Le virus Host

Bonjour,
J'ai un problème dans mon PC que je souhaite éxposer en souhaitant avoir une réponse ;mon problème consiste dans un virus que ne sais où je l'ai chopé ,quand je démare mon pc il écone qui s'affiche 'alios' qui ouvre des dossiers vides partout ,des images ,des musiques .......ect ,j'ai essaye plusieurs Anivir en vains !! ,merci de me répondre .
Configuration: Windows XP Internet Explorer 7.0

21 réponses

  1. bon voilà enfin le rapport copier non sans peine et quelque 5 heures de dure laboure , j'attends vos réactions .
    1. 2009-05-24 11:02 . 2009-05-24 11:02 -------- d-----w c:\documents and settings\All Users\Application Data\1CEA
      2009-05-24 10:45 . 2009-05-24 10:45 -------- d-----w c:\documents and settings\All Users\Application Data\Bandoo
      2009-05-24 10:45 . 2009-05-24 12:03 -------- d-----w c:\program files\Bandoo
      2009-05-23 22:43 . 2009-05-24 11:27 -------- d-----w c:\documents and settings\IMAD\Local Settings\Application Data\BearShare
      2009-05-23 22:43 . 2009-05-24 11:49 -------- d-----w c:\program files\BearShare Applications
      2009-05-23 22:13 . 2009-05-24 11:52 -------- d-----w c:\documents and settings\IMAD\Local Settings\Application Data\Screamer Radio
      2009-05-23 21:46 . 2009-05-23 21:59 -------- d-----w c:\program files\adslTV
      2009-05-23 16:46 . 2009-05-24 12:43 -------- d-----w c:\program files\Fichiers communs\Windows Live
      2009-05-23 09:42 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\IMAD\Application Data\Malwarebytes
      2009-05-23 09:42 . 2009-04-06 13:32 15504 ----a-w c:\windows\system32\drivers\mbam.sys
      2009-05-23 09:42 . 2009-04-06 13:32 38496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
      2009-05-23 09:42 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\All Users\Application Data\Malwarebytes
      2009-05-23 09:42 . 2009-05-23 11:53 -------- d-----w c:\program files\Malwarebytes' Anti-Malware
      2009-05-23 07:49 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\IMAD\Local Settings\Application Data\The Weather Channel
      2009-05-22 23:23 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\IMAD\Application Data\Sammsoft
      2009-05-22 23:23 . 2009-05-24 12:43 -------- d-----w c:\program files\AskBarDis
      2009-05-22 23:23 . 2009-05-24 12:43 -------- d-----w c:\program files\Advanced Registry Optimizer
      2009-05-22 21:30 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\IMAD\Application Data\SolwaySoftware
      2009-05-22 21:21 . 2009-05-24 12:43 -------- d-----w C:\DriveKey
      2009-05-22 19:58 . 2009-05-24 12:43 -------- d-----w c:\program files\trend micro
      2009-05-22 19:58 . 2009-05-24 12:43 -------- d-----w C:\rsit
      2009-05-22 19:34 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\IMAD\Application Data\URSoft
      2009-05-22 19:34 . 2009-05-24 12:43 -------- d-----w c:\program files\Your Uninstaller 2008
      2009-05-22 19:22 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\All Users\Application Data\Yahoo!
      2009-05-22 19:22 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\IMAD\Application Data\Yahoo!
      2009-05-22 19:22 . 2009-05-24 12:43 -------- d-----w c:\program files\Yahoo!
      2009-05-21 17:46 . 2008-04-13 17:33 221184 ----a-w c:\windows\system32\wmpns.dll
      2009-05-21 14:35 . 2009-05-24 12:43 -------- d-----w c:\windows\Sun
      2009-05-21 09:05 . 2009-02-09 11:24 2191104 -c----w c:\windows\system32\dllcache\ntoskrnl.exe
      2009-05-21 09:05 . 2009-02-09 11:23 2147328 -c----w c:\windows\system32\dllcache\ntkrnlmp.exe
      2009-05-21 09:05 . 2009-02-09 11:23 2025984 -c----w c:\windows\system32\dllcache\ntkrpamp.exe
      2009-05-21 08:11 . 2008-06-14 17:33 272768 -c----w c:\windows\system32\dllcache\bthport.sys
      2009-05-21 08:11 . 2008-06-14 17:33 272768 ------w c:\windows\system32\drivers\bthport.sys
      2009-05-21 07:16 . 2008-10-24 11:21 455296 -c----w c:\windows\system32\dllcache\mrxsmb.sys
      2009-05-21 01:00 . 2007-07-27 07:41 26488 ----a-w c:\windows\system32\spupdsvc.exe
      2009-05-21 00:49 . 2009-05-24 12:43 -------- d-----w c:\program files\AGI
      2009-05-21 00:16 . 2009-05-21 01:04 86576 ----a-w c:\documents and settings\IMAD\Application Data\Microsoft\Services Windows Live\Raccourci Galerie de Photos Windows Live.exe
      2009-05-21 00:16 . 2009-05-21 01:04 392728 ----a-w c:\documents and settings\IMAD\Application Data\Microsoft\Services Windows Live\Services Windows Live.dll
      2009-05-21 00:16 . 2009-05-21 01:04 132672 ----a-w c:\documents and settings\IMAD\Application Data\Microsoft\Services Windows Live\Raccourci Windows Live Messenger.exe
      2009-05-20 23:28 . 2009-05-21 01:10 143360 ----a-w c:\documents and settings\IMAD\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
      2009-05-20 23:28 . 2009-05-21 01:10 132096 ----a-w c:\documents and settings\IMAD\Application Data\Microsoft\Live Search\Suppression-Live-Search.exe
      2009-05-20 23:28 . 2009-05-21 01:10 125440 ----a-w c:\documents and settings\IMAD\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
      2009-05-20 22:13 . 2009-05-24 12:43 -------- d-sh--w C:\found.000
      2009-05-18 22:42 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\IMAD\Local Settings\Application Data\Identities
      2009-05-18 22:38 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\IMAD\Local Settings\Application Data\Adobe
      2009-05-18 22:32 . 2009-05-24 12:43 -------- d-----w c:\program files\MSECache
      2009-05-18 22:14 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\IMAD\Application Data\dvdcss
      2009-05-18 22:12 . 2009-05-24 12:43 -------- d---a-w c:\documents and settings\All Users\Application Data\TEMP

      .
      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2009-05-24 12:45 . 2009-05-18 21:21 -------- d-----w c:\program files\SuperCopier2
      2009-05-23 13:54 . 2008-02-21 15:53 1761120 ----a-w c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\DFX2BETA_1736_9\DFX2BETA_1736.exe
      2009-05-18 21:37 . 2009-05-18 21:37 120240 ----a-w c:\documents and settings\IMAD\Application Data\IDM\idmmzcc2\components\idmmzcc.dll
      2009-05-18 21:34 . 2009-05-18 21:34 499712 ----a-w c:\windows\system32\msvcp71.dll
      2009-05-18 21:34 . 2009-05-18 21:34 348160 ----a-w c:\windows\system32\msvcr71.dll
      2009-05-18 21:31 . 2009-05-18 21:31 57344 ----a-w c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\50\5b902232-55694a9f-n\Decora-SSE.dll
      2009-05-18 21:30 . 2009-05-18 21:30 24064 ----a-w c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\15\4e09eacf-46b51e4f-n\Decora-D3D.dll
      2009-05-18 21:30 . 2009-05-18 21:30 315392 ----a-w c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-329123bb-n\jogl.dll
      2009-05-18 21:30 . 2009-05-18 21:30 20480 ----a-w c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-329123bb-n\jogl_awt.dll
      2009-05-18 21:30 . 2009-05-18 21:30 114688 ----a-w c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-329123bb-n\jogl_cg.dll
      2009-05-18 21:30 . 2009-05-18 21:30 20480 ----a-w c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\45\4f710eed-601542d3-n\gluegen-rt.dll
      2009-05-18 21:30 . 2009-05-18 21:30 499712 ----a-w c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\33\258cea61-4647c794-n\msvcp71.dll
      2009-05-18 21:30 . 2009-05-18 21:30 499712 ----a-w c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\33\258cea61-4647c794-n\jmc.dll
      2009-05-18 21:30 . 2009-05-18 21:30 348160 ----a-w c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\33\258cea61-4647c794-n\msvcr71.dll
      2009-05-18 21:25 . 2009-05-18 21:24 410984 ----a-w c:\windows\system32\deploytk.dll
      2009-05-18 19:50 . 2009-05-18 19:50 315392 ----a-w c:\windows\HideWin.exe
      2009-05-18 19:40 . 2009-05-18 19:40 21892 ----a-w c:\windows\system32\emptyregdb.dat
      2009-03-06 14:20 . 2008-04-13 17:33 286720 ----a-w c:\windows\system32\pdh.dll
      2009-03-03 00:13 . 2008-03-01 12:58 826368 ----a-w c:\windows\system32\wininet.dll
      2009-02-20 17:10 . 2008-05-09 21:28 78336 ----a-w c:\windows\system32\ieencode.dll
      2009-02-10 17:06 . 2008-04-13 19:07 2068096 ----a-w c:\windows\system32\ntkrnlpa.exe
      2009-02-09 14:05 . 2008-04-13 16:58 1846912 ----a-w c:\windows\system32\win32k.sys
      2009-02-09 11:24 . 2008-04-13 17:08 2191104 ----a-w c:\windows\system32\ntoskrnl.exe
      2009-02-09 11:23 . 2008-04-13 17:34 111104 ----a-w c:\windows\system32\services.exe
      2009-02-09 10:53 . 2008-04-13 17:33 735744 ----a-w c:\windows\system32\lsasrv.dll
      2009-02-09 10:53 . 2008-04-13 17:33 401408 ----a-w c:\windows\system32\rpcss.dll
      2009-02-09 10:53 . 2008-04-13 17:33 685568 ----a-w c:\windows\system32\advapi32.dll
      2009-02-09 10:53 . 2008-04-13 17:33 739840 ----a-w c:\windows\system32\ntdll.dll
      2009-02-06 10:39 . 2001-08-28 12:00 35328 ----a-w c:\windows\system32\sc.exe
      2009-02-03 19:58 . 2008-04-13 17:33 56832 ----a-w c:\windows\system32\secur32.dll
      2008-12-20 22:14 . 2008-04-13 17:33 1294336 ----a-w c:\windows\system32\quartz.dll
      2008-12-16 12:31 . 2008-04-13 17:33 354304 ----a-w c:\windows\system32\winhttp.dll
      2008-12-11 10:57 . 2008-04-13 10:15 333952 ----a-w c:\windows\system32\drivers\srv.sys
      2008-12-05 06:57 . 2008-04-13 17:33 144896 ----a-w c:\windows\system32\schannel.dll
      2008-10-30 08:21 . 2009-05-18 21:15 75072 ----a-w c:\windows\system32\drivers\avipbb.sys
      2008-10-24 11:21 . 2008-04-13 10:17 455296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
      2008-10-23 12:36 . 2008-04-13 17:33 286720 ----a-w c:\windows\system32\gdi32.dll
      2008-10-16 13:13 . 2009-05-18 19:41 202776 ----a-w c:\windows\system32\wuweb.dll
      2008-10-16 13:13 . 2009-05-18 19:41 1809944 ----a-w c:\windows\system32\wuaueng.dll
      2008-10-16 13:12 . 2009-05-18 19:41 323608 ----a-w c:\windows\system32\wucltui.dll
      2008-10-16 13:12 . 2009-05-18 19:41 561688 ----a-w c:\windows\system32\wuapi.dll
      2008-10-16 13:09 . 2009-05-18 19:41 51224 ----a-w c:\windows\system32\wuauclt.exe
      2008-10-16 13:09 . 2008-10-16 13:09 43544 ----a-w c:\windows\system32\wups2.dll
      2008-10-16 13:09 . 2008-04-13 17:33 92696 ----a-w c:\windows\system32\cdm.dll
      2008-10-16 13:08 . 2009-05-18 19:41 34328 ----a-w c:\windows\system32\wups.dll
      2008-10-03 10:03 . 2008-04-13 17:33 247326 ----a-w c:\windows\system32\strmdll.dll
      2008-09-10 01:15 . 2008-04-13 17:33 1307648 ----a-w c:\windows\system32\msxml6.dll
      2008-09-04 17:16 . 2008-04-13 17:33 1106944 ----a-w c:\windows\system32\msxml3.dll
      2008-08-14 10:04 . 2008-04-13 10:19 138496 ----a-w c:\windows\system32\drivers\afd.sys
      2008-07-07 20:28 . 2008-04-13 17:33 253952 ----a-w c:\windows\system32\es.dll
      2008-06-24 16:44 . 2008-04-13 17:33 74240 ----a-w c:\windows\system32\mscms.dll
      2008-06-24 16:12 . 2008-05-09 21:26 295936 ----a-w c:\windows\system32\wmpeffects.dll
      2008-06-20 17:47 . 2008-04-13 17:33 247808 ----a-w c:\windows\system32\mswsock.dll
      2008-06-20 11:51 . 2008-04-13 10:20 361600 ----a-w c:\windows\system32\drivers\tcpip.sys
      2008-06-20 11:08 . 2008-04-13 10:00 225856 ----a-w c:\windows\system32\drivers\tcpip6.sys
      2008-06-18 03:03 . 2008-05-09 21:27 938496 ----a-w c:\windows\system32\WMNetmgr.dll
      2008-06-17 23:09 . 2008-05-09 21:27 100864 ----a-w c:\windows\system32\logagent.exe
      2008-06-12 14:22 . 2009-05-18 19:39 956928 ----a-w c:\windows\system32\msdtctm.dll
      2008-06-12 14:22 . 2009-05-18 19:39 91648 ----a-w c:\windows\system32\mtxoci.dll
      2008-06-12 14:22 . 2009-05-18 19:39 428032 ----a-w c:\windows\system32\msdtcprx.dll
      2008-06-12 14:22 . 2009-05-18 19:39 161792 ----a-w c:\windows\system32\msdtcuiu.dll
      2008-06-12 14:22 . 2008-04-13 17:33 66560 ----a-w c:\windows\system32\mtxclu.dll
      2008-06-12 14:22 . 2009-05-18 19:39 58880 ----a-w c:\windows\system32\msdtclog.dll
      2008-05-21 17:00 . 2008-02-20 10:58 76432 ----a-w c:\documents and settings\IMAD\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
      2008-05-09 21:32 . 2008-05-09 21:32 1571840 ----a-w c:\windows\system32\sfcfiles.dll
      2008-05-09 21:32 . 2008-05-09 21:32 1013248 ----a-w c:\windows\system32\syssetup.dll
      2008-05-09 21:30 . 2008-05-09 21:30 211456 ----a-w c:\windows\system32\qasf.dll
      2008-05-09 21:30 . 2008-05-09 21:30 63488 ----a-w c:\windows\system32\wpdmtpus.dll
      2008-05-09 21:30 . 2008-05-09 21:30 229376 ----a-w c:\windows\system32\cewmdm.dll
      2008-05-09 21:30 . 2008-05-09 21:30 175616 ----a-w c:\windows\system32\mspmsp.dll
      2008-05-09 21:30 . 2008-05-09 21:30 1329152 ----a-w c:\windows\system32\wmspdmoe.dll
      2008-05-09 21:29 . 2008-05-09 21:29 1117696 ----a-w c:\windows\system32\wmadmoe.dll
      2008-05-09 21:29 . 2008-05-09 21:29 534528 ----a-w c:\windows\system32\wmdrmsdk.dll
      2008-05-09 21:29 . 2008-05-09 21:29 991744 ----a-w c:\windows\system32\drmv2clt.dll
      2008-05-09 21:29 . 2008-05-09 21:29 348672 ----a-w c:\windows\system32\wmdrmnet.dll
      2008-05-09 21:29 . 2008-05-09 21:29 24576 ----a-w c:\windows\system32\nlsdl.dll
      2008-05-09 21:29 . 2008-05-09 21:29 23552 ----a-w c:\windows\system32\normaliz.dll
      2008-05-09 21:29 . 2008-05-09 21:29 26112 ----a-w c:\windows\system32\idndl.dll
      2008-05-09 21:29 . 2008-05-09 21:29 48128 ----a-w c:\windows\system32\mshtmler.dll
      2008-05-09 21:29 . 2008-05-09 21:29 156160 ----a-w c:\windows\system32\msls31.dll
      2008-05-09 21:29 . 2008-05-09 21:29 45568 ----a-w c:\windows\system32\mshta.exe
      2008-05-09 21:29 . 2008-05-09 21:29 40960 ----a-w c:\windows\system32\licmgr10.dll
      2008-05-09 21:28 . 2008-05-09 21:28 36352 ----a-w c:\windows\system32\imgutil.dll
      2008-05-09 21:28 . 2008-05-09 21:28 55296 ----a-w c:\windows\system32\iesetup.dll
      2008-05-09 21:28 . 2008-05-09 21:28 71680 ----a-w c:\windows\system32\admparse.dll
      2008-05-09 21:28 . 2008-05-09 21:28 17408 ----a-w c:\windows\system32\corpol.dll
      2008-05-09 21:28 . 2008-05-09 21:28 4096 ----a-w c:\windows\system32\wmvdmoe2.dll
      2008-05-09 21:28 . 2008-05-09 21:28 4096 ----a-w c:\windows\system32\wmvdmod.dll
      2008-05-09 21:28 . 2008-05-09 21:28 603648 ----a-w c:\windows\system32\wmspdmod.dll
      2008-05-09 21:28 . 2008-05-09 21:28 99840 ----a-w c:\windows\system32\wmpshell.dll
      2008-05-09 21:28 . 2008-05-09 21:28 8292352 ----a-w c:\windows\system32\wmploc.dll
      2008-05-09 21:28 . 2008-05-09 21:28 4096 ----a-w c:\windows\system32\wmsdmoe2.dll
      2008-05-09 21:28 . 2008-05-09 21:28 4096 ----a-w c:\windows\system32\wmsdmod.dll
      2008-05-09 21:26 . 2008-05-09 21:26 4096 ----a-w c:\windows\system32\wmvadve.dll
      2008-05-09 10:55 . 2008-04-13 17:33 90112 ----a-w c:\windows\system32\wshext.dll
      2008-05-09 10:55 . 2008-04-13 17:33 430080 ----a-w c:\windows\system32\vbscript.dll
      2008-05-09 10:55 . 2008-04-13 17:33 180224 ----a-w c:\windows\system32\scrobj.dll
      2008-05-09 10:55 . 2008-04-13 17:33 172032 ----a-w c:\windows\system32\scrrun.dll
      2008-05-09 10:15 . 2009-05-18 21:15 45376 ----a-w c:\windows\system32\drivers\avgntdd.sys
      2008-05-08 14:02 . 2008-04-13 09:55 203136 ----a-w c:\windows\system32\drivers\rmcast.sys
      .

