Infection virale très difficile à éradiquer !

jay -  
jlpjlp Messages postés 52399 Statut Contributeur sécurité -
Bonjour,

Alors voila je ne sais plus quoi faire j'ai tout tenté : Mon ordi est infecté par un virus ou quelque chose et voici les symptômes : Pas de mise à jour possible d'avast , redirection quand je clique sur un lien google , impossibilité d'accéder à des sites d'antivirus ou antivirus en ligne , redémarrage automatique du pc . Quelqu'un pourrait il m'aider s'il vous plait ?
Configuration: Windows XP
Firefox 3.0.3

20 réponses

  1.
    jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    slt,

    colle un rapport hijackthis

    http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

    manuel :

    https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

    Je conseille de renomer Hijackthis, pour contrer une éventuelle infection de Vundo.

    ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste

    Ensuite avec Explorer créer un dossier c:\hijackthis
    Décompresser Hijackthis dans ce dossier.
    C'est important pour les sauvegardes."
    0
  2. jay
     
    Tout d'abord merci pour ta réponse voici le rapport :

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:36:49, on 06/10/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Creative\Shared Files\CTSched.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\WINDOWS\System32\Ext\RestoreDesktop\RestoreDesktop.exe
    C:\Documents and Settings\Jeremy\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Spyware Terminator\sp_rsser.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\PROGRA~1\Crawler\Toolbar\CToolbar.exe
    C:\Documents and Settings\Jeremy\Bureau\SmitfraudFix\Policies.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - Default URLSearchHook is missing
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
    O3 - Toolbar: Dme&x Toolbar - {3F756BC4-26CB-497E-9409-8F09C1850C80} - C:\WINDOWS\system32\Ext\DmexBar\dmexbar.dll
    O3 - Toolbar: Barre d'outils &Crawler - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
    O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [CreativeTaskScheduler] "C:\Program Files\Creative\Shared Files\CTSched.exe" /logon
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKCU\..\Run: [RestoreDesktop] C:\WINDOWS\System32\Ext\RestoreDesktop\RestoreDesktop.exe
    O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Jeremy\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
    O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE RÉSEAU')
    O8 - Extra context menu item: Crawler Search - tbr:iemenu
    O8 - Extra context menu item: Get File Size - res://C:\WINDOWS\System32\Ext\GetFileSize\GetFileSize.exe/130
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra button: Diminuer la taille de la page - {A0E6D3BD-A661-447D-8634-0751467857F3} - C:\WINDOWS\system32\Ext\EasyRead\ZoomOut.js
    O9 - Extra button: Agrandir la taille de la page - {AEBB571B-4C48-438D-808D-999F168CDECE} - C:\WINDOWS\system32\Ext\EasyRead\ZoomIn.js
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase5036.cab
    O16 - DPF: {DFB5BCF1-06AE-4ABB-BFA8-1E228F41C50A} - https://www.bobtv.fr/download/cfweb_www.bobtv.fr-download_instmodule.exe
    O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
    O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
    0
  4. jay
     
    Ok

    Voici le rapport :

    Malwarebytes' Anti-Malware 1.28
    Version de la base de données: 1225
    Windows 5.1.2600 Service Pack 2

    06/10/2008 12:33:28
    mbam-log-2008-10-06 (12-33-16).txt

    Type de recherche: Examen complet (C:\|D:\|)
    Eléments examinés: 99543
    Temps écoulé: 48 minute(s), 19 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 2
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 2
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 10

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\tdssdata (Trojan.Agent) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\tdss (Trojan.Agent) -> No action taken.

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Malware.Trace) -> Data: c:\windows\system32\ -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Malware.Trace) -> Data: system32\ -> No action taken.

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    C:\WINDOWS\system32\ (Malware.Trace) -> No action taken.
    C:\WINDOWS\system32\drivers\ (Trojan.Agent) -> No action taken.
    C:\WINDOWS\rundll16.exe (Fake.Dropped.Malware) -> No action taken.
    C:\WINDOWS\system32\vcmgcd32.dll (Trojan.Agent) -> No action taken.
    C:\WINDOWS\logo1_.exe (Worm.Viking) -> No action taken.
    C:\WINDOWS\system32\systems.txt (Trojan.FakeAlert) -> No action taken.
    C:\WINDOWS\system32\tdssinit.dll (Rootkit.Agent) -> No action taken.
    C:\WINDOWS\system32\tdssmain.dll (Rootkit.Agent) -> No action taken.
    C:\WINDOWS\system32\tdssserf.dll (Rootkit.Agent) -> No action taken.
    C:\WINDOWS\system32\drivers\tdssserv.sys (Rootkit.Agent) -> No action taken.
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    il faut virer tout ce qui a été trouvé !!!!!

    puis

    télécharge combofix (par sUBs) ici :

    http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    et enregistre le sur le bureau.

    déconnecte toi d'internet et ferme toutes tes applications.

    désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

    double-clique sur combofix.exe et suis les instructions

    à la fin, il va produire un rapport C:\ComboFix.txt

    réactive ton parefeu, ton antivirus, la garde de ton antispyware

    copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

    Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

    Tu as un tutoriel complet ici :

    https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
    0
  7. jay
     
    Voila le rapport il est assez enorme :

    ComboFix 08-10-05.06 - Jeremy 2008-10-06 12:56:00.1 - NTFSx86
    Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.331 [GMT 2:00]
    Lancé depuis: C:\Documents and Settings\Jeremy\Bureau\ComboFix.exe
    * Un nouveau point de restauration a été créé

