3 275
11 juin 2008 à 07:47

Salut

Fais un clic droit sur ce lien :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
Fais un clic droit sur navilog1.zip et choisis "tout extraire"
Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord)
Patiente jusqu'au message :
*** Analyse Termine le ..... ***
Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
Copie-colle l'intégralité dans une réponse. Referme le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)
TUTO :: http://www.malekal.com/Adware.Magic_Control.php

Télécharge SmitfraudFix
Utilitaire de S!Ri: Moe et balltrap34
http://siri.urz.free.fr/Fix/SmitfraudFix.php
et télécharge SmitfraudFix.exe.

Regarde le tuto

Exécute le en choisissant l’option 1,
il va générer un rapport
Copie/colle le sur le poste stp.

Bon courage
A++

Discussions similaires

Est ce que le site tlauncher est dangereux ?

Softonic,est-ce un virus ?

4 virus en raison d’un porno ????

problême Opéra est ce un virus??

Désinstaller Softonic