      ------- Sigcheck -------

      [-] 2008-05-09 21:32 1571840 33578A738C564B4F84D906EFD91025E5 c:\windows\system32\sfcfiles.dll
      .
      ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
      REGEDIT4

      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
      2008-08-06 13:20 279944 ----a-w c:\program files\AskBarDis\bar\bin\askBar.dll

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
      "SuperCopier2.exe"="c:\program files\SuperCopier2\SuperCopier2.exe" [2006-07-07 1052672]
      "IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2009-05-18 2594224]
      "MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-13 1695232]
      "msnmsgr"="c:\program files\MSN Messenger\msnmsgr.exe" [2007-01-19 5674352]
      "E09FXLRD_1170125"="c:\program files\Microsoft Encarta\Microsoft Encarta 2009 - Collection DVD\EDICT.EXE" [2008-05-28 351000]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-13 455168]
      "avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]
      "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
      "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-05-18 148888]
      "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-12-04 8523776]
      "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-12-04 81920]
      "TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2009-05-18 185872]
      "nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2007-12-04 1626112]

      [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
      "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360]

      [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
      "nltide_2"="shell32" [X]

      c:\windows\system32\config\systemprofile\Menu D‚marrer\Programmes\D‚marrage\
      D‚marrage.exe [2002-1-5 53248]

      c:\windows\system32\config\systemprofile\Menu D‚marrer\Programmes\D‚marrage\
      D‚marrage.exe [2002-1-5 53248]

      c:\documents and settings\IMAD\Menu D‚marrer\Programmes\D‚marrage\
      D‚marrage.exe [2002-1-5 53248]
      Outil de notification Live Search.lnk - c:\documents and settings\IMAD\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe [2009-5-21 143360]

      c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
      D‚marrage.exe [2002-1-5 53248]

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
      "NoConfigPage"= 0 (0x0)
      "NoDevMgrPage"= 0 (0x0)
      "NoFileSysPage"= 0 (0x0)
      "NoVirtMemPage"= 0 (0x0)

      [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\system]
      "NoConfigPage"= 0 (0x0)
      "NoDevMgrPage"= 0 (0x0)
      "NoFileSysPage"= 0 (0x0)
      "NoVirtMemPage"= 0 (0x0)

      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
      "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
      "%windir%\\system32\\sessmgr.exe"=
      "c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
      "c:\\Program Files\\MSN Messenger\\livecall.exe"=
      "c:\\Program Files\\Encyclopaedia Universalis\\Encyclopaedia Universalis\\starter.exe"=
      "c:\\Program Files\\BearShare Applications\\BearShare\\BearShare.exe"=
      "c:\\Program Files\\Skype\\Phone\\Skype.exe"=

      S3 ALLOW-IO;ALLOW-IO;\??\f:\allow-io.sys --> f:\ALLOW-IO.sys [?]

      --- Autres Services/Pilotes en mémoire ---

      *Deregistered* - mchInjDrv
      .
      - - - - ORPHELINS SUPPRIMES - - - -

      HKCU-Run-DriverInstall - f:\drivers\QInstall.exe
      HKCU-Run-Search Protection - c:\program files\Yahoo!\Search Protection\SearchProtection.exe
      HKLM-Run-issat - c:\windows\system32\issat.exe
      HKLM-Run-SystemInit - (no file)
      HKLM-Run-Karen - (no file)
      HKLM-Run-raVe - (no file)
      HKLM-Run-Win32BaseServiceMOD - (no file)
      HKLM-Run-startIE - (no file)
      SafeBoot-procexp90.Sys

      .
      ------- Examen supplémentaire -------
      .
      uStart Page = hxxp://www.google.dz/
      IE: &Search
      IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm
      IE: Download FLV video content with IDM - c:\program files\Internet Download Manager\IEGetVL.htm
      IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm
      IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      TCP: {E25942F9-9B4E-4DA1-9A1F-AC7EAAAECFFB} = 192.168.0.1
      DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
      .
      .
      ------- Associations de fichier -------
      .
      txtfile=NOTEPAD %1
      vbefile\shell\edit\command=%SystemRoot%\System32\Notepad.exe %1
      vbsfile\shell\edit\command=c:\windows\Notepad.exe %1
      .

      **************************************************************************

      catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2008-02-20 13:45
      Windows 5.1.2600 Service Pack 3 NTFS

      Recherche de processus cachés ...

      Recherche d'éléments en démarrage automatique cachés ...

      Recherche de fichiers cachés ...

      Scan terminé avec succès
      Fichiers cachés: 0

      **************************************************************************

      [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\mchInjDrv]
      "ImagePath"="\??\c:\docume~1\IMAD\LOCALS~1\Temp\mc2B.tmp"
      .
      --------------------- CLES DE REGISTRE BLOQUEES ---------------------

      [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
      @Denied: (Full) (Everyone)
      "scansk"=hex(0):45,28,94,3d,76,84,58,72,24,0a,08,89,91,1a,42,5b,a9,b6,2c,16,16,
      4f,7f,ce,a7,65,5c,99,58,e2,05,33,d4,e8,29,f1,ae,9e,7a,4f,00,00,00,00,00,00,\

      [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a87fede7-a80c-4eac-ac2e-1fb82af60de6}]
      @Denied: (Full) (Everyone)
      "Model"=dword:0000008b
      "Therad"=dword:00000016
      .
      --------------------- DLLs chargées dans les processus actifs ---------------------