    [COLOR=RED][B]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/B][/COLOR]
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Documents and Settings\miolu\Application Data\install.dat
    C:\Documents and Settings\miolu\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
    C:\WINDOWS\regedit.com
    C:\WINDOWS\system32\ext
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Aut2Exe\Aut2Exe.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Aut2Exe\AutoItSC.bin
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Aut2Exe\Exe2Aut.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\AutoIt.chm
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\AutoIt.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\_Run_Me_First.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\_ReadMe_.txt
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Adlib.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Calc.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Comspec.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\CPanel.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\DialUpNetworking.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Gosub.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\IfEqual.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Notepad.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Shutdown98.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Snapshot.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\BKRenamer\bkren.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\BKRenamer\bkren.txt
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\choice.com
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\choice.txt
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\deltree.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\NirCmd - Freeware command-line tool for Windows.mht
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\nircmd.chm
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\nircmd.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\nircmdc.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\RegCmd\readme.txt
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\RegCmd\regcmd.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\RegCmd\regcmd.ini
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\sleep.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\sleep.txt
    C:\WINDOWS\system32\ext\+BONUS\BONUS_Lisez.moi.txt
    C:\WINDOWS\system32\ext\+BONUS\CustomStart\CustomStart.exe
    C:\WINDOWS\system32\ext\+BONUS\DeskProjection\DProj.exe
    C:\WINDOWS\system32\ext\+BONUS\DeskProjection\Readme.txt
    C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\dd.exe
    C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\DoubleDesktop.url
    C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\Readme.txt
    C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\v2.0
    C:\WINDOWS\system32\ext\+BONUS\ExpiredCookiesCleaner\Expired Cookies Cleaner.url
    C:\WINDOWS\system32\ext\+BONUS\ExpiredCookiesCleaner\ExpiredCookiesCleaner.exe
    C:\WINDOWS\system32\ext\+BONUS\ExpiredCookiesCleaner\ReadMe.txt
    C:\WINDOWS\system32\ext\+BONUS\FileCHK\FileCHK.exe
    C:\WINDOWS\system32\ext\+BONUS\FileCHK\readme.txt
    C:\WINDOWS\system32\ext\+BONUS\FileCHK\Recover CHK Files.url
    C:\WINDOWS\system32\ext\+BONUS\FileCHK\source.zip
    C:\WINDOWS\system32\ext\+BONUS\FileCHK\v1.1.03
    C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\Changes.txt
    C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\Excludes.dat
    C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\FocusAlpha.exe
    C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\License.txt
    C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.CNT
    C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.exe
    C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.hlp
    C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.INI
    C:\WINDOWS\system32\ext\+BONUS\InCtrl5\v1.0fr
    C:\WINDOWS\system32\ext\+BONUS\MatroskaShellExtension\Matroska.url
    C:\WINDOWS\system32\ext\+BONUS\MatroskaShellExtension\MatroskaShellExtension_2.8.exe
    C:\WINDOWS\system32\ext\+BONUS\MIMEView\MIMEView.chm
    C:\WINDOWS\system32\ext\+BONUS\MIMEView\MIMEView.exe
    C:\WINDOWS\system32\ext\+BONUS\MIMEView\MIMEView.url
    C:\WINDOWS\system32\ext\+BONUS\MIMEView\v1.10
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\about.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\about1.PNG
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\compatibilityissues.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusions.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusions1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusions2.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings2.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings3.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings4.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\features.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\frequentlyaskedquestions.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\generalsettings.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\generalsettings1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\gettingsupport.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\hotkeys.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\hotkeys1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\icon1.gif
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\icon2.gif
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\index.html
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\introduction.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\introduction1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\knownissues.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\left.html
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\settings.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thanks.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize2.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize3.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize4.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thumbnailsettings.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thumbnailsettings1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\what'snew.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Images\about.png
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Images\splash.png
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\miniMIZE.dll
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\miniMIZE.exe
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\miniMIZE.url
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Minimize_Settings.reg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\v1.0.34
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\buy.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\copyright.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\failed.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\faq.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\getplus.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\header.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\InTray.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\MemUsage.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\MmmCfg.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\NoMmmBar.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj103title20shd2pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj104geo247shd19pg5p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj105geo248pg5p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj107geo260shd20pg5p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj10geo29pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj110geo267shd21pg6p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj112geo105pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj113geo272shd22pg6p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj114geo273pg6p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj115geo114pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj116geo77pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj117geo107pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj124geo109shd27pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj127geo159shd26pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj139geo126shd28pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj143geo139shd29pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj190geo163pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj198geo172shd36pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj205geo187pg9p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj206geo188shd35pg9p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj208geo189pg10p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj208geo189pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj208geo189pg9p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj209geo190pg9p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj210geo168shd52pg10p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj212geo165shd46pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj216geo171pg10p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj217geo177pg10p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj218geo178pg10p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj219geo180shd38pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj220geo184pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj222geo185shd56pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj223geo183shd56pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj224geo182shd53pg10p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj225geo197shd37pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj22geo56shd7pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj231geo203shd39pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj232geo194pg9p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj236geo205shd54pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj243geo303shd40pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj247geo308shd41pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj258geo232pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj259geo235pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj261geo237pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj262geo249shd48pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj263geo236shd44pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj265geo238pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj269geo202shd45pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj274geo227shd47pg9p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj278geo246pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj281geo252shd58pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj314geo230pg12p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj315geo231shd59pg12p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj316geo287pg12p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj319geo292shd50pg13p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj321geo289shd60pg12p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj322geo290pg12p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj324geo233shd51pg13p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj325geo234pg13p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj327geo296pg13p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj330geo298pg13p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj331geo299shd61pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj332geo241pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj367title279pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj375title70pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj37geo72shd9pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj39geo73shd10pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj3geo19shd4pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj410geo264shd64pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj431title126pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj521geo433shd6pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj61geo62shd8pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj63geo33shd12pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj64geo34pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj66geo82shd13pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj73geo104pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj75geo127pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj76geo128pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj77geo129pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj7geo24pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj80geo80shd11pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj82geo57pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj83geo61shd24pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj84geo63pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj85title92pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj88geo103shd25pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj91title91pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj92geo216shd15pg4p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj93geo226pg4p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj94geo229shd16pg4p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj95title96pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj9geo28shd5pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\pluscfg.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PlusOptions'.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PlusOptions.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_BarColor.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_BeforeWildMenu.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_Folders.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_iecontext.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_iemenubar.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_IntroCfg.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_IntroMenu.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_MmmTaskbar.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_StartMenu.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_WildCfg.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_WildMenu.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\top.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\topleft.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\verify.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\x-click-but23.gif
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\index.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\licenses.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\mmmplus.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\new.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\screenshots.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\sending.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\success.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\whatsmmmplus.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\LANCER AU DEMARRAGE.cmd
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Mmm.dll
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Mmm.exe
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Mmm.url
    C:\WINDOWS\system32\ext\+BONUS\Mmm\SUPPRIMER DU DEMARRAGE.cmd
    C:\WINDOWS\system32\ext\+BONUS\Mmm\v2.02
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Demo JAVA\Concept originel Fold n' Drop.url
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Demo JAVA\foldndrop2.jar
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Demo JAVA\foldndrop2.txt
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\background.png
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado - kMonos.NET.url
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado.dll
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado.exe
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado.ini
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\ReadMe.txt
    C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\data.clp
    C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\data.qrp
    C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\mclip.cnt
    C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\mclip.exe
    C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\MCLIP.HLP
    C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\mclip.url
    C:\WINDOWS\system32\ext\+BONUS\ProduKey\ProduKey.chm
    C:\WINDOWS\system32\ext\+BONUS\ProduKey\ProduKey.url
    C:\WINDOWS\system32\ext\+BONUS\ProduKey\ProduKey_lng.ini
    C:\WINDOWS\system32\ext\+BONUS\ProduKey\readme.txt
    C:\WINDOWS\system32\ext\+BONUS\ProduKey\v1.03fr
    C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\INSTALLER.cmd
    C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\Registry Explorer.url
    C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\regxplor.dll
    C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\v1.4.4
    C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\Resize Enable.url
    C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\ResizeEnable.dll
    C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\ResizeEnable.txt
    C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\ResizeEnableRunner.exe
    C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\v1.4
    C:\WINDOWS\system32\ext\+BONUS\RickDangerous\ReadMe.html
    C:\WINDOWS\system32\ext\+BONUS\RickDangerous\RICK DANGEROUS Forever.url
    C:\WINDOWS\system32\ext\+BONUS\RickDangerous\rick32kb.exe
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\actions.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\actions2.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\index.html
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\menu.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\menu2.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\menuc.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\options.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\sdesk.html
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\task.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\toolwin1.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\toolwin2.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\sdesk.dll
    C:\WINDOWS\system32\ext\+BONUS\SDesk\sdesk.exe
    C:\WINDOWS\system32\ext\+BONUS\SDesk\sdesk.ini
    C:\WINDOWS\system32\ext\+BONUS\SDesk\v1.66s
    C:\WINDOWS\system32\ext\+BONUS\SDesk\WINDOWS (copier sdesk.ini ici).lnk
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Empty.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Full.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Full2.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\led.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Skin.ini
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Empty.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Full.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Full2.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\led.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Skin.ini
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\frReadme.txt
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Language\English.ini
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Language\French.ini
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Empty.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Full.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Full2.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\led.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Skin.ini
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\SkinTrash.exe
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\SkinTrash.ini
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Empty.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Full.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Full2.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\led.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Skin.ini
    C:\WINDOWS\system32\ext\+BONUS\SMPSeesaw (pour bi-proc)\readme.rtf
    C:\WINDOWS\system32\ext\+BONUS\SMPSeesaw (pour bi-proc)\SMP Seesaw.exe
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\ApiHooks.dll
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\lisezmoi.txt
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\Psapi.Dll
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\SCConfig.exe
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\SCHook.dll
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\SuperCopier.exe
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\v1.35fr stable
    C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\ConfigTsXP.exe
    C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\lang\_Translation.txt
    C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\lang\Français.lng
    C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\TaskSwitchXP.exe
    C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\TaskSwitchXP.url
    C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\v2.0.8fr
    C:\WINDOWS\system32\ext\+BONUS\TextGrabber\Lisez_moi.txt
    C:\WINDOWS\system32\ext\+BONUS\TextGrabber\TextGrab.dll
    C:\WINDOWS\system32\ext\+BONUS\TextGrabber\TextGrabber.exe
    C:\WINDOWS\system32\ext\+BONUS\TextGrabber\TextGrabber.hlp
    C:\WINDOWS\system32\ext\+BONUS\TextGrabber\v1.0
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\Data\About\About.ini
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\Data\About\About.png
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\Languages\1036.ini
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\Languages\LanguageID Finder.exe
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\Plugins\iBounce\fx.dll
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\Plugins\iZoom\fx.dll
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\UberIcon.dll
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\UberIcon.url
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\UberIconManager.exe
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\v1.0fr
    C:\WINDOWS\system32\ext\+BONUS\xCap\README.txt
    C:\WINDOWS\system32\ext\+BONUS\xCap\settings.ini
    C:\WINDOWS\system32\ext\+BONUS\xCap\xCapV109.exe
    C:\WINDOWS\system32\ext\A43\a43.dat
    C:\WINDOWS\system32\ext\A43\A43.exe
    C:\WINDOWS\system32\ext\A43\A43.ini
    C:\WINDOWS\system32\ext\A43\A43.url
    C:\WINDOWS\system32\ext\A43\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\A43\language.ini
    C:\WINDOWS\system32\ext\A43\ReadMe.txt
    C:\WINDOWS\system32\ext\A43\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\A43\unrar.dll
    C:\WINDOWS\system32\ext\A43\v2.45fr
    C:\WINDOWS\system32\ext\AllSnap\allSnap.chm
    C:\WINDOWS\system32\ext\AllSnap\allSnap.exe
    C:\WINDOWS\system32\ext\AllSnap\auto_lineup.dll
    C:\WINDOWS\system32\ext\AllSnap\snap_libW.dll
    C:\WINDOWS\system32\ext\AllSnap\v1.31.5fr
    C:\WINDOWS\system32\ext\Applications.htm
    C:\WINDOWS\system32\ext\Applications\A43.gif
    C:\WINDOWS\system32\ext\Applications\allsnap01.gif
    C:\WINDOWS\system32\ext\Applications\allsnap02.gif
    C:\WINDOWS\system32\ext\Applications\allsnap03.gif
    C:\WINDOWS\system32\ext\Applications\allsnap04.gif
    C:\WINDOWS\system32\ext\Applications\AsteriskLogger.gif
    C:\WINDOWS\system32\ext\Applications\audio01.gif
    C:\WINDOWS\system32\ext\Applications\audio02.gif
    C:\WINDOWS\system32\ext\Applications\Autoruns.gif
    C:\WINDOWS\system32\ext\Applications\CatAutres.gif
    C:\WINDOWS\system32\ext\Applications\CatDemarrage.gif
    C:\WINDOWS\system32\ext\Applications\CatMenuDemarrer.gif
    C:\WINDOWS\system32\ext\Applications\CatMenuFichiersDossiers.gif
    C:\WINDOWS\system32\ext\Applications\CatMenuPosteTravail.gif
    C:\WINDOWS\system32\ext\Applications\CatProprietesFichiersDossiers.gif
    C:\WINDOWS\system32\ext\Applications\cdbfshell.gif
    C:\WINDOWS\system32\ext\Applications\cliptray01.gif
    C:\WINDOWS\system32\ext\Applications\cliptray02.gif
    C:\WINDOWS\system32\ext\Applications\cliptray03.gif
    C:\WINDOWS\system32\ext\Applications\cliptray04.gif
    C:\WINDOWS\system32\ext\Applications\cliptray05.gif
    C:\WINDOWS\system32\ext\Applications\clocx01.gif
    C:\WINDOWS\system32\ext\Applications\clocx02.gif
    C:\WINDOWS\system32\ext\Applications\clocx03.gif
    C:\WINDOWS\system32\ext\Applications\clocx04.gif
    C:\WINDOWS\system32\ext\Applications\coccinelle.gif
    C:\WINDOWS\system32\ext\Applications\contextviewer1.gif
    C:\WINDOWS\system32\ext\Applications\contextviewer2.gif
    C:\WINDOWS\system32\ext\Applications\CopyURL.gif
    C:\WINDOWS\system32\ext\Applications\CurrentPorts.gif
    C:\WINDOWS\system32\ext\Applications\demineur.gif
    C:\WINDOWS\system32\ext\Applications\dialog01.gif
    C:\WINDOWS\system32\ext\Applications\dialog02.gif
    C:\WINDOWS\system32\ext\Applications\dialog03.gif
    C:\WINDOWS\system32\ext\Applications\disasteroids.gif
    C:\WINDOWS\system32\ext\Applications\divx.gif
    C:\WINDOWS\system32\ext\Applications\dmex01.gif
    C:\WINDOWS\system32\ext\Applications\dmex02.gif
    C:\WINDOWS\system32\ext\Applications\dmexcol.gif
    C:\WINDOWS\system32\ext\Applications\doubledriver.gif
    C:\WINDOWS\system32\ext\Applications\edithexa.gif
    C:\WINDOWS\system32\ext\Applications\everest.gif
    C:\WINDOWS\system32\ext\Applications\exif.gif
    C:\WINDOWS\system32\ext\Applications\favoritesview.gif
    C:\WINDOWS\system32\ext\Applications\febooticase.gif
    C:\WINDOWS\system32\ext\Applications\febootihex.gif
    C:\WINDOWS\system32\ext\Applications\filenote01.gif
    C:\WINDOWS\system32\ext\Applications\filenote02.gif
    C:\WINDOWS\system32\ext\Applications\filenote03.gif
    C:\WINDOWS\system32\ext\Applications\flexiblerenamer.gif
    C:\WINDOWS\system32\ext\Applications\foldersize.gif
    C:\WINDOWS\system32\ext\Applications\fond.jpg
    C:\WINDOWS\system32\ext\Applications\getfilesize1.gif
    C:\WINDOWS\system32\ext\Applications\getfilesize2.gif
    C:\WINDOWS\system32\ext\Applications\gmail01.gif
    C:\WINDOWS\system32\ext\Applications\gmail02.gif
    C:\WINDOWS\system32\ext\Applications\gmail03.gif
    C:\WINDOWS\system32\ext\Applications\gmail04.gif
    C:\WINDOWS\system32\ext\Applications\gotoshared.gif
    C:\WINDOWS\system32\ext\Applications\hash.gif
    C:\WINDOWS\system32\ext\Applications\IECookiesView.gif
    C:\WINDOWS\system32\ext\Applications\IEHistoryView.gif
    C:\WINDOWS\system32\ext\Applications\IEPrivacyKeeper1.gif
    C:\WINDOWS\system32\ext\Applications\IEPrivacyKeeper2.gif
    C:\WINDOWS\system32\ext\Applications\invaders1.gif
    C:\WINDOWS\system32\ext\Applications\invaders2.gif
    C:\WINDOWS\system32\ext\Applications\LabelFonctions.gif
    C:\WINDOWS\system32\ext\Applications\LabelRepertoire.gif
    C:\WINDOWS\system32\ext\Applications\LabelType.gif
    C:\WINDOWS\system32\ext\Applications\menupostetravail.gif
    C:\WINDOWS\system32\ext\Applications\messenpass.gif
    C:\WINDOWS\system32\ext\Applications\mitecexec01.gif
    C:\WINDOWS\system32\ext\Applications\mitecexec02.gif
    C:\WINDOWS\system32\ext\Applications\mitecexec03.gif
    C:\WINDOWS\system32\ext\Applications\mitecexec04.gif
    C:\WINDOWS\system32\ext\Applications\mitecimage01.gif
    C:\WINDOWS\system32\ext\Applications\mitecimage02.gif
    C:\WINDOWS\system32\ext\Applications\mpv.gif
    C:\WINDOWS\system32\ext\Applications\netpass.gif
    C:\WINDOWS\system32\ext\Applications\notepad++.gif
    C:\WINDOWS\system32\ext\Applications\Othello.gif
    C:\WINDOWS\system32\ext\Applications\pathcopy.gif
    C:\WINDOWS\system32\ext\Applications\phmBootLogo.dll..gif
    C:\WINDOWS\system32\ext\Applications\phmFolderAppearance.dll.gif
    C:\WINDOWS\system32\ext\Applications\phmFolderAppearance02.dll.gif
    C:\WINDOWS\system32\ext\Applications\ProcessViewer.gif
    C:\WINDOWS\system32\ext\Applications\propplus01.gif
    C:\WINDOWS\system32\ext\Applications\propplus02.gif
    C:\WINDOWS\system32\ext\Applications\pspad.gif
    C:\WINDOWS\system32\ext\Applications\pspv.gif
    C:\WINDOWS\system32\ext\Applications\regalyzer.gif
    C:\WINDOWS\system32\ext\Applications\regcompact.gif
    C:\WINDOWS\system32\ext\Applications\regseeker.gif
    C:\WINDOWS\system32\ext\Applications\Regshot.gif
    C:\WINDOWS\system32\ext\Applications\restoredesktop.gif
    C:\WINDOWS\system32\ext\Applications\runwithparameters.gif
    C:\WINDOWS\system32\ext\Applications\shellmenuview.gif
    C:\WINDOWS\system32\ext\Applications\sherlock.gif
    C:\WINDOWS\system32\ext\Applications\shortcutsman.gif
    C:\WINDOWS\system32\ext\Applications\sizer1.gif
    C:\WINDOWS\system32\ext\Applications\sizer2.gif
    C:\WINDOWS\system32\ext\Applications\sizer3.gif
    C:\WINDOWS\system32\ext\Applications\starter.gif
    C:\WINDOWS\system32\ext\Applications\statbar01.gif
    C:\WINDOWS\system32\ext\Applications\statbar02.gif
    C:\WINDOWS\system32\ext\Applications\swf1.gif
    C:\WINDOWS\system32\ext\Applications\swf2.gif
    C:\WINDOWS\system32\ext\Applications\swf3.gif
    C:\WINDOWS\system32\ext\Applications\swf4.gif
    C:\WINDOWS\system32\ext\Applications\thumbview.gif
    C:\WINDOWS\system32\ext\Applications\tri.gif
    C:\WINDOWS\system32\ext\Applications\tugzip.gif
    C:\WINDOWS\system32\ext\Applications\TypeDLL.gif
    C:\WINDOWS\system32\ext\Applications\TypeEXE.gif
    C:\WINDOWS\system32\ext\Applications\unlocker01.gif
    C:\WINDOWS\system32\ext\Applications\unlocker02.gif
    C:\WINDOWS\system32\ext\Applications\unlocker03.gif
    C:\WINDOWS\system32\ext\Applications\whyreboot.gif
    C:\WINDOWS\system32\ext\Applications\winroll.gif
    C:\WINDOWS\system32\ext\Applications\winservices.gif
    C:\WINDOWS\system32\ext\Applications\xnstop.gif
    C:\WINDOWS\system32\ext\Applications\XPSP2+_Chrysalide_Widescreen.jpg
    C:\WINDOWS\system32\ext\Applications\xvid.gif
    C:\WINDOWS\system32\ext\Applications\yz01.gif
    C:\WINDOWS\system32\ext\Applications\yz02.gif
    C:\WINDOWS\system32\ext\Applications\yz02b.gif
    C:\WINDOWS\system32\ext\Applications\yz03.gif
    C:\WINDOWS\system32\ext\AsteriskLogger\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\AsteriskLogger\Asterisk Logger.url
    C:\WINDOWS\system32\ext\AsteriskLogger\astlog.chm
    C:\WINDOWS\system32\ext\AsteriskLogger\astlog_lng.ini
    C:\WINDOWS\system32\ext\AsteriskLogger\ReadMe.txt
    C:\WINDOWS\system32\ext\AsteriskLogger\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\AsteriskLogger\v1.02fr
    C:\WINDOWS\system32\ext\Audioshellext\AudioShell.url
    C:\WINDOWS\system32\ext\Audioshellext\AudioShellExt.dll
    C:\WINDOWS\system32\ext\Audioshellext\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\Audioshellext\INSTALLER.cmd
    C:\WINDOWS\system32\ext\Audioshellext\v1.0.1
    C:\WINDOWS\system32\ext\Autoruns\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\Autoruns\autoruns.chm
    C:\WINDOWS\system32\ext\Autoruns\autoruns.exe
    C:\WINDOWS\system32\ext\Autoruns\Autoruns.url
    C:\WINDOWS\system32\ext\Autoruns\autorunsc.exe
    C:\WINDOWS\system32\ext\Autoruns\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\Autoruns\v8.42fr
    C:\WINDOWS\system32\ext\CDBFShellExt\CDBF Shell Extension.url
    C:\WINDOWS\system32\ext\CDBFShellExt\cdbfshell.dll
    C:\WINDOWS\system32\ext\CDBFShellExt\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\CDBFShellExt\exemple.dbf
    C:\WINDOWS\system32\ext\CDBFShellExt\INSTALLER.cmd
    C:\WINDOWS\system32\ext\CDBFShellExt\readme.txt
    C:\WINDOWS\system32\ext\CDBFShellExt\v1.0fr
    C:\WINDOWS\system32\ext\ClipTray\ClipTray.chm
    C:\WINDOWS\system32\ext\ClipTray\ClipTray.exe
    C:\WINDOWS\system32\ext\ClipTray\ClipTray.ini
    C:\WINDOWS\system32\ext\ClipTray\ClipTray.url
    C:\WINDOWS\system32\ext\ClipTray\Personal.dat
    C:\WINDOWS\system32\ext\ClipTray\v1.61fr
    C:\WINDOWS\system32\ext\ClocX\ClocX.exe
    C:\WINDOWS\system32\ext\ClocX\ClocX.url
    C:\WINDOWS\system32\ext\ClocX\Lang\French.lng
    C:\WINDOWS\system32\ext\ClocX\Presets\BlueSphere2.png
    C:\WINDOWS\system32\ext\ClocX\Presets\CloQ.ini
    C:\WINDOWS\system32\ext\ClocX\Presets\CloQ.png
    C:\WINDOWS\system32\ext\ClocX\Presets\default.bmp
    C:\WINDOWS\system32\ext\ClocX\Presets\default.ini
    C:\WINDOWS\system32\ext\ClocX\Presets\GlowMarvilla.png
    C:\WINDOWS\system32\ext\ClocX\Presets\Snowball Clock.png
    C:\WINDOWS\system32\ext\ClocX\Presets\street.ini
    C:\WINDOWS\system32\ext\ClocX\Presets\street.png
    C:\WINDOWS\system32\ext\ClocX\Presets\streethour.hpng
    C:\WINDOWS\system32\ext\ClocX\Presets\streetmin.hpng
    C:\WINDOWS\system32\ext\ClocX\ReadMe.txt
    C:\WINDOWS\system32\ext\ClocX\v1.5.1fr
    C:\WINDOWS\system32\ext\ContextViewer\Context Viewer.url
    C:\WINDOWS\system32\ext\ContextViewer\ContView.exe
    C:\WINDOWS\system32\ext\ContextViewer\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\ContextViewer\INSTALLER.cmd
    C:\WINDOWS\system32\ext\ContextViewer\plugins\AXZIP.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\AXZIP.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifDIB.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFGIF.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifgif.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFJPEG.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifjpeg.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFMAG.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFMAG.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPI.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPI.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC2.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC2.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifpict.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifSunRAS.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifTGA.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFTIFF.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\iftiff.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifTIFF6.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifWMF.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFXLD4.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFXLD4.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\LHASAD.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\LHASAD.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\LZR.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\LZRP.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.clw
    C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.dsp
    C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.dsw
    C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.rc
    C:\WINDOWS\system32\ext\ContextViewer\ReadMe.txt
    C:\WINDOWS\system32\ext\ContextViewer\v1.41fr
    C:\WINDOWS\system32\ext\CopyURL\CopyURL.dll
    C:\WINDOWS\system32\ext\CopyURL\CopyURL.txt
    C:\WINDOWS\system32\ext\CopyURL\CopyURL.url
    C:\WINDOWS\system32\ext\CopyURL\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\CopyURL\INSTALLER.cmd
    C:\WINDOWS\system32\ext\CopyURL\ReadMe.txt
    C:\WINDOWS\system32\ext\CopyURL\v2.31fr
    C:\WINDOWS\system32\ext\CurrentPorts\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\CurrentPorts\cports.chm
    C:\WINDOWS\system32\ext\CurrentPorts\cports.exe
    C:\WINDOWS\system32\ext\CurrentPorts\cports_lng.ini
    C:\WINDOWS\system32\ext\CurrentPorts\CurrPorts.url
    C:\WINDOWS\system32\ext\CurrentPorts\readme.txt
    C:\WINDOWS\system32\ext\CurrentPorts\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\CurrentPorts\v1.07fr
    C:\WINDOWS\system32\ext\DialogBoxAssistant\Dialog Box Assistant.url
    C:\WINDOWS\system32\ext\DialogBoxAssistant\OSDEx.chm
    C:\WINDOWS\system32\ext\DialogBoxAssistant\OSDEx.exe
    C:\WINDOWS\system32\ext\DialogBoxAssistant\OSDExLib.dll
    C:\WINDOWS\system32\ext\DialogBoxAssistant\ReadMe.txt
    C:\WINDOWS\system32\ext\DialogBoxAssistant\v1.1fr
    C:\WINDOWS\system32\ext\Disasteroids3D\Disasteroids 3D.url
    C:\WINDOWS\system32\ext\Disasteroids3D\Disasteroids3D.cfg
    C:\WINDOWS\system32\ext\Disasteroids3D\disasteroids3d.dat
    C:\WINDOWS\system32\ext\Disasteroids3D\Disasteroids3D.exe
    C:\WINDOWS\system32\ext\Divx\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\Divx\DivX.url
    C:\WINDOWS\system32\ext\Divx\Divxconfig.exe
    C:\WINDOWS\system32\ext\Divx\divxdec.ax
    C:\WINDOWS\system32\ext\Divx\INSTALLER.cmd
    C:\WINDOWS\system32\ext\Divx\v5.0.5 (dernière compatible VirtualDub)
    C:\WINDOWS\system32\ext\DmexBar\allemand.lng
    C:\WINDOWS\system32\ext\DmexBar\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\DmexBar\Deutsch.lng
    C:\WINDOWS\system32\ext\DmexBar\dmexalign.exe
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange all horizontal.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange all vertical.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange two horizontal.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange two vertical.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Restore positions.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Save position and minimize.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Save position.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexbar.dll
    C:\WINDOWS\system32\ext\DmexBar\dmexbar.dll.manifest
    C:\WINDOWS\system32\ext\DmexBar\DMEXBAR.HLP
    C:\WINDOWS\system32\ext\DmexBar\dmexbar.ini
    C:\WINDOWS\system32\ext\DmexBar\DmexBar.url
    C:\WINDOWS\system32\ext\DmexBar\INSTALLER.cmd
    C:\WINDOWS\system32\ext\DmexBar\unsplit.exe
    C:\WINDOWS\system32\ext\DmexBar\UnzDll.dll
    C:\WINDOWS\system32\ext\DmexBar\v10
    C:\WINDOWS\system32\ext\DmexBar\viewer.exe
    C:\WINDOWS\system32\ext\DmexBar\viewer.ini
    C:\WINDOWS\system32\ext\DmexBar\ZipDll.dll
    C:\WINDOWS\system32\ext\DmexCol\DESINSTALLER.reg
    C:\WINDOWS\system32\ext\DmexCol\DmexBar.url
    C:\WINDOWS\system32\ext\DmexCol\dmexcol.dll
    C:\WINDOWS\system32\ext\DmexCol\dmexcol.hlp
    C:\WINDOWS\system32\ext\DmexCol\INSTALLER.cmd
    C:\WINDOWS\system32\ext\DmexCol\v11fr
    C:\WINDOWS\system32\ext\DoubleDriver\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\DoubleDriver\dd.chm
    C:\WINDOWS\system32\ext\DoubleDriver\dd.exe
    C:\WINDOWS\system32\ext\DoubleDriver\dd.ini
    C:\WINDOWS\system32\ext\DoubleDriver\Double Driver.url
    C:\WINDOWS\system32\ext\DoubleDriver\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\DoubleDriver\v1.0
    C:\WINDOWS\system32\ext\EasyRead\AJOUTER A LA BARRE DE BOUTONS.cmd
    C:\WINDOWS\system32\ext\EasyRead\EasyRead.cmd
    C:\WINDOWS\system32\ext\EasyRead\EasyRead.gif
    C:\WINDOWS\system32\ext\EasyRead\EasyRead.url
    C:\WINDOWS\system32\ext\EasyRead\Iconico.ico
    C:\WINDOWS\system32\ext\EasyRead\ShellExec.exe
    C:\WINDOWS\system32\ext\EasyRead\SUPPRIMER DE LA BARRE DE BOUTONS.cmd
    C:\WINDOWS\system32\ext\EasyRead\ZoomIn.ico
    C:\WINDOWS\system32\ext\EasyRead\ZoomIn.js
    C:\WINDOWS\system32\ext\EasyRead\ZoomOut.ico
    C:\WINDOWS\system32\ext\EasyRead\ZoomOut.js
    C:\WINDOWS\system32\ext\Everest\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\Everest\everest.bin
    C:\WINDOWS\system32\ext\Everest\everest.chm
    C:\WINDOWS\system32\ext\Everest\everest.dat
    C:\WINDOWS\system32\ext\Everest\everest.exe
    C:\WINDOWS\system32\ext\Everest\everest.mem
    C:\WINDOWS\system32\ext\Everest\everest.web
    C:\WINDOWS\system32\ext\Everest\everest_cpl.cpl
    C:\WINDOWS\system32\ext\Everest\everest_icons.dll
    C:\WINDOWS\system32\ext\Everest\everest_memlat.dll
    C:\WINDOWS\system32\ext\Everest\everest_xpicons.dll
    C:\WINDOWS\system32\ext\Everest\everest_zipdll.dll
    C:\WINDOWS\system32\ext\Everest\kerneld.amd64
    C:\WINDOWS\system32\ext\Everest\kerneld.ia64
    C:\WINDOWS\system32\ext\Everest\kerneld.w9x
    C:\WINDOWS\system32\ext\Everest\kerneld.wnt
    C:\WINDOWS\system32\ext\Everest\Language\lang_fr.txt
    C:\WINDOWS\system32\ext\Everest\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\Everest\v2.20fr
    C:\WINDOWS\system32\ext\Exif\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\Exif\Exif Shell Extension.url
    C:\WINDOWS\system32\ext\Exif\exif.dll
    C:\WINDOWS\system32\ext\Exif\INSTALLER.cmd
    C:\WINDOWS\system32\ext\Exif\v1.02
    C:\WINDOWS\system32\ext\FavoritesView\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\FavoritesView\faview.chm
    C:\WINDOWS\system32\ext\FavoritesView\faview.exe
    C:\WINDOWS\system32\ext\FavoritesView\faview_lng.ini
    C:\WINDOWS\system32\ext\FavoritesView\FavoritesView.url
    C:\WINDOWS\system32\ext\FavoritesView\ReadMe.txt
    C:\WINDOWS\system32\ext\FavoritesView\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\FavoritesView\v1.0fr
    C:\WINDOWS\system32\ext\FebootiCase\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\FebootiCase\fCase.dll
    C:\WINDOWS\system32\ext\FebootiCase\Febooti.url
    C:\WINDOWS\system32\ext\FebootiCase\INSTALLER.cmd
    C:\WINDOWS\system32\ext\FebootiCase\Traduction française par club83 du forum xpcoccinelle.free.fr
    C:\WINDOWS\system32\ext\FebootiCase\V1.1fr
    C:\WINDOWS\system32\ext\FebootiHex\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\FebootiHex\Febooti.url
    C:\WINDOWS\system32\ext\FebootiHex\fHex.dll
    C:\WINDOWS\system32\ext\FebootiHex\INSTALLER.cmd
    C:\WINDOWS\system32\ext\FebootiHex\Traduction française par club83 du forum xpcoccinelle.free.fr
    C:\WINDOWS\system32\ext\FebootiHex\V1.0fr
    C:\WINDOWS\system32\ext\Filenote\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\Filenote\FileNote.dll
    C:\WINDOWS\system32\ext\Filenote\FileNote.url
    C:\WINDOWS\system32\ext\Filenote\INSTALLER.cmd
    C:\WINDOWS\system32\ext\Filenote\ReadMe.txt
    C:\WINDOWS\system32\ext\Filenote\v1.0
    C:\WINDOWS\system32\ext\FlexibleRenamer\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.exe
    C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.exe.manifest
    C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.ini
    C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.url
    C:\WINDOWS\system32\ext\FlexibleRenamer\HistoryEN.txt
    C:\WINDOWS\system32\ext\FlexibleRenamer\PresetEN.ini
    C:\WINDOWS\system32\ext\FlexibleRenamer\ReadMeEN.txt
    C:\WINDOWS\system32\ext\FlexibleRenamer\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\FlexibleRenamer\v7.3
    C:\WINDOWS\system32\ext\FolderSize\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\FolderSize\Folder Size.url
    C:\WINDOWS\system32\ext\FolderSize\FolderSize.msi
    C:\WINDOWS\system32\ext\FolderSize\fr\FolderSizeColumn.dll
    C:\WINDOWS\system32\ext\FolderSize\INSTALLER.cmd
    C:\WINDOWS\system32\ext\FolderSize\v2.1fr
    C:\WINDOWS\system32\ext\GetFileSize\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\GetFileSize\Get File Size.url
    C:\WINDOWS\system32\ext\GetFileSize\GetFileSize.exe
    C:\WINDOWS\system32\ext\GetFileSize\gfs.chm
    C:\WINDOWS\system32\ext\GetFileSize\INSTALLER.cmd
    C:\WINDOWS\system32\ext\GetFileSize\v2.2
    C:\WINDOWS\system32\ext\Gmail\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\Gmail\Gmail Drive en francais.url
    C:\WINDOWS\system32\ext\Gmail\GMail Drive shell extension.url
    C:\WINDOWS\system32\ext\Gmail\GMailFS.cnt
    C:\WINDOWS\system32\ext\Gmail\GMailFS.dll
    C:\WINDOWS\system32\ext\Gmail\GMailFS.hlp
    C:\WINDOWS\system32\ext\Gmail\INSTALLER.cmd
    C:\WINDOWS\system32\ext\Gmail\v1.0.9fr
    C:\WINDOWS\system32\ext\GotoShared\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\GotoShared\GoTo Shared.url
    C:\WINDOWS\system32\ext\GotoShared\GotoShared.exe
    C:\WINDOWS\system32\ext\GotoShared\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\GotoShared\v1.0fr
    C:\WINDOWS\system32\ext\HashTab\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\HashTab\HashTab Shell Extension.url
    C:\WINDOWS\system32\ext\HashTab\HashTab.dll
    C:\WINDOWS\system32\ext\HashTab\INSTALLER.cmd
    C:\WINDOWS\system32\ext\HashTab\v1.7fr
    C:\WINDOWS\system32\ext\Icones_Cocci.cmd
    C:\WINDOWS\system32\ext\Icones_Cocci.reg
    C:\WINDOWS\system32\ext\Icones_XP.cmd
    C:\WINDOWS\system32\ext\Icones_XP.reg
    C:\WINDOWS\system32\ext\IECookiesView\ads.txt
    C:\WINDOWS\system32\ext\IECookiesView\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\IECookiesView\IECookiesView.url
    C:\WINDOWS\system32\ext\IECookiesView\iecv.chm
    C:\WINDOWS\system32\ext\IECookiesView\iecv.exe
    C:\WINDOWS\system32\ext\IECookiesView\iecv_lng.ini
    C:\WINDOWS\system32\ext\IECookiesView\ReadMe.txt
    C:\WINDOWS\system32\ext\IECookiesView\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\IECookiesView\v1.70fr
    C:\WINDOWS\system32\ext\IEHistoryView\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\IEHistoryView\IEHistoryView.url
    C:\WINDOWS\system32\ext\IEHistoryView\iehv.chm
    C:\WINDOWS\system32\ext\IEHistoryView\iehv.exe
    C:\WINDOWS\system32\ext\IEHistoryView\iehv_lng.ini
    C:\WINDOWS\system32\ext\IEHistoryView\ReadMe.txt
    C:\WINDOWS\system32\ext\IEHistoryView\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\IEHistoryView\v1.30fr
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\dbghelp.dll
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\hgc.ani
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\IE Privacy Keeper.url
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\iepk.ico
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\iepk.wav
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\IEPrivacyKeeper.exe
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\Lang\French.lng
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\license_fr.txt
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\ntqsi.dll
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\SecureDelete.dll
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\UnHCrashReport.exe
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\v2.7.2fr
    C:\WINDOWS\system32\ext\MailPassView\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\MailPassView\Lisez-moi.txt
    C:\WINDOWS\system32\ext\MailPassView\mailpv.chm
    C:\WINDOWS\system32\ext\MailPassView\mailpv_lng.ini
    C:\WINDOWS\system32\ext\MailPassView\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\MailPassView\v1.32fr
    C:\WINDOWS\system32\ext\MessenPass\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\MessenPass\mspass.chm
    C:\WINDOWS\system32\ext\MessenPass\mspass_lng.ini
    C:\WINDOWS\system32\ext\MessenPass\ReadMe.txt
    C:\WINDOWS\system32\ext\MessenPass\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\MessenPass\v1.04fr
    C:\WINDOWS\system32\ext\Minesweeper3D\docs\cubes-screenshot.png
    C:\WINDOWS\system32\ext\Minesweeper3D\docs\dodeca-screenshot.png
    C:\WINDOWS\system32\ext\Minesweeper3D\docs\index.html
    C:\WINDOWS\system32\ext\Minesweeper3D\docs\mail.png
    C:\WINDOWS\system32\ext\Minesweeper3D\docs\sprites-screenshot.png
    C:\WINDOWS\system32\ext\Minesweeper3D\Minesweeper 3D.url
    C:\WINDOWS\system32\ext\Minesweeper3D\Minesweeper3D.exe
    C:\WINDOWS\system32\ext\Minesweeper3D\Minesweeper3D.ico
    C:\WINDOWS\system32\ext\Minesweeper3D\mingwm10.dll
    C:\WINDOWS\system32\ext\Minesweeper3D\saves\screenshot
    C:\WINDOWS\system32\ext\Minesweeper3D\settings\default
    C:\WINDOWS\system32\ext\Minesweeper3D\skins\default\fields.png
    C:\WINDOWS\system32\ext\Minesweeper3D\skins\default\tiled.png
    C:\WINDOWS\system32\ext\Minesweeper3D\skins\sprites\fields.png
    C:\WINDOWS\system32\ext\Minesweeper3D\skins\sprites\tiled.png
    C:\WINDOWS\system32\ext\Minesweeper3D\skins\transolid\fields.png
    C:\WINDOWS\system32\ext\Minesweeper3D\skins\transolid\tiled.png
    C:\WINDOWS\system32\ext\Minesweeper3D\v2005-01-10
    C:\WINDOWS\system32\ext\MitecExec\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\MitecExec\INSTALLER.cmd
    C:\WINDOWS\system32\ext\MitecExec\MiTeC Shell Extension Pack.url
    C:\WINDOWS\system32\ext\MitecExec\MPEISE.dll
    C:\WINDOWS\system32\ext\MitecExec\ReadMe.txt
    C:\WINDOWS\system32\ext\MitecExec\v3.2
    C:\WINDOWS\system32\ext\MitecImage\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\MitecImage\INSTALLER.cmd
    C:\WINDOWS\system32\ext\MitecImage\MIPSE.dll
    C:\WINDOWS\system32\ext\MitecImage\MiTeC Shell Extension Pack.url
    C:\WINDOWS\system32\ext\MitecImage\ReadMe.txt
    C:\WINDOWS\system32\ext\MitecImage\v3.2
    C:\WINDOWS\system32\ext\MP3Lame\ACM codec version of Lame MP3 encoder.url
    C:\WINDOWS\system32\ext\MP3Lame\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\MP3Lame\INSTALLER.cmd
    C:\WINDOWS\system32\ext\MP3Lame\lame.exe
    C:\WINDOWS\system32\ext\MP3Lame\lame_acm.xml
    C:\WINDOWS\system32\ext\MP3Lame\lame_enc.dll
    C:\WINDOWS\system32\ext\MP3Lame\lameACM.acm
    C:\WINDOWS\system32\ext\MP3Lame\LameACM.inf
    C:\WINDOWS\system32\ext\MP3Lame\v3.96
    C:\WINDOWS\system32\ext\NetPass\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\NetPass\netpass.chm
    C:\WINDOWS\system32\ext\NetPass\netpass.exe
    C:\WINDOWS\system32\ext\NetPass\netpass_lng.ini
    C:\WINDOWS\system32\ext\NetPass\Network Password Recovery.url
    C:\WINDOWS\system32\ext\NetPass\ReadMe.txt
    C:\WINDOWS\system32\ext\NetPass\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\NetPass\v1.02fr
    C:\WINDOWS\system32\ext\Notepad++\config.xml
    C:\WINDOWS\system32\ext\Notepad++\contextMenu.xml
    C:\WINDOWS\system32\ext\Notepad++\doLocalConf.xml
    C:\WINDOWS\system32\ext\Notepad++\Icons\blank.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\close_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\close_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\close_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\closeAll_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\closeAll_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\closeAll_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\copy_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\copy_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\copy_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\cut_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\cut_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\cut_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\fileopen_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\fileopen_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\find_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\find_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\indent_guideline_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\indent_guideline_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\invisible_char_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\invisible_char_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\new_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\new_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\paste_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\paste_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\paste_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\playback_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\playback_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\print_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\print_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\record_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\redo_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\redo_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\redo_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\replace_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\replace_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\replace_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\save_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\save_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\save_makro_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\save_makro_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\save_makro_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\save_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\saveAll_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\saveAll_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\saveAll_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\stop_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\stop_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\undo_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\undo_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\undo_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\viewDlg_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\viewDlg_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\wrap_text_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\wrap_text_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\zoomIn_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\zoomIn_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\zoomOut_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\zoomOut_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\close_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\close_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\close_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\closeAll_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\closeAll_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\closeAll_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\copy_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\copy_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\copy_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\cut_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\cut_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\cut_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\fileopen_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\fileopen_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\find_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\find_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\new_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\new_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\paste_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\paste_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\paste_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\print_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\print_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\readme.txt
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\redo_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\redo_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\redo_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\replace_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\replace_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\replace_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\save_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\save_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\save_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\saveAll_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\saveAll_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\saveAll_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\toolbarIcons.xml
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\undo_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\undo_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\undo_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\viewDlg_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\viewDlg_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomIn_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomIn_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomOut_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomOut_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\insertExt.ini
    C:\WINDOWS\system32\ext\Notepad++\langs.xml
    C:\WINDOWS\system32\ext\Notepad++\license.txt
    C:\WINDOWS\system32\ext\Notepad++\LINEDRAW.TTF
    C:\WINDOWS\system32\ext\Notepad++\nativeLang.xml
    C:\WINDOWS\system32\ext\Notepad++\notepad++.exe
    C:\WINDOWS\system32\ext\Notepad++\Notepad++.url
    C:\WINDOWS\system32\ext\Notepad++\NppLauncher\1 - dllcache.lnk
    C:\WINDOWS\system32\ext\Notepad++\NppLauncher\2 - system32.lnk
    C:\WINDOWS\system32\ext\Notepad++\NppLauncher\3 - WINDOWS.lnk
    C:\WINDOWS\system32\ext\Notepad++\NppLauncher\notepad.exe
    C:\WINDOWS\system32\ext\Notepad++\NppLauncher\readme.txt
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\c.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\cpp.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\css.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\flash.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\java.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\javascript.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\lisp.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\perl.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\php.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\python.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\vb.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\vhdl.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\winbatch.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\xml.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\NppInsertPlugin.dll
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX.dll
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX.ini
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\AsciiToEBCDIC.bin
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\libTidy.dll
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\NPPTextFXdemo.TXT
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\TIDYCFG.INI
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\W3C-CSSValidator.htm
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\W3C-HTMLValidator.htm
    C:\WINDOWS\system32\ext\Notepad++\plugins\XMLCheck.dll
    C:\WINDOWS\system32\ext\Notepad++\ReadMe.txt
    C:\WINDOWS\system32\ext\Notepad++\SciLexer.dll
    C:\WINDOWS\system32\ext\Notepad++\shortcuts.xml
    C:\WINDOWS\system32\ext\Notepad++\stylers.xml
    C:\WINDOWS\system32\ext\Notepad++\toolbarIcons.xml
    C:\WINDOWS\system32\ext\Notepad++\userDefineLang_ruby.xml
    C:\WINDOWS\system32\ext\Notepad++\userDefineLang_winbatch.xml
    C:\WINDOWS\system32\ext\Notepad++\v3.3fr
    C:\WINDOWS\system32\ext\OGGVorbis\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\OGGVorbis\INSTALLER.cmd
    C:\WINDOWS\system32\ext\OGGVorbis\ReadMe.txt
    C:\WINDOWS\system32\ext\OGGVorbis\uninstall.inf
    C:\WINDOWS\system32\ext\OGGVorbis\v1.0
    C:\WINDOWS\system32\ext\OGGVorbis\Vorbis Ogg ACM Codec.url
    C:\WINDOWS\system32\ext\OGGVorbis\vorbis.acm
    C:\WINDOWS\system32\ext\OGGVorbis\vorbisacm.inf
    C:\WINDOWS\system32\ext\Othello\Othello.exe
    C:\WINDOWS\system32\ext\Othello\ReadMe.txt
    C:\WINDOWS\system32\ext\Othello\v2.0
    C:\WINDOWS\system32\ext\PathCopy\DESI
    0
  8. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    ok refais combofix et colle le rapport