      - - - - - - - > 'explorer.exe'(2936)
      c:\program files\SuperCopier2\SC2Hook.dll
      c:\windows\system32\wpdshserviceobj.dll
      c:\windows\system32\portabledevicetypes.dll
      c:\windows\system32\portabledeviceapi.dll
      c:\windows\system32\eappprxy.dll
      .
      ------------------------ Autres processus actifs ------------------------
      .
      c:\program files\Avira\AntiVir PersonalEdition Classic\sched.exe
      c:\program files\Avira\AntiVir PersonalEdition Classic\avguard.exe
      c:\windows\system32\rundll32.exe
      c:\program files\Java\jre6\bin\jqs.exe
      c:\windows\system32\nvsvc32.exe
      c:\documents and settings\IMAD\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
      c:\windows\system32\UAService7.exe
      c:\progra~1\Bandoo\Bandoo.exe
      c:\windows\system32\wbem\wmiapsrv.exe
      .
      *************************************************************************
      1. 13 partie :
        :\windows\system32\config\config.exe
        c:\windows\system32\config\systemprofile\Application Data\.exe
        c:\windows\system32\config\systemprofile\Application Data\Microsoft\.exe
        c:\windows\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\.exe
        c:\windows\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\.exe
        c:\windows\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\.exe
        c:\windows\system32\config\systemprofile\Application Data\Microsoft\Media Player\Media Player.exe
        c:\windows\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\.exe
        c:\windows\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\.exe
        c:\windows\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\Certificates\.exe
        c:\windows\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\CRLs\.exe
        c:\windows\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\CTLs\.exe
        c:\windows\system32\config\systemprofile\Bureau\Bureau.exe
        c:\windows\system32\config\systemprofile\Cookies\.exe
        c:\windows\system32\config\systemprofile\Favoris\Favoris.exe
        c:\windows\system32\config\systemprofile\Local Settings\.exe
        c:\windows\system32\config\systemprofile\Local Settings\Application Data\.exe
        c:\windows\system32\config\systemprofile\Local Settings\Application Data\Microsoft\.exe
        c:\windows\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Internet Explorer\Internet Explorer.exe
        c:\windows\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Media Player\Media Player.exe
        c:\windows\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\11.0\11.0.exe
        c:\windows\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\Windows Media.exe
        c:\windows\system32\config\systemprofile\Local Settings\Historique\.exe
        c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\.exe
        c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012009051820090519\.exe
        c:\windows\system32\config\systemprofile\Local Settings\Temp\Temp.exe
        c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\.exe
        c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\.exe
        c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\9B12ER53\.exe
        c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\RR12M4XU\.exe
        c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\RZKSJ534\.exe
        c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\TMG7LOBS\.exe
        c:\windows\system32\config\systemprofile\Mes documents\Mes documents.exe
        c:\windows\system32\config\systemprofile\Recent\.exe
        c:\windows\system32\config\systemprofile\SendTo\.exe
        c:\windows\system32\config\systemprofile\systemprofile.exe
        c:\windows\system32\dhcp\dhcp.exe
        c:\windows\system32\DirectX\Dinput\Dinput.exe
        c:\windows\system32\DirectX\DirectX.exe
        c:\windows\system32\dllcache\.exe
        c:\windows\system32\drivers\disdn\disdn.exe
        c:\windows\system32\drivers\drivers.exe
        c:\windows\system32\drivers\etc\etc.exe
        c:\windows\system32\drivers\UMDF\UMDF.exe
        c:\windows\system32\DRVSTORE\amdk8_1F9DE4E49C97F59EE9F75C34E0E91E568FC9EEB2\amdk8_1F9DE4E49C97F59EE9F75C34E0E91E568FC9EEB2.exe
        c:\windows\system32\DRVSTORE\amdppm_C66586B319F61C772BA2DAB141D0FE08F299F411\amdppm_C66586B319F61C772BA2DAB141D0FE08F299F411.exe
        c:\windows\system32\DRVSTORE\DRVSTORE.exe
        c:\windows\system32\DRVSTORE\wlphonecv_8800C151E3BB9442F62327FF05F053BF5567B318\wlphonecv_8800C151E3BB9442F62327FF05F053BF5567B318.exe
        c:\windows\system32\export\export.exe
        c:\windows\system32\fr-fr\fr-fr.exe
        c:\windows\system32\fr\fr.exe
        c:\windows\system32\ias\ias.exe
        c:\windows\system32\icsxml\icsxml.exe
        c:\windows\system32\IME\CINTLGNT\CINTLGNT.exe
        c:\windows\system32\IME\IME.exe
        c:\windows\system32\IME\PINTLGNT\PINTLGNT.exe
        c:\windows\system32\IME\TINTLGNT\TINTLGNT.exe
        c:\windows\system32\inetsrv\inetsrv.exe
        c:\windows\system32\Lang\Lang.exe
        c:\windows\system32\Macromed\Flash\Flash.exe
        c:\windows\system32\Macromed\Macromed.exe
        c:\windows\system32\Microsoft\.exe
        c:\windows\system32\Microsoft\Protect\.exe
        c:\windows\system32\Microsoft\Protect\S-1-5-18\.exe
        c:\windows\system32\Microsoft\Protect\S-1-5-18\User\.exe
        c:\windows\system32\MsDtc\MsDtc.exe
        c:\windows\system32\MsDtc\Trace\Trace.exe
        c:\windows\system32\mui\[u]0/u00C\[u]0/u00C.exe
        c:\windows\system32\mui\[u]0/u409\[u]0/u409.exe
        c:\windows\system32\mui\[u]0/u40C\[u]0/u40C.exe
        c:\windows\system32\mui\dispspec\dispspec.exe
        c:\windows\system32\mui\mui.exe
        c:\windows\system32\npp\npp.exe
        c:\windows\system32\oobe\actsetup\actsetup.exe
        c:\windows\system32\oobe\error\error.exe
        c:\windows\system32\oobe\html\dslmain\dslmain.exe
        c:\windows\system32\oobe\html\html.exe
        c:\windows\system32\oobe\html\iconnect\iconnect.exe
        c:\windows\system32\oobe\html\ispsgnup\ispsgnup.exe
        c:\windows\system32\oobe\html\isptype\isptype.exe
        c:\windows\system32\oobe\html\mouse\images\images.exe
        c:\windows\system32\oobe\html\mouse\mouse.exe
        c:\windows\system32\oobe\html\oemcust\oemcust.exe
        c:\windows\system32\oobe\html\oemhw\oemhw.exe
        c:\windows\system32\oobe\html\oemreg\oemreg.exe
        c:\windows\system32\oobe\html\sconnect\sconnect.exe
        c:\windows\system32\oobe\icserror\icserror.exe
        c:\windows\system32\oobe\images\images.exe
        c:\windows\system32\oobe\isperror\isperror.exe
        c:\windows\system32\oobe\oobe.exe
        c:\windows\system32\oobe\regerror\regerror.exe
        c:\windows\system32\oobe\sample\sample.exe
        c:\windows\system32\oobe\setup\setup.exe
        c:\windows\system32\PreInstall\PreInstall.exe
        c:\windows\system32\PreInstall\WinSE\WinSE.exe
        c:\windows\system32\PreInstall\WinSE\wxp_x86_040C_v1\wxp_x86_040C_v1.exe
        c:\windows\system32\ras\ras.exe
        c:\windows\system32\ReinstallBackups\[u]0/u000\[u]0/u000.exe
        c:\windows\system32\ReinstallBackups\[u]0/u000\DriverFiles\DriverFiles.exe
        c:\windows\system32\ReinstallBackups\[u]0/u000\DriverFiles\i386\i386.exe
        c:\windows\system32\ReinstallBackups\ReinstallBackups.exe
        c:\windows\system32\RTCOM\RTCOM.exe
        c:\windows\system32\Setup\Setup.exe
        c:\windows\system32\ShellExt\ShellExt.exe
        c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\ServiceStartup.exe
        c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.788\7.2.6001.788.exe
        c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\wups.dll.exe
        c:\windows\system32\SoftwareDistribution\Setup\Setup.exe
        c:\windows\system32\SoftwareDistribution\SoftwareDistribution.exe
        c:\windows\system32\spool\drivers\color\color.exe
        c:\windows\system32\spool\drivers\drivers.exe
        c:\windows\system32\spool\drivers\w32x86\3\3.exe
        c:\windows\system32\spool\drivers\w32x86\w32x86.exe
        c:\windows\system32\spool\PRINTERS\PRINTERS.exe
        c:\windows\system32\spool\prtprocs\prtprocs.exe
        c:\windows\system32\spool\prtprocs\w32x86\w32x86.exe
        c:\windows\system32\spool\spool.exe
        c:\windows\system32\usmt\usmt.exe
        c:\windows\system32\wbem\AutoRecover\AutoRecover.exe
        c:\windows\system32\wbem\Logs\Logs.exe
        c:\windows\system32\wbem\mof\bad\bad.exe
        c:\windows\system32\wbem\mof\bad\mof.exe
        c:\windows\system32\wbem\mof\good\good.exe
        c:\windows\system32\wbem\Performance\Performance.exe
        c:\windows\system32\wbem\Repository\FS\FS.exe
        c:\windows\system32\wbem\Repository\Repository.exe
        c:\windows\system32\wbem\snmp\snmp.exe
        c:\windows\system32\wbem\wbem.exe
        c:\windows\system32\wbem\xml\xml.exe
        c:\windows\system32\wins\wins.exe
        c:\windows\system32\xircom\xircom.exe
        c:\windows\twain_32\twain_32.exe
        c:\windows\WBEM\WBEM.exe
        c:\windows\Web\printers\images\images.exe
        c:\windows\Web\printers\printers.exe
        c:\windows\Web\Wallpaper\Wallpaper.exe
        c:\windows\Web\Web.exe
        c:\z0120\z0120.exe
        d:\28415f1df6ae63685e\28415f1df6ae63685e.exe
        d:\502181150af01f733d\502181150af01f733d.exe
        d:\km ply-mpc-rp\codek\codek.exe
        d:\km ply-mpc-rp\km ply-mpc-rp.exe
        d:\km ply-mpc-rp\PowerDVD\PowerDVD.exe
        d:\mp3 player utilities 4.00\MP3 Player Utilities 4.00.exe
        d:\mp3 player utilities 4.00\rm to mp3\rm to mp3.exe
        d:\photoshop speedup 1.0\Photoshop SpeedUp 1.0.exe
        d:\program files\Microsoft Etudes\2007 Encarta Contents\2007 Encarta Contents.exe
        d:\program files\Microsoft Etudes\2007 Encarta Contents\L07FXLRD\DSV\DSV.exe
        d:\program files\Microsoft Etudes\2007 Encarta Contents\L07FXLRD\L07FXLRD.exe
        d:\program files\Microsoft Etudes\2007 Encarta Contents\L07FXLRD\MAD\MAD.exe
        d:\program files\Microsoft Etudes\2007 Encarta Contents\L07FXLRD\world\7015\7015.exe
        d:\program files\Microsoft Etudes\2007 Encarta Contents\L07FXLRD\world\world.exe
        d:\program files\Microsoft Etudes\Microsoft Encarta Junior 2007\Content\Content.exe
        d:\program files\Microsoft Etudes\Microsoft Encarta Junior 2007\Content\DSV\DSV.exe
        d:\program files\Microsoft Etudes\Microsoft Encarta Junior 2007\Microsoft Encarta Junior 2007.exe
        d:\program files\Microsoft Etudes\Microsoft Encarta Junior 2007\Pushpins\Pushpins.exe
        d:\program files\Microsoft Etudes\Microsoft Etudes.exe
        d:\program files\PDF Password Remover v3.0\help\help.exe
        d:\program files\PDF Password Remover v3.0\PDF Password Remover v3.0.exe
        d:\program files\Program Files.exe
        d:\programes\+creatorpdf\+creatorpdf.exe
        d:\programes\2movies.net-HP USB Disk Storage Format Tool 2.1.8-R@A\2movies.net-HP USB Disk Storage Format Tool 2.1.8-R@A.exe
        d:\programes\Internet Download Manager 5.14 Build 5\crack\crack.exe
        d:\programes\Internet Download Manager 5.14 Build 5\Internet Download Manager 5.14 Build 5.exe
        d:\programes\LingvoSoft Talking Dictionary 2006 (English-Arabic) for Windows\LingvoSoft Talking Dictionary 2006 (English-Arabic) for Windows.exe
        d:\programes\LingvoSoft Talking Dictionary 2006 (English-Arabic) for Windows\TTSDATA\TTSDATA.exe
        d:\programes\LingvoSoft Talking Dictionary 2006 (French-Arabic) for Windows\LingvoSoft Talking Dictionary 2006 (French-Arabic) for Windows.exe
        d:\programes\LingvoSoft Talking Dictionary 2006 (French-Arabic) for Windows\TTSDATA\TTSDATA.exe
        d:\programes\NEO GEO _2\DirectX7\DirectX7.exe
        d:\programes\NEO GEO _2\Install\Install.exe
        d:\programes\NEO GEO _2\NEO GEO _2.exe
        d:\programes\NEO GEO _2\NeoRAGEx\GAMES\GAMES.exe
        d:\programes\NEO GEO _2\NeoRAGEx\HISCORES\HISCORES.exe
        d:\programes\NEO GEO _2\NeoRAGEx\PREVIEW\PREVIEW.exe
        d:\programes\NEO GEO _2\NeoRAGEx\Shots\Shots.exe
        d:\programes\NEO GEO _2\NeoRAGEx\States\States.exe
        d:\programes\NEO GEO _2\NeoRAGEx\WAVES\WAVES.exe
        d:\programes\NEO GEO _2\NeoRAGEx\Zip\Zip.exe
        d:\programes\Nouveau dossier\Nouveau dossier.exe
        d:\programes\Nouveau dossier\Tunup Utilities 2009\Tunup Utilities 2009.exe
        d:\programes\Nouveau dossier\ultra iso\Magic Iso 5.3b221 + Crack\Crack\Crack.exe
        d:\programes\Nouveau dossier\ultra iso\Magic Iso 5.3b221 + Crack\Magic Iso 5.3b221 + Crack.exe
        d:\programes\Nouveau dossier\ultra iso\ultra iso.exe
        d:\programes\Nouveau dossier\ultra iso\UltraISO Premium Edition v8.5.1.1860\UltraISO Premium Edition v8.5.1.1860.exe
        d:\programes\Nouveau dossier\Vitesse Copy\Vitesse Copy.exe
        d:\programes\Nouveau dossier\Your Uninstaller! 2008 PRO 6.1.1233\Register\Register.exe
        d:\programes\Nouveau dossier\Your Uninstaller! 2008 PRO 6.1.1233\Your Uninstaller! 2008 PRO 6.1.1233.exe
        d:\programes\pdf 2 word\MyEgy.com.PDFZilla_v1.0.7.By.vibration\MyEgy.com.PDFZilla_v1.0.7.By.vibration.exe
        d:\programes\pdf 2 word\pdf 2 word.exe
        d:\programes\PDF Password Remover v3.0\PDF Password Remover v3.0.exe
        d:\programes\Photoshop SpeedUp 1.0\Photoshop SpeedUp 1.0.exe
        d:\programes\PROGRAMES.exe
        d:\quick zip 4.60.017 beta\Quick Zip 4.60.017 Beta.exe
        d:\quran\qoran flash\qoran flash.exe
        d:\quran\qoran flash\quran\quran.exe
        d:\quran\QURAN.exe
        d:\recover my files 3.98.60.81\Recover My Files 3.98.60.81.exe
        d:\tttttttt\Advanced Search (ACS Publications)_fichiers\Advanced Search (ACS Publications)_fichiers.exe
        d:\tttttttt\archimed\archimed.exe
        d:\tttttttt\divers\divers.exe
        d:\tttttttt\divers\internet\internet.exe
        d:\tttttttt\divers\microbioligie\microbioligie.exe
        d:\tttttttt\divers\theses\theses.exe
        d:\tttttttt\divers\utilisables\utilisables.exe
        d:\tttttttt\GARLIC PHOTO\GARLIC PHOTO.exe
        d:\tttttttt\Garlic quality properties during constant convective drying - Google Scholar_fichiers\Garlic quality properties during constant convective drying - Google Scholar_fichiers.exe
        d:\tttttttt\Garlic quality properties during constant convective drying - Recherche Google_fichiers\Garlic quality properties during constant convective drying - Recherche Google_fichiers.exe
        d:\tttttttt\garlic++++++\antioxydant\antioxydant.exe
        d:\tttttttt\garlic++++++\drying garlic\drying garlic.exe
        d:\tttttttt\garlic++++++\format html\Biological and Chemical Stability of Garlic-Derived Allicin - Journal of Agricultural and Food Chemis\Biological and Chemical Stability of Garlic-Derived Allicin - Journal of Agricultural and Food Chemis.exe
        d:\tttttttt\garlic++++++\format html\EJPAU2~1\EJPAU2~1.exe
        d:\tttttttt\garlic++++++\format html\format html.exe
        d:\tttttttt\garlic++++++\garlic++++++.exe
        d:\tttttttt\garlic++++++\storage\storage.exe
        d:\tttttttt\garlic2\garlic2.exe
        d:\tttttttt\garlic2\rats\Changes In Serum Lipid Profiles And Heart Rate In Rats Treated With Aqueous Garlic Extract_fichiers\Changes In Serum Lipid Profiles And Heart Rate In Rats Treated With Aqueous Garlic Extract_fichiers.exe
        d:\tttttttt\garlic2\rats\rats.exe
        d:\tttttttt\garlic2\reference\reference.exe
        d:\tttttttt\garlic2\tomato_piment papaya\tomato_piment papaya.exe
        d:\tttttttt\garlic2\wflllllllllllllllllllllllll\garlic - Recherche Google_fichiers\garlic - Recherche Google_fichiers.exe
        d:\tttttttt\garlic2\wflllllllllllllllllllllllll\journal of food agriculture and environment - Recherche Google_fichiers\journal of food agriculture and environment - Recherche Google_fichiers.exe
        d:\tttttttt\garlic2\wflllllllllllllllllllllllll\wflllllllllllllllllllllllll.exe
        d:\tttttttt\Journals - Elsevier_fichiers\Journals - Elsevier_fichiers.exe
        d:\tttttttt\Nouveau dossier\Advanced Search (ACS Publications)_fichiers\Advanced Search (ACS Publications)_fichiers.exe
        d:\tttttttt\Nouveau dossier\Advanced Search (ACS Publications)f_fichiers\Advanced Search (ACS Publications)f_fichiers.exe
        d:\tttttttt\Nouveau dossier\fourel95a.ps~\fourel95a.ps~.exe
        d:\tttttttt\Nouveau dossier\Giat J[Author] - PubMed Results_fichiers\Giat J[Author] - PubMed Results_fichiers.exe
        d:\tttttttt\Nouveau dossier\Giat J_, Miron T_, Rabinkov A_, garlic pdf - Recherche Google_fichiers\Giat J_, Miron T_, Rabinkov A_, garlic pdf - Recherche Google_fichiers.exe
        d:\tttttttt\Nouveau dossier\Internet Download Manager 5.14 Build 5\crack\crack.exe
        d:\tttttttt\Nouveau dossier\Internet Download Manager 5.14 Build 5\Internet Download Manager 5.14 Build 5.exe
        d:\tttttttt\Nouveau dossier\Journals - Elsevier_fichiers\Journals - Elsevier_fichiers.exe
        d:\tttttttt\Nouveau dossier\Nouveau dossier.exe
        d:\tttttttt\SAMIR FLASH\CARDOON (CYNARA CARDUNCULUS L_) USED AS VEGETABLE RENNET IN AN ALGERIAN TRADITIONAL CHEESE MAKING DJBEN_fichiers\CARDOON (CYNARA CARDUNCULUS L_) USED AS VEGETABLE RENNET IN AN ALGERIAN TRADITIONAL CHEESE MAKING DJBEN_fichiers.exe
        d:\tttttttt\SAMIR FLASH\ED17~1\ED17~1.exe
        d:\tttttttt\SAMIR FLASH\food journal\food journal.exe
        d:\tttttttt\SAMIR FLASH\google\google.exe
        d:\tttttttt\SAMIR FLASH\google\Nouveau dossier\Nouveau dossier.exe
        d:\tttttttt\SAMIR FLASH\livres\livres.exe
        d:\tttttttt\SAMIR FLASH\SAMIR FLASH.exe
        d:\tttttttt\tttttttt.exe
        d:\tttttttt\vertus\vertus.exe
        d:\tttttttt\web page3\AGRIS Records Search_fichiers\AGRIS Records Search_fichiers.exe
        d:\tttttttt\web page3\Garlic - Thread_fichiers\Garlic - Thread_fichiers.exe
        d:\tttttttt\web page3\PAKISSAN_com_fichiers\PAKISSAN_com_fichiers.exe
        d:\tttttttt\web page3\The Internet Journal of Nutrition and Wellness TM\Fresh Garlic Extract Protects The Liver Against Acetaminophen-Induced Toxicity_fichiers\Fresh Garlic Extract Protects The Liver Against Acetaminophen-Induced Toxicity_fichiers.exe
        d:\tttttttt\web page3\The Internet Journal of Nutrition and Wellness TM\garlic - Google Search_fichiers\garlic - Google Search_fichiers.exe
        d:\tttttttt\web page3\The Internet Journal of Nutrition and Wellness TM\Herbal Medications and their Anaesthetic Implications_fichiers\Herbal Medications and their Anaesthetic Implications_fichiers.exe
        d:\tttttttt\web page3\The Internet Journal of Nutrition and Wellness TM\Internet Scientific Publications_fichiers\Internet Scientific Publications_fichiers.exe
        d:\tttttttt\web page3\The Internet Journal of Nutrition and Wellness TM\Spices In Cancer Prevention_fichiers\Spices In Cancer Prevention_fichiers.exe
        d:\tttttttt\web page3\The Internet Journal of Nutrition and Wellness TM\The Internet Journal of Nutrition and Wellness TM.exe
        d:\tttttttt\web page3\web page3.exe
        d:\tttttttt\web page3\web pages\Ail_fichiers\Ail_fichiers.exe
        d:\tttttttt\web page3\web pages\web pages.exe
        d:\tttttttt\web pages\Ail_fichiers\Ail_fichiers.exe
        d:\tttttttt\web pages\classification\classification.exe
        d:\tttttttt\web pages\classification\Post-harvest compendium - Main content_fichiers\Post-harvest compendium - Main content_fichiers.exe
        d:\tttttttt\web pages\classification\POST-HARVEST COMPENDIUM CHAPTER 35 Garlic Post-harvest Operations - Introduction_fichiers\POST-HARVEST COMPENDIUM CHAPTER 35 Garlic Post-harvest Operations - Introduction_fichiers.exe
        d:\tttttttt\web pages\web pages.exe
        e:\alhan w chbeb\alhan w chbeb.exe
        e:\anti vir\anti vir.exe
        e:\anti vir\usb scan\Cure\Cure.exe
        e:\anti vir\usb scan\usb scan.exe
        e:\anti vir\USB.Safely.Remove.v3.3.0\Cracked\Cracked.exe
        e:\anti vir\USB.Safely.Remove.v3.3.0\USB.Safely.Remove.v3.3.0.exe
        e:\coures informatique karim\coures informatique karim.exe
        e:\films\films.exe
        e:\music\BARZOTTI\BARZOTTI.exe
        e:\music\bilal\bilal.exe
        e:\music\CD 1000% francais\CD 1000% francais.exe
        e:\music\CELINE DION\CELINE DION.exe
        e:\music\CHAABI\Cha3bi\Cha3bi.exe
        e:\music\CHAABI\CHAABI.exe
        e:\music\charki\[u]0/u-1amro\[u]0/u-1amro.exe
        e:\music\charki\[u]0/u0nancy2006\[u]0/u0nancy2006.exe
        e:\music\charki\3\3.exe
        e:\music\charki\741986hb\741986hb.exe
        e:\music\charki\8\8.exe
        e:\music\charki\charki.exe
        e:\music\charki\elisa\elisa.exe
        e:\music\charki\FADHIL CHAKER 2008\FADHIL CHAKER 2008.exe
        e:\music\charki\jesmi\jesmi.exe
        e:\music\charki\melody4arab.com_Military Air Forces Concert\melody4arab.com_Military Air Forces Concert.exe
        e:\music\charki\Nouveau dossier (2)\Nouveau dossier (2).exe
        e:\music\charki\WAEIL K\WAEIL K.exe
        e:\music\charki\wail jesar\wail jesar.exe
        e:\music\COCKTAIL FRANCAIS\COCKTAIL FRANCAIS.exe
        e:\music\cokctail englais\cokctail englais.exe
        e:\music\DOUBLE CANNON\DOUBLE CANNON.exe
        e:\music\eminem\eminem.exe
        e:\music\ENRICO\ENRICO.exe
        e:\music\fairouse\fairouse.exe
        e:\music\FRANCIS CABREL\FRANCIS CABREL.exe
        e:\music\INOUBLIABLES\INOUBLIABLES.exe
        e:\music\khaled\khaled.exe
        e:\music\khaled\khaled\khaled.exe
        e:\music\MASSARI\MASSARI.exe
        e:\music\MICHEL SARDOU\MICHEL SARDOU.exe
        e:\music\mp3 francais\mp3 francais.exe
        e:\music\music.exe
        e:\music\nelly furtado\nelly furtado.exe
        e:\music\PIERRE BACHELET\PIERRE BACHELET.exe
        e:\music\radouane\radouane.exe
        e:\music\rerer\rerer.exe
        e:\music\tchaikovsky\tchaikovsky.exe
        e:\photo\darna darna\darna darna.exe
        e:\photo\darna darna\darna darna\darna darna.exe
        e:\photo\darna darna\darna darna\MISC\MISC.exe
        e:\photo\DOUAR\DOUAR.exe
        e:\photo\imade\102CANON\102CANON.exe
        e:\photo\imade\imade.exe
        e:\photo\image\image.exe
        e:\photo\Nouveau dossier\Nouveau dossier.exe
        e:\photo\photo.exe
        e:\photo\photos de kais\photos de kais.exe
        e:\photo\Rahma photos\Rahma photos.exe
        e:\photo\Taha ,hassen et houcine\Taha ,hassen et houcine.exe
        e:\titi\divers\divers.exe
        e:\titi\divers\internet\internet.exe
        e:\titi\divers\microbioligie\microbioligie.exe
        e:\titi\divers\theses\theses.exe
        e:\titi\divers\utilisables\utilisables.exe
        e:\titi\GARLIC PHOTO\GARLIC PHOTO.exe
        e:\titi\garlic++++++\antioxydant\antioxydant.exe
        e:\titi\garlic++++++\format html\EJPAU2~1\EJPAU2~1.exe
        e:\titi\garlic++++++\format html\format html.exe
        e:\titi\garlic++++++\garlic++++++.exe
        e:\titi\garlic++++++\storage\storage.exe
        e:\titi\garlic2\garlic2.exe
        e:\titi\garlic2\rats\Changes In Serum Lipid Profiles And Heart Rate In Rats Treated With Aqueous Garlic Extract_fichiers\Changes In Serum Lipid Profiles And Heart Rate In Rats Treated With Aqueous Garlic Extract_fichiers.exe
        e:\titi\garlic2\rats\rats.exe
        e:\titi\garlic2\reference\@ Food Technology Information Service @_fichiers\@ Food Technology Information Service @_fichiers.exe
        e:\titi\garlic2\reference\reference.exe
        e:\titi\garlic2\wflllllllllllllllllllllllll\garlic - Recherche Google_fichiers\garlic - Recherche Google_fichiers.exe
        e:\titi\garlic2\wflllllllllllllllllllllllll\journal of food agriculture and environment - Recherche Google_fichiers\journal of food agriculture and environment - Recherche Google_fichiers.exe
        e:\titi\garlic2\wflllllllllllllllllllllllll\wflllllllllllllllllllllllll.exe
        e:\titi\general garlic\general garlic.exe
        e:\titi\general garlic\Nouveau dossier\bra j\bra j.exe
        e:\titi\general garlic\Nouveau dossier\Nouveau dossier.exe
        e:\titi\histaurique\histaurique.exe
        e:\titi\livres\livres.exe
        e:\titi\osmo+vacuum\--osmo\--osmo.exe
        e:\titi\osmo+vacuum\- osmo\- osmo.exe
        e:\titi\osmo+vacuum\+osmo\+osmo.exe
        e:\titi\osmo+vacuum\microwave-vaccum1\microwave-vaccum1.exe
        e:\titi\osmo+vacuum\osmo+vacuum.exe
        e:\titi\osmo+vacuum\vaccum cooling and osmo frozen\vaccum cooling and osmo frozen.exe
        e:\titi\osmo+vacuum\vaccum\vaccum.exe
        e:\titi\recherche\Advanced Search (ACS Publications)_fichiers\Advanced Search (ACS Publications)_fichiers.exe
        e:\titi\recherche\Advanced Search (ACS Publications)f_fichiers\Advanced Search (ACS Publications)f_fichiers.exe
        e:\titi\recherche\azzouz s 1999 chaleur these tunis - Recherche Google_files\azzouz s 1999 chaleur these tunis - Recherche Google_files.exe
        e:\titi\recherche\CARDOON (CYNARA CARDUNCULUS L_) USED AS VEGETABLE RENNET IN AN ALGERIAN TRADITIONAL CHEESE MAKING DJBEN_fichiers\CARDOON (CYNARA CARDUNCULUS L_) USED AS VEGETABLE RENNET IN AN ALGERIAN TRADITIONAL CHEESE MAKING DJBEN_fichiers.exe
        e:\titi\recherche\Garlic quality properties during constant convective drying - Recherche Google_fichiers\Garlic quality properties during constant convective drying - Recherche Google_fichiers.exe
        e:\titi\recherche\Giat J[Author] - PubMed Results_fichiers\Giat J[Author] - PubMed Results_fichiers.exe
        e:\titi\recherche\Giat J_, Miron T_, Rabinkov A_, garlic pdf - Recherche Google_fichiers\Giat J_, Miron T_, Rabinkov A_, garlic pdf - Recherche Google_fichiers.exe
        e:\titi\recherche\Journals - Elsevier_fichiers\Journals - Elsevier_fichiers.exe
        e:\titi\recherche\recherche.exe
        e:\titi\recherche\Search all HighWire-based Journals_fichiers\Search all HighWire-based Journals_fichiers.exe
        e:\titi\SAMIR FLASH\food journal\food journal.exe
        e:\titi\SAMIR FLASH\SAMIR FLASH.exe
        e:\titi\sources osmo vaccum\@ Food Technology Information Service @_fichiers\@ Food Technology Information Service @_fichiers.exe
        e:\titi\sources osmo vaccum\@ Food Technology Information Service @1_fichiers\@ Food Technology Information Service @1_fichiers.exe
        e:\titi\sources osmo vaccum\@ Food Technology Information Service @121_fichiers\@ Food Technology Information Service @121_fichiers.exe
        e:\titi\sources osmo vaccum\@ Food Technology Information Service @3_fichiers\@ Food Technology Information Service @3_fichiers.exe
        e:\titi\sources osmo vaccum\@ Food Technology Information Service @4_fichiers\@ Food Technology Information Service @4_fichiers.exe
        e:\titi\sources osmo vaccum\source22\ResultbyKeyword.asp_fichiers\ResultbyKeyword.asp_fichiers.exe
        e:\titi\sources osmo vaccum\source22\ResultbyKeyword.asp11111_fichiers\ResultbyKeyword.asp11111_fichiers.exe
        e:\titi\sources osmo vaccum\source22\ResultbyKeyword.asp11111_fichiers\tree_menu_data\tree_menu_data.exe
        e:\titi\sources osmo vaccum\source22\ResultBykeyword.asp2_fichiers\ResultBykeyword.asp2_fichiers.exe
        e:\titi\sources osmo vaccum\source22\ResultByKeyword.asp21_fichiers\ResultByKeyword.asp21_fichiers.exe
        e:\titi\sources osmo vaccum\source22\ResultByKeyword.asp21_fichiers\tree_menu_data\tree_menu_data.exe
        e:\titi\sources osmo vaccum\source22\ResultByKeyword.asp22_fichiers\ResultByKeyword.asp22_fichiers.exe
        e:\titi\sources osmo vaccum\source22\ResultByKeyword.asp22_fichiers\tree_menu_data\tree_menu_data.exe
        e:\titi\sources osmo vaccum\source22\ResultBykeyword.asp3_fichiers\ResultBykeyword.asp3_fichiers.exe
        e:\titi\sources osmo vaccum\source22\ResultBykeyword.asp4_fichiers\ResultBykeyword.asp4_fichiers.exe
        e:\titi\sources osmo vaccum\source22\ResultBykeyword.asp5_fichiers\ResultBykeyword.asp5_fichiers.exe
        e:\titi\sources osmo vaccum\source22\source22.exe
        e:\titi\sources osmo vaccum\sources osmo vaccum.exe
        e:\titi\sources osmo vaccum\sources\sources.exe
        e:\titi\theses\theses.exe
        e:\titi\titi.exe
        e:\titi\vertus\ail2_1_fichiers\ail2_1_fichiers.exe
        e:\titi\vertus\vertus.exe
        e:\titi\web page3\AGRIS Records Search_fichiers\AGRIS Records Search_fichiers.exe
        e:\titi\web page3\Garlic - Thread_fichiers\Garlic - Thread_fichiers.exe
        e:\titi\web page3\PAKISSAN_com_fichiers\PAKISSAN_com_fichiers.exe
        e:\titi\web page3\The Internet Journal of Nutrition and Wellness TM\Fresh Garlic Extract Protects The Liver Against Acetaminophen-Induced Toxicity_fichiers\Fresh Garlic Extract Protects The Liver Against Acetaminophen-Induced Toxicity_fichiers.exe
        e:\titi\web page3\The Internet Journal of Nutrition and Wellness TM\garlic - Google Search_fichiers\garlic - Google Search_fichiers.exe
        e:\titi\web page3\The Internet Journal of Nutrition and Wellness TM\Herbal Medications and their Anaesthetic Implications_fichiers\Herbal Medications and their Anaesthetic Implications_fichiers.exe
        e:\titi\web page3\The Internet Journal of Nutrition and Wellness TM\Internet Scientific Publications_fichiers\Internet Scientific Publications_fichiers.exe
        e:\titi\web page3\The Internet Journal of Nutrition and Wellness TM\Spices In Cancer Prevention_fichiers\Spices In Cancer Prevention_fichiers.exe
        e:\titi\web page3\The Internet Journal of Nutrition and Wellness TM\The Internet Journal of Nutrition and Wellness TM.exe
        e:\titi\web page3\web page3.exe
        e:\titi\web page3\web pages\Ail_fichiers\Ail_fichiers.exe
        e:\titi\web page3\web pages\classification\classification.exe
        e:\titi\web page3\web pages\classification\Post-harvest compendium - Main content_fichiers\Post-harvest compendium - Main content_fichiers.exe
        e:\titi\web page3\web pages\classification\POST-HARVEST COMPENDIUM CHAPTER 35 Garlic Post-harvest Operations - Introduction_fichiers\POST-HARVEST COMPENDIUM CHAPTER 35 Garlic Post-harvest Operations - Introduction_fichiers.exe
        e:\titi\web page3\web pages\web pages.exe
        .
        .
        ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
        .