    entier cette fois

    puis

    Telecharge FindyKill sur ton bureau :

    --> http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe

    --> Lance l installation avec les parametres par default

    --> Double clic sur le raccourci FindyKill sur ton bureau

    --> Au menu principal,choisi l option 1 (Recherche)

    --> Post le rapport FindyKill.txt

    Note : le rapport FindyKill.txt est sauvegardé a la racine du disque
    0
  9. jay
     
    J'ai refais combo voici le rapport :

    Je fais findykill

    ComboFix 08-10-05.06 - Jeremy 2008-10-06 13:39:18.2 - NTFSx86
    Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.334 [GMT 2:00]
    Lancé depuis: C:\Documents and Settings\Jeremy\Bureau\ComboFix.exe

    [COLOR=RED][B]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/B][/COLOR]
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    ---- Previous Run -------
    .
    C:\Documents and Settings\miolu\Application Data\install.dat
    C:\Documents and Settings\miolu\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
    C:\WINDOWS\regedit.com
    C:\WINDOWS\system32\ext
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Aut2Exe\Aut2Exe.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Aut2Exe\AutoItSC.bin
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Aut2Exe\Exe2Aut.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\AutoIt.chm
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\AutoIt.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\_Run_Me_First.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\_ReadMe_.txt
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Adlib.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Calc.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Comspec.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\CPanel.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\DialUpNetworking.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Gosub.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\IfEqual.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Notepad.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Shutdown98.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Snapshot.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\BKRenamer\bkren.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\BKRenamer\bkren.txt
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\choice.com
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\choice.txt
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\deltree.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\NirCmd - Freeware command-line tool for Windows.mht
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\nircmd.chm
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\nircmd.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\nircmdc.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\RegCmd\readme.txt
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\RegCmd\regcmd.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\RegCmd\regcmd.ini
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\sleep.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\sleep.txt
    C:\WINDOWS\system32\ext\+BONUS\BONUS_Lisez.moi.txt
    C:\WINDOWS\system32\ext\+BONUS\CustomStart\CustomStart.exe
    C:\WINDOWS\system32\ext\+BONUS\DeskProjection\DProj.exe
    C:\WINDOWS\system32\ext\+BONUS\DeskProjection\Readme.txt
    C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\dd.exe
    C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\DoubleDesktop.url
    C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\Readme.txt
    C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\v2.0
    C:\WINDOWS\system32\ext\+BONUS\ExpiredCookiesCleaner\Expired Cookies Cleaner.url
    C:\WINDOWS\system32\ext\+BONUS\ExpiredCookiesCleaner\ExpiredCookiesCleaner.exe
    C:\WINDOWS\system32\ext\+BONUS\ExpiredCookiesCleaner\ReadMe.txt
    C:\WINDOWS\system32\ext\+BONUS\FileCHK\FileCHK.exe
    C:\WINDOWS\system32\ext\+BONUS\FileCHK\readme.txt
    C:\WINDOWS\system32\ext\+BONUS\FileCHK\Recover CHK Files.url
    C:\WINDOWS\system32\ext\+BONUS\FileCHK\source.zip
    C:\WINDOWS\system32\ext\+BONUS\FileCHK\v1.1.03
    C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\Changes.txt
    C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\Excludes.dat
    C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\FocusAlpha.exe
    C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\License.txt
    C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.CNT
    C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.exe
    C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.hlp
    C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.INI
    C:\WINDOWS\system32\ext\+BONUS\InCtrl5\v1.0fr
    C:\WINDOWS\system32\ext\+BONUS\MatroskaShellExtension\Matroska.url
    C:\WINDOWS\system32\ext\+BONUS\MatroskaShellExtension\MatroskaShellExtension_2.8.exe
    C:\WINDOWS\system32\ext\+BONUS\MIMEView\MIMEView.chm
    C:\WINDOWS\system32\ext\+BONUS\MIMEView\MIMEView.exe
    C:\WINDOWS\system32\ext\+BONUS\MIMEView\MIMEView.url
    C:\WINDOWS\system32\ext\+BONUS\MIMEView\v1.10
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\about.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\about1.PNG
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\compatibilityissues.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusions.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusions1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusions2.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings2.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings3.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings4.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\features.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\frequentlyaskedquestions.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\generalsettings.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\generalsettings1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\gettingsupport.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\hotkeys.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\hotkeys1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\icon1.gif
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\icon2.gif
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\index.html
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\introduction.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\introduction1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\knownissues.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\left.html
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\settings.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thanks.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize2.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize3.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize4.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thumbnailsettings.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thumbnailsettings1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\what'snew.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Images\about.png
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Images\splash.png
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\miniMIZE.dll
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\miniMIZE.exe
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\miniMIZE.url
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Minimize_Settings.reg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\v1.0.34
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\buy.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\copyright.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\failed.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\faq.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\getplus.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\header.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\InTray.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\MemUsage.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\MmmCfg.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\NoMmmBar.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj103title20shd2pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj104geo247shd19pg5p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj105geo248pg5p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj107geo260shd20pg5p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj10geo29pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj110geo267shd21pg6p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj112geo105pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj113geo272shd22pg6p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj114geo273pg6p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj115geo114pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj116geo77pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj117geo107pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj124geo109shd27pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj127geo159shd26pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj139geo126shd28pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj143geo139shd29pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj190geo163pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj198geo172shd36pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj205geo187pg9p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj206geo188shd35pg9p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj208geo189pg10p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj208geo189pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj208geo189pg9p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj209geo190pg9p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj210geo168shd52pg10p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj212geo165shd46pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj216geo171pg10p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj217geo177pg10p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj218geo178pg10p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj219geo180shd38pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj220geo184pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj222geo185shd56pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj223geo183shd56pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj224geo182shd53pg10p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj225geo197shd37pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj22geo56shd7pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj231geo203shd39pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj232geo194pg9p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj236geo205shd54pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj243geo303shd40pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj247geo308shd41pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj258geo232pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj259geo235pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj261geo237pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj262geo249shd48pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj263geo236shd44pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj265geo238pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj269geo202shd45pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj274geo227shd47pg9p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj278geo246pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj281geo252shd58pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj314geo230pg12p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj315geo231shd59pg12p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj316geo287pg12p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj319geo292shd50pg13p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj321geo289shd60pg12p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj322geo290pg12p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj324geo233shd51pg13p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj325geo234pg13p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj327geo296pg13p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj330geo298pg13p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj331geo299shd61pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj332geo241pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj367title279pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj375title70pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj37geo72shd9pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj39geo73shd10pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj3geo19shd4pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj410geo264shd64pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj431title126pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj521geo433shd6pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj61geo62shd8pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj63geo33shd12pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj64geo34pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj66geo82shd13pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj73geo104pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj75geo127pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj76geo128pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj77geo129pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj7geo24pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj80geo80shd11pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj82geo57pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj83geo61shd24pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj84geo63pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj85title92pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj88geo103shd25pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj91title91pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj92geo216shd15pg4p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj93geo226pg4p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj94geo229shd16pg4p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj95title96pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj9geo28shd5pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\pluscfg.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PlusOptions'.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PlusOptions.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_BarColor.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_BeforeWildMenu.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_Folders.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_iecontext.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_iemenubar.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_IntroCfg.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_IntroMenu.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_MmmTaskbar.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_StartMenu.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_WildCfg.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_WildMenu.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\top.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\topleft.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\verify.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\x-click-but23.gif
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\index.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\licenses.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\mmmplus.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\new.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\screenshots.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\sending.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\success.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\whatsmmmplus.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\LANCER AU DEMARRAGE.cmd
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Mmm.dll
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Mmm.exe
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Mmm.url
    C:\WINDOWS\system32\ext\+BONUS\Mmm\SUPPRIMER DU DEMARRAGE.cmd
    C:\WINDOWS\system32\ext\+BONUS\Mmm\v2.02
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Demo JAVA\Concept originel Fold n' Drop.url
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Demo JAVA\foldndrop2.jar
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Demo JAVA\foldndrop2.txt
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\background.png
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado - kMonos.NET.url
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado.dll
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado.exe
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado.ini
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\ReadMe.txt
    C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\data.clp
    C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\data.qrp
    C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\mclip.cnt
    C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\mclip.exe
    C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\MCLIP.HLP
    C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\mclip.url
    C:\WINDOWS\system32\ext\+BONUS\ProduKey\ProduKey.chm
    C:\WINDOWS\system32\ext\+BONUS\ProduKey\ProduKey.url
    C:\WINDOWS\system32\ext\+BONUS\ProduKey\ProduKey_lng.ini
    C:\WINDOWS\system32\ext\+BONUS\ProduKey\readme.txt
    C:\WINDOWS\system32\ext\+BONUS\ProduKey\v1.03fr
    C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\INSTALLER.cmd
    C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\Registry Explorer.url
    C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\regxplor.dll
    C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\v1.4.4
    C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\Resize Enable.url
    C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\ResizeEnable.dll
    C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\ResizeEnable.txt
    C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\ResizeEnableRunner.exe
    C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\v1.4
    C:\WINDOWS\system32\ext\+BONUS\RickDangerous\ReadMe.html
    C:\WINDOWS\system32\ext\+BONUS\RickDangerous\RICK DANGEROUS Forever.url
    C:\WINDOWS\system32\ext\+BONUS\RickDangerous\rick32kb.exe
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\actions.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\actions2.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\index.html
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\menu.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\menu2.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\menuc.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\options.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\sdesk.html
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\task.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\toolwin1.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\toolwin2.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\sdesk.dll
    C:\WINDOWS\system32\ext\+BONUS\SDesk\sdesk.exe
    C:\WINDOWS\system32\ext\+BONUS\SDesk\sdesk.ini
    C:\WINDOWS\system32\ext\+BONUS\SDesk\v1.66s
    C:\WINDOWS\system32\ext\+BONUS\SDesk\WINDOWS (copier sdesk.ini ici).lnk
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Empty.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Full.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Full2.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\led.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Skin.ini
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Empty.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Full.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Full2.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\led.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Skin.ini
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\frReadme.txt
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Language\English.ini
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Language\French.ini
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Empty.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Full.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Full2.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\led.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Skin.ini
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\SkinTrash.exe
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\SkinTrash.ini
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Empty.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Full.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Full2.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\led.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Skin.ini
    C:\WINDOWS\system32\ext\+BONUS\SMPSeesaw (pour bi-proc)\readme.rtf
    C:\WINDOWS\system32\ext\+BONUS\SMPSeesaw (pour bi-proc)\SMP Seesaw.exe
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\ApiHooks.dll
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\lisezmoi.txt
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\Psapi.Dll
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\SCConfig.exe
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\SCHook.dll
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\SuperCopier.exe
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\v1.35fr stable
    C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\ConfigTsXP.exe
    C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\lang\_Translation.txt
    C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\lang\Français.lng
    C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\TaskSwitchXP.exe
    C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\TaskSwitchXP.url
    C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\v2.0.8fr
    C:\WINDOWS\system32\ext\+BONUS\TextGrabber\Lisez_moi.txt
    C:\WINDOWS\system32\ext\+BONUS\TextGrabber\TextGrab.dll
    C:\WINDOWS\system32\ext\+BONUS\TextGrabber\TextGrabber.exe
    C:\WINDOWS\system32\ext\+BONUS\TextGrabber\TextGrabber.hlp
    C:\WINDOWS\system32\ext\+BONUS\TextGrabber\v1.0
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\Data\About\About.ini
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\Data\About\About.png
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\Languages\1036.ini
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\Languages\LanguageID Finder.exe
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\Plugins\iBounce\fx.dll
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\Plugins\iZoom\fx.dll
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\UberIcon.dll
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\UberIcon.url
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\UberIconManager.exe
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\v1.0fr
    C:\WINDOWS\system32\ext\+BONUS\xCap\README.txt
    C:\WINDOWS\system32\ext\+BONUS\xCap\settings.ini
    C:\WINDOWS\system32\ext\+BONUS\xCap\xCapV109.exe
    C:\WINDOWS\system32\ext\A43\a43.dat
    C:\WINDOWS\system32\ext\A43\A43.exe
    C:\WINDOWS\system32\ext\A43\A43.ini
    C:\WINDOWS\system32\ext\A43\A43.url
    C:\WINDOWS\system32\ext\A43\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\A43\language.ini
    C:\WINDOWS\system32\ext\A43\ReadMe.txt
    C:\WINDOWS\system32\ext\A43\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\A43\unrar.dll
    C:\WINDOWS\system32\ext\A43\v2.45fr
    C:\WINDOWS\system32\ext\AllSnap\allSnap.chm
    C:\WINDOWS\system32\ext\AllSnap\allSnap.exe
    C:\WINDOWS\system32\ext\AllSnap\auto_lineup.dll
    C:\WINDOWS\system32\ext\AllSnap\snap_libW.dll
    C:\WINDOWS\system32\ext\AllSnap\v1.31.5fr
    C:\WINDOWS\system32\ext\Applications.htm
    C:\WINDOWS\system32\ext\Applications\A43.gif
    C:\WINDOWS\system32\ext\Applications\allsnap01.gif
    C:\WINDOWS\system32\ext\Applications\allsnap02.gif
    C:\WINDOWS\system32\ext\Applications\allsnap03.gif
    C:\WINDOWS\system32\ext\Applications\allsnap04.gif
    C:\WINDOWS\system32\ext\Applications\AsteriskLogger.gif
    C:\WINDOWS\system32\ext\Applications\audio01.gif
    C:\WINDOWS\system32\ext\Applications\audio02.gif
    C:\WINDOWS\system32\ext\Applications\Autoruns.gif
    C:\WINDOWS\system32\ext\Applications\CatAutres.gif
    C:\WINDOWS\system32\ext\Applications\CatDemarrage.gif
    C:\WINDOWS\system32\ext\Applications\CatMenuDemarrer.gif
    C:\WINDOWS\system32\ext\Applications\CatMenuFichiersDossiers.gif
    C:\WINDOWS\system32\ext\Applications\CatMenuPosteTravail.gif
    C:\WINDOWS\system32\ext\Applications\CatProprietesFichiersDossiers.gif
    C:\WINDOWS\system32\ext\Applications\cdbfshell.gif
    C:\WINDOWS\system32\ext\Applications\cliptray01.gif
    C:\WINDOWS\system32\ext\Applications\cliptray02.gif
    C:\WINDOWS\system32\ext\Applications\cliptray03.gif
    C:\WINDOWS\system32\ext\Applications\cliptray04.gif
    C:\WINDOWS\system32\ext\Applications\cliptray05.gif
    C:\WINDOWS\system32\ext\Applications\clocx01.gif
    C:\WINDOWS\system32\ext\Applications\clocx02.gif
    C:\WINDOWS\system32\ext\Applications\clocx03.gif
    C:\WINDOWS\system32\ext\Applications\clocx04.gif
    C:\WINDOWS\system32\ext\Applications\coccinelle.gif
    C:\WINDOWS\system32\ext\Applications\contextviewer1.gif
    C:\WINDOWS\system32\ext\Applications\contextviewer2.gif
    C:\WINDOWS\system32\ext\Applications\CopyURL.gif
    C:\WINDOWS\system32\ext\Applications\CurrentPorts.gif
    C:\WINDOWS\system32\ext\Applications\demineur.gif
    C:\WINDOWS\system32\ext\Applications\dialog01.gif
    C:\WINDOWS\system32\ext\Applications\dialog02.gif
    C:\WINDOWS\system32\ext\Applications\dialog03.gif
    C:\WINDOWS\system32\ext\Applications\disasteroids.gif
    C:\WINDOWS\system32\ext\Applications\divx.gif
    C:\WINDOWS\system32\ext\Applications\dmex01.gif
    C:\WINDOWS\system32\ext\Applications\dmex02.gif
    C:\WINDOWS\system32\ext\Applications\dmexcol.gif
    C:\WINDOWS\system32\ext\Applications\doubledriver.gif
    C:\WINDOWS\system32\ext\Applications\edithexa.gif
    C:\WINDOWS\system32\ext\Applications\everest.gif
    C:\WINDOWS\system32\ext\Applications\exif.gif
    C:\WINDOWS\system32\ext\Applications\favoritesview.gif
    C:\WINDOWS\system32\ext\Applications\febooticase.gif
    C:\WINDOWS\system32\ext\Applications\febootihex.gif
    C:\WINDOWS\system32\ext\Applications\filenote01.gif
    C:\WINDOWS\system32\ext\Applications\filenote02.gif
    C:\WINDOWS\system32\ext\Applications\filenote03.gif
    C:\WINDOWS\system32\ext\Applications\flexiblerenamer.gif
    C:\WINDOWS\system32\ext\Applications\foldersize.gif
    C:\WINDOWS\system32\ext\Applications\fond.jpg
    C:\WINDOWS\system32\ext\Applications\getfilesize1.gif
    C:\WINDOWS\system32\ext\Applications\getfilesize2.gif
    C:\WINDOWS\system32\ext\Applications\gmail01.gif
    C:\WINDOWS\system32\ext\Applications\gmail02.gif
    C:\WINDOWS\system32\ext\Applications\gmail03.gif
    C:\WINDOWS\system32\ext\Applications\gmail04.gif
    C:\WINDOWS\system32\ext\Applications\gotoshared.gif
    C:\WINDOWS\system32\ext\Applications\hash.gif
    C:\WINDOWS\system32\ext\Applications\IECookiesView.gif
    C:\WINDOWS\system32\ext\Applications\IEHistoryView.gif
    C:\WINDOWS\system32\ext\Applications\IEPrivacyKeeper1.gif
    C:\WINDOWS\system32\ext\Applications\IEPrivacyKeeper2.gif
    C:\WINDOWS\system32\ext\Applications\invaders1.gif
    C:\WINDOWS\system32\ext\Applications\invaders2.gif
    C:\WINDOWS\system32\ext\Applications\LabelFonctions.gif
    C:\WINDOWS\system32\ext\Applications\LabelRepertoire.gif
    C:\WINDOWS\system32\ext\Applications\LabelType.gif
    C:\WINDOWS\system32\ext\Applications\menupostetravail.gif
    C:\WINDOWS\system32\ext\Applications\messenpass.gif
    C:\WINDOWS\system32\ext\Applications\mitecexec01.gif
    C:\WINDOWS\system32\ext\Applications\mitecexec02.gif
    C:\WINDOWS\system32\ext\Applications\mitecexec03.gif
    C:\WINDOWS\system32\ext\Applications\mitecexec04.gif
    C:\WINDOWS\system32\ext\Applications\mitecimage01.gif
    C:\WINDOWS\system32\ext\Applications\mitecimage02.gif
    C:\WINDOWS\system32\ext\Applications\mpv.gif
    C:\WINDOWS\system32\ext\Applications\netpass.gif
    C:\WINDOWS\system32\ext\Applications\notepad++.gif
    C:\WINDOWS\system32\ext\Applications\Othello.gif
    C:\WINDOWS\system32\ext\Applications\pathcopy.gif
    C:\WINDOWS\system32\ext\Applications\phmBootLogo.dll..gif
    C:\WINDOWS\system32\ext\Applications\phmFolderAppearance.dll.gif
    C:\WINDOWS\system32\ext\Applications\phmFolderAppearance02.dll.gif
    C:\WINDOWS\system32\ext\Applications\ProcessViewer.gif
    C:\WINDOWS\system32\ext\Applications\propplus01.gif
    C:\WINDOWS\system32\ext\Applications\propplus02.gif
    C:\WINDOWS\system32\ext\Applications\pspad.gif
    C:\WINDOWS\system32\ext\Applications\pspv.gif
    C:\WINDOWS\system32\ext\Applications\regalyzer.gif
    C:\WINDOWS\system32\ext\Applications\regcompact.gif
    C:\WINDOWS\system32\ext\Applications\regseeker.gif
    C:\WINDOWS\system32\ext\Applications\Regshot.gif
    C:\WINDOWS\system32\ext\Applications\restoredesktop.gif
    C:\WINDOWS\system32\ext\Applications\runwithparameters.gif
    C:\WINDOWS\system32\ext\Applications\shellmenuview.gif
    C:\WINDOWS\system32\ext\Applications\sherlock.gif
    C:\WINDOWS\system32\ext\Applications\shortcutsman.gif
    C:\WINDOWS\system32\ext\Applications\sizer1.gif
    C:\WINDOWS\system32\ext\Applications\sizer2.gif
    C:\WINDOWS\system32\ext\Applications\sizer3.gif
    C:\WINDOWS\system32\ext\Applications\starter.gif
    C:\WINDOWS\system32\ext\Applications\statbar01.gif
    C:\WINDOWS\system32\ext\Applications\statbar02.gif
    C:\WINDOWS\system32\ext\Applications\swf1.gif
    C:\WINDOWS\system32\ext\Applications\swf2.gif
    C:\WINDOWS\system32\ext\Applications\swf3.gif
    C:\WINDOWS\system32\ext\Applications\swf4.gif
    C:\WINDOWS\system32\ext\Applications\thumbview.gif
    C:\WINDOWS\system32\ext\Applications\tri.gif
    C:\WINDOWS\system32\ext\Applications\tugzip.gif
    C:\WINDOWS\system32\ext\Applications\TypeDLL.gif
    C:\WINDOWS\system32\ext\Applications\TypeEXE.gif
    C:\WINDOWS\system32\ext\Applications\unlocker01.gif
    C:\WINDOWS\system32\ext\Applications\unlocker02.gif
    C:\WINDOWS\system32\ext\Applications\unlocker03.gif
    C:\WINDOWS\system32\ext\Applications\whyreboot.gif
    C:\WINDOWS\system32\ext\Applications\winroll.gif
    C:\WINDOWS\system32\ext\Applications\winservices.gif
    C:\WINDOWS\system32\ext\Applications\xnstop.gif
    C:\WINDOWS\system32\ext\Applications\XPSP2+_Chrysalide_Widescreen.jpg
    C:\WINDOWS\system32\ext\Applications\xvid.gif
    C:\WINDOWS\system32\ext\Applications\yz01.gif
    C:\WINDOWS\system32\ext\Applications\yz02.gif
    C:\WINDOWS\system32\ext\Applications\yz02b.gif
    C:\WINDOWS\system32\ext\Applications\yz03.gif
    C:\WINDOWS\system32\ext\AsteriskLogger\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\AsteriskLogger\Asterisk Logger.url
    C:\WINDOWS\system32\ext\AsteriskLogger\astlog.chm
    C:\WINDOWS\system32\ext\AsteriskLogger\astlog_lng.ini
    C:\WINDOWS\system32\ext\AsteriskLogger\ReadMe.txt
    C:\WINDOWS\system32\ext\AsteriskLogger\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\AsteriskLogger\v1.02fr
    C:\WINDOWS\system32\ext\Audioshellext\AudioShell.url
    C:\WINDOWS\system32\ext\Audioshellext\AudioShellExt.dll
    C:\WINDOWS\system32\ext\Audioshellext\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\Audioshellext\INSTALLER.cmd
    C:\WINDOWS\system32\ext\Audioshellext\v1.0.1
    C:\WINDOWS\system32\ext\Autoruns\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\Autoruns\autoruns.chm
    C:\WINDOWS\system32\ext\Autoruns\autoruns.exe
    C:\WINDOWS\system32\ext\Autoruns\Autoruns.url
    C:\WINDOWS\system32\ext\Autoruns\autorunsc.exe
    C:\WINDOWS\system32\ext\Autoruns\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\Autoruns\v8.42fr
    C:\WINDOWS\system32\ext\CDBFShellExt\CDBF Shell Extension.url
    C:\WINDOWS\system32\ext\CDBFShellExt\cdbfshell.dll
    C:\WINDOWS\system32\ext\CDBFShellExt\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\CDBFShellExt\exemple.dbf
    C:\WINDOWS\system32\ext\CDBFShellExt\INSTALLER.cmd
    C:\WINDOWS\system32\ext\CDBFShellExt\readme.txt
    C:\WINDOWS\system32\ext\CDBFShellExt\v1.0fr
    C:\WINDOWS\system32\ext\ClipTray\ClipTray.chm
    C:\WINDOWS\system32\ext\ClipTray\ClipTray.exe
    C:\WINDOWS\system32\ext\ClipTray\ClipTray.ini
    C:\WINDOWS\system32\ext\ClipTray\ClipTray.url
    C:\WINDOWS\system32\ext\ClipTray\Personal.dat
    C:\WINDOWS\system32\ext\ClipTray\v1.61fr
    C:\WINDOWS\system32\ext\ClocX\ClocX.exe
    C:\WINDOWS\system32\ext\ClocX\ClocX.url
    C:\WINDOWS\system32\ext\ClocX\Lang\French.lng
    C:\WINDOWS\system32\ext\ClocX\Presets\BlueSphere2.png
    C:\WINDOWS\system32\ext\ClocX\Presets\CloQ.ini
    C:\WINDOWS\system32\ext\ClocX\Presets\CloQ.png
    C:\WINDOWS\system32\ext\ClocX\Presets\default.bmp
    C:\WINDOWS\system32\ext\ClocX\Presets\default.ini
    C:\WINDOWS\system32\ext\ClocX\Presets\GlowMarvilla.png
    C:\WINDOWS\system32\ext\ClocX\Presets\Snowball Clock.png
    C:\WINDOWS\system32\ext\ClocX\Presets\street.ini
    C:\WINDOWS\system32\ext\ClocX\Presets\street.png
    C:\WINDOWS\system32\ext\ClocX\Presets\streethour.hpng
    C:\WINDOWS\system32\ext\ClocX\Presets\streetmin.hpng
    C:\WINDOWS\system32\ext\ClocX\ReadMe.txt
    C:\WINDOWS\system32\ext\ClocX\v1.5.1fr
    C:\WINDOWS\system32\ext\ContextViewer\Context Viewer.url
    C:\WINDOWS\system32\ext\ContextViewer\ContView.exe
    C:\WINDOWS\system32\ext\ContextViewer\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\ContextViewer\INSTALLER.cmd
    C:\WINDOWS\system32\ext\ContextViewer\plugins\AXZIP.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\AXZIP.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifDIB.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFGIF.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifgif.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFJPEG.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifjpeg.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFMAG.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFMAG.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPI.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPI.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC2.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC2.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifpict.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifSunRAS.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifTGA.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFTIFF.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\iftiff.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifTIFF6.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifWMF.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFXLD4.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFXLD4.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\LHASAD.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\LHASAD.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\LZR.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\LZRP.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.clw
    C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.dsp
    C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.dsw
    C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.rc
    C:\WINDOWS\system32\ext\ContextViewer\ReadMe.txt
    C:\WINDOWS\system32\ext\ContextViewer\v1.41fr
    C:\WINDOWS\system32\ext\CopyURL\CopyURL.dll
    C:\WINDOWS\system32\ext\CopyURL\CopyURL.txt
    C:\WINDOWS\system32\ext\CopyURL\CopyURL.url
    C:\WINDOWS\system32\ext\CopyURL\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\CopyURL\INSTALLER.cmd
    C:\WINDOWS\system32\ext\CopyURL\ReadMe.txt
    C:\WINDOWS\system32\ext\CopyURL\v2.31fr
    C:\WINDOWS\system32\ext\CurrentPorts\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\CurrentPorts\cports.chm
    C:\WINDOWS\system32\ext\CurrentPorts\cports.exe
    C:\WINDOWS\system32\ext\CurrentPorts\cports_lng.ini
    C:\WINDOWS\system32\ext\CurrentPorts\CurrPorts.url
    C:\WINDOWS\system32\ext\CurrentPorts\readme.txt
    C:\WINDOWS\system32\ext\CurrentPorts\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\CurrentPorts\v1.07fr
    C:\WINDOWS\system32\ext\DialogBoxAssistant\Dialog Box Assistant.url
    C:\WINDOWS\system32\ext\DialogBoxAssistant\OSDEx.chm
    C:\WINDOWS\system32\ext\DialogBoxAssistant\OSDEx.exe
    C:\WINDOWS\system32\ext\DialogBoxAssistant\OSDExLib.dll
    C:\WINDOWS\system32\ext\DialogBoxAssistant\ReadMe.txt
    C:\WINDOWS\system32\ext\DialogBoxAssistant\v1.1fr
    C:\WINDOWS\system32\ext\Disasteroids3D\Disasteroids 3D.url
    C:\WINDOWS\system32\ext\Disasteroids3D\Disasteroids3D.cfg
    C:\WINDOWS\system32\ext\Disasteroids3D\disasteroids3d.dat
    C:\WINDOWS\system32\ext\Disasteroids3D\Disasteroids3D.exe
    C:\WINDOWS\system32\ext\Divx\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\Divx\DivX.url
    C:\WINDOWS\system32\ext\Divx\Divxconfig.exe
    C:\WINDOWS\system32\ext\Divx\divxdec.ax
    C:\WINDOWS\system32\ext\Divx\INSTALLER.cmd
    C:\WINDOWS\system32\ext\Divx\v5.0.5 (dernière compatible VirtualDub)
    C:\WINDOWS\system32\ext\DmexBar\allemand.lng
    C:\WINDOWS\system32\ext\DmexBar\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\DmexBar\Deutsch.lng
    C:\WINDOWS\system32\ext\DmexBar\dmexalign.exe
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange all horizontal.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange all vertical.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange two horizontal.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange two vertical.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Restore positions.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Save position and minimize.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Save position.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexbar.dll
    C:\WINDOWS\system32\ext\DmexBar\dmexbar.dll.manifest
    C:\WINDOWS\system32\ext\DmexBar\DMEXBAR.HLP
    C:\WINDOWS\system32\ext\DmexBar\dmexbar.ini
    C:\WINDOWS\system32\ext\DmexBar\DmexBar.url
    C:\WINDOWS\system32\ext\DmexBar\INSTALLER.cmd
    C:\WINDOWS\system32\ext\DmexBar\unsplit.exe
    C:\WINDOWS\system32\ext\DmexBar\UnzDll.dll
    C:\WINDOWS\system32\ext\DmexBar\v10
    C:\WINDOWS\system32\ext\DmexBar\viewer.exe
    C:\WINDOWS\system32\ext\DmexBar\viewer.ini
    C:\WINDOWS\system32\ext\DmexBar\ZipDll.dll
    C:\WINDOWS\system32\ext\DmexCol\DESINSTALLER.reg
    C:\WINDOWS\system32\ext\DmexCol\DmexBar.url
    C:\WINDOWS\system32\ext\DmexCol\dmexcol.dll
    C:\WINDOWS\system32\ext\DmexCol\dmexcol.hlp
    C:\WINDOWS\system32\ext\DmexCol\INSTALLER.cmd
    C:\WINDOWS\system32\ext\DmexCol\v11fr
    C:\WINDOWS\system32\ext\DoubleDriver\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\DoubleDriver\dd.chm
    C:\WINDOWS\system32\ext\DoubleDriver\dd.exe
    C:\WINDOWS\system32\ext\DoubleDriver\dd.ini
    C:\WINDOWS\system32\ext\DoubleDriver\Double Driver.url
    C:\WINDOWS\system32\ext\DoubleDriver\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\DoubleDriver\v1.0
    C:\WINDOWS\system32\ext\EasyRead\AJOUTER A LA BARRE DE BOUTONS.cmd
    C:\WINDOWS\system32\ext\EasyRead\EasyRead.cmd
    C:\WINDOWS\system32\ext\EasyRead\EasyRead.gif
    C:\WINDOWS\system32\ext\EasyRead\EasyRead.url
    C:\WINDOWS\system32\ext\EasyRead\Iconico.ico
    C:\WINDOWS\system32\ext\EasyRead\ShellExec.exe
    C:\WINDOWS\system32\ext\EasyRead\SUPPRIMER DE LA BARRE DE BOUTONS.cmd
    C:\WINDOWS\system32\ext\EasyRead\ZoomIn.ico
    C:\WINDOWS\system32\ext\EasyRead\ZoomIn.js
    C:\WINDOWS\system32\ext\EasyRead\ZoomOut.ico
    C:\WINDOWS\system32\ext\EasyRead\ZoomOut.js
    C:\WINDOWS\system32\ext\Everest\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\Everest\everest.bin
    C:\WINDOWS\system32\ext\Everest\everest.chm
    C:\WINDOWS\system32\ext\Everest\everest.dat
    C:\WINDOWS\system32\ext\Everest\everest.exe
    C:\WINDOWS\system32\ext\Everest\everest.mem
    C:\WINDOWS\system32\ext\Everest\everest.web
    C:\WINDOWS\system32\ext\Everest\everest_cpl.cpl
    C:\WINDOWS\system32\ext\Everest\everest_icons.dll
    C:\WINDOWS\system32\ext\Everest\everest_memlat.dll
    C:\WINDOWS\system32\ext\Everest\everest_xpicons.dll
    C:\WINDOWS\system32\ext\Everest\everest_zipdll.dll
    C:\WINDOWS\system32\ext\Everest\kerneld.amd64
    C:\WINDOWS\system32\ext\Everest\kerneld.ia64
    C:\WINDOWS\system32\ext\Everest\kerneld.w9x
    C:\WINDOWS\system32\ext\Everest\kerneld.wnt
    C:\WINDOWS\system32\ext\Everest\Language\lang_fr.txt
    C:\WINDOWS\system32\ext\Everest\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\Everest\v2.20fr
    C:\WINDOWS\system32\ext\Exif\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\Exif\Exif Shell Extension.url
    C:\WINDOWS\system32\ext\Exif\exif.dll
    C:\WINDOWS\system32\ext\Exif\INSTALLER.cmd
    C:\WINDOWS\system32\ext\Exif\v1.02
    C:\WINDOWS\system32\ext\FavoritesView\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\FavoritesView\faview.chm
    C:\WINDOWS\system32\ext\FavoritesView\faview.exe
    C:\WINDOWS\system32\ext\FavoritesView\faview_lng.ini
    C:\WINDOWS\system32\ext\FavoritesView\FavoritesView.url
    C:\WINDOWS\system32\ext\FavoritesView\ReadMe.txt
    C:\WINDOWS\system32\ext\FavoritesView\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\FavoritesView\v1.0fr
    C:\WINDOWS\system32\ext\FebootiCase\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\FebootiCase\fCase.dll
    C:\WINDOWS\system32\ext\FebootiCase\Febooti.url
    C:\WINDOWS\system32\ext\FebootiCase\INSTALLER.cmd
    C:\WINDOWS\system32\ext\FebootiCase\Traduction française par club83 du forum xpcoccinelle.free.fr
    C:\WINDOWS\system32\ext\FebootiCase\V1.1fr
    C:\WINDOWS\system32\ext\FebootiHex\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\FebootiHex\Febooti.url
    C:\WINDOWS\system32\ext\FebootiHex\fHex.dll
    C:\WINDOWS\system32\ext\FebootiHex\INSTALLER.cmd
    C:\WINDOWS\system32\ext\FebootiHex\Traduction française par club83 du forum xpcoccinelle.free.fr
    C:\WINDOWS\system32\ext\FebootiHex\V1.0fr
    C:\WINDOWS\system32\ext\Filenote\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\Filenote\FileNote.dll
    C:\WINDOWS\system32\ext\Filenote\FileNote.url
    C:\WINDOWS\system32\ext\Filenote\INSTALLER.cmd
    C:\WINDOWS\system32\ext\Filenote\ReadMe.txt
    C:\WINDOWS\system32\ext\Filenote\v1.0
    C:\WINDOWS\system32\ext\FlexibleRenamer\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.exe
    C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.exe.manifest
    C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.ini
    C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.url
    C:\WINDOWS\system32\ext\FlexibleRenamer\HistoryEN.txt
    C:\WINDOWS\system32\ext\FlexibleRenamer\PresetEN.ini
    C:\WINDOWS\system32\ext\FlexibleRenamer\ReadMeEN.txt
    C:\WINDOWS\system32\ext\FlexibleRenamer\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\FlexibleRenamer\v7.3
    C:\WINDOWS\system32\ext\FolderSize\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\FolderSize\Folder Size.url
    C:\WINDOWS\system32\ext\FolderSize\FolderSize.msi
    C:\WINDOWS\system32\ext\FolderSize\fr\FolderSizeColumn.dll
    C:\WINDOWS\system32\ext\FolderSize\INSTALLER.cmd
    C:\WINDOWS\system32\ext\FolderSize\v2.1fr
    C:\WINDOWS\system32\ext\GetFileSize\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\GetFileSize\Get File Size.url
    C:\WINDOWS\system32\ext\GetFileSize\GetFileSize.exe
    C:\WINDOWS\system32\ext\GetFileSize\gfs.chm
    C:\WINDOWS\system32\ext\GetFileSize\INSTALLER.cmd
    C:\WINDOWS\system32\ext\GetFileSize\v2.2
    C:\WINDOWS\system32\ext\Gmail\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\Gmail\Gmail Drive en francais.url
    C:\WINDOWS\system32\ext\Gmail\GMail Drive shell extension.url
    C:\WINDOWS\system32\ext\Gmail\GMailFS.cnt
    C:\WINDOWS\system32\ext\Gmail\GMailFS.dll
    C:\WINDOWS\system32\ext\Gmail\GMailFS.hlp
    C:\WINDOWS\system32\ext\Gmail\INSTALLER.cmd
    C:\WINDOWS\system32\ext\Gmail\v1.0.9fr
    C:\WINDOWS\system32\ext\GotoShared\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\GotoShared\GoTo Shared.url
    C:\WINDOWS\system32\ext\GotoShared\GotoShared.exe
    C:\WINDOWS\system32\ext\GotoShared\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\GotoShared\v1.0fr
    C:\WINDOWS\system32\ext\HashTab\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\HashTab\HashTab Shell Extension.url
    C:\WINDOWS\system32\ext\HashTab\HashTab.dll
    C:\WINDOWS\system32\ext\HashTab\INSTALLER.cmd
    C:\WINDOWS\system32\ext\HashTab\v1.7fr
    C:\WINDOWS\system32\ext\Icones_Cocci.cmd
    C:\WINDOWS\system32\ext\Icones_Cocci.reg
    C:\WINDOWS\system32\ext\Icones_XP.cmd
    C:\WINDOWS\system32\ext\Icones_XP.reg
    C:\WINDOWS\system32\ext\IECookiesView\ads.txt
    C:\WINDOWS\system32\ext\IECookiesView\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\IECookiesView\IECookiesView.url
    C:\WINDOWS\system32\ext\IECookiesView\iecv.chm
    C:\WINDOWS\system32\ext\IECookiesView\iecv.exe
    C:\WINDOWS\system32\ext\IECookiesView\iecv_lng.ini
    C:\WINDOWS\system32\ext\IECookiesView\ReadMe.txt
    C:\WINDOWS\system32\ext\IECookiesView\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\IECookiesView\v1.70fr
    C:\WINDOWS\system32\ext\IEHistoryView\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\IEHistoryView\IEHistoryView.url
    C:\WINDOWS\system32\ext\IEHistoryView\iehv.chm
    C:\WINDOWS\system32\ext\IEHistoryView\iehv.exe
    C:\WINDOWS\system32\ext\IEHistoryView\iehv_lng.ini
    C:\WINDOWS\system32\ext\IEHistoryView\ReadMe.txt
    C:\WINDOWS\system32\ext\IEHistoryView\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\IEHistoryView\v1.30fr
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\dbghelp.dll
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\hgc.ani
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\IE Privacy Keeper.url
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\iepk.ico
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\iepk.wav
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\IEPrivacyKeeper.exe
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\Lang\French.lng
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\license_fr.txt
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\ntqsi.dll
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\SecureDelete.dll
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\UnHCrashReport.exe
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\v2.7.2fr
    C:\WINDOWS\system32\ext\MailPassView\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\MailPassView\Lisez-moi.txt
    C:\WINDOWS\system32\ext\MailPassView\mailpv.chm
    C:\WINDOWS\system32\ext\MailPassView\mailpv_lng.ini
    C:\WINDOWS\system32\ext\MailPassView\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\MailPassView\v1.32fr
    C:\WINDOWS\system32\ext\MessenPass\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\MessenPass\mspass.chm
    C:\WINDOWS\system32\ext\MessenPass\mspass_lng.ini
    C:\WINDOWS\system32\ext\MessenPass\ReadMe.txt
    C:\WINDOWS\system32\ext\MessenPass\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\MessenPass\v1.04fr
    C:\WINDOWS\system32\ext\Minesweeper3D\docs\cubes-screenshot.png
    C:\WINDOWS\system32\ext\Minesweeper3D\docs\dodeca-screenshot.png
    C:\WINDOWS\system32\ext\Minesweeper3D\docs\index.html
    C:\WINDOWS\system32\ext\Minesweeper3D\docs\mail.png
    C:\WINDOWS\system32\ext\Minesweeper3D\docs\sprites-screenshot.png
    C:\WINDOWS\system32\ext\Minesweeper3D\Minesweeper 3D.url
    C:\WINDOWS\system32\ext\Minesweeper3D\Minesweeper3D.exe
    C:\WINDOWS\system32\ext\Minesweeper3D\Minesweeper3D.ico
    C:\WINDOWS\system32\ext\Minesweeper3D\mingwm10.dll
    C:\WINDOWS\system32\ext\Minesweeper3D\saves\screenshot
    C:\WINDOWS\system32\ext\Minesweeper3D\settings\default
    C:\WINDOWS\system32\ext\Minesweeper3D\skins\default\fields.png
    C:\WINDOWS\system32\ext\Minesweeper3D\skins\default\tiled.png
    C:\WINDOWS\system32\ext\Minesweeper3D\skins\sprites\fields.png
    C:\WINDOWS\system32\ext\Minesweeper3D\skins\sprites\tiled.png
    C:\WINDOWS\system32\ext\Minesweeper3D\skins\transolid\fields.png
    C:\WINDOWS\system32\ext\Minesweeper3D\skins\transolid\tiled.png
    C:\WINDOWS\system32\ext\Minesweeper3D\v2005-01-10
    C:\WINDOWS\system32\ext\MitecExec\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\MitecExec\INSTALLER.cmd
    C:\WINDOWS\system32\ext\MitecExec\MiTeC Shell Extension Pack.url
    C:\WINDOWS\system32\ext\MitecExec\MPEISE.dll
    C:\WINDOWS\system32\ext\MitecExec\ReadMe.txt
    C:\WINDOWS\system32\ext\MitecExec\v3.2
    C:\WINDOWS\system32\ext\MitecImage\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\MitecImage\INSTALLER.cmd
    C:\WINDOWS\system32\ext\MitecImage\MIPSE.dll
    C:\WINDOWS\system32\ext\MitecImage\MiTeC Shell Extension Pack.url
    C:\WINDOWS\system32\ext\MitecImage\ReadMe.txt
    C:\WINDOWS\system32\ext\MitecImage\v3.2
    C:\WINDOWS\system32\ext\MP3Lame\ACM codec version of Lame MP3 encoder.url
    C:\WINDOWS\system32\ext\MP3Lame\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\MP3Lame\INSTALLER.cmd
    C:\WINDOWS\system32\ext\MP3Lame\lame.exe
    C:\WINDOWS\system32\ext\MP3Lame\lame_acm.xml
    C:\WINDOWS\system32\ext\MP3Lame\lame_enc.dll
    C:\WINDOWS\system32\ext\MP3Lame\lameACM.acm
    C:\WINDOWS\system32\ext\MP3Lame\LameACM.inf
    C:\WINDOWS\system32\ext\MP3Lame\v3.96
    C:\WINDOWS\system32\ext\NetPass\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\NetPass\netpass.chm
    C:\WINDOWS\system32\ext\NetPass\netpass.exe
    C:\WINDOWS\system32\ext\NetPass\netpass_lng.ini
    C:\WINDOWS\system32\ext\NetPass\Network Password Recovery.url
    C:\WINDOWS\system32\ext\NetPass\ReadMe.txt
    C:\WINDOWS\system32\ext\NetPass\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\NetPass\v1.02fr
    C:\WINDOWS\system32\ext\Notepad++\config.xml
    C:\WINDOWS\system32\ext\Notepad++\contextMenu.xml
    C:\WINDOWS\system32\ext\Notepad++\doLocalConf.xml
    C:\WINDOWS\system32\ext\Notepad++\Icons\blank.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\close_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\close_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\close_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\closeAll_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\closeAll_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\closeAll_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\copy_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\copy_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\copy_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\cut_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\cut_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\cut_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\fileopen_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\fileopen_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\find_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\find_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\indent_guideline_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\indent_guideline_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\invisible_char_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\invisible_char_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\new_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\new_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\paste_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\paste_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\paste_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\playback_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\playback_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\print_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\print_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\record_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\redo_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\redo_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\redo_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\replace_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\replace_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\replace_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\save_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\save_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\save_makro_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\save_makro_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\save_makro_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\save_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\saveAll_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\saveAll_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\saveAll_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\stop_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\stop_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\undo_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\undo_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\undo_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\viewDlg_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\viewDlg_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\wrap_text_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\wrap_text_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\zoomIn_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\zoomIn_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\zoomOut_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\zoomOut_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\close_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\close_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\close_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\closeAll_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\closeAll_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\closeAll_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\copy_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\copy_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\copy_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\cut_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\cut_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\cut_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\fileopen_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\fileopen_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\find_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\find_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\new_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\new_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\paste_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\paste_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\paste_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\print_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\print_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\readme.txt
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\redo_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\redo_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\redo_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\replace_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\replace_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\replace_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\save_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\save_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\save_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\saveAll_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\saveAll_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\saveAll_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\toolbarIcons.xml
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\undo_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\undo_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\undo_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\viewDlg_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\viewDlg_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomIn_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomIn_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomOut_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomOut_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\insertExt.ini
    C:\WINDOWS\system32\ext\Notepad++\langs.xml
    C:\WINDOWS\system32\ext\Notepad++\license.txt
    C:\WINDOWS\system32\ext\Notepad++\LINEDRAW.TTF
    C:\WINDOWS\system32\ext\Notepad++\nativeLang.xml
    C:\WINDOWS\system32\ext\Notepad++\notepad++.exe
    C:\WINDOWS\system32\ext\Notepad++\Notepad++.url
    C:\WINDOWS\system32\ext\Notepad++\NppLauncher\1 - dllcache.lnk
    C:\WINDOWS\system32\ext\Notepad++\NppLauncher\2 - system32.lnk
    C:\WINDOWS\system32\ext\Notepad++\NppLauncher\3 - WINDOWS.lnk
    C:\WINDOWS\system32\ext\Notepad++\NppLauncher\notepad.exe
    C:\WINDOWS\system32\ext\Notepad++\NppLauncher\readme.txt
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\c.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\cpp.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\css.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\flash.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\java.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\javascript.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\lisp.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\perl.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\php.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\python.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\vb.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\vhdl.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\winbatch.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\xml.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\NppInsertPlugin.dll
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX.dll
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX.ini
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\AsciiToEBCDIC.bin
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\libTidy.dll
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\NPPTextFXdemo.TXT
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\TIDYCFG.INI
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\W3C-CSSValidator.htm
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\W3C-HTMLValidator.htm
    C:\WINDOWS\system32\ext\Notepad++\plugins\XMLCheck.dll
    C:\WINDOWS\system32\ext\Notepad++\ReadMe.txt
    C:\WINDOWS\system32\ext\Notepad++\SciLexer.dll
    C:\WINDOWS\system32\ext\Notepad++\shortcuts.xml
    C:\WINDOWS\system32\ext\Notepad++\stylers.xml
    C:\WINDOWS\system32\ext\Notepad++\toolbarIcons.xml
    C:\WINDOWS\system32\ext\Notepad++\userDefineLang_ruby.xml
    C:\WINDOWS\system32\ext\Notepad++\userDefineLang_winbatch.xml
    C:\WINDOWS\system32\ext\Notepad++\v3.3fr
    C:\WINDOWS\system32\ext\OGGVorbis\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\OGGVorbis\INSTALLER.cmd
    C:\WINDOWS\system32\ext\OGGVorbis\ReadMe.txt
    C:\WINDOWS\system32\ext\OGGVorbis\uninstall.inf
    C:\WINDOWS\system32\ext\OGGVorbis\v1.0
    C:\WINDOWS\system32\ext\OGGVorbis\Vorbis Ogg ACM Codec.url
    C:\WINDOWS\system32\ext\OGGVorbis\vorbis.acm
    C:\WINDOWS\system32\ext\OGGVorbis\vorbisacm.inf
    C:\WINDOWS\system32\ext\Othello\Othello.exe
    C:\WINDOWS\system32\ext\Othello\ReadMe.txt
    C:\WINDOWS\system32\ext\Othello\v2.0
    C:\WINDOWS\system32\ext\PathCopy\
    0
  10. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    il manque la fin du rapport!