        -------\Legacy_MYWEBSEARCHSERVICE

        ((((((((((((((((((((((((((((( Fichiers créés du 2008-01-20 au 2008-02-20 ))))))))))))))))))))))))))))))))))))
        .
        1. 12 partie:
          windows\pchealth\helpctr\System\UpdateCtr\UpdateCtr.exe
          c:\windows\pchealth\helpctr\System_OEM\System_OEM.exe
          c:\windows\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US.exe
          c:\windows\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\Common.exe
          c:\windows\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\Css.exe
          c:\windows\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Common.exe
          c:\windows\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\Email.exe
          c:\windows\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Escalation.exe
          c:\windows\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\Unsolicited.exe
          c:\windows\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Remote Assistance.exe
          c:\windows\pchealth\helpctr\Vendors\Vendors.exe
          c:\windows\pchealth\pchealth.exe
          c:\windows\pchealth\UploadLB\Binaries\Binaries.exe
          c:\windows\pchealth\UploadLB\Config\Config.exe
          c:\windows\pchealth\UploadLB\UploadLB.exe
          c:\windows\PeerNet\PeerNet.exe
          c:\windows\Prefetch\Prefetch.exe
          c:\windows\Provisioning\Provisioning.exe
          c:\windows\Provisioning\Schemas\Schemas.exe
          c:\windows\pss\pss.exe
          c:\windows\Registration\CRMLog\CRMLog.exe
          c:\windows\Registration\Registration.exe
          c:\windows\repair\repair.exe
          c:\windows\Resources\Resources.exe
          c:\windows\Resources\Themes\Luna\Luna.exe
          c:\windows\Resources\Themes\Luna\Shell\Homestead\Homestead.exe
          c:\windows\Resources\Themes\Luna\Shell\Metallic\Metallic.exe
          c:\windows\Resources\Themes\Luna\Shell\NormalColor\NormalColor.exe
          c:\windows\Resources\Themes\Luna\Shell\Shell.exe
          c:\windows\Resources\Themes\Themes.exe
          c:\windows\security\Database\Database.exe
          c:\windows\security\logs\logs.exe
          c:\windows\security\security.exe
          c:\windows\security\templates\templates.exe
          c:\windows\SHELLNEW\SHELLNEW.exe
          c:\windows\SoftwareDistribution\AuthCabs\AuthCabs.exe
          c:\windows\SoftwareDistribution\DataStore\DataStore.exe
          c:\windows\SoftwareDistribution\DataStore\Logs\Logs.exe
          c:\windows\SoftwareDistribution\Download\[u]0/u21631b8b7a9f5e0082704ea30b771c0\[u]0/u21631b8b7a9f5e0082704ea30b771c0.exe
          c:\windows\SoftwareDistribution\Download\[u]0/u21631b8b7a9f5e0082704ea30b771c0\350d802525eccf5ca49543df1838e24e.exe
          c:\windows\SoftwareDistribution\Download\[u]0/u21631b8b7a9f5e0082704ea30b771c0\wm11\wm11.exe
          c:\windows\SoftwareDistribution\Download\149dffda614674463c33ccf79c4404f3\149dffda614674463c33ccf79c4404f3.exe
          c:\windows\SoftwareDistribution\Download\149dffda614674463c33ccf79c4404f3\200133c1eb583103226f7693d34231ff.exe
          c:\windows\SoftwareDistribution\Download\149dffda614674463c33ccf79c4404f3\backup\backup.exe
          c:\windows\SoftwareDistribution\Download\149dffda614674463c33ccf79c4404f3\sp3gdr\sp3gdr.exe
          c:\windows\SoftwareDistribution\Download\149dffda614674463c33ccf79c4404f3\sp3qfe\sp3qfe.exe
          c:\windows\SoftwareDistribution\Download\20b79cb341971b9a1c4b09d155a8fbfc\20b79cb341971b9a1c4b09d155a8fbfc.exe
          c:\windows\SoftwareDistribution\Download\20b79cb341971b9a1c4b09d155a8fbfc\60102ca8d49bef61c61212965ef6dbcb.exe
          c:\windows\SoftwareDistribution\Download\20b79cb341971b9a1c4b09d155a8fbfc\backup\backup.exe
          c:\windows\SoftwareDistribution\Download\20b79cb341971b9a1c4b09d155a8fbfc\sp3gdr\sp3gdr.exe
          c:\windows\SoftwareDistribution\Download\20b79cb341971b9a1c4b09d155a8fbfc\sp3qfe\sp3qfe.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\25d2944aaaf33a4374138c46bc7ed2cd.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\5e4f2e76786e12fcb7b972dae96443a2.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP2QFE\asms\10\10.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP2QFE\asms\10\msft\msft.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP2QFE\asms\10\msft\windows\gdiplus\gdiplus.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP2QFE\asms\10\msft\windows\windows.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP2QFE\asms\10\policy\msft\msft.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP2QFE\asms\10\policy\msft\windows\gdiplus\gdiplus.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP2QFE\asms\10\policy\msft\windows\windows.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP2QFE\asms\10\policy\policy.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP2QFE\asms\asms.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP2QFE\SP2QFE.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP3QFE\asms\10\10.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP3QFE\asms\10\msft\msft.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP3QFE\asms\10\msft\windows\gdiplus\gdiplus.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP3QFE\asms\10\msft\windows\windows.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP3QFE\asms\10\policy\msft\msft.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP3QFE\asms\10\policy\msft\windows\gdiplus\gdiplus.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP3QFE\asms\10\policy\msft\windows\windows.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP3QFE\asms\10\policy\policy.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP3QFE\asms\asms.exe
          c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP3QFE\SP3QFE.exe
          c:\windows\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\284fbcf1e8e0b40c0953d6b85a551eae.exe
          c:\windows\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\596b908e8d017befb53f853fe927f94a.exe
          c:\windows\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP2GDR\SP2GDR.exe
          c:\windows\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP2QFE\SP2QFE.exe
          c:\windows\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP3GDR\SP3GDR.exe
          c:\windows\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP3QFE\SP3QFE.exe
          c:\windows\SoftwareDistribution\Download\2ae0551b81457e76c13969a941d90294\2ae0551b81457e76c13969a941d90294.exe
          c:\windows\SoftwareDistribution\Download\2ae0551b81457e76c13969a941d90294\SP2GDR\SP2GDR.exe
          c:\windows\SoftwareDistribution\Download\2ae0551b81457e76c13969a941d90294\SP2QFE\SP2QFE.exe
          c:\windows\SoftwareDistribution\Download\2ae0551b81457e76c13969a941d90294\SP3GDR\SP3GDR.exe
          c:\windows\SoftwareDistribution\Download\2ae0551b81457e76c13969a941d90294\SP3QFE\SP3QFE.exe
          c:\windows\SoftwareDistribution\Download\4091197953a6a6587498ee1988262ad3\4091197953a6a6587498ee1988262ad3.exe
          c:\windows\SoftwareDistribution\Download\4091197953a6a6587498ee1988262ad3\702a7c80c501a5b71048682e44a362b4.exe
          c:\windows\SoftwareDistribution\Download\442c24b5f603da215f4cc19400b58b29\150c61e4a7f6ffd925a60156be3e1a5b.exe
          c:\windows\SoftwareDistribution\Download\442c24b5f603da215f4cc19400b58b29\442c24b5f603da215f4cc19400b58b29.exe
          c:\windows\SoftwareDistribution\Download\442c24b5f603da215f4cc19400b58b29\SP2GDR\SP2GDR.exe
          c:\windows\SoftwareDistribution\Download\442c24b5f603da215f4cc19400b58b29\SP2QFE\SP2QFE.exe
          c:\windows\SoftwareDistribution\Download\442c24b5f603da215f4cc19400b58b29\SP3GDR\SP3GDR.exe
          c:\windows\SoftwareDistribution\Download\442c24b5f603da215f4cc19400b58b29\SP3QFE\SP3QFE.exe
          c:\windows\SoftwareDistribution\Download\4850b6fbc0f970a015d08048e4dc3372\4850b6fbc0f970a015d08048e4dc3372.exe
          c:\windows\SoftwareDistribution\Download\4850b6fbc0f970a015d08048e4dc3372\6d89a6842d56bdc1e9869626dde13fa3.exe
          c:\windows\SoftwareDistribution\Download\4850b6fbc0f970a015d08048e4dc3372\mceur2\mceur2.exe
          c:\windows\SoftwareDistribution\Download\4850b6fbc0f970a015d08048e4dc3372\wm10\wm10.exe
          c:\windows\SoftwareDistribution\Download\4850b6fbc0f970a015d08048e4dc3372\wm10l\wm10l.exe
          c:\windows\SoftwareDistribution\Download\4850b6fbc0f970a015d08048e4dc3372\wm10mix\wm10mix.exe
          c:\windows\SoftwareDistribution\Download\4850b6fbc0f970a015d08048e4dc3372\wm11\wm11.exe
          c:\windows\SoftwareDistribution\Download\4850b6fbc0f970a015d08048e4dc3372\wm9\wm9.exe
          c:\windows\SoftwareDistribution\Download\48bc15015ad8cc55810ef9211c7dbec2\48bc15015ad8cc55810ef9211c7dbec2.exe
          c:\windows\SoftwareDistribution\Download\48bc15015ad8cc55810ef9211c7dbec2\c46a8212705069a7604ff98b5b281a3e.exe
          c:\windows\SoftwareDistribution\Download\48bc15015ad8cc55810ef9211c7dbec2\SP2GDR\SP2GDR.exe
          c:\windows\SoftwareDistribution\Download\48bc15015ad8cc55810ef9211c7dbec2\SP2QFE\SP2QFE.exe
          c:\windows\SoftwareDistribution\Download\48bc15015ad8cc55810ef9211c7dbec2\SP3GDR\SP3GDR.exe
          c:\windows\SoftwareDistribution\Download\48bc15015ad8cc55810ef9211c7dbec2\SP3QFE\SP3QFE.exe
          c:\windows\SoftwareDistribution\Download\58368cdf8599d63c6ec9fb51511f5c59\58368cdf8599d63c6ec9fb51511f5c59.exe
          c:\windows\SoftwareDistribution\Download\58368cdf8599d63c6ec9fb51511f5c59\a12a9d4221e3bd01d702cb53a8160c1d.exe
          c:\windows\SoftwareDistribution\Download\58368cdf8599d63c6ec9fb51511f5c59\SP2GDR\SP2GDR.exe
          c:\windows\SoftwareDistribution\Download\58368cdf8599d63c6ec9fb51511f5c59\SP2QFE\SP2QFE.exe
          c:\windows\SoftwareDistribution\Download\58368cdf8599d63c6ec9fb51511f5c59\SP3GDR\SP3GDR.exe
          c:\windows\SoftwareDistribution\Download\58368cdf8599d63c6ec9fb51511f5c59\SP3QFE\SP3QFE.exe
          c:\windows\SoftwareDistribution\Download\5e54181a2d7e767daf6e7f313d7dd20b\5e54181a2d7e767daf6e7f313d7dd20b.exe
          c:\windows\SoftwareDistribution\Download\5e54181a2d7e767daf6e7f313d7dd20b\90278c5c0a95b94f1b4a73dda9853808.exe
          c:\windows\SoftwareDistribution\Download\5e54181a2d7e767daf6e7f313d7dd20b\backup\backup.exe
          c:\windows\SoftwareDistribution\Download\5e54181a2d7e767daf6e7f313d7dd20b\sp3gdr\sp3gdr.exe
          c:\windows\SoftwareDistribution\Download\5e54181a2d7e767daf6e7f313d7dd20b\sp3qfe\sp3qfe.exe
          c:\windows\SoftwareDistribution\Download\6896ed82e6aab6036fbd799d3fd4f042\6896ed82e6aab6036fbd799d3fd4f042.exe
          c:\windows\SoftwareDistribution\Download\6f762e8545d817cb29f7f245b0c9358f\1ee8dd82f6739b9dc49cbfb31b1606bf.exe
          c:\windows\SoftwareDistribution\Download\6f762e8545d817cb29f7f245b0c9358f\6f762e8545d817cb29f7f245b0c9358f.exe
          c:\windows\SoftwareDistribution\Download\6f762e8545d817cb29f7f245b0c9358f\SP2GDR\SP2GDR.exe
          c:\windows\SoftwareDistribution\Download\6f762e8545d817cb29f7f245b0c9358f\SP2QFE\SP2QFE.exe
          c:\windows\SoftwareDistribution\Download\6f762e8545d817cb29f7f245b0c9358f\SP3GDR\SP3GDR.exe
          c:\windows\SoftwareDistribution\Download\6f762e8545d817cb29f7f245b0c9358f\SP3QFE\SP3QFE.exe
          c:\windows\SoftwareDistribution\Download\71f03b7f4784c42683bd24e8149d6671\71f03b7f4784c42683bd24e8149d6671.exe
          c:\windows\SoftwareDistribution\Download\71f03b7f4784c42683bd24e8149d6671\wm11\wm11.exe
          c:\windows\SoftwareDistribution\Download\72a4049f1baa204daaa90904a1d02845\191c12c131f075e05b15e1e035903121.exe
          c:\windows\SoftwareDistribution\Download\72a4049f1baa204daaa90904a1d02845\72a4049f1baa204daaa90904a1d02845.exe
          c:\windows\SoftwareDistribution\Download\72a4049f1baa204daaa90904a1d02845\backup\backup.exe
          c:\windows\SoftwareDistribution\Download\72a4049f1baa204daaa90904a1d02845\sp3gdr\sp3gdr.exe
          c:\windows\SoftwareDistribution\Download\72a4049f1baa204daaa90904a1d02845\sp3qfe\sp3qfe.exe
          c:\windows\SoftwareDistribution\Download\74e2550346bb1cbd58026ecc5d972da8\74e2550346bb1cbd58026ecc5d972da8.exe
          c:\windows\SoftwareDistribution\Download\74e2550346bb1cbd58026ecc5d972da8\backup\backup.exe
          c:\windows\SoftwareDistribution\Download\74e2550346bb1cbd58026ecc5d972da8\cbc1b829918070e9cdead53865e03be6.exe
          c:\windows\SoftwareDistribution\Download\74e2550346bb1cbd58026ecc5d972da8\sp3gdr\sp3gdr.exe
          c:\windows\SoftwareDistribution\Download\74e2550346bb1cbd58026ecc5d972da8\sp3qfe\sp3qfe.exe
          c:\windows\SoftwareDistribution\Download\77d1300960fdd2ff28f4891cec784cb7\77d1300960fdd2ff28f4891cec784cb7.exe
          c:\windows\SoftwareDistribution\Download\77d1300960fdd2ff28f4891cec784cb7\91aaf2e2995eb1abdaa3e996b347e975.exe
          c:\windows\SoftwareDistribution\Download\77d1300960fdd2ff28f4891cec784cb7\backup\backup.exe
          c:\windows\SoftwareDistribution\Download\77d1300960fdd2ff28f4891cec784cb7\backup\sp3gdr\sp3gdr.exe
          c:\windows\SoftwareDistribution\Download\77d1300960fdd2ff28f4891cec784cb7\backup\sp3qfe\sp3qfe.exe
          c:\windows\SoftwareDistribution\Download\77d1300960fdd2ff28f4891cec784cb7\download\download.exe
          c:\windows\SoftwareDistribution\Download\77d1300960fdd2ff28f4891cec784cb7\sp3gdr\sp3gdr.exe
          c:\windows\SoftwareDistribution\Download\77d1300960fdd2ff28f4891cec784cb7\sp3qfe\sp3qfe.exe
          c:\windows\SoftwareDistribution\Download\7b6e084e897a416dad6204fec54d1e00\4b869f18ffa23590ab9b302aa268b77f.exe
          c:\windows\SoftwareDistribution\Download\7b6e084e897a416dad6204fec54d1e00\7b6e084e897a416dad6204fec54d1e00.exe
          c:\windows\SoftwareDistribution\Download\7b6e084e897a416dad6204fec54d1e00\backup\backup.exe
          c:\windows\SoftwareDistribution\Download\7b6e084e897a416dad6204fec54d1e00\backup\sp3gdr\sp3gdr.exe
          c:\windows\SoftwareDistribution\Download\7b6e084e897a416dad6204fec54d1e00\backup\sp3qfe\sp3qfe.exe
          c:\windows\SoftwareDistribution\Download\7b6e084e897a416dad6204fec54d1e00\download\download.exe
          c:\windows\SoftwareDistribution\Download\7b6e084e897a416dad6204fec54d1e00\sp3gdr\sp3gdr.exe
          c:\windows\SoftwareDistribution\Download\7b6e084e897a416dad6204fec54d1e00\sp3qfe\sp3qfe.exe
          c:\windows\SoftwareDistribution\Download\8d17487b466e9059513420ef8f573de1\3b73491c13abb6c3560cf1164277b928.exe
          c:\windows\SoftwareDistribution\Download\8d17487b466e9059513420ef8f573de1\8d17487b466e9059513420ef8f573de1.exe
          c:\windows\SoftwareDistribution\Download\8d17487b466e9059513420ef8f573de1\SP2GDR\SP2GDR.exe
          c:\windows\SoftwareDistribution\Download\8d17487b466e9059513420ef8f573de1\SP2QFE\SP2QFE.exe
          c:\windows\SoftwareDistribution\Download\8d17487b466e9059513420ef8f573de1\SP3GDR\SP3GDR.exe
          c:\windows\SoftwareDistribution\Download\8d17487b466e9059513420ef8f573de1\SP3QFE\SP3QFE.exe
          c:\windows\SoftwareDistribution\Download\9c06474eecd82d62769df810138d093c\669d0b1faeda9d349046c1685c871e7d.exe
          c:\windows\SoftwareDistribution\Download\9c06474eecd82d62769df810138d093c\9c06474eecd82d62769df810138d093c.exe
          c:\windows\SoftwareDistribution\Download\9c06474eecd82d62769df810138d093c\backup\backup.exe
          c:\windows\SoftwareDistribution\Download\9c06474eecd82d62769df810138d093c\backup\sp3gdr\sp3gdr.exe
          c:\windows\SoftwareDistribution\Download\9c06474eecd82d62769df810138d093c\backup\sp3qfe\sp3qfe.exe
          c:\windows\SoftwareDistribution\Download\9c06474eecd82d62769df810138d093c\download\download.exe
          c:\windows\SoftwareDistribution\Download\9c06474eecd82d62769df810138d093c\sp3gdr\sp3gdr.exe
          c:\windows\SoftwareDistribution\Download\9c06474eecd82d62769df810138d093c\sp3qfe\sp3qfe.exe
          c:\windows\SoftwareDistribution\Download\aa575248fa2fd745643e306ccaa52cf2\aa575248fa2fd745643e306ccaa52cf2.exe
          c:\windows\SoftwareDistribution\Download\aa575248fa2fd745643e306ccaa52cf2\backup\backup.exe
          c:\windows\SoftwareDistribution\Download\aa575248fa2fd745643e306ccaa52cf2\c379bab7b72a5a3477ef6b8fa934fb77.exe
          c:\windows\SoftwareDistribution\Download\aa575248fa2fd745643e306ccaa52cf2\sp3gdr\sp3gdr.exe
          c:\windows\SoftwareDistribution\Download\aa575248fa2fd745643e306ccaa52cf2\sp3qfe\sp3qfe.exe
          c:\windows\SoftwareDistribution\Download\b36c7ee8fdde6b71de76c51647bccbb6\75268bc24bd5ec747ac183eeadb761f8.exe
          c:\windows\SoftwareDistribution\Download\b36c7ee8fdde6b71de76c51647bccbb6\b36c7ee8fdde6b71de76c51647bccbb6.exe
          c:\windows\SoftwareDistribution\Download\b36c7ee8fdde6b71de76c51647bccbb6\SP2GDR\SP2GDR.exe
          c:\windows\SoftwareDistribution\Download\b36c7ee8fdde6b71de76c51647bccbb6\SP2QFE\SP2QFE.exe
          c:\windows\SoftwareDistribution\Download\b36c7ee8fdde6b71de76c51647bccbb6\SP3GDR\SP3GDR.exe
          c:\windows\SoftwareDistribution\Download\b36c7ee8fdde6b71de76c51647bccbb6\SP3QFE\SP3QFE.exe
          c:\windows\SoftwareDistribution\Download\b4ee48f88dd9a2d8b18d0f229604ffc3\b4ee48f88dd9a2d8b18d0f229604ffc3.exe
          c:\windows\SoftwareDistribution\Download\b4ee48f88dd9a2d8b18d0f229604ffc3\backup\backup.exe
          c:\windows\SoftwareDistribution\Download\b4ee48f88dd9a2d8b18d0f229604ffc3\fb7e4e3914021d8e9d80ac8f418fa4bb.exe
          c:\windows\SoftwareDistribution\Download\b4ee48f88dd9a2d8b18d0f229604ffc3\sp3gdr\sp3gdr.exe
          c:\windows\SoftwareDistribution\Download\b4ee48f88dd9a2d8b18d0f229604ffc3\sp3qfe\sp3qfe.exe
          c:\windows\SoftwareDistribution\Download\bcc75bbd6d803d1a0d93a2bbd1f88841\b024880fe56b3ff50f74fc334213eb78.exe
          c:\windows\SoftwareDistribution\Download\bcc75bbd6d803d1a0d93a2bbd1f88841\backup\backup.exe
          c:\windows\SoftwareDistribution\Download\bcc75bbd6d803d1a0d93a2bbd1f88841\bcc75bbd6d803d1a0d93a2bbd1f88841.exe
          c:\windows\SoftwareDistribution\Download\bcc75bbd6d803d1a0d93a2bbd1f88841\sp3gdr\sp3gdr.exe
          c:\windows\SoftwareDistribution\Download\bcc75bbd6d803d1a0d93a2bbd1f88841\sp3qfe\sp3qfe.exe
          c:\windows\SoftwareDistribution\Download\c9128c5b4ff1c4014ea6d97f7646bf8b\4724ea0e197f99f5dc110621c05f3367.exe
          c:\windows\SoftwareDistribution\Download\c9128c5b4ff1c4014ea6d97f7646bf8b\c9128c5b4ff1c4014ea6d97f7646bf8b.exe
          c:\windows\SoftwareDistribution\Download\c9128c5b4ff1c4014ea6d97f7646bf8b\emerald\emerald.exe
          c:\windows\SoftwareDistribution\Download\c9128c5b4ff1c4014ea6d97f7646bf8b\wmp10\wmp10.exe
          c:\windows\SoftwareDistribution\Download\c9128c5b4ff1c4014ea6d97f7646bf8b\wmp11\wmp11.exe
          c:\windows\SoftwareDistribution\Download\c9128c5b4ff1c4014ea6d97f7646bf8b\wmp9l\wmp9l.exe
          c:\windows\SoftwareDistribution\Download\c9128c5b4ff1c4014ea6d97f7646bf8b\wmp9nl\wmp9nl.exe
          c:\windows\SoftwareDistribution\Download\c962147e4dae17cf1ccf121c9ee6bae1\56f5f114cbf05223e7ecb0794869b844.exe
          c:\windows\SoftwareDistribution\Download\c962147e4dae17cf1ccf121c9ee6bae1\c962147e4dae17cf1ccf121c9ee6bae1.exe
          c:\windows\SoftwareDistribution\Download\ce5be003a2bf8d73308ed1db60259a46\ce5be003a2bf8d73308ed1db60259a46.exe
          c:\windows\SoftwareDistribution\Download\ce5be003a2bf8d73308ed1db60259a46\d97470629edff63ec76e2509ea7f9222.exe
          c:\windows\SoftwareDistribution\Download\ce5be003a2bf8d73308ed1db60259a46\SP2GDR\SP2GDR.exe
          c:\windows\SoftwareDistribution\Download\ce5be003a2bf8d73308ed1db60259a46\SP2QFE\SP2QFE.exe
          c:\windows\SoftwareDistribution\Download\ce5be003a2bf8d73308ed1db60259a46\SP3GDR\SP3GDR.exe
          c:\windows\SoftwareDistribution\Download\ce5be003a2bf8d73308ed1db60259a46\SP3QFE\SP3QFE.exe
          c:\windows\SoftwareDistribution\Download\dbfcce58315289d3290962ce468b167d\699bfc4e107af4dd60cba5e3ca037019.exe
          c:\windows\SoftwareDistribution\Download\dbfcce58315289d3290962ce468b167d\dbfcce58315289d3290962ce468b167d.exe
          c:\windows\SoftwareDistribution\Download\dbfcce58315289d3290962ce468b167d\SP2GDR\SP2GDR.exe
          c:\windows\SoftwareDistribution\Download\dbfcce58315289d3290962ce468b167d\SP2QFE\SP2QFE.exe
          c:\windows\SoftwareDistribution\Download\dbfcce58315289d3290962ce468b167d\SP3GDR\SP3GDR.exe
          c:\windows\SoftwareDistribution\Download\dbfcce58315289d3290962ce468b167d\SP3QFE\SP3QFE.exe
          c:\windows\SoftwareDistribution\Download\ddec8f7d123cd4e907c458df2b73ea48\1d502d785af08faeec25c9a802b3f870.exe
          c:\windows\SoftwareDistribution\Download\ddec8f7d123cd4e907c458df2b73ea48\ddec8f7d123cd4e907c458df2b73ea48.exe
          c:\windows\SoftwareDistribution\Download\ddec8f7d123cd4e907c458df2b73ea48\SP2GDR\SP2GDR.exe
          c:\windows\SoftwareDistribution\Download\ddec8f7d123cd4e907c458df2b73ea48\SP2QFE\SP2QFE.exe
          c:\windows\SoftwareDistribution\Download\ddec8f7d123cd4e907c458df2b73ea48\SP3GDR\SP3GDR.exe
          c:\windows\SoftwareDistribution\Download\ddec8f7d123cd4e907c458df2b73ea48\SP3QFE\SP3QFE.exe
          c:\windows\SoftwareDistribution\Download\Download.exe
          c:\windows\SoftwareDistribution\Download\e327b8ca99bcc79887eb783061b30a46\6d3285ea07e02e844a1e46dffef593cf.exe
          c:\windows\SoftwareDistribution\Download\e327b8ca99bcc79887eb783061b30a46\e327b8ca99bcc79887eb783061b30a46.exe
          c:\windows\SoftwareDistribution\Download\e327b8ca99bcc79887eb783061b30a46\SP2GDR\SP2GDR.exe
          c:\windows\SoftwareDistribution\Download\e327b8ca99bcc79887eb783061b30a46\SP2QFE\SP2QFE.exe
          c:\windows\SoftwareDistribution\Download\e327b8ca99bcc79887eb783061b30a46\SP3GDR\SP3GDR.exe
          c:\windows\SoftwareDistribution\Download\e327b8ca99bcc79887eb783061b30a46\SP3QFE\SP3QFE.exe
          c:\windows\SoftwareDistribution\Download\e4432b4388f0c801748823e67356ba62\1d65a7b6a7894379a2ee74e5e5b96a5e.exe
          c:\windows\SoftwareDistribution\Download\e4432b4388f0c801748823e67356ba62\e4432b4388f0c801748823e67356ba62.exe
          c:\windows\SoftwareDistribution\Download\eb84f97221f3377515f23c379375ad66\33e2c0b2e0a5331aa370a5e8ce5ad191.exe
          c:\windows\SoftwareDistribution\Download\eb84f97221f3377515f23c379375ad66\eb84f97221f3377515f23c379375ad66.exe
          c:\windows\SoftwareDistribution\Download\eb84f97221f3377515f23c379375ad66\SP2GDR\SP2GDR.exe
          c:\windows\SoftwareDistribution\Download\eb84f97221f3377515f23c379375ad66\SP2QFE\SP2QFE.exe
          c:\windows\SoftwareDistribution\Download\eb84f97221f3377515f23c379375ad66\SP3GDR\SP3GDR.exe
          c:\windows\SoftwareDistribution\Download\eb84f97221f3377515f23c379375ad66\SP3QFE\SP3QFE.exe
          c:\windows\SoftwareDistribution\Download\ed4e4c18ec270094317e690595451c9c\47c4bdf626b189d93918e8924a659af7.exe
          c:\windows\SoftwareDistribution\Download\ed4e4c18ec270094317e690595451c9c\backup\backup.exe
          c:\windows\SoftwareDistribution\Download\ed4e4c18ec270094317e690595451c9c\ed4e4c18ec270094317e690595451c9c.exe
          c:\windows\SoftwareDistribution\Download\ed4e4c18ec270094317e690595451c9c\sp3gdr\sp3gdr.exe
          c:\windows\SoftwareDistribution\Download\ed4e4c18ec270094317e690595451c9c\sp3qfe\sp3qfe.exe
          c:\windows\SoftwareDistribution\Download\ee674415c440815df9dbd79e20f94525\ee674415c440815df9dbd79e20f94525.exe
          c:\windows\SoftwareDistribution\Download\ee674415c440815df9dbd79e20f94525\f34e0e2448fa949fda32b9e9477dc7ce.exe
          c:\windows\SoftwareDistribution\Download\ee674415c440815df9dbd79e20f94525\SP2GDR\SP2GDR.exe
          c:\windows\SoftwareDistribution\Download\ee674415c440815df9dbd79e20f94525\SP2QFE\SP2QFE.exe
          c:\windows\SoftwareDistribution\Download\f36593f13584dc8b311cfbaab602e80f\backup\backup.exe
          c:\windows\SoftwareDistribution\Download\f36593f13584dc8b311cfbaab602e80f\backup\sp3gdr\sp3gdr.exe
          c:\windows\SoftwareDistribution\Download\f36593f13584dc8b311cfbaab602e80f\backup\sp3qfe\sp3qfe.exe
          c:\windows\SoftwareDistribution\Download\f36593f13584dc8b311cfbaab602e80f\download\download.exe
          c:\windows\SoftwareDistribution\Download\f36593f13584dc8b311cfbaab602e80f\f36593f13584dc8b311cfbaab602e80f.exe
          c:\windows\SoftwareDistribution\Download\f36593f13584dc8b311cfbaab602e80f\fa15702b8a9d8787d3246995b9c1bb67.exe
          c:\windows\SoftwareDistribution\Download\f36593f13584dc8b311cfbaab602e80f\sp3gdr\sp3gdr.exe
          c:\windows\SoftwareDistribution\Download\f36593f13584dc8b311cfbaab602e80f\sp3qfe\sp3qfe.exe
          c:\windows\SoftwareDistribution\Download\f4a2c0aaa24852247df21c71c0eb238d\67065d13b396b687cc8834f4c1ac8407.exe
          c:\windows\SoftwareDistribution\Download\f4a2c0aaa24852247df21c71c0eb238d\backup\backup.exe
          c:\windows\SoftwareDistribution\Download\f4a2c0aaa24852247df21c71c0eb238d\backup\sp3gdr\sp3gdr.exe
          c:\windows\SoftwareDistribution\Download\f4a2c0aaa24852247df21c71c0eb238d\backup\sp3qfe\sp3qfe.exe
          c:\windows\SoftwareDistribution\Download\f4a2c0aaa24852247df21c71c0eb238d\download\download.exe
          c:\windows\SoftwareDistribution\Download\f4a2c0aaa24852247df21c71c0eb238d\f4a2c0aaa24852247df21c71c0eb238d.exe
          c:\windows\SoftwareDistribution\Download\f4a2c0aaa24852247df21c71c0eb238d\sp3gdr\sp3gdr.exe
          c:\windows\SoftwareDistribution\Download\f4a2c0aaa24852247df21c71c0eb238d\sp3qfe\sp3qfe.exe
          c:\windows\SoftwareDistribution\Download\fb0faa128362fdadcb1300a59dbc6dc9\fb0faa128362fdadcb1300a59dbc6dc9.exe
          c:\windows\SoftwareDistribution\Download\fb0faa128362fdadcb1300a59dbc6dc9\SP2GDR\SP2GDR.exe
          c:\windows\SoftwareDistribution\Download\fb0faa128362fdadcb1300a59dbc6dc9\SP2QFE\SP2QFE.exe
          c:\windows\SoftwareDistribution\Download\fb0faa128362fdadcb1300a59dbc6dc9\SP3GDR\SP3GDR.exe
          c:\windows\SoftwareDistribution\Download\fb0faa128362fdadcb1300a59dbc6dc9\SP3QFE\SP3QFE.exe
          c:\windows\SoftwareDistribution\EventCache\EventCache.exe
          c:\windows\SoftwareDistribution\SelfUpdate\Default\Default.exe
          c:\windows\SoftwareDistribution\SelfUpdate\Registered\Registered.exe
          c:\windows\SoftwareDistribution\SelfUpdate\SelfUpdate.exe
          c:\windows\SoftwareDistribution\SoftwareDistribution.exe
          c:\windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\9482F4B4-E343-43B6-B170-9A65BC822C77.exe
          c:\windows\SoftwareDistribution\WuRedir\WuRedir.exe
          c:\windows\srchasst\chars\chars.exe
          c:\windows\srchasst\mui\[u]0/u40C\[u]0/u40C.exe
          c:\windows\srchasst\mui\mui.exe
          c:\windows\srchasst\srchasst.exe
          c:\windows\Sun\Java\Deployment\Deployment.exe
          c:\windows\Sun\Java\Java.exe
          c:\windows\Sun\Sun.exe
          c:\windows\system32\1025\1025.exe
          c:\windows\system32\1028\1028.exe
          c:\windows\system32\1031\1031.exe
          c:\windows\system32\1033\1033.exe
          c:\windows\system32\1036\1036.exe
          c:\windows\system32\1037\1037.exe
          c:\windows\system32\1041\1041.exe
          c:\windows\system32\1042\1042.exe
          c:\windows\system32\1054\1054.exe
          c:\windows\system32\2052\2052.exe
          c:\windows\system32\3076\3076.exe
          c:\windows\system32\3com_dmi\3com_dmi.exe
          c:\windows\system32\appmgmt\appmgmt.exe
          c:\windows\system32\appmgmt\MACHINE\MACHINE.exe
          c:\windows\system32\appmgmt\S-1-5-21-1482476501-920026266-1801674531-1003\S-1-5-21-1482476501-920026266-1801674531-1003.exe
          c:\windows\system32\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}.exe
          c:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}.exe