    puis

    Telecharge FindyKill sur ton bureau :

    --> http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe

    --> Lance l installation avec les parametres par default

    --> Double clic sur le raccourci FindyKill sur ton bureau

    --> Au menu principal,choisi l option 1 (Recherche)

    --> Post le rapport FindyKill.txt

    Note : le rapport FindyKill.txt est sauvegardé a la racine du disque
    0
  11. jay
     
    Voici le rapport :

    ----------------- FindyKill V3.095 ------------------

    * User : Jeremy - JAY
    * Emplacement : C:\Program Files\FindyKill
    * Outils Mis a jours le 02/10/08 par Chiquitine29
    * Recherche effectuée à 13:52:27 le 2008-10-06
    * Windows XP - Internet Explorer 6.0.2900.2180

    ((((((((((((((((( *** Recherche *** ))))))))))))))))))

    »»»» Presence des fichiers dans C:

    »»»» Presence des fichiers dans C:\WINDOWS

    »»»» Presence des fichiers dans C:\WINDOWS\Prefetch

    »»»» Presence des fichiers dans C:\WINDOWS\system32

    »»»» Presence des fichiers dans C:\WINDOWS\system32\drivers

    »»»» Presence des fichiers dans C:\Documents and Settings\Jeremy\Application Data

    »»»» Presence des fichiers dans C:\DOCUME~1\Jeremy\LOCALS~1\Temp

    »»»» Registre :

    ! REG.EXE VERSION 3.0

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
    SiSUSBRG REG_SZ C:\WINDOWS\SiSUSBrg.exe
    NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    nwiz REG_SZ nwiz.exe /install
    QuickTime Task REG_SZ "C:\Program Files\QuickTime\qttask.exe" -atboottime
    CreativeTaskScheduler REG_SZ "C:\Program Files\Creative\Shared Files\CTSched.exe" /logon
    NeroFilterCheck REG_SZ C:\WINDOWS\system32\NeroCheck.exe
    NvMediaCenter REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    SoundMan REG_SZ SOUNDMAN.EXE

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents

    ! REG.EXE VERSION 3.0

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    RestoreDesktop REG_SZ C:\WINDOWS\System32\Ext\RestoreDesktop\RestoreDesktop.exe
    Google Update REG_SZ "C:\Documents and Settings\Jeremy\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

    »»»» Presence d infections dans Support amovible :

    ----------------- ! Fin du rapport ! ------------------
    0
  13. jay
     
    VOici avec la fin du rapport

    ComboFix 08-10-05.06 - Jeremy 2008-10-06 13:39:18.2 - NTFSx86
    Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.334 [GMT 2:00]
    Lancé depuis: C:\Documents and Settings\Jeremy\Bureau\ComboFix.exe

    [COLOR=RED][B]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/B][/COLOR]
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    ---- Previous Run -------
    .
    C:\Documents and Settings\miolu\Application Data\install.dat
    C:\Documents and Settings\miolu\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
    C:\WINDOWS\regedit.com
    C:\WINDOWS\system32\ext
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Aut2Exe\Aut2Exe.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Aut2Exe\AutoItSC.bin
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Aut2Exe\Exe2Aut.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\AutoIt.chm
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\AutoIt.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\_Run_Me_First.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\_ReadMe_.txt
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Adlib.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Calc.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Comspec.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\CPanel.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\DialUpNetworking.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Gosub.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\IfEqual.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Notepad.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Shutdown98.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Snapshot.aut
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\BKRenamer\bkren.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\BKRenamer\bkren.txt
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\choice.com
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\choice.txt
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\deltree.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\NirCmd - Freeware command-line tool for Windows.mht
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\nircmd.chm
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\nircmd.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\nircmdc.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\RegCmd\readme.txt
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\RegCmd\regcmd.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\RegCmd\regcmd.ini
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\sleep.exe
    C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\sleep.txt
    C:\WINDOWS\system32\ext\+BONUS\BONUS_Lisez.moi.txt
    C:\WINDOWS\system32\ext\+BONUS\CustomStart\CustomStart.exe
    C:\WINDOWS\system32\ext\+BONUS\DeskProjection\DProj.exe
    C:\WINDOWS\system32\ext\+BONUS\DeskProjection\Readme.txt
    C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\dd.exe
    C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\DoubleDesktop.url
    C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\Readme.txt
    C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\v2.0
    C:\WINDOWS\system32\ext\+BONUS\ExpiredCookiesCleaner\Expired Cookies Cleaner.url
    C:\WINDOWS\system32\ext\+BONUS\ExpiredCookiesCleaner\ExpiredCookiesCleaner.exe
    C:\WINDOWS\system32\ext\+BONUS\ExpiredCookiesCleaner\ReadMe.txt
    C:\WINDOWS\system32\ext\+BONUS\FileCHK\FileCHK.exe
    C:\WINDOWS\system32\ext\+BONUS\FileCHK\readme.txt
    C:\WINDOWS\system32\ext\+BONUS\FileCHK\Recover CHK Files.url
    C:\WINDOWS\system32\ext\+BONUS\FileCHK\source.zip
    C:\WINDOWS\system32\ext\+BONUS\FileCHK\v1.1.03
    C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\Changes.txt
    C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\Excludes.dat
    C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\FocusAlpha.exe
    C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\License.txt
    C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.CNT
    C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.exe
    C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.hlp
    C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.INI
    C:\WINDOWS\system32\ext\+BONUS\InCtrl5\v1.0fr
    C:\WINDOWS\system32\ext\+BONUS\MatroskaShellExtension\Matroska.url
    C:\WINDOWS\system32\ext\+BONUS\MatroskaShellExtension\MatroskaShellExtension_2.8.exe
    C:\WINDOWS\system32\ext\+BONUS\MIMEView\MIMEView.chm
    C:\WINDOWS\system32\ext\+BONUS\MIMEView\MIMEView.exe
    C:\WINDOWS\system32\ext\+BONUS\MIMEView\MIMEView.url
    C:\WINDOWS\system32\ext\+BONUS\MIMEView\v1.10
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\about.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\about1.PNG
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\compatibilityissues.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusions.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusions1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusions2.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings2.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings3.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings4.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\features.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\frequentlyaskedquestions.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\generalsettings.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\generalsettings1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\gettingsupport.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\hotkeys.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\hotkeys1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\icon1.gif
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\icon2.gif
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\index.html
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\introduction.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\introduction1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\knownissues.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\left.html
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\settings.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thanks.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize2.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize3.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize4.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thumbnailsettings.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thumbnailsettings1.jpg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\what'snew.htm
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Images\about.png
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Images\splash.png
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\miniMIZE.dll
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\miniMIZE.exe
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\miniMIZE.url
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Minimize_Settings.reg
    C:\WINDOWS\system32\ext\+BONUS\miniMIZE\v1.0.34
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\buy.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\copyright.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\failed.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\faq.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\getplus.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\header.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\InTray.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\MemUsage.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\MmmCfg.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\NoMmmBar.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj103title20shd2pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj104geo247shd19pg5p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj105geo248pg5p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj107geo260shd20pg5p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj10geo29pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj110geo267shd21pg6p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj112geo105pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj113geo272shd22pg6p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj114geo273pg6p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj115geo114pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj116geo77pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj117geo107pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj124geo109shd27pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj127geo159shd26pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj139geo126shd28pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj143geo139shd29pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj190geo163pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj198geo172shd36pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj205geo187pg9p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj206geo188shd35pg9p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj208geo189pg10p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj208geo189pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj208geo189pg9p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj209geo190pg9p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj210geo168shd52pg10p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj212geo165shd46pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj216geo171pg10p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj217geo177pg10p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj218geo178pg10p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj219geo180shd38pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj220geo184pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj222geo185shd56pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj223geo183shd56pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj224geo182shd53pg10p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj225geo197shd37pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj22geo56shd7pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj231geo203shd39pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj232geo194pg9p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj236geo205shd54pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj243geo303shd40pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj247geo308shd41pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj258geo232pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj259geo235pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj261geo237pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj262geo249shd48pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj263geo236shd44pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj265geo238pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj269geo202shd45pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj274geo227shd47pg9p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj278geo246pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj281geo252shd58pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj314geo230pg12p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj315geo231shd59pg12p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj316geo287pg12p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj319geo292shd50pg13p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj321geo289shd60pg12p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj322geo290pg12p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj324geo233shd51pg13p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj325geo234pg13p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj327geo296pg13p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj330geo298pg13p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj331geo299shd61pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj332geo241pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj367title279pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj375title70pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj37geo72shd9pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj39geo73shd10pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj3geo19shd4pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj410geo264shd64pg11p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj431title126pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj521geo433shd6pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj61geo62shd8pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj63geo33shd12pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj64geo34pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj66geo82shd13pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj73geo104pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj75geo127pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj76geo128pg3p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj77geo129pg1p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj7geo24pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj80geo80shd11pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj82geo57pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj83geo61shd24pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj84geo63pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj85title92pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj88geo103shd25pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj91title91pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj92geo216shd15pg4p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj93geo226pg4p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj94geo229shd16pg4p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj95title96pg7p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj9geo28shd5pg2p13.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\pluscfg.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PlusOptions'.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PlusOptions.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_BarColor.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_BeforeWildMenu.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_Folders.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_iecontext.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_iemenubar.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_IntroCfg.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_IntroMenu.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_MmmTaskbar.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_StartMenu.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_WildCfg.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_WildMenu.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\top.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\topleft.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\verify.png
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\x-click-but23.gif
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\index.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\licenses.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\mmmplus.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\new.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\screenshots.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\sending.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\success.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\whatsmmmplus.html
    C:\WINDOWS\system32\ext\+BONUS\Mmm\LANCER AU DEMARRAGE.cmd
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Mmm.dll
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Mmm.exe
    C:\WINDOWS\system32\ext\+BONUS\Mmm\Mmm.url
    C:\WINDOWS\system32\ext\+BONUS\Mmm\SUPPRIMER DU DEMARRAGE.cmd
    C:\WINDOWS\system32\ext\+BONUS\Mmm\v2.02
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Demo JAVA\Concept originel Fold n' Drop.url
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Demo JAVA\foldndrop2.jar
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Demo JAVA\foldndrop2.txt
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\background.png
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado - kMonos.NET.url
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado.dll
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado.exe
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado.ini
    C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\ReadMe.txt
    C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\data.clp
    C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\data.qrp
    C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\mclip.cnt
    C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\mclip.exe
    C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\MCLIP.HLP
    C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\mclip.url
    C:\WINDOWS\system32\ext\+BONUS\ProduKey\ProduKey.chm
    C:\WINDOWS\system32\ext\+BONUS\ProduKey\ProduKey.url
    C:\WINDOWS\system32\ext\+BONUS\ProduKey\ProduKey_lng.ini
    C:\WINDOWS\system32\ext\+BONUS\ProduKey\readme.txt
    C:\WINDOWS\system32\ext\+BONUS\ProduKey\v1.03fr
    C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\INSTALLER.cmd
    C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\Registry Explorer.url
    C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\regxplor.dll
    C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\v1.4.4
    C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\Resize Enable.url
    C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\ResizeEnable.dll
    C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\ResizeEnable.txt
    C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\ResizeEnableRunner.exe
    C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\v1.4
    C:\WINDOWS\system32\ext\+BONUS\RickDangerous\ReadMe.html
    C:\WINDOWS\system32\ext\+BONUS\RickDangerous\RICK DANGEROUS Forever.url
    C:\WINDOWS\system32\ext\+BONUS\RickDangerous\rick32kb.exe
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\actions.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\actions2.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\index.html
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\menu.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\menu2.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\menuc.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\options.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\sdesk.html
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\task.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\toolwin1.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\toolwin2.png
    C:\WINDOWS\system32\ext\+BONUS\SDesk\sdesk.dll
    C:\WINDOWS\system32\ext\+BONUS\SDesk\sdesk.exe
    C:\WINDOWS\system32\ext\+BONUS\SDesk\sdesk.ini
    C:\WINDOWS\system32\ext\+BONUS\SDesk\v1.66s
    C:\WINDOWS\system32\ext\+BONUS\SDesk\WINDOWS (copier sdesk.ini ici).lnk
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Empty.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Full.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Full2.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\led.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Skin.ini
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Empty.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Full.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Full2.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\led.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Skin.ini
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\frReadme.txt
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Language\English.ini
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Language\French.ini
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Empty.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Full.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Full2.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\led.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Skin.ini
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\SkinTrash.exe
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\SkinTrash.ini
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Empty.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Full.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Full2.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\led.bmp
    C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Skin.ini
    C:\WINDOWS\system32\ext\+BONUS\SMPSeesaw (pour bi-proc)\readme.rtf
    C:\WINDOWS\system32\ext\+BONUS\SMPSeesaw (pour bi-proc)\SMP Seesaw.exe
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\ApiHooks.dll
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\lisezmoi.txt
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\Psapi.Dll
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\SCConfig.exe
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\SCHook.dll
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\SuperCopier.exe
    C:\WINDOWS\system32\ext\+BONUS\SuperCopier\v1.35fr stable
    C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\ConfigTsXP.exe
    C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\lang\_Translation.txt
    C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\lang\Français.lng
    C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\TaskSwitchXP.exe
    C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\TaskSwitchXP.url
    C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\v2.0.8fr
    C:\WINDOWS\system32\ext\+BONUS\TextGrabber\Lisez_moi.txt
    C:\WINDOWS\system32\ext\+BONUS\TextGrabber\TextGrab.dll
    C:\WINDOWS\system32\ext\+BONUS\TextGrabber\TextGrabber.exe
    C:\WINDOWS\system32\ext\+BONUS\TextGrabber\TextGrabber.hlp
    C:\WINDOWS\system32\ext\+BONUS\TextGrabber\v1.0
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\Data\About\About.ini
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\Data\About\About.png
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\Languages\1036.ini
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\Languages\LanguageID Finder.exe
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\Plugins\iBounce\fx.dll
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\Plugins\iZoom\fx.dll
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\UberIcon.dll
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\UberIcon.url
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\UberIconManager.exe
    C:\WINDOWS\system32\ext\+BONUS\UberIcon\v1.0fr
    C:\WINDOWS\system32\ext\+BONUS\xCap\README.txt
    C:\WINDOWS\system32\ext\+BONUS\xCap\settings.ini
    C:\WINDOWS\system32\ext\+BONUS\xCap\xCapV109.exe
    C:\WINDOWS\system32\ext\A43\a43.dat
    C:\WINDOWS\system32\ext\A43\A43.exe
    C:\WINDOWS\system32\ext\A43\A43.ini
    C:\WINDOWS\system32\ext\A43\A43.url
    C:\WINDOWS\system32\ext\A43\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\A43\language.ini
    C:\WINDOWS\system32\ext\A43\ReadMe.txt
    C:\WINDOWS\system32\ext\A43\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\A43\unrar.dll
    C:\WINDOWS\system32\ext\A43\v2.45fr
    C:\WINDOWS\system32\ext\AllSnap\allSnap.chm
    C:\WINDOWS\system32\ext\AllSnap\allSnap.exe
    C:\WINDOWS\system32\ext\AllSnap\auto_lineup.dll
    C:\WINDOWS\system32\ext\AllSnap\snap_libW.dll
    C:\WINDOWS\system32\ext\AllSnap\v1.31.5fr
    C:\WINDOWS\system32\ext\Applications.htm
    C:\WINDOWS\system32\ext\Applications\A43.gif
    C:\WINDOWS\system32\ext\Applications\allsnap01.gif
    C:\WINDOWS\system32\ext\Applications\allsnap02.gif
    C:\WINDOWS\system32\ext\Applications\allsnap03.gif
    C:\WINDOWS\system32\ext\Applications\allsnap04.gif
    C:\WINDOWS\system32\ext\Applications\AsteriskLogger.gif
    C:\WINDOWS\system32\ext\Applications\audio01.gif
    C:\WINDOWS\system32\ext\Applications\audio02.gif
    C:\WINDOWS\system32\ext\Applications\Autoruns.gif
    C:\WINDOWS\system32\ext\Applications\CatAutres.gif
    C:\WINDOWS\system32\ext\Applications\CatDemarrage.gif
    C:\WINDOWS\system32\ext\Applications\CatMenuDemarrer.gif
    C:\WINDOWS\system32\ext\Applications\CatMenuFichiersDossiers.gif
    C:\WINDOWS\system32\ext\Applications\CatMenuPosteTravail.gif
    C:\WINDOWS\system32\ext\Applications\CatProprietesFichiersDossiers.gif
    C:\WINDOWS\system32\ext\Applications\cdbfshell.gif
    C:\WINDOWS\system32\ext\Applications\cliptray01.gif
    C:\WINDOWS\system32\ext\Applications\cliptray02.gif
    C:\WINDOWS\system32\ext\Applications\cliptray03.gif
    C:\WINDOWS\system32\ext\Applications\cliptray04.gif
    C:\WINDOWS\system32\ext\Applications\cliptray05.gif
    C:\WINDOWS\system32\ext\Applications\clocx01.gif
    C:\WINDOWS\system32\ext\Applications\clocx02.gif
    C:\WINDOWS\system32\ext\Applications\clocx03.gif
    C:\WINDOWS\system32\ext\Applications\clocx04.gif
    C:\WINDOWS\system32\ext\Applications\coccinelle.gif
    C:\WINDOWS\system32\ext\Applications\contextviewer1.gif
    C:\WINDOWS\system32\ext\Applications\contextviewer2.gif
    C:\WINDOWS\system32\ext\Applications\CopyURL.gif
    C:\WINDOWS\system32\ext\Applications\CurrentPorts.gif
    C:\WINDOWS\system32\ext\Applications\demineur.gif
    C:\WINDOWS\system32\ext\Applications\dialog01.gif
    C:\WINDOWS\system32\ext\Applications\dialog02.gif
    C:\WINDOWS\system32\ext\Applications\dialog03.gif
    C:\WINDOWS\system32\ext\Applications\disasteroids.gif
    C:\WINDOWS\system32\ext\Applications\divx.gif
    C:\WINDOWS\system32\ext\Applications\dmex01.gif
    C:\WINDOWS\system32\ext\Applications\dmex02.gif
    C:\WINDOWS\system32\ext\Applications\dmexcol.gif
    C:\WINDOWS\system32\ext\Applications\doubledriver.gif
    C:\WINDOWS\system32\ext\Applications\edithexa.gif
    C:\WINDOWS\system32\ext\Applications\everest.gif
    C:\WINDOWS\system32\ext\Applications\exif.gif
    C:\WINDOWS\system32\ext\Applications\favoritesview.gif
    C:\WINDOWS\system32\ext\Applications\febooticase.gif
    C:\WINDOWS\system32\ext\Applications\febootihex.gif
    C:\WINDOWS\system32\ext\Applications\filenote01.gif
    C:\WINDOWS\system32\ext\Applications\filenote02.gif
    C:\WINDOWS\system32\ext\Applications\filenote03.gif
    C:\WINDOWS\system32\ext\Applications\flexiblerenamer.gif
    C:\WINDOWS\system32\ext\Applications\foldersize.gif
    C:\WINDOWS\system32\ext\Applications\fond.jpg
    C:\WINDOWS\system32\ext\Applications\getfilesize1.gif
    C:\WINDOWS\system32\ext\Applications\getfilesize2.gif
    C:\WINDOWS\system32\ext\Applications\gmail01.gif
    C:\WINDOWS\system32\ext\Applications\gmail02.gif
    C:\WINDOWS\system32\ext\Applications\gmail03.gif
    C:\WINDOWS\system32\ext\Applications\gmail04.gif
    C:\WINDOWS\system32\ext\Applications\gotoshared.gif
    C:\WINDOWS\system32\ext\Applications\hash.gif
    C:\WINDOWS\system32\ext\Applications\IECookiesView.gif
    C:\WINDOWS\system32\ext\Applications\IEHistoryView.gif
    C:\WINDOWS\system32\ext\Applications\IEPrivacyKeeper1.gif
    C:\WINDOWS\system32\ext\Applications\IEPrivacyKeeper2.gif
    C:\WINDOWS\system32\ext\Applications\invaders1.gif
    C:\WINDOWS\system32\ext\Applications\invaders2.gif
    C:\WINDOWS\system32\ext\Applications\LabelFonctions.gif
    C:\WINDOWS\system32\ext\Applications\LabelRepertoire.gif
    C:\WINDOWS\system32\ext\Applications\LabelType.gif
    C:\WINDOWS\system32\ext\Applications\menupostetravail.gif
    C:\WINDOWS\system32\ext\Applications\messenpass.gif
    C:\WINDOWS\system32\ext\Applications\mitecexec01.gif
    C:\WINDOWS\system32\ext\Applications\mitecexec02.gif
    C:\WINDOWS\system32\ext\Applications\mitecexec03.gif
    C:\WINDOWS\system32\ext\Applications\mitecexec04.gif
    C:\WINDOWS\system32\ext\Applications\mitecimage01.gif
    C:\WINDOWS\system32\ext\Applications\mitecimage02.gif
    C:\WINDOWS\system32\ext\Applications\mpv.gif
    C:\WINDOWS\system32\ext\Applications\netpass.gif
    C:\WINDOWS\system32\ext\Applications\notepad++.gif
    C:\WINDOWS\system32\ext\Applications\Othello.gif
    C:\WINDOWS\system32\ext\Applications\pathcopy.gif
    C:\WINDOWS\system32\ext\Applications\phmBootLogo.dll..gif
    C:\WINDOWS\system32\ext\Applications\phmFolderAppearance.dll.gif
    C:\WINDOWS\system32\ext\Applications\phmFolderAppearance02.dll.gif
    C:\WINDOWS\system32\ext\Applications\ProcessViewer.gif
    C:\WINDOWS\system32\ext\Applications\propplus01.gif
    C:\WINDOWS\system32\ext\Applications\propplus02.gif
    C:\WINDOWS\system32\ext\Applications\pspad.gif
    C:\WINDOWS\system32\ext\Applications\pspv.gif
    C:\WINDOWS\system32\ext\Applications\regalyzer.gif
    C:\WINDOWS\system32\ext\Applications\regcompact.gif
    C:\WINDOWS\system32\ext\Applications\regseeker.gif
    C:\WINDOWS\system32\ext\Applications\Regshot.gif
    C:\WINDOWS\system32\ext\Applications\restoredesktop.gif
    C:\WINDOWS\system32\ext\Applications\runwithparameters.gif
    C:\WINDOWS\system32\ext\Applications\shellmenuview.gif
    C:\WINDOWS\system32\ext\Applications\sherlock.gif
    C:\WINDOWS\system32\ext\Applications\shortcutsman.gif
    C:\WINDOWS\system32\ext\Applications\sizer1.gif
    C:\WINDOWS\system32\ext\Applications\sizer2.gif
    C:\WINDOWS\system32\ext\Applications\sizer3.gif
    C:\WINDOWS\system32\ext\Applications\starter.gif
    C:\WINDOWS\system32\ext\Applications\statbar01.gif
    C:\WINDOWS\system32\ext\Applications\statbar02.gif
    C:\WINDOWS\system32\ext\Applications\swf1.gif
    C:\WINDOWS\system32\ext\Applications\swf2.gif
    C:\WINDOWS\system32\ext\Applications\swf3.gif
    C:\WINDOWS\system32\ext\Applications\swf4.gif
    C:\WINDOWS\system32\ext\Applications\thumbview.gif
    C:\WINDOWS\system32\ext\Applications\tri.gif
    C:\WINDOWS\system32\ext\Applications\tugzip.gif
    C:\WINDOWS\system32\ext\Applications\TypeDLL.gif
    C:\WINDOWS\system32\ext\Applications\TypeEXE.gif
    C:\WINDOWS\system32\ext\Applications\unlocker01.gif
    C:\WINDOWS\system32\ext\Applications\unlocker02.gif
    C:\WINDOWS\system32\ext\Applications\unlocker03.gif
    C:\WINDOWS\system32\ext\Applications\whyreboot.gif
    C:\WINDOWS\system32\ext\Applications\winroll.gif
    C:\WINDOWS\system32\ext\Applications\winservices.gif
    C:\WINDOWS\system32\ext\Applications\xnstop.gif
    C:\WINDOWS\system32\ext\Applications\XPSP2+_Chrysalide_Widescreen.jpg
    C:\WINDOWS\system32\ext\Applications\xvid.gif
    C:\WINDOWS\system32\ext\Applications\yz01.gif
    C:\WINDOWS\system32\ext\Applications\yz02.gif
    C:\WINDOWS\system32\ext\Applications\yz02b.gif
    C:\WINDOWS\system32\ext\Applications\yz03.gif
    C:\WINDOWS\system32\ext\AsteriskLogger\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\AsteriskLogger\Asterisk Logger.url
    C:\WINDOWS\system32\ext\AsteriskLogger\astlog.chm
    C:\WINDOWS\system32\ext\AsteriskLogger\astlog_lng.ini
    C:\WINDOWS\system32\ext\AsteriskLogger\ReadMe.txt
    C:\WINDOWS\system32\ext\AsteriskLogger\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\AsteriskLogger\v1.02fr
    C:\WINDOWS\system32\ext\Audioshellext\AudioShell.url
    C:\WINDOWS\system32\ext\Audioshellext\AudioShellExt.dll
    C:\WINDOWS\system32\ext\Audioshellext\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\Audioshellext\INSTALLER.cmd
    C:\WINDOWS\system32\ext\Audioshellext\v1.0.1
    C:\WINDOWS\system32\ext\Autoruns\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\Autoruns\autoruns.chm
    C:\WINDOWS\system32\ext\Autoruns\autoruns.exe
    C:\WINDOWS\system32\ext\Autoruns\Autoruns.url
    C:\WINDOWS\system32\ext\Autoruns\autorunsc.exe
    C:\WINDOWS\system32\ext\Autoruns\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\Autoruns\v8.42fr
    C:\WINDOWS\system32\ext\CDBFShellExt\CDBF Shell Extension.url
    C:\WINDOWS\system32\ext\CDBFShellExt\cdbfshell.dll
    C:\WINDOWS\system32\ext\CDBFShellExt\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\CDBFShellExt\exemple.dbf
    C:\WINDOWS\system32\ext\CDBFShellExt\INSTALLER.cmd
    C:\WINDOWS\system32\ext\CDBFShellExt\readme.txt
    C:\WINDOWS\system32\ext\CDBFShellExt\v1.0fr
    C:\WINDOWS\system32\ext\ClipTray\ClipTray.chm
    C:\WINDOWS\system32\ext\ClipTray\ClipTray.exe
    C:\WINDOWS\system32\ext\ClipTray\ClipTray.ini
    C:\WINDOWS\system32\ext\ClipTray\ClipTray.url
    C:\WINDOWS\system32\ext\ClipTray\Personal.dat
    C:\WINDOWS\system32\ext\ClipTray\v1.61fr
    C:\WINDOWS\system32\ext\ClocX\ClocX.exe
    C:\WINDOWS\system32\ext\ClocX\ClocX.url
    C:\WINDOWS\system32\ext\ClocX\Lang\French.lng
    C:\WINDOWS\system32\ext\ClocX\Presets\BlueSphere2.png
    C:\WINDOWS\system32\ext\ClocX\Presets\CloQ.ini
    C:\WINDOWS\system32\ext\ClocX\Presets\CloQ.png
    C:\WINDOWS\system32\ext\ClocX\Presets\default.bmp
    C:\WINDOWS\system32\ext\ClocX\Presets\default.ini
    C:\WINDOWS\system32\ext\ClocX\Presets\GlowMarvilla.png
    C:\WINDOWS\system32\ext\ClocX\Presets\Snowball Clock.png
    C:\WINDOWS\system32\ext\ClocX\Presets\street.ini
    C:\WINDOWS\system32\ext\ClocX\Presets\street.png
    C:\WINDOWS\system32\ext\ClocX\Presets\streethour.hpng
    C:\WINDOWS\system32\ext\ClocX\Presets\streetmin.hpng
    C:\WINDOWS\system32\ext\ClocX\ReadMe.txt
    C:\WINDOWS\system32\ext\ClocX\v1.5.1fr
    C:\WINDOWS\system32\ext\ContextViewer\Context Viewer.url
    C:\WINDOWS\system32\ext\ContextViewer\ContView.exe
    C:\WINDOWS\system32\ext\ContextViewer\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\ContextViewer\INSTALLER.cmd
    C:\WINDOWS\system32\ext\ContextViewer\plugins\AXZIP.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\AXZIP.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifDIB.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFGIF.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifgif.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFJPEG.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifjpeg.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFMAG.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFMAG.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPI.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPI.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC2.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC2.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifpict.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifSunRAS.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifTGA.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFTIFF.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\iftiff.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifTIFF6.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\ifWMF.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFXLD4.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\IFXLD4.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\LHASAD.PLG
    C:\WINDOWS\system32\ext\ContextViewer\plugins\LHASAD.SPI
    C:\WINDOWS\system32\ext\ContextViewer\plugins\LZR.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\LZRP.spi
    C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.clw
    C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.dsp
    C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.dsw
    C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.rc
    C:\WINDOWS\system32\ext\ContextViewer\ReadMe.txt
    C:\WINDOWS\system32\ext\ContextViewer\v1.41fr
    C:\WINDOWS\system32\ext\CopyURL\CopyURL.dll
    C:\WINDOWS\system32\ext\CopyURL\CopyURL.txt
    C:\WINDOWS\system32\ext\CopyURL\CopyURL.url
    C:\WINDOWS\system32\ext\CopyURL\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\CopyURL\INSTALLER.cmd
    C:\WINDOWS\system32\ext\CopyURL\ReadMe.txt
    C:\WINDOWS\system32\ext\CopyURL\v2.31fr
    C:\WINDOWS\system32\ext\CurrentPorts\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\CurrentPorts\cports.chm
    C:\WINDOWS\system32\ext\CurrentPorts\cports.exe
    C:\WINDOWS\system32\ext\CurrentPorts\cports_lng.ini
    C:\WINDOWS\system32\ext\CurrentPorts\CurrPorts.url
    C:\WINDOWS\system32\ext\CurrentPorts\readme.txt
    C:\WINDOWS\system32\ext\CurrentPorts\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\CurrentPorts\v1.07fr
    C:\WINDOWS\system32\ext\DialogBoxAssistant\Dialog Box Assistant.url
    C:\WINDOWS\system32\ext\DialogBoxAssistant\OSDEx.chm
    C:\WINDOWS\system32\ext\DialogBoxAssistant\OSDEx.exe
    C:\WINDOWS\system32\ext\DialogBoxAssistant\OSDExLib.dll
    C:\WINDOWS\system32\ext\DialogBoxAssistant\ReadMe.txt
    C:\WINDOWS\system32\ext\DialogBoxAssistant\v1.1fr
    C:\WINDOWS\system32\ext\Disasteroids3D\Disasteroids 3D.url
    C:\WINDOWS\system32\ext\Disasteroids3D\Disasteroids3D.cfg
    C:\WINDOWS\system32\ext\Disasteroids3D\disasteroids3d.dat
    C:\WINDOWS\system32\ext\Disasteroids3D\Disasteroids3D.exe
    C:\WINDOWS\system32\ext\Divx\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\Divx\DivX.url
    C:\WINDOWS\system32\ext\Divx\Divxconfig.exe
    C:\WINDOWS\system32\ext\Divx\divxdec.ax
    C:\WINDOWS\system32\ext\Divx\INSTALLER.cmd
    C:\WINDOWS\system32\ext\Divx\v5.0.5 (dernière compatible VirtualDub)
    C:\WINDOWS\system32\ext\DmexBar\allemand.lng
    C:\WINDOWS\system32\ext\DmexBar\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\DmexBar\Deutsch.lng
    C:\WINDOWS\system32\ext\DmexBar\dmexalign.exe
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange all horizontal.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange all vertical.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange two horizontal.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange two vertical.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Restore positions.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Save position and minimize.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexalign\Save position.lnk
    C:\WINDOWS\system32\ext\DmexBar\dmexbar.dll
    C:\WINDOWS\system32\ext\DmexBar\dmexbar.dll.manifest
    C:\WINDOWS\system32\ext\DmexBar\DMEXBAR.HLP
    C:\WINDOWS\system32\ext\DmexBar\dmexbar.ini
    C:\WINDOWS\system32\ext\DmexBar\DmexBar.url
    C:\WINDOWS\system32\ext\DmexBar\INSTALLER.cmd
    C:\WINDOWS\system32\ext\DmexBar\unsplit.exe
    C:\WINDOWS\system32\ext\DmexBar\UnzDll.dll
    C:\WINDOWS\system32\ext\DmexBar\v10
    C:\WINDOWS\system32\ext\DmexBar\viewer.exe
    C:\WINDOWS\system32\ext\DmexBar\viewer.ini
    C:\WINDOWS\system32\ext\DmexBar\ZipDll.dll
    C:\WINDOWS\system32\ext\DmexCol\DESINSTALLER.reg
    C:\WINDOWS\system32\ext\DmexCol\DmexBar.url
    C:\WINDOWS\system32\ext\DmexCol\dmexcol.dll
    C:\WINDOWS\system32\ext\DmexCol\dmexcol.hlp
    C:\WINDOWS\system32\ext\DmexCol\INSTALLER.cmd
    C:\WINDOWS\system32\ext\DmexCol\v11fr
    C:\WINDOWS\system32\ext\DoubleDriver\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\DoubleDriver\dd.chm
    C:\WINDOWS\system32\ext\DoubleDriver\dd.exe
    C:\WINDOWS\system32\ext\DoubleDriver\dd.ini
    C:\WINDOWS\system32\ext\DoubleDriver\Double Driver.url
    C:\WINDOWS\system32\ext\DoubleDriver\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\DoubleDriver\v1.0
    C:\WINDOWS\system32\ext\EasyRead\AJOUTER A LA BARRE DE BOUTONS.cmd
    C:\WINDOWS\system32\ext\EasyRead\EasyRead.cmd
    C:\WINDOWS\system32\ext\EasyRead\EasyRead.gif
    C:\WINDOWS\system32\ext\EasyRead\EasyRead.url
    C:\WINDOWS\system32\ext\EasyRead\Iconico.ico
    C:\WINDOWS\system32\ext\EasyRead\ShellExec.exe
    C:\WINDOWS\system32\ext\EasyRead\SUPPRIMER DE LA BARRE DE BOUTONS.cmd
    C:\WINDOWS\system32\ext\EasyRead\ZoomIn.ico
    C:\WINDOWS\system32\ext\EasyRead\ZoomIn.js
    C:\WINDOWS\system32\ext\EasyRead\ZoomOut.ico
    C:\WINDOWS\system32\ext\EasyRead\ZoomOut.js
    C:\WINDOWS\system32\ext\Everest\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\Everest\everest.bin
    C:\WINDOWS\system32\ext\Everest\everest.chm
    C:\WINDOWS\system32\ext\Everest\everest.dat
    C:\WINDOWS\system32\ext\Everest\everest.exe
    C:\WINDOWS\system32\ext\Everest\everest.mem
    C:\WINDOWS\system32\ext\Everest\everest.web
    C:\WINDOWS\system32\ext\Everest\everest_cpl.cpl
    C:\WINDOWS\system32\ext\Everest\everest_icons.dll
    C:\WINDOWS\system32\ext\Everest\everest_memlat.dll
    C:\WINDOWS\system32\ext\Everest\everest_xpicons.dll
    C:\WINDOWS\system32\ext\Everest\everest_zipdll.dll
    C:\WINDOWS\system32\ext\Everest\kerneld.amd64
    C:\WINDOWS\system32\ext\Everest\kerneld.ia64
    C:\WINDOWS\system32\ext\Everest\kerneld.w9x
    C:\WINDOWS\system32\ext\Everest\kerneld.wnt
    C:\WINDOWS\system32\ext\Everest\Language\lang_fr.txt
    C:\WINDOWS\system32\ext\Everest\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\Everest\v2.20fr
    C:\WINDOWS\system32\ext\Exif\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\Exif\Exif Shell Extension.url
    C:\WINDOWS\system32\ext\Exif\exif.dll
    C:\WINDOWS\system32\ext\Exif\INSTALLER.cmd
    C:\WINDOWS\system32\ext\Exif\v1.02
    C:\WINDOWS\system32\ext\FavoritesView\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\FavoritesView\faview.chm
    C:\WINDOWS\system32\ext\FavoritesView\faview.exe
    C:\WINDOWS\system32\ext\FavoritesView\faview_lng.ini
    C:\WINDOWS\system32\ext\FavoritesView\FavoritesView.url
    C:\WINDOWS\system32\ext\FavoritesView\ReadMe.txt
    C:\WINDOWS\system32\ext\FavoritesView\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\FavoritesView\v1.0fr
    C:\WINDOWS\system32\ext\FebootiCase\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\FebootiCase\fCase.dll
    C:\WINDOWS\system32\ext\FebootiCase\Febooti.url
    C:\WINDOWS\system32\ext\FebootiCase\INSTALLER.cmd
    C:\WINDOWS\system32\ext\FebootiCase\Traduction française par club83 du forum xpcoccinelle.free.fr
    C:\WINDOWS\system32\ext\FebootiCase\V1.1fr
    C:\WINDOWS\system32\ext\FebootiHex\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\FebootiHex\Febooti.url
    C:\WINDOWS\system32\ext\FebootiHex\fHex.dll
    C:\WINDOWS\system32\ext\FebootiHex\INSTALLER.cmd
    C:\WINDOWS\system32\ext\FebootiHex\Traduction française par club83 du forum xpcoccinelle.free.fr
    C:\WINDOWS\system32\ext\FebootiHex\V1.0fr
    C:\WINDOWS\system32\ext\Filenote\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\Filenote\FileNote.dll
    C:\WINDOWS\system32\ext\Filenote\FileNote.url
    C:\WINDOWS\system32\ext\Filenote\INSTALLER.cmd
    C:\WINDOWS\system32\ext\Filenote\ReadMe.txt
    C:\WINDOWS\system32\ext\Filenote\v1.0
    C:\WINDOWS\system32\ext\FlexibleRenamer\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.exe
    C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.exe.manifest
    C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.ini
    C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.url
    C:\WINDOWS\system32\ext\FlexibleRenamer\HistoryEN.txt
    C:\WINDOWS\system32\ext\FlexibleRenamer\PresetEN.ini
    C:\WINDOWS\system32\ext\FlexibleRenamer\ReadMeEN.txt
    C:\WINDOWS\system32\ext\FlexibleRenamer\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\FlexibleRenamer\v7.3
    C:\WINDOWS\system32\ext\FolderSize\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\FolderSize\Folder Size.url
    C:\WINDOWS\system32\ext\FolderSize\FolderSize.msi
    C:\WINDOWS\system32\ext\FolderSize\fr\FolderSizeColumn.dll
    C:\WINDOWS\system32\ext\FolderSize\INSTALLER.cmd
    C:\WINDOWS\system32\ext\FolderSize\v2.1fr
    C:\WINDOWS\system32\ext\GetFileSize\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\GetFileSize\Get File Size.url
    C:\WINDOWS\system32\ext\GetFileSize\GetFileSize.exe
    C:\WINDOWS\system32\ext\GetFileSize\gfs.chm
    C:\WINDOWS\system32\ext\GetFileSize\INSTALLER.cmd
    C:\WINDOWS\system32\ext\GetFileSize\v2.2
    C:\WINDOWS\system32\ext\Gmail\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\Gmail\Gmail Drive en francais.url
    C:\WINDOWS\system32\ext\Gmail\GMail Drive shell extension.url
    C:\WINDOWS\system32\ext\Gmail\GMailFS.cnt
    C:\WINDOWS\system32\ext\Gmail\GMailFS.dll
    C:\WINDOWS\system32\ext\Gmail\GMailFS.hlp
    C:\WINDOWS\system32\ext\Gmail\INSTALLER.cmd
    C:\WINDOWS\system32\ext\Gmail\v1.0.9fr
    C:\WINDOWS\system32\ext\GotoShared\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\GotoShared\GoTo Shared.url
    C:\WINDOWS\system32\ext\GotoShared\GotoShared.exe
    C:\WINDOWS\system32\ext\GotoShared\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\GotoShared\v1.0fr
    C:\WINDOWS\system32\ext\HashTab\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\HashTab\HashTab Shell Extension.url
    C:\WINDOWS\system32\ext\HashTab\HashTab.dll
    C:\WINDOWS\system32\ext\HashTab\INSTALLER.cmd
    C:\WINDOWS\system32\ext\HashTab\v1.7fr
    C:\WINDOWS\system32\ext\Icones_Cocci.cmd
    C:\WINDOWS\system32\ext\Icones_Cocci.reg
    C:\WINDOWS\system32\ext\Icones_XP.cmd
    C:\WINDOWS\system32\ext\Icones_XP.reg
    C:\WINDOWS\system32\ext\IECookiesView\ads.txt
    C:\WINDOWS\system32\ext\IECookiesView\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\IECookiesView\IECookiesView.url
    C:\WINDOWS\system32\ext\IECookiesView\iecv.chm
    C:\WINDOWS\system32\ext\IECookiesView\iecv.exe
    C:\WINDOWS\system32\ext\IECookiesView\iecv_lng.ini
    C:\WINDOWS\system32\ext\IECookiesView\ReadMe.txt
    C:\WINDOWS\system32\ext\IECookiesView\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\IECookiesView\v1.70fr
    C:\WINDOWS\system32\ext\IEHistoryView\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\IEHistoryView\IEHistoryView.url
    C:\WINDOWS\system32\ext\IEHistoryView\iehv.chm
    C:\WINDOWS\system32\ext\IEHistoryView\iehv.exe
    C:\WINDOWS\system32\ext\IEHistoryView\iehv_lng.ini
    C:\WINDOWS\system32\ext\IEHistoryView\ReadMe.txt
    C:\WINDOWS\system32\ext\IEHistoryView\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\IEHistoryView\v1.30fr
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\dbghelp.dll
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\hgc.ani
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\IE Privacy Keeper.url
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\iepk.ico
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\iepk.wav
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\IEPrivacyKeeper.exe
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\Lang\French.lng
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\license_fr.txt
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\ntqsi.dll
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\SecureDelete.dll
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\UnHCrashReport.exe
    C:\WINDOWS\system32\ext\IEPrivacyKeeper\v2.7.2fr
    C:\WINDOWS\system32\ext\MailPassView\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\MailPassView\Lisez-moi.txt
    C:\WINDOWS\system32\ext\MailPassView\mailpv.chm
    C:\WINDOWS\system32\ext\MailPassView\mailpv_lng.ini
    C:\WINDOWS\system32\ext\MailPassView\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\MailPassView\v1.32fr
    C:\WINDOWS\system32\ext\MessenPass\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\MessenPass\mspass.chm
    C:\WINDOWS\system32\ext\MessenPass\mspass_lng.ini
    C:\WINDOWS\system32\ext\MessenPass\ReadMe.txt
    C:\WINDOWS\system32\ext\MessenPass\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\MessenPass\v1.04fr
    C:\WINDOWS\system32\ext\Minesweeper3D\docs\cubes-screenshot.png
    C:\WINDOWS\system32\ext\Minesweeper3D\docs\dodeca-screenshot.png
    C:\WINDOWS\system32\ext\Minesweeper3D\docs\index.html
    C:\WINDOWS\system32\ext\Minesweeper3D\docs\mail.png
    C:\WINDOWS\system32\ext\Minesweeper3D\docs\sprites-screenshot.png
    C:\WINDOWS\system32\ext\Minesweeper3D\Minesweeper 3D.url
    C:\WINDOWS\system32\ext\Minesweeper3D\Minesweeper3D.exe
    C:\WINDOWS\system32\ext\Minesweeper3D\Minesweeper3D.ico
    C:\WINDOWS\system32\ext\Minesweeper3D\mingwm10.dll
    C:\WINDOWS\system32\ext\Minesweeper3D\saves\screenshot
    C:\WINDOWS\system32\ext\Minesweeper3D\settings\default
    C:\WINDOWS\system32\ext\Minesweeper3D\skins\default\fields.png
    C:\WINDOWS\system32\ext\Minesweeper3D\skins\default\tiled.png
    C:\WINDOWS\system32\ext\Minesweeper3D\skins\sprites\fields.png
    C:\WINDOWS\system32\ext\Minesweeper3D\skins\sprites\tiled.png
    C:\WINDOWS\system32\ext\Minesweeper3D\skins\transolid\fields.png
    C:\WINDOWS\system32\ext\Minesweeper3D\skins\transolid\tiled.png
    C:\WINDOWS\system32\ext\Minesweeper3D\v2005-01-10
    C:\WINDOWS\system32\ext\MitecExec\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\MitecExec\INSTALLER.cmd
    C:\WINDOWS\system32\ext\MitecExec\MiTeC Shell Extension Pack.url
    C:\WINDOWS\system32\ext\MitecExec\MPEISE.dll
    C:\WINDOWS\system32\ext\MitecExec\ReadMe.txt
    C:\WINDOWS\system32\ext\MitecExec\v3.2
    C:\WINDOWS\system32\ext\MitecImage\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\MitecImage\INSTALLER.cmd
    C:\WINDOWS\system32\ext\MitecImage\MIPSE.dll
    C:\WINDOWS\system32\ext\MitecImage\MiTeC Shell Extension Pack.url
    C:\WINDOWS\system32\ext\MitecImage\ReadMe.txt
    C:\WINDOWS\system32\ext\MitecImage\v3.2
    C:\WINDOWS\system32\ext\MP3Lame\ACM codec version of Lame MP3 encoder.url
    C:\WINDOWS\system32\ext\MP3Lame\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\MP3Lame\INSTALLER.cmd
    C:\WINDOWS\system32\ext\MP3Lame\lame.exe
    C:\WINDOWS\system32\ext\MP3Lame\lame_acm.xml
    C:\WINDOWS\system32\ext\MP3Lame\lame_enc.dll
    C:\WINDOWS\system32\ext\MP3Lame\lameACM.acm
    C:\WINDOWS\system32\ext\MP3Lame\LameACM.inf
    C:\WINDOWS\system32\ext\MP3Lame\v3.96
    C:\WINDOWS\system32\ext\NetPass\AJOUTER AU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\NetPass\netpass.chm
    C:\WINDOWS\system32\ext\NetPass\netpass.exe
    C:\WINDOWS\system32\ext\NetPass\netpass_lng.ini
    C:\WINDOWS\system32\ext\NetPass\Network Password Recovery.url
    C:\WINDOWS\system32\ext\NetPass\ReadMe.txt
    C:\WINDOWS\system32\ext\NetPass\SUPPRIMER DU MENU CONTEXTUEL.cmd
    C:\WINDOWS\system32\ext\NetPass\v1.02fr
    C:\WINDOWS\system32\ext\Notepad++\config.xml
    C:\WINDOWS\system32\ext\Notepad++\contextMenu.xml
    C:\WINDOWS\system32\ext\Notepad++\doLocalConf.xml
    C:\WINDOWS\system32\ext\Notepad++\Icons\blank.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\close_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\close_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\close_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\closeAll_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\closeAll_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\closeAll_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\copy_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\copy_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\copy_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\cut_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\cut_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\cut_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\fileopen_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\fileopen_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\find_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\find_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\indent_guideline_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\indent_guideline_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\invisible_char_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\invisible_char_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\new_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\new_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\paste_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\paste_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\paste_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\playback_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\playback_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\print_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\print_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\record_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\redo_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\redo_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\redo_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\replace_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\replace_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\replace_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\save_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\save_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\save_makro_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\save_makro_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\save_makro_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\save_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\saveAll_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\saveAll_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\saveAll_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\stop_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\stop_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\undo_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\undo_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\undo_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\viewDlg_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\viewDlg_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\wrap_text_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\wrap_text_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\zoomIn_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\zoomIn_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\zoomOut_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons\zoomOut_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\close_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\close_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\close_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\closeAll_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\closeAll_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\closeAll_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\copy_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\copy_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\copy_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\cut_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\cut_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\cut_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\fileopen_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\fileopen_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\find_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\find_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\new_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\new_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\paste_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\paste_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\paste_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\print_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\print_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\readme.txt
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\redo_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\redo_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\redo_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\replace_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\replace_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\replace_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\save_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\save_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\save_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\saveAll_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\saveAll_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\saveAll_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\toolbarIcons.xml
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\undo_disabled.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\undo_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\undo_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\viewDlg_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\viewDlg_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomIn_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomIn_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomOut_hover.ico
    C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomOut_normal.ico
    C:\WINDOWS\system32\ext\Notepad++\insertExt.ini
    C:\WINDOWS\system32\ext\Notepad++\langs.xml
    C:\WINDOWS\system32\ext\Notepad++\license.txt
    C:\WINDOWS\system32\ext\Notepad++\LINEDRAW.TTF
    C:\WINDOWS\system32\ext\Notepad++\nativeLang.xml
    C:\WINDOWS\system32\ext\Notepad++\notepad++.exe
    C:\WINDOWS\system32\ext\Notepad++\Notepad++.url
    C:\WINDOWS\system32\ext\Notepad++\NppLauncher\1 - dllcache.lnk
    C:\WINDOWS\system32\ext\Notepad++\NppLauncher\2 - system32.lnk
    C:\WINDOWS\system32\ext\Notepad++\NppLauncher\3 - WINDOWS.lnk
    C:\WINDOWS\system32\ext\Notepad++\NppLauncher\notepad.exe
    C:\WINDOWS\system32\ext\Notepad++\NppLauncher\readme.txt
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\c.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\cpp.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\css.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\flash.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\java.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\javascript.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\lisp.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\perl.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\php.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\python.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\vb.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\vhdl.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\winbatch.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\xml.api
    C:\WINDOWS\system32\ext\Notepad++\plugins\NppInsertPlugin.dll
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX.dll
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX.ini
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\AsciiToEBCDIC.bin
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\libTidy.dll
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\NPPTextFXdemo.TXT
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\TIDYCFG.INI
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\W3C-CSSValidator.htm
    C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\W3C-HTMLValidator.htm
    C:\WINDOWS\system32\ext\Notepad++\plugins\XMLCheck.dll
    C:\WINDOWS\system32\ext\Notepad++\ReadMe.txt
    C:\WINDOWS\system32\ext\Notepad++\SciLexer.dll
    C:\WINDOWS\system32\ext\Notepad++\shortcuts.xml
    C:\WINDOWS\system32\ext\Notepad++\stylers.xml
    C:\WINDOWS\system32\ext\Notepad++\toolbarIcons.xml
    C:\WINDOWS\system32\ext\Notepad++\userDefineLang_ruby.xml
    C:\WINDOWS\system32\ext\Notepad++\userDefineLang_winbatch.xml
    C:\WINDOWS\system32\ext\Notepad++\v3.3fr
    C:\WINDOWS\system32\ext\OGGVorbis\DESINSTALLER.cmd
    C:\WINDOWS\system32\ext\OGGVorbis\INSTALLER.cmd
    C:\WINDOWS\system32\ext\OGGVorbis\ReadMe.txt
    C:\WINDOWS\system32\ext\OGGVorbis\uninstall.inf
    C:\WINDOWS\system32\ext\OGGVorbis\v1.0
    C:\WINDOWS\system32\ext\OGGVorbis\Vorbis Ogg ACM Codec.url
    C:\WINDOWS\system32\ext\OGGVorbis\vorbis.acm
    C:\WINDOWS\system32\ext\OGGVorbis\vorbisacm.inf
    C:\WINDOWS\system32\ext\Othello\Othello.exe
    C:\WINDOWS\system32\ext\Othello\ReadMe.txt
    C:\WINDOWS\system32\ext\Othello\v2.0
    C:\WINDOWS\system32\ext\PathCopy\DESINSTALLER.cmd
    C:\WINDO
    0
  14. jay
     
    Décidément j'y arrive pas ! voici la fin

    .
    ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Legacy_TDSSSERV
    -------\Service_TDSSserv

    ((((((((((((((((((((((((((((( Fichiers créés du 2008-09-06 au 2008-10-06 ))))))))))))))))))))))))))))))))))))
    .

    2008-10-06 11:08 . 2008-10-06 11:08 <REP> d-------- C:\_OTMoveIt
    2008-10-05 22:00 . 2007-11-28 18:56 <REP> d-------- C:\SDFix
    2008-10-04 23:57 . 2008-10-04 23:57 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
    2008-10-04 23:47 . 2008-10-04 23:47 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\McAfee
    2008-10-04 23:29 . 2008-10-04 23:29 <REP> d-------- C:\Program Files\Safari
    2008-10-04 23:29 . 2008-10-04 23:29 <REP> d-------- C:\Program Files\Bonjour
    2008-10-03 22:41 . 2008-10-03 22:42 <REP> d-------- C:\Program Files\Windows Live Safety Center
    2008-10-03 22:40 . 2008-10-03 22:40 <REP> d-------- C:\Program Files\Microsoft Silverlight
    2008-10-02 22:39 . 2008-10-02 22:39 <REP> d-------- C:\Program Files\Trend Micro
    2008-10-02 22:20 . 2008-10-02 22:22 <REP> d-------- C:\Program Files\Spyware Terminator
    2008-10-02 22:20 . 2008-10-02 22:20 <REP> d-------- C:\Program Files\Crawler
    2008-10-02 22:20 . 2008-10-02 22:23 <REP> d-------- C:\Documents and Settings\Jeremy\Application Data\Spyware Terminator
    2008-10-02 22:20 . 2008-10-02 22:24 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Spyware Terminator
    2008-10-02 22:20 . 2008-10-02 22:20 141,312 --a------ C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
    2008-10-02 21:37 . 2008-10-06 12:33 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
    2008-10-02 21:37 . 2008-10-02 21:37 <REP> d-------- C:\Documents and Settings\Jeremy\Application Data\Malwarebytes
    2008-10-02 21:37 . 2008-10-02 21:37 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes
    2008-10-02 21:37 . 2008-09-10 00:04 38,528 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
    2008-10-02 21:37 . 2008-09-10 00:03 17,200 --a------ C:\WINDOWS\system32\drivers\mbam.sys
    2008-10-02 21:10 . 2008-10-02 21:10 0 --a------ C:\23990098.$$$
    2008-10-02 20:33 . 2008-10-02 20:33 <REP> d-a------ C:\WINDOWS\zts2.exe
    2008-10-02 20:33 . 2008-10-02 20:33 <REP> d-a------ C:\WINDOWS\system32\iifgfgf.dll
    2008-10-02 20:33 . 2008-10-02 20:33 <REP> d-a------ C:\WINDOWS\rundl132.dll
    2008-10-02 20:30 . 2008-10-02 20:30 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\MicroWorld
    2008-10-02 20:30 . 2006-02-14 13:40 335,872 --a------ C:\WINDOWS\system32\T.COM
    2008-10-02 20:30 . 2004-08-19 18:10 153,088 --a------ C:\WINDOWS\R.COM
    2008-10-02 20:30 . 2008-10-02 20:30 27 --a------ C:\WINDOWS\Lic.xxx
    2008-09-30 20:20 . 2008-09-30 20:20 <REP> d-------- C:\WINDOWS\BDOSCAN8
    2008-09-24 16:35 . 2008-09-24 16:35 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft
    2008-09-14 22:05 . 2008-09-14 22:05 <REP> d-------- C:\Program Files\CCleaner

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-10-06 09:14 2,208 ----a-w C:\WINDOWS\system32\tmp.reg
    2008-10-04 21:57 --------- d-----w C:\Program Files\Lavasoft
    2008-10-04 21:30 --------- d-----w C:\Documents and Settings\Jeremy\Application Data\Apple Computer
    2008-10-04 21:29 --------- d-----w C:\Program Files\Apple Software Update
    2008-10-04 21:26 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Google Updater
    2008-10-02 18:30 34,304 ----a-w C:\WINDOWS\system32\NOTEPAD.EXE
    2008-10-02 18:30 34,304 ----a-w C:\WINDOWS\NOTEPAD.EXE
    2008-10-01 13:51 87,552 ----a-w C:\WINDOWS\system32\VACFix.exe
    2008-09-30 18:24 --------- d-----w C:\Program Files\IDoser v4
    2008-09-19 10:26 82,944 ----a-w C:\WINDOWS\system32\o4Patch.exe
    2008-09-19 10:26 82,944 ----a-w C:\WINDOWS\system32\IEDFix.C.exe
    2008-09-10 20:49 --------- d-----w C:\Program Files\eMule
    2008-09-08 21:38 88,576 ----a-w C:\WINDOWS\system32\AntiXPVSTFix.exe
    2008-08-26 13:56 --------- d-----w C:\Program Files\MSI
    2008-08-23 16:40 --------- d-----w C:\Program Files\SiSLan
    2008-08-23 09:17 --------- d-----w C:\Documents and Settings\Jeremy\Application Data\XnView
    2008-08-18 12:00 --------- d-----w C:\Program Files\MSN Messenger
    2008-08-18 11:59 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller
    2008-08-18 11:55 --------- d-----w C:\Program Files\Windows Live
    2008-08-18 11:55 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\WLInstaller
    2008-08-18 10:19 82,432 ----a-w C:\WINDOWS\system32\404Fix.exe
    2004-10-01 13:00 40,960 ----a-w C:\Program Files\Uninstall_CDS.exe
    2001-09-04 18:04 2,699,309 ----a-w C:\Documents and Settings\miolu\age2_x1.exe
    1999-09-21 16:46 2,560,000 ----a-w C:\Documents and Settings\miolu\empires2.exe
    .
    0
  15. jay
     
    Et voici le rapport bit deffender

    BitDefender Online Scanner - Rapport virus en temps réel

    Généré à: Mon, Oct 06, 2008 - 16:55:09

    Info d'analyse

    Fichiers scannés

    100786

    Infectés Fichiers

    5

    Virus Détectés

    Trojan.Clicker.MRJ

    1

    Packer.Malware.Lighty.C

    2

    Trojan.TDss.M

    1

    Packer.Malware.Lighty.E

    1

    Ce sommaire du processus d'analyse sera utilisé par les laboratoires Antivirus BitDefender pour créer des statistiques agréguées sur l'activité des virus dans le monde.
    0
  16. jay
     
    Je sais pas si c'est bon mais en tous cas un grand merci pour le coup de main , je n'ai plus de redirection à partir des liens google , je peux à nouveau accéder aux sites d'antivirus en ligne et mes navigateurs rament moins !

    Merci merci merci
    0
  17. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    il manque toujours la fin de combofix

    sinon pour le scan bitdefender il me faut les noms des fichiers infectés et les actions de bitdefender
    0
  18. jay
     
    Ok ba pour la fin de combofix je comprend pas je copie et je colle tout ce que je trouve !

    sinon voila pour bit deffender

    C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000501.dll

    Infecté par: Trojan.TDss.M

    C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000501.dll

    Echec de la désinfection

    C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000501.dll

    Supprimé

    C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000502.dll

    Infecté par: Packer.Malware.Lighty.C

    C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000502.dll

    Echec de la désinfection

    C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000502.dll

    Supprimé

    C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000503.dll

    Infecté par: Packer.Malware.Lighty.C

    C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000503.dll

    Echec de la désinfection

    C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000503.dll

    Supprimé

    C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000504.dll

    Infecté par: Packer.Malware.Lighty.E

    C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000504.dll

    Echec de la désinfection

    C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000504.dll

    Supprimé

    C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000505.dll

    Infecté par: Trojan.Clicker.MRJ

    C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000505.dll

    Echec de la désinfection

    C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000505.dll

    Supprimé
    0
  19. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    ok tout est dans ta restauration

    si tout c'est bien passé désactive la restauration système pour purger les virus qui seraient dedans puis redemarre ton ordi

    puis réactive là : https://www.informatruc.com
    0
  20. jay
     
    Ok j'ai suivi la procédure et c'est la catastrophe : l'infection virale m'a l'air d'être résolu par contre au démarrage mon pc redémarre plusieurs fois et chaque fois avant d'être complètement démarré !
    0

Discussions similaires

Infection par le virus "conficker"
nelly -
anthony5151 -

42 réponses
FBDowloader impossible à éradiquer
Pseudonyme -
chris63 -

30 réponses
Comment éradiquer totalav
jack49 -
jack49 -

2 réponses
aidez-moi à éradiquer un reminder.
papa John -
papa John -

2 réponses
infection
céline0034 -
totobetourne -

12 réponses