          c:\windows\system32\CatRoot\CatRoot.exe
          c:\windows\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}.exe
          c:\windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}.exe
          c:\windows\system32\CatRoot2\CatRoot2.exe
          c:\windows\system32\Com\Com.exe
          1. --8 ----huitième partie :
            iversalis\html\dossiers\egypte\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\egypte\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\egypte\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\egypte\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\egypte\images\medias\page01\page01.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\egypte\images\medias\page02\page02.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\egypte\images\medias\page03\page03.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\egypte\images\medias\page04\page04.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\egypte\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\europe\europe.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\europe\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\europe\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\europe\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\europe\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\europe\images\medias\page01\page01.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\europe\images\medias\page02\page02.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\europe\images\medias\page03\page03.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\europe\images\medias\page04\page04.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\europe\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\l_entre-deux-guerres\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\l_entre-deux-guerres\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\l_entre-deux-guerres\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\l_entre-deux-guerres\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\l_entre-deux-guerres\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\l_entre-deux-guerres\l_entre-deux-guerres.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_cellule\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_cellule\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_cellule\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_cellule\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_cellule\images\medias\page01\page01.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_cellule\images\medias\page02\page02.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_cellule\images\medias\page03\page03.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_cellule\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_cellule\la_cellule.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_conquete_de_espace\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_conquete_de_espace\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_conquete_de_espace\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_conquete_de_espace\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_conquete_de_espace\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_conquete_de_espace\la_conquete_de_espace.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_guerre_froide\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_guerre_froide\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_guerre_froide\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_guerre_froide\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_guerre_froide\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_guerre_froide\la_guerre_froide.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_mondialisation\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_mondialisation\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_mondialisation\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_mondialisation\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_mondialisation\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_mondialisation\la_mondialisation.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_premiere_guerre_mondiale\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_premiere_guerre_mondiale\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_premiere_guerre_mondiale\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_premiere_guerre_mondiale\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_premiere_guerre_mondiale\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_premiere_guerre_mondiale\la_premiere_guerre_mondiale.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_route_de_la_soie\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_route_de_la_soie\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_route_de_la_soie\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_route_de_la_soie\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_route_de_la_soie\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_route_de_la_soie\la_route_de_la_soie.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_nucleaire\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_nucleaire\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_nucleaire\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_nucleaire\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_nucleaire\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_nucleaire\le_nucleaire.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_petrole\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_petrole\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_petrole\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_petrole\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_petrole\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_petrole\le_petrole.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_systeme_nerveux\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_systeme_nerveux\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_systeme_nerveux\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_systeme_nerveux\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_systeme_nerveux\images\medias\page01\page01.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_systeme_nerveux\images\medias\page02\page02.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_systeme_nerveux\images\medias\page03\page03.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_systeme_nerveux\images\medias\page04\page04.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_systeme_nerveux\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_systeme_nerveux\le_systeme_nerveux.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_azteques\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_azteques\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_azteques\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_azteques\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_azteques\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_azteques\les_azteques.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_decolonisations\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_decolonisations\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_decolonisations\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_decolonisations\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_decolonisations\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_decolonisations\les_decolonisations.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_drogues\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_drogues\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_drogues\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_drogues\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_drogues\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_drogues\les_drogues.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_empires_coloniaux\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_empires_coloniaux\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_empires_coloniaux\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_empires_coloniaux\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_empires_coloniaux\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_empires_coloniaux\les_empires_coloniaux.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_vikings\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_vikings\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_vikings\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_vikings\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_vikings\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_vikings\les_vikings.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\medicaments\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\medicaments\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\medicaments\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\medicaments\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\medicaments\images\medias\page01\page01.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\medicaments\images\medias\page02\page02.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\medicaments\images\medias\page03\page03.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\medicaments\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\medicaments\medicaments.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\naissance_d_un_film\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\naissance_d_un_film\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\naissance_d_un_film\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\naissance_d_un_film\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\naissance_d_un_film\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\naissance_d_un_film\naissance_d_un_film.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\reproduction_animale_et_humaine\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\reproduction_animale_et_humaine\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\reproduction_animale_et_humaine\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\reproduction_animale_et_humaine\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\reproduction_animale_et_humaine\images\medias\page01\page01.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\reproduction_animale_et_humaine\images\medias\page02\page02.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\reproduction_animale_et_humaine\images\medias\page03\page03.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\reproduction_animale_et_humaine\images\medias\page04\page04.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\reproduction_animale_et_humaine\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\reproduction_animale_et_humaine\reproduction_animale_et_humaine.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\revolution_industrielle\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\revolution_industrielle\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\revolution_industrielle\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\revolution_industrielle\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\revolution_industrielle\images\medias\page01\page01.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\revolution_industrielle\images\medias\page02\page02.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\revolution_industrielle\images\medias\page03\page03.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\revolution_industrielle\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\revolution_industrielle\revolution_industrielle.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sang_et_circulation\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sang_et_circulation\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sang_et_circulation\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sang_et_circulation\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sang_et_circulation\images\medias\page01\page01.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sang_et_circulation\images\medias\page02\page02.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sang_et_circulation\images\medias\page03\page03.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sang_et_circulation\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sang_et_circulation\sang_et_circulation.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\seconde_GM\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\seconde_GM\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\seconde_GM\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\seconde_GM\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\seconde_GM\images\medias\page01\page01.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\seconde_GM\images\medias\page02\page02.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\seconde_GM\images\medias\page03\page03.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\seconde_GM\images\medias\page04\page04.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\seconde_GM\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\seconde_GM\seconde_GM.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sons_et_images\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sons_et_images\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sons_et_images\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sons_et_images\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sons_et_images\images\medias\page01\page01.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sons_et_images\images\medias\page02\page02.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sons_et_images\images\medias\page03\page03.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sons_et_images\images\medias\page04\page04.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sons_et_images\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sons_et_images\sons_et_images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\squelette_et_muscles\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\squelette_et_muscles\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\squelette_et_muscles\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\squelette_et_muscles\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\squelette_et_muscles\images\medias\page01\page01.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\squelette_et_muscles\images\medias\page02\page02.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\squelette_et_muscles\images\medias\page03\page03.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\squelette_et_muscles\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\squelette_et_muscles\squelette_et_muscles.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\systeme_solaire\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\systeme_solaire\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\systeme_solaire\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\systeme_solaire\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\systeme_solaire\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\systeme_solaire\systeme_solaire.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\accueil\accueil.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\icon_media\icon_media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\medias\medias.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\medias\montage\montage.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\medias\page01\page01.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\medias\page02\page02.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\medias\page03\page03.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\medias\page04\page04.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\medias\page05\page05.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\pages\pages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\univers.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\help\help.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\homepages\homepages.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\html.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\article\article.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\buttons\buttons.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\cartes\cartes.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\dossiers\dossiers.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\drapeaux\drapeaux.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\help\help.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\help\mini\mini.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\home\home.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\icons\icons.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\salle\salle.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\shared\shared.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\thematic-browser\thematic-browser.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\thumbnails-browser\thumbnails-browser.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\world_data\world_data.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\js\atlas\atlas.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\js\help\help.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\js\js.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\js\notes\notes.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\js\scriptaculous\lib\lib.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\js\scriptaculous\scriptaculous.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\js\scriptaculous\src\src.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\js\thematicBrowser\thematicBrowser.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\js\thumbnailBrowser\thumbnailBrowser.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\js\toolbar\toolbar.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\maps\maps.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\maps\media\media.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\mediapopup\flash\flash.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\mediapopup\mediapopup.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\index\EUAlmanac\EUAlmanac.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\index\EUFullText\EUFullText.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\index\EUIndex\EUIndex.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\index\EUTwentyFirstCentury\EUTwentyFirstCentury.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\index\index.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jars\jars.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\bin\bin.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\bin\client\client.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\jre.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\audio\audio.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\cmm\cmm.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\deploy\deploy.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\ext\ext.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\fonts\fonts.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\i386\i386.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\im\im.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\images\cursors\cursors.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\images\images.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\javaws\javaws.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\lib.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\management\management.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\security\security.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\Africa\Africa.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\America\America.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\America\Argentina\Argentina.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\America\Indiana\Indiana.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\America\Kentucky\Kentucky.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\America\North_Dakota\North_Dakota.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\Antarctica\Antarctica.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\Asia\Asia.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\Atlantic\Atlantic.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\Australia\Australia.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\Etc\Etc.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\Europe\Europe.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\Indian\Indian.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\Pacific\Pacific.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\SystemV\SystemV.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\zi.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\logs\.svn\.svn.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\logs\.svn\prop-base\prop-base.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\logs\.svn\props\props.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\logs\.svn\text-base\text-base.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\logs\.svn\tmp\prop-base\prop-base.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\logs\.svn\tmp\props\props.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\logs\.svn\tmp\text-base\text-base.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\logs\.svn\tmp\tmp.exe
            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\logs\logs.exe
            1. --7- septième partie :
              ldb\day_in_history_html\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\day_in_history_html\lobs\lobs.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\formula_assets\formula_assets.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\formula_assets\indices\FORMULA_ID\FORMULA_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\formula_assets\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\formula_assets\lobs\lobs.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_documents\index_documents.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_documents\indices\INDEX_DOCS_NAPP\INDEX_DOCS_NAPP.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_documents\indices\INDEX_DOCS_SORT\INDEX_DOCS_SORT.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_documents\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_entry\index_entry.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_entry\indices\INDEX_ENTRY_NAPP\INDEX_ENTRY_NAPP.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_entry\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_entry_article\index_entry_article.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_entry_article\indices\INDEX_ENTRY_ARTICLE_NAPP\INDEX_ENTRY_ARTICLE_NAPP.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_entry_article\indices\INDEX_ENTRY_ARTICLE_NREF\INDEX_ENTRY_ARTICLE_NREF.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_entry_article\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_ref_article\index_ref_article.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_ref_article\indices\INDEX_REF_ARTICLE_NAPP\INDEX_REF_ARTICLE_NAPP.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_ref_article\indices\INDEX_REF_ARTICLE_NREF\INDEX_REF_ARTICLE_NREF.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_ref_article\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\installdb.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media\indices\MEDIA_ID\MEDIA_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media\lobs\lobs.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media\media.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_hotspot_articles\indices\HOTSPOT_ARTICLE_ID\HOTSPOT_ARTICLE_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_hotspot_articles\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_hotspot_articles\media_hotspot_articles.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_hotspot_media\indices\HOTSPOT_MEDIA_ID\HOTSPOT_MEDIA_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_hotspot_media\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_hotspot_media\media_hotspot_media.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_hotspots\indices\HOTSPOT_ID\HOTSPOT_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_hotspots\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_hotspots\media_hotspots.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_lookup\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_lookup\indices\MEDIA_LOOKUP_ID\MEDIA_LOOKUP_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_lookup\media_lookup.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_minithumbs\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_minithumbs\indices\MEDIA_MINITHUMB_ID\MEDIA_MINITHUMB_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_minithumbs\lobs\lobs.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_minithumbs\media_minithumbs.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_thumbnails\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_thumbnails\indices\MEDIA_THUMBNAIL_ID\MEDIA_THUMBNAIL_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_thumbnails\lobs\lobs.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_thumbnails\media_thumbnails.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\related_articles\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\related_articles\indices\RELATED_ARTICLES_NREF\RELATED_ARTICLES_NREF.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\related_articles\indices\RELATED_ARTICLES_RELATED_NREF\RELATED_ARTICLES_RELATED_NREF.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\related_articles\related_articles.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_content\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_content\indices\TOPIC_CONTENT_ID\TOPIC_CONTENT_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_content\indices\TOPIC_CONTENT_ORDER_ALPHA\TOPIC_CONTENT_ORDER_ALPHA.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_content\indices\TOPIC_CONTENT_ORDER_NUM\TOPIC_CONTENT_ORDER_NUM.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_content\topic_content.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_content_dossiers\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_content_dossiers\indices\TOPIC_CONTENT_DOSSIER_ID\TOPIC_CONTENT_DOSSIER_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_content_dossiers\indices\TOPIC_CONTENT_DOSSIER_ORDER\TOPIC_CONTENT_DOSSIER_ORDER.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_content_dossiers\topic_content_dossiers.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_entry\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_entry\indices\TOPIC_ENTRY_ID\TOPIC_ENTRY_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_entry\lobs\lobs.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_entry\topic_entry.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_subtopics\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_subtopics\indices\TOPIC_SUBTOPICS_ID\TOPIC_SUBTOPICS_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_subtopics\indices\TOPIC_SUBTOPICS_LEAF\TOPIC_SUBTOPICS_LEAF.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_subtopics\indices\TOPIC_SUBTOPICS_ORDER\TOPIC_SUBTOPICS_ORDER.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_subtopics\topic_subtopics.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_entries\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_entries\indices\TCE_END_MONTH\TCE_END_MONTH.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_entries\indices\TCE_END_YEAR\TCE_END_YEAR.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_entries\indices\TCE_ENTRY\TCE_ENTRY.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_entries\indices\TCE_START_DAY\TCE_START_DAY.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_entries\indices\TCE_START_MONTH\TCE_START_MONTH.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_entries\indices\TCE_START_YEAR\TCE_START_YEAR.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_entries\twentyfirst_century_entries.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_html\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_html\indices\TCH_ID\TCH_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_html\lobs\lobs.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_html\twentyfirst_century_html.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_location_entries\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_location_entries\indices\TCLE_DIRECT_ASSOC\TCLE_DIRECT_ASSOC.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_location_entries\indices\TCLE_ENTRY\TCLE_ENTRY.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_location_entries\indices\TCLE_LOCATION\TCLE_LOCATION.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_location_entries\twentyfirst_century_location_entries.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_locations\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_locations\twentyfirst_century_locations.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_year_entries\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_year_entries\indices\TCYE_DAY\TCYE_DAY.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_year_entries\indices\TCYE_ENTRY\TCYE_ENTRY.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_year_entries\indices\TCYE_MONTH\TCYE_MONTH.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_year_entries\indices\TCYE_YEAR\TCYE_YEAR.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_year_entries\twentyfirst_century_year_entries.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\world_data\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\world_data\indices\WORLD_DATA_FLAG\WORLD_DATA_FLAG.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\world_data\indices\WORLD_DATA_MAP\WORLD_DATA_MAP.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\world_data\indices\WORLD_DATA_SORT\WORLD_DATA_SORT.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\world_data\world_data.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA1_DATA\MEDIA1_DATA.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA1_DATA\mediadb\media_asset\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA1_DATA\mediadb\media_asset\indices\MEDIA_ASSET_ID\MEDIA_ASSET_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA1_DATA\mediadb\media_asset\lobs\lobs.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA1_DATA\mediadb\media_asset\media_asset.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA1_DATA\mediadb\mediadb.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA2_DATA\MEDIA2_DATA.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA2_DATA\mediadb\media_asset\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA2_DATA\mediadb\media_asset\indices\MEDIA_ASSET_ID\MEDIA_ASSET_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA2_DATA\mediadb\media_asset\lobs\lobs.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA2_DATA\mediadb\media_asset\media_asset.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA2_DATA\mediadb\mediadb.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA3_DATA\MEDIA3_DATA.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA3_DATA\mediadb\media_asset\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA3_DATA\mediadb\media_asset\indices\MEDIA_ASSET_ID\MEDIA_ASSET_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA3_DATA\mediadb\media_asset\lobs\lobs.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA3_DATA\mediadb\media_asset\media_asset.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA3_DATA\mediadb\mediadb.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA4_DATA\MEDIA4_DATA.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA4_DATA\mediadb\media_asset\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA4_DATA\mediadb\media_asset\indices\MEDIA_ASSET_ID\MEDIA_ASSET_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA4_DATA\mediadb\media_asset\lobs\lobs.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA4_DATA\mediadb\media_asset\media_asset.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA4_DATA\mediadb\mediadb.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA5_DATA\MEDIA5_DATA.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA5_DATA\mediadb\media_asset\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA5_DATA\mediadb\media_asset\indices\MEDIA_ASSET_ID\MEDIA_ASSET_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA5_DATA\mediadb\media_asset\lobs\lobs.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA5_DATA\mediadb\media_asset\media_asset.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA5_DATA\mediadb\mediadb.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA6_DATA\MEDIA6_DATA.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA6_DATA\mediadb\media_asset\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA6_DATA\mediadb\media_asset\indices\MEDIA_ASSET_ID\MEDIA_ASSET_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA6_DATA\mediadb\media_asset\lobs\lobs.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA6_DATA\mediadb\media_asset\media_asset.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA6_DATA\mediadb\mediadb.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA7_DATA\MEDIA7_DATA.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA7_DATA\mediadb\media_asset\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA7_DATA\mediadb\media_asset\indices\MEDIA_ASSET_ID\MEDIA_ASSET_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA7_DATA\mediadb\media_asset\lobs\lobs.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA7_DATA\mediadb\media_asset\media_asset.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA7_DATA\mediadb\mediadb.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA8_DATA\MEDIA8_DATA.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA8_DATA\mediadb\media_asset\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA8_DATA\mediadb\media_asset\indices\MEDIA_ASSET_ID\MEDIA_ASSET_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA8_DATA\mediadb\media_asset\lobs\lobs.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA8_DATA\mediadb\media_asset\media_asset.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA8_DATA\mediadb\mediadb.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\NOTES_DATA.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\notesdb.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\saved_notes\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\saved_notes\indices\MYDOCS_SAVED_NOTE_ID\MYDOCS_SAVED_NOTE_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\saved_notes\saved_notes.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_documents\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_documents\indices\MYDOCS_DOCUMENT_ASSET_ID\MYDOCS_DOCUMENT_ASSET_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_documents\indices\MYDOCS_DOCUMENTS_ID\MYDOCS_DOCUMENTS_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_documents\user_documents.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_folders\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_folders\indices\MYDOCS_FOLDERS_ID\MYDOCS_FOLDERS_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_folders\user_folders.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_notes\indices\indices.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_notes\indices\MYDOCS_NOTE_ASSET_ID\MYDOCS_NOTE_ASSET_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_notes\indices\MYDOCS_NOTE_DOC_ID\MYDOCS_NOTE_DOC_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_notes\indices\MYDOCS_NOTES_ID\MYDOCS_NOTES_ID.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_notes\user_notes.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\Encyclopaedia Universalis.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\atlas\atlas.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\atlas\WD_comp\drapeaux\drapeaux.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\atlas\WD_comp\familles\familles.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\atlas\WD_comp\WD_comp.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\chronology\chronology.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\chronology\Media\assets\assets.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\chronology\Media\chronologie_media\chronologie_media.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\chronology\Media\Media.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\css\css.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\aviation\aviation.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\aviation\images\accueil\accueil.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\aviation\images\icon_media\icon_media.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\aviation\images\images.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\aviation\images\medias\medias.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\aviation\images\medias\page01\page01.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\aviation\images\medias\page02\page02.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\aviation\images\medias\page03\page03.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\aviation\images\medias\page04\page04.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\aviation\images\pages\pages.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\besoins_et_echanges\besoins_et_echanges.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\besoins_et_echanges\images\accueil\accueil.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\besoins_et_echanges\images\icon_media\icon_media.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\besoins_et_echanges\images\images.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\besoins_et_echanges\images\medias\medias.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\besoins_et_echanges\images\medias\page01\page01.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\besoins_et_echanges\images\medias\page02\page02.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\besoins_et_echanges\images\medias\page03\page03.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\besoins_et_echanges\images\medias\page04\page04.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\besoins_et_echanges\images\pages\pages.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\biotechnologies\biotechnologies.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\biotechnologies\images\accueil\accueil.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\biotechnologies\images\icon_media\icon_media.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\biotechnologies\images\images.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\biotechnologies\images\medias\medias.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\biotechnologies\images\medias\page01\page01.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\biotechnologies\images\medias\page02\page02.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\biotechnologies\images\medias\page03\page03.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\biotechnologies\images\medias\page04\page04.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\biotechnologies\images\pages\pages.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\catastrophes\catastrophes.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\catastrophes\images\accueil\accueil.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\catastrophes\images\icon_media\icon_media.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\catastrophes\images\images.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\catastrophes\images\medias\medias.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\catastrophes\images\medias\page01\page01.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\catastrophes\images\medias\page02\page02.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\catastrophes\images\medias\page03\page03.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\catastrophes\images\pages\pages.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_grecque\civilisation_grecque.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_grecque\images\accueil\accueil.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_grecque\images\icon_media\icon_media.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_grecque\images\images.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_grecque\images\medias\medias.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_grecque\images\medias\page01\page01.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_grecque\images\medias\page02\page02.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_grecque\images\medias\page03\page03.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_grecque\images\medias\page04\page04.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_grecque\images\pages\pages.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_mesopotamienne\civilisation_mesopotamienne.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_mesopotamienne\images\accueil\accueil.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_mesopotamienne\images\icon_media\icon_media.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_mesopotamienne\images\images.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_mesopotamienne\images\medias\medias.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_mesopotamienne\images\medias\page01\page01.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_mesopotamienne\images\medias\page02\page02.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_mesopotamienne\images\medias\page03\page03.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_mesopotamienne\images\medias\page04\page04.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_mesopotamienne\images\pages\pages.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_romaine\civilisation_romaine.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_romaine\images\accueil\accueil.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_romaine\images\icon_media\icon_media.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_romaine\images\images.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_romaine\images\medias\medias.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_romaine\images\medias\page01\page01.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_romaine\images\medias\page02\page02.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_romaine\images\medias\page03\page03.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_romaine\images\pages\pages.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\climats\climats.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\climats\images\accueil\accueil.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\climats\images\icon_media\icon_media.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\climats\images\images.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\climats\images\medias\medias.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\climats\images\medias\page01\page01.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\climats\images\medias\page02\page02.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\climats\images\medias\page03\page03.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\climats\images\medias\page04\page04.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\climats\images\pages\pages.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\dossiers.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\eau_pour_tous\eau_pour_tous.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\eau_pour_tous\images\accueil\accueil.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\eau_pour_tous\images\icon_media\icon_media.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\eau_pour_tous\images\images.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\eau_pour_tous\images\medias\medias.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\eau_pour_tous\images\pages\pages.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecosysteme\ecosysteme.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecosysteme\images\accueil\accueil.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecosysteme\images\icon_media\icon_media.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecosysteme\images\images.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecosysteme\images\medias\medias.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecosysteme\images\medias\page01\page01.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecosysteme\images\medias\page02\page02.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecosysteme\images\medias\page03\page03.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecosysteme\images\pages\pages.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecriture\ecriture.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecriture\images\accueil\accueil.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecriture\images\icon_media\icon_media.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecriture\images\images.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecriture\images\medias\medias.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecriture\images\medias\page01\page01.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecriture\images\medias\page02\page02.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecriture\images\medias\page03\page03.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecriture\images\pages\pages.exe
              c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\egypte\egypte.exe
              1. --4 -quatrième partie:
                D\Local Settings\Historique\History.IE5\.exe
                c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012008022020080221\.exe
                c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012008022120080222\.exe
                c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012008052120080522\.exe
                c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012009052020090521\.exe
                c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012009052120090522\.exe
                c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012009052220090523\.exe
                c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012009052320090524\.exe
                c:\documents and settings\IMAD\Mes documents\Downloads\Compressed\Compressed.exe
                c:\documents and settings\IMAD\Mes documents\Downloads\Documents\Documents.exe
                c:\documents and settings\IMAD\Mes documents\Downloads\Downloads.exe
                c:\documents and settings\IMAD\Mes documents\Downloads\Music\Music.exe
                c:\documents and settings\IMAD\Mes documents\Downloads\Programs\Programs.exe
                c:\documents and settings\IMAD\Mes documents\Downloads\Video\Video.exe
                c:\documents and settings\IMAD\Mes documents\Ma musique\Ma musique.exe
                c:\documents and settings\IMAD\Mes documents\Mes documents.exe
                c:\documents and settings\IMAD\Mes documents\Mes images\Mes images.exe
                c:\documents and settings\IMAD\Recent\.exe
                c:\documents and settings\IMAD\SendTo\.exe
                c:\documents and settings\LocalService\.exe
                c:\documents and settings\LocalService\Application Data\Application Data.exe
                c:\documents and settings\LocalService\Application Data\Microsoft\.exe
                c:\documents and settings\LocalService\Application Data\Microsoft\Credentials\.exe
                c:\documents and settings\LocalService\Application Data\Microsoft\Credentials\S-1-5-19\.exe
                c:\documents and settings\LocalService\Application Data\Microsoft\Media Player\Media Player.exe
                c:\documents and settings\LocalService\Application Data\Microsoft\SystemCertificates\.exe
                c:\documents and settings\LocalService\Application Data\Microsoft\SystemCertificates\My\.exe
                c:\documents and settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Certificates\.exe
                c:\documents and settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CRLs\.exe
                c:\documents and settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CTLs\.exe
                c:\documents and settings\LocalService\Application Data\Microsoft\UPnP Device Host\UPnP Device Host.exe
                c:\documents and settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\upnphost.exe
                c:\documents and settings\LocalService\Local Settings\.exe
                c:\documents and settings\LocalService\Local Settings\Application Data\.exe
                c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\.exe
                c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\.exe
                c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-19\.exe
                c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Internet Explorer\Internet Explorer.exe
                c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Media Player\Media Player.exe
                c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Windows Media\11.0\11.0.exe
                c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Windows Media\Windows Media.exe
                c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Windows\Windows.exe
                c:\documents and settings\LocalService\Local Settings\Historique\.exe
                c:\documents and settings\LocalService\Local Settings\Historique\History.IE5\.exe
                c:\documents and settings\LocalService\Local Settings\Temp\Temp.exe
                c:\documents and settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\.exe
                c:\documents and settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\9B5SW32J\.exe
                c:\documents and settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\AU5JND7L\.exe
                c:\documents and settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\B2WY1TR6\.exe
                c:\documents and settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\S6FIYPCO\.exe
                c:\documents and settings\NetworkService\.exe
                c:\documents and settings\NetworkService\Application Data\Application Data.exe
                c:\documents and settings\NetworkService\Application Data\Microsoft\.exe
                c:\documents and settings\NetworkService\Application Data\Microsoft\Credentials\.exe
                c:\documents and settings\NetworkService\Application Data\Microsoft\Credentials\S-1-5-20\.exe
                c:\documents and settings\NetworkService\Application Data\Microsoft\Media Player\Media Player.exe
                c:\documents and settings\NetworkService\Application Data\Microsoft\SystemCertificates\.exe
                c:\documents and settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\.exe
                c:\documents and settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Certificates\.exe
                c:\documents and settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CRLs\.exe
                c:\documents and settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CTLs\.exe
                c:\documents and settings\NetworkService\Local Settings\.exe
                c:\documents and settings\NetworkService\Local Settings\Application Data\.exe
                c:\documents and settings\NetworkService\Local Settings\Application Data\Microsoft\.exe
                c:\documents and settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\.exe
                c:\documents and settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-20\.exe
                c:\documents and settings\NetworkService\Local Settings\Application Data\Microsoft\Internet Explorer\Internet Explorer.exe
                c:\documents and settings\NetworkService\Local Settings\Application Data\Microsoft\Media Player\Media Player.exe
                c:\documents and settings\NetworkService\Local Settings\Application Data\Microsoft\Windows Media\11.0\11.0.exe
                c:\documents and settings\NetworkService\Local Settings\Application Data\Microsoft\Windows Media\Windows Media.exe
                c:\documents and settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\Windows.exe
                c:\documents and settings\NetworkService\Local Settings\Historique\.exe
                c:\documents and settings\NetworkService\Local Settings\Historique\History.IE5\.exe
                c:\documents and settings\NetworkService\Local Settings\Temp\Temp.exe
                c:\documents and settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\.exe
                c:\documents and settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\9B5SW32J\.exe
                c:\documents and settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\AU5JND7L\.exe
                c:\documents and settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\B2WY1TR6\.exe
                c:\documents and settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\S6FIYPCO\.exe
                c:\drivekey\DriveKey.exe
                c:\found.000\.exe
                c:\msocache\.exe
                1. --3- troisième :
                  D\Application Data\Sammsoft\Sammsoft.exe
                  c:\documents and settings\IMAD\Application Data\SecuROM\SecuROM.exe
                  c:\documents and settings\IMAD\Application Data\SecuROM\UserData\.exe
                  c:\documents and settings\IMAD\Application Data\Skype\Content\Content.exe
                  c:\documents and settings\IMAD\Application Data\Skype\milou_hm\dyncontent\dyncontent.exe
                  c:\documents and settings\IMAD\Application Data\Skype\milou_hm\httpfe\httpfe.exe
                  c:\documents and settings\IMAD\Application Data\Skype\milou_hm\milou_hm.exe
                  c:\documents and settings\IMAD\Application Data\Skype\milou_hm\voicemail\voicemail.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\[u]0/u7\[u]0/u7.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\17\17.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\27\27.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\2a\2a.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\32\32.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\39\39.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\3b\3b.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\3e\3e.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\4e\4e.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\60\60.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\61\61.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\64\64.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\68\68.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\6d\6d.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\79\79.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\9c\9c.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\a0\a0.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\b5\b5.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\b9\b9.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\c7\c7.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\chatsync.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\d2\d2.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\e8\e8.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\dyncontent\dyncontent.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\httpfe\httpfe.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\nadine-douce.exe
                  c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\voicemail\voicemail.exe
                  c:\documents and settings\IMAD\Application Data\Skype\Pictures\Pictures.exe
                  c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\15\15.exe
                  c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\1a\1a.exe
                  c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\62\62.exe
                  c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\7b\7b.exe
                  c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\chatsync.exe
                  c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\e8\e8.exe
                  c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\dyncontent\dyncontent.exe
                  c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\httpfe\httpfe.exe
                  c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\rahma.wafa1.exe
                  c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\voicemail\voicemail.exe
                  c:\documents and settings\IMAD\Application Data\Skype\Skype.exe
                  c:\documents and settings\IMAD\Application Data\Skype\toubitoubi\toubitoubi.exe
                  c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\chatsync\34\34.exe
                  c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\chatsync\77\77.exe
                  c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\chatsync\9d\9d.exe
                  c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\chatsync\b8\b8.exe
                  c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\chatsync\chatsync.exe
                  c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\dyncontent\dyncontent.exe
                  c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\httpfe\httpfe.exe
                  c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\toubitoubi7.exe
                  c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\voicemail\voicemail.exe
                  c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\chatsync\1a\1a.exe
                  c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\chatsync\97\97.exe
                  c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\chatsync\af\af.exe
                  c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\chatsync\chatsync.exe
                  c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\dyncontent\dyncontent.exe
                  c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\httpfe\httpfe.exe
                  c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\voicemail\voicemail.exe
                  c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\zino_albi06.exe
                  c:\documents and settings\IMAD\Application Data\skypePM\skypePM.exe
                  c:\documents and settings\IMAD\Application Data\SolwaySoftware\SolwaySoftware.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\[u]0/u\[u]0/u.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\1\1.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\10\10.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\11\11.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\12\12.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\13\13.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\14\14.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\15\15.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\15\4e09eacf-46b51e4f-n\4e09eacf-46b51e4f-n.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\16\16.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\17\17.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\18\18.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\19\19.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\2\2.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\20\20.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\21\21.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\22\22.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\23\23.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\24\24.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\25\25.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\26\26.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\27\27.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\28\28.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\29\29.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\3\3.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\30\30.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\31\31.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\32\32.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\33\258cea61-4647c794-n\258cea61-4647c794-n.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\33\33.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\34\34.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\35\35.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\36\36.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\37\37.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\38\38.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\39\39.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\4\4.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\40\40.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\41\41.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\42\42.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\43\43.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\44\44.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\45\45.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\45\4f710eed-601542d3-n\4f710eed-601542d3-n.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\46\46.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\47\47.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\48\48.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\49\49.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\5\5.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\50\50.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\50\5b902232-55694a9f-n\5b902232-55694a9f-n.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\51\51.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\52\52.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\53\53.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\54\54.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\55\55.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\56\56.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\57\57.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\58\58.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\59\59.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\6.0.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\6\6.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\60\60.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\61\61.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\62\62.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-329123bb-n\6baea4fe-329123bb-n.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\63\63.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\7\7.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\8\8.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\9\9.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\host\host.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\muffin\muffin.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\tmp\tmp.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\cache.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\Deployment.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\ext\ext.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\log\log.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\security\security.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\Java.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Java\jre1.6.0_13\jre1.6.0_13.exe
                  c:\documents and settings\IMAD\Application Data\Sun\Sun.exe
                  c:\documents and settings\IMAD\Application Data\URSoft\URSoft.exe
                  c:\documents and settings\IMAD\Application Data\URSoft\Your Uninstaller 2008\Your Uninstaller 2008.exe
                  c:\documents and settings\IMAD\Application Data\vlc\vlc.exe
                  c:\documents and settings\IMAD\Application Data\WinRAR\WinRAR.exe
                  c:\documents and settings\IMAD\Application Data\Yahoo!\Companion\Buttons\Buttons.exe
                  c:\documents and settings\IMAD\Application Data\Yahoo!\Companion\Companion.exe
                  c:\documents and settings\IMAD\Application Data\Yahoo!\Yahoo!.exe
                  c:\documents and settings\IMAD\Contacts\Contacts.exe
                  c:\documents and settings\IMAD\Contacts\eglant_umm@hotmail.com\.exe
                  c:\documents and settings\IMAD\Contacts\imad_kais@hotmail.com\.exe
                  c:\documents and settings\IMAD\Contacts\milou_hm@hotmail.com\.exe
                  c:\documents and settings\IMAD\Contacts\toubi.1992@.live\.exe
                  c:\documents and settings\IMAD\Contacts\toubi.1992@live.fr\.exe
                  c:\documents and settings\IMAD\InstallAnywhere\.exe
                  c:\documents and settings\IMAD\Local Settings\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Acrobat\9.0\9.0.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Acrobat\9.0\Cache\Cache.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Acrobat\9.0\Cache\Search\Search.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Acrobat\9.0\Updater\Updater.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Acrobat\Acrobat.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Adobe.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Color\Color.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\ESD\ESD.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\crl\crl.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\Data\Data.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\Install\AdobeUpdater\AdobeUpdater.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\Install\Install.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\Install\reader9rdr-fr_FR\reader9rdr-fr_FR.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\Updater6.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Help\Help.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Identities\{53E35C27-4735-4E8F-B431-5B8ED2F47E83}\{53E35C27-4735-4E8F-B431-5B8ED2F47E83}.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Identities\{53E35C27-4735-4E8F-B431-5B8ED2F47E83}\Microsoft\Microsoft.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Identities\{53E35C27-4735-4E8F-B431-5B8ED2F47E83}\Microsoft\Outlook Express\Outlook Express.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Identities\Identities.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft Help\Microsoft Help.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\CD Burning\CD Burning.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Credentials\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1482476501-920026266-1801674531-1003\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds Cache\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds Cache\[u]0/u0INEPVK\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds Cache\1ILVKDSJ\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds Cache\29R8M69C\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds Cache\LG06HWHT\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds\Feeds.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\HelpCtr\HelpCtr.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Internet Explorer\Internet Explorer.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\LocalMLS.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Media Player\Media Player.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Media Player\Transcoded Files Cache\Transcoded Files Cache.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\eglant_umm@hotmail.com.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\Backgrounds\Backgrounds.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\CustomEmoticons\CustomEmoticons.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\DynamicBackgrounds\DynamicBackgrounds.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\ObjectStore.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\UserTile\UserTile.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\Winks3\Winks3.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\Sharing Folders\Sharing Folders.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\SharingMetadata\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\SharingMetadata\Logs\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\SharingMetadata\Working\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\SharingMetadata\Working\database_1088_D048_88D0_2DCA\database_1088_D048_88D0_2DCA.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\imad_kais@hotmail.com.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\Backgrounds\Backgrounds.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\CustomEmoticons\CustomEmoticons.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\DynamicBackgrounds\DynamicBackgrounds.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\ObjectStore.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\UserTile\UserTile.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\Winks3\Winks3.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\Sharing Folders\Sharing Folders.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\SharingMetadata\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\SharingMetadata\Logs\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\SharingMetadata\Working\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\SharingMetadata\Working\database_1088_D048_88D0_2DCA\database_1088_D048_88D0_2DCA.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\Messenger.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\ObjectStore\Backgrounds\Backgrounds.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\ObjectStore\DynamicBackgrounds\DynamicBackgrounds.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\ObjectStore\ObjectStore.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\ObjectStore\UserTile\UserTile.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\ObjectStore\Winks3\Winks3.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\Sharing Folders\Sharing Folders.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\SharingMetadata\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\SharingMetadata\Logs\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\SharingMetadata\Working\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\SharingMetadata\Working\database_1088_D048_88D0_2DCA\database_1088_D048_88D0_2DCA.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\toubi.1992@live.fr.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Office\12.0\12.0.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Office\Office.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Portable Devices\Portable Devices.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\eglant_umm@hotmail.com\eglant_umm@hotmail.com.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\eglant_umm@hotmail.com\real\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\eglant_umm@hotmail.com\shadow\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\imad_kais@hotmail.com\imad_kais@hotmail.com.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\imad_kais@hotmail.com\real\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\imad_kais@hotmail.com\shadow\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\milou_hm@hotmail.com\milou_hm@hotmail.com.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\milou_hm@hotmail.com\real\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\toubi.1992@.live\real\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\toubi.1992@.live\toubi.1992@.live.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\toubi.1992@live.fr\real\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\toubi.1992@live.fr\shadow\.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\toubi.1992@live.fr\toubi.1992@live.fr.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\Windows Live Contacts.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live\SqmApi\SqmApi.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live\Windows Live.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Media\11.0\11.0.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Media\Windows Media.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows\Windows.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\The Weather Channel\Framework\Framework.exe
                  c:\documents and settings\IMAD\Local Settings\Application Data\The Weather Channel\The Weather Channel.exe
                  c:\documents and settings\IMAD\Local Settings\Apps\2.0\2.0.exe
                  c:\documents and settings\IMAD\Local Settings\Apps\2.0\782OHZ30.XW4\782OHZ30.XW4.exe
                  c:\documents and settings\IMAD\Local Settings\Apps\2.0\782OHZ30.XW4\NXEMDN4C.BX4\manifests\manifests.exe
                  c:\documents and settings\IMAD\Local Settings\Apps\2.0\782OHZ30.XW4\NXEMDN4C.BX4\NXEMDN4C.BX4.exe
                  c:\documents and settings\IMAD\Local Settings\Apps\Apps.exe
                  c:\documents and settings\IMAD\Local Settings\Historique\.exe
                  1. --3- troisième :
                    D\Application Data\Sammsoft\Sammsoft.exe
                    c:\documents and settings\IMAD\Application Data\SecuROM\SecuROM.exe
                    c:\documents and settings\IMAD\Application Data\SecuROM\UserData\.exe
                    c:\documents and settings\IMAD\Application Data\Skype\Content\Content.exe
                    c:\documents and settings\IMAD\Application Data\Skype\milou_hm\dyncontent\dyncontent.exe
                    c:\documents and settings\IMAD\Application Data\Skype\milou_hm\httpfe\httpfe.exe
                    c:\documents and settings\IMAD\Application Data\Skype\milou_hm\milou_hm.exe
                    c:\documents and settings\IMAD\Application Data\Skype\milou_hm\voicemail\voicemail.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\[u]0/u7\[u]0/u7.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\17\17.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\27\27.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\2a\2a.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\32\32.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\39\39.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\3b\3b.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\3e\3e.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\4e\4e.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\60\60.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\61\61.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\64\64.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\68\68.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\6d\6d.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\79\79.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\9c\9c.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\a0\a0.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\b5\b5.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\b9\b9.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\c7\c7.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\chatsync.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\d2\d2.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\e8\e8.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\dyncontent\dyncontent.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\httpfe\httpfe.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\nadine-douce.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\voicemail\voicemail.exe
                    c:\documents and settings\IMAD\Application Data\Skype\Pictures\Pictures.exe
                    c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\15\15.exe
                    c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\1a\1a.exe
                    c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\62\62.exe
                    c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\7b\7b.exe
                    c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\chatsync.exe
                    c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\e8\e8.exe
                    c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\dyncontent\dyncontent.exe
                    c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\httpfe\httpfe.exe
                    c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\rahma.wafa1.exe
                    c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\voicemail\voicemail.exe
                    c:\documents and settings\IMAD\Application Data\Skype\Skype.exe
                    c:\documents and settings\IMAD\Application Data\Skype\toubitoubi\toubitoubi.exe
                    c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\chatsync\34\34.exe
                    c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\chatsync\77\77.exe
                    c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\chatsync\9d\9d.exe
                    c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\chatsync\b8\b8.exe
                    c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\chatsync\chatsync.exe
                    c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\dyncontent\dyncontent.exe
                    c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\httpfe\httpfe.exe
                    c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\toubitoubi7.exe
                    c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\voicemail\voicemail.exe
                    c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\chatsync\1a\1a.exe
                    c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\chatsync\97\97.exe
                    c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\chatsync\af\af.exe
                    c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\chatsync\chatsync.exe
                    c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\dyncontent\dyncontent.exe
                    c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\httpfe\httpfe.exe
                    c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\voicemail\voicemail.exe
                    c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\zino_albi06.exe
                    c:\documents and settings\IMAD\Application Data\skypePM\skypePM.exe
                    c:\documents and settings\IMAD\Application Data\SolwaySoftware\SolwaySoftware.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\[u]0/u\[u]0/u.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\1\1.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\10\10.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\11\11.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\12\12.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\13\13.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\14\14.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\15\15.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\15\4e09eacf-46b51e4f-n\4e09eacf-46b51e4f-n.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\16\16.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\17\17.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\18\18.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\19\19.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\2\2.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\20\20.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\21\21.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\22\22.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\23\23.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\24\24.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\25\25.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\26\26.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\27\27.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\28\28.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\29\29.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\3\3.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\30\30.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\31\31.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\32\32.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\33\258cea61-4647c794-n\258cea61-4647c794-n.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\33\33.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\34\34.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\35\35.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\36\36.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\37\37.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\38\38.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\39\39.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\4\4.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\40\40.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\41\41.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\42\42.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\43\43.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\44\44.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\45\45.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\45\4f710eed-601542d3-n\4f710eed-601542d3-n.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\46\46.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\47\47.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\48\48.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\49\49.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\5\5.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\50\50.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\50\5b902232-55694a9f-n\5b902232-55694a9f-n.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\51\51.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\52\52.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\53\53.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\54\54.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\55\55.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\56\56.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\57\57.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\58\58.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\59\59.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\6.0.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\6\6.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\60\60.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\61\61.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\62\62.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-329123bb-n\6baea4fe-329123bb-n.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\63\63.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\7\7.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\8\8.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\9\9.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\host\host.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\muffin\muffin.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\tmp\tmp.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\cache.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\Deployment.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\ext\ext.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\log\log.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\security\security.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Java.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\jre1.6.0_13\jre1.6.0_13.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Sun.exe
                    c:\documents and settings\IMAD\Application Data\URSoft\URSoft.exe
                    c:\documents and settings\IMAD\Application Data\URSoft\Your Uninstaller 2008\Your Uninstaller 2008.exe
                    c:\documents and settings\IMAD\Application Data\vlc\vlc.exe
                    c:\documents and settings\IMAD\Application Data\WinRAR\WinRAR.exe
                    c:\documents and settings\IMAD\Application Data\Yahoo!\Companion\Buttons\Buttons.exe
                    c:\documents and settings\IMAD\Application Data\Yahoo!\Companion\Companion.exe
                    c:\documents and settings\IMAD\Application Data\Yahoo!\Yahoo!.exe
                    c:\documents and settings\IMAD\Contacts\Contacts.exe
                    c:\documents and settings\IMAD\Contacts\eglant_umm@hotmail.com\.exe
                    c:\documents and settings\IMAD\Contacts\imad_kais@hotmail.com\.exe
                    c:\documents and settings\IMAD\Contacts\milou_hm@hotmail.com\.exe
                    c:\documents and settings\IMAD\Contacts\toubi.1992@.live\.exe
                    c:\documents and settings\IMAD\Contacts\toubi.1992@live.fr\.exe
                    c:\documents and settings\IMAD\InstallAnywhere\.exe
                    c:\documents and settings\IMAD\Local Settings\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Acrobat\9.0\9.0.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Acrobat\9.0\Cache\Cache.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Acrobat\9.0\Cache\Search\Search.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Acrobat\9.0\Updater\Updater.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Acrobat\Acrobat.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Adobe.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Color\Color.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\ESD\ESD.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\crl\crl.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\Data\Data.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\Install\AdobeUpdater\AdobeUpdater.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\Install\Install.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\Install\reader9rdr-fr_FR\reader9rdr-fr_FR.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\Updater6.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Help\Help.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Identities\{53E35C27-4735-4E8F-B431-5B8ED2F47E83}\{53E35C27-4735-4E8F-B431-5B8ED2F47E83}.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Identities\{53E35C27-4735-4E8F-B431-5B8ED2F47E83}\Microsoft\Microsoft.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Identities\{53E35C27-4735-4E8F-B431-5B8ED2F47E83}\Microsoft\Outlook Express\Outlook Express.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Identities\Identities.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft Help\Microsoft Help.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\CD Burning\CD Burning.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Credentials\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1482476501-920026266-1801674531-1003\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds Cache\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds Cache\[u]0/u0INEPVK\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds Cache\1ILVKDSJ\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds Cache\29R8M69C\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds Cache\LG06HWHT\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds\Feeds.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\HelpCtr\HelpCtr.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Internet Explorer\Internet Explorer.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\LocalMLS.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Media Player\Media Player.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Media Player\Transcoded Files Cache\Transcoded Files Cache.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\eglant_umm@hotmail.com.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\Backgrounds\Backgrounds.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\CustomEmoticons\CustomEmoticons.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\DynamicBackgrounds\DynamicBackgrounds.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\ObjectStore.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\UserTile\UserTile.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\Winks3\Winks3.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\Sharing Folders\Sharing Folders.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\SharingMetadata\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\SharingMetadata\Logs\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\SharingMetadata\Working\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\SharingMetadata\Working\database_1088_D048_88D0_2DCA\database_1088_D048_88D0_2DCA.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\imad_kais@hotmail.com.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\Backgrounds\Backgrounds.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\CustomEmoticons\CustomEmoticons.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\DynamicBackgrounds\DynamicBackgrounds.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\ObjectStore.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\UserTile\UserTile.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\Winks3\Winks3.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\Sharing Folders\Sharing Folders.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\SharingMetadata\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\SharingMetadata\Logs\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\SharingMetadata\Working\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\SharingMetadata\Working\database_1088_D048_88D0_2DCA\database_1088_D048_88D0_2DCA.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\Messenger.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\ObjectStore\Backgrounds\Backgrounds.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\ObjectStore\DynamicBackgrounds\DynamicBackgrounds.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\ObjectStore\ObjectStore.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\ObjectStore\UserTile\UserTile.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\ObjectStore\Winks3\Winks3.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\Sharing Folders\Sharing Folders.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\SharingMetadata\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\SharingMetadata\Logs\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\SharingMetadata\Working\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\SharingMetadata\Working\database_1088_D048_88D0_2DCA\database_1088_D048_88D0_2DCA.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\toubi.1992@live.fr.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Office\12.0\12.0.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Office\Office.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Portable Devices\Portable Devices.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\eglant_umm@hotmail.com\eglant_umm@hotmail.com.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\eglant_umm@hotmail.com\real\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\eglant_umm@hotmail.com\shadow\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\imad_kais@hotmail.com\imad_kais@hotmail.com.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\imad_kais@hotmail.com\real\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\imad_kais@hotmail.com\shadow\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\milou_hm@hotmail.com\milou_hm@hotmail.com.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\milou_hm@hotmail.com\real\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\toubi.1992@.live\real\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\toubi.1992@.live\toubi.1992@.live.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\toubi.1992@live.fr\real\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\toubi.1992@live.fr\shadow\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\toubi.1992@live.fr\toubi.1992@live.fr.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\Windows Live Contacts.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live\SqmApi\SqmApi.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live\Windows Live.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Media\11.0\11.0.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Media\Windows Media.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows\Windows.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\The Weather Channel\Framework\Framework.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\The Weather Channel\The Weather Channel.exe
                    c:\documents and settings\IMAD\Local Settings\Apps\2.0\2.0.exe
                    c:\documents and settings\IMAD\Local Settings\Apps\2.0\782OHZ30.XW4\782OHZ30.XW4.exe
                    c:\documents and settings\IMAD\Local Settings\Apps\2.0\782OHZ30.XW4\NXEMDN4C.BX4\manifests\manifests.exe
                    c:\documents and settings\IMAD\Local Settings\Apps\2.0\782OHZ30.XW4\NXEMDN4C.BX4\NXEMDN4C.BX4.exe
                    c:\documents and settings\IMAD\Local Settings\Apps\Apps.exe
                    c:\documents and settings\IMAD\Local Settings\Historique\.exe
                    c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\.exe
                    c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012008022020080221\.exe
                    c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012008022120080222\.exe
                    c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012008052120080522\.exe
                    c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012009052020090521\.exe
                    c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012009052120090522\.exe
                    c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012009052220090523\.exe
                    c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012009052320090524\.exe
                    c:\documents and settings\IMAD\Mes documents\Downloads\Compressed\Compressed.exe
                    c:\documents and settings\IMAD\Mes documents\Downloads\Documents\Documents.exe
                    c:\documents and settings\IMAD\Mes documents\Downloads\Downloads.exe
                    c:\documents and settings\IMAD\Mes documents\Downloads\Music\Music.exe
                    c:\documents and settings\IMAD\Mes documents\Downloads\Programs\Programs.exe
                    c:\documents and settings\IMAD\Mes documents\Downloads\Video\Video.exe
                    c:\documents and settings\IMAD\Mes documents\Ma musique\Ma musique.exe
                    c:\documents and settings\IMAD\Mes documents\Mes documents.exe
                    c:\documents and settings\IMAD\Mes documents\Mes images\Mes images.exe
                    1. --2 -deuxième partie du rapport :
                      c:\documents and settings\All Users\Application Data\Microsoft\User Account Pictures\Default Pictures\Default Pictures.exe
                      c:\documents and settings\All Users\Application Data\Microsoft\User Account Pictures\User Account Pictures.exe
                      c:\documents and settings\All Users\Application Data\Microsoft\WLSetup\Logs\Logs.exe
                      c:\documents and settings\All Users\Application Data\Microsoft\WLSetup\WLSetup.exe
                      c:\documents and settings\All Users\Application Data\Skype\{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}\{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}.exe
                      c:\documents and settings\All Users\Application Data\Skype\Pictures\Pictures.exe
                      c:\documents and settings\All Users\Application Data\Skype\Plugins\Local Cache\Categories\Categories.exe
                      c:\documents and settings\All Users\Application Data\Skype\Plugins\Local Cache\Local Cache.exe
                      c:\documents and settings\All Users\Application Data\Skype\Plugins\Plugins.exe
                      c:\documents and settings\All Users\Application Data\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\F57B48ADF2224F088EDD1A2B9BAD84E8.exe
                      c:\documents and settings\All Users\Application Data\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\Games.exe
                      c:\documents and settings\All Users\Application Data\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Local Cache\Local Cache.exe
                      c:\documents and settings\All Users\Application Data\Skype\Plugins\Plugins\Plugins.exe
                      c:\documents and settings\All Users\Application Data\Skype\Skype.exe
                      c:\documents and settings\All Users\Application Data\Skype\Wallpapers\Wallpapers.exe
                      c:\documents and settings\All Users\Application Data\TEMP\TEMP.exe
                      c:\documents and settings\All Users\Application Data\Windows Genuine Advantage\Data\Data.exe
                      c:\documents and settings\All Users\Application Data\Windows Genuine Advantage\Windows Genuine Advantage.exe
                      c:\documents and settings\All Users\Application Data\Yahoo!\Yahoo!.exe
                      c:\documents and settings\All Users\Documents\Documents.exe
                      c:\documents and settings\All Users\Documents\Ma musique\Ma musique.exe
                      c:\documents and settings\All Users\Documents\Ma musique\Playlists\Playlists.exe
                      c:\documents and settings\All Users\Documents\Ma musique\Sample Playlists\[u]0/u00DE782\[u]0/u00DE782.exe
                      c:\documents and settings\All Users\Documents\Ma musique\Sample Playlists\Sample Playlists.exe
                      c:\documents and settings\All Users\Documents\Ma musique\Sync Playlists\Sync Playlists.exe
                      c:\documents and settings\All Users\Documents\Mes images\IMAGE\IMAGE.exe
                      c:\documents and settings\All Users\Documents\Mes images\Mes images.exe
                      c:\documents and settings\All Users\Documents\Nouveau dossier\Nouveau dossier.exe
                      c:\documents and settings\All Users\DRM\.exe
                      c:\documents and settings\Default User\.exe
                      c:\documents and settings\Default User\Application Data\.exe
                      c:\documents and settings\Default User\Application Data\Microsoft\.exe
                      c:\documents and settings\Default User\Application Data\Microsoft\Media Player\Media Player.exe
                      c:\documents and settings\Default User\Application Data\Microsoft\SystemCertificates\.exe
                      c:\documents and settings\Default User\Application Data\Microsoft\SystemCertificates\My\.exe
                      c:\documents and settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\.exe
                      c:\documents and settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\.exe
                      c:\documents and settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\.exe
                      c:\documents and settings\Default User\Bureau\Bureau.exe
                      c:\documents and settings\Default User\Cookies\.exe
                      c:\documents and settings\Default User\Favoris\Favoris.exe
                      c:\documents and settings\Default User\Local Settings\.exe
                      c:\documents and settings\Default User\Local Settings\Application Data\.exe
                      c:\documents and settings\Default User\Local Settings\Application Data\Microsoft\.exe
                      c:\documents and settings\Default User\Local Settings\Application Data\Microsoft\Internet Explorer\Internet Explorer.exe
                      c:\documents and settings\Default User\Local Settings\Application Data\Microsoft\Media Player\Media Player.exe
                      c:\documents and settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\11.0\11.0.exe
                      c:\documents and settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\Windows Media.exe
                      c:\documents and settings\Default User\Local Settings\Historique\.exe
                      c:\documents and settings\Default User\Local Settings\Historique\History.IE5\.exe
                      c:\documents and settings\Default User\Local Settings\Temp\Temp.exe
                      c:\documents and settings\Default User\Local Settings\Temporary Internet Files\.exe
                      c:\documents and settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\.exe
                      c:\documents and settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\9B5SW32J\.exe
                      c:\documents and settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\AU5JND7L\.exe
                      c:\documents and settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\B2WY1TR6\.exe
                      c:\documents and settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\S6FIYPCO\.exe
                      c:\documents and settings\Default User\Mes documents\Mes documents.exe
                      c:\documents and settings\Default User\Recent\.exe
                      c:\documents and settings\Default User\SendTo\.exe
                      c:\documents and settings\Documents and Settings.exe
                      c:\documents and settings\IMAD\Application Data\.exe
                      c:\documents and settings\IMAD\Application Data\Adobe\Acrobat\9.0\9.0.exe
                      c:\documents and settings\IMAD\Application Data\Adobe\Acrobat\9.0\Collab\Collab.exe
                      c:\documents and settings\IMAD\Application Data\Adobe\Acrobat\9.0\Forms\Forms.exe
                      c:\documents and settings\IMAD\Application Data\Adobe\Acrobat\9.0\JavaScripts\JavaScripts.exe
                      c:\documents and settings\IMAD\Application Data\Adobe\Acrobat\9.0\Preferences\Preferences.exe
                      c:\documents and settings\IMAD\Application Data\Adobe\Acrobat\9.0\Preferences\Redaction\FRA\FRA.exe
                      c:\documents and settings\IMAD\Application Data\Adobe\Acrobat\9.0\Preferences\Redaction\Redaction.exe
                      c:\documents and settings\IMAD\Application Data\Adobe\Acrobat\Acrobat.exe
                      c:\documents and settings\IMAD\Application Data\Adobe\Adobe.exe
                      c:\documents and settings\IMAD\Application Data\Adobe\Flash Player\AssetCache\AssetCache.exe
                      c:\documents and settings\IMAD\Application Data\Adobe\Flash Player\AssetCache\NKQYKY6N\NKQYKY6N.exe
                      c:\documents and settings\IMAD\Application Data\Adobe\Flash Player\Flash Player.exe
                      c:\documents and settings\IMAD\Application Data\DivX\DivX Codec\DivX Codec.exe
                      c:\documents and settings\IMAD\Application Data\DivX\DivX.exe
                      c:\documents and settings\IMAD\Application Data\DMCache\DMCache.exe
                      c:\documents and settings\IMAD\Application Data\dvdcss\-0000000000000000-0000000000\-0000000000000000-0000000000.exe
                      c:\documents and settings\IMAD\Application Data\dvdcss\dvdcss.exe
                      c:\documents and settings\IMAD\Application Data\Identities\{53E35C27-4735-4E8F-B431-5B8ED2F47E83}\{53E35C27-4735-4E8F-B431-5B8ED2F47E83}.exe
                      c:\documents and settings\IMAD\Application Data\Identities\Identities.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\DwnlData.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\-5Bfxm-5D-Nyl-bahia_2_197\-5Bfxm-5D-Nyl-bahia_2_197.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\[u]0/u0600045_90\[u]0/u0600045_90.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\[u]0/u12508ar_111\[u]0/u12508ar_111.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\[u]0/u5P21_114\[u]0/u5P21_114.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\[u]0/u5P25_116\[u]0/u5P25_116.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\1-MSS-Fiches-radio_174\1-MSS-Fiches-radio_174.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\1_142\1_142.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\1_206\1_206.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\10021993_168\10021993_168.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\1208095251466709_88\1208095251466709_88.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\1468847_169\1468847_169.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\1468847_170\1468847_170.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\2002-083e_74\2002-083e_74.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\2004EIAA0136_98\2004EIAA0136_98.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-142320-edfda3d5_21\20090520-142320-edfda3d5_21.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-142326-43c3126d_22\20090520-142326-43c3126d_22.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-142634-e231e636_23\20090520-142634-e231e636_23.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-142653-cfac7824_24\20090520-142653-cfac7824_24.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-142944-47a5c1c3_28\20090520-142944-47a5c1c3_28.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-144058-8b0121bd_38\20090520-144058-8b0121bd_38.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-145030-f97a407d_39\20090520-145030-f97a407d_39.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-150321-ce79b54_42\20090520-150321-ce79b54_42.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-150321-ce79b54_43\20090520-150321-ce79b54_43.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-151004-3437843f_45\20090520-151004-3437843f_45.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-151004-a684581f_44\20090520-151004-a684581f_44.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-151216-792eaf0_46\20090520-151216-792eaf0_46.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-151612-dd360306_47\20090520-151612-dd360306_47.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-180859-9ef0a405_102\20090520-180859-9ef0a405_102.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-180925-e38c2fc7_103\20090520-180925-e38c2fc7_103.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-181056-fd0db487_104\20090520-181056-fd0db487_104.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-181632-1344f7c0_108\20090520-181632-1344f7c0_108.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\21-004-XIF2006001_76\21-004-XIF2006001_76.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\21052009_129\21052009_129.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\23052009_203\23052009_203.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\2700_65\2700_65.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\5_110\5_110.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\858_Bernard_152\858_Bernard_152.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\93_167\93_167.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\97_165\97_165.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\9p-com6_55\9p-com6_55.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\9p-pos6_79\9p-pos6_79.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\a1249e_100\a1249e_100.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\A17_112\A17_112.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\abi_133\abi_133.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Abstract_3-1_52\Abstract_3-1_52.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Actes_SAR_GP3A_Tunis_2006-jv08_153\Actes_SAR_GP3A_Tunis_2006-jv08_153.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Actes_SAR_GP3A_Tunis_2006-jv08_97\Actes_SAR_GP3A_Tunis_2006-jv08_97.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\AROTrial_bd_194\AROTrial_bd_194.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\AROTrial_bd_198\AROTrial_bd_198.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Art11-4_5_86\Art11-4_5_86.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Art11-4_5_95\Art11-4_5_95.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Art11-4_5_96\Art11-4_5_96.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Art4-1_5_63\Art4-1_5_63.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\B_Tech_13_64\B_Tech_13_64.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\B_Tech_26_91\B_Tech_26_91.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\B_Tech_4_72\B_Tech_4_72.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\c0339abstract_73\c0339abstract_73.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\catalogue_masters_2005-2008_164\catalogue_masters_2005-2008_164.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\centre-20biotechn-202007_117\centre-20biotechn-202007_117.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Chateaubriand-20--20M-C3-A9moi_210\Chateaubriand-20--20M-C3-A9moi_210.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\CI011066_113\CI011066_113.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\ComboFix_48\ComboFix_48.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Contrat_social_208\Contrat_social_208.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\csu_dry_vegetables_136\csu_dry_vegetables_136.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\ctcpa_confiture_fabrication_in_61\ctcpa_confiture_fabrication_in_61.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\ctcpa_confiture_fabrication_in_94\ctcpa_confiture_fabrication_in_94.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\descartes_methode_209\descartes_methode_209.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\deshydra-20osmotique_51\deshydra-20osmotique_51.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\deshydratation_77\deshydratation_77.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\DFX2BETA_1736_9\DFX2BETA_1736_9.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\digsby_setup_193\digsby_setup_193.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\edition_126\edition_126.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Enhs25f_56\Enhs25f_56.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\ESCoFetL-Chapitre2-OK_143\ESCoFetL-Chapitre2-OK_143.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\F3000_Schage_des_produits_alim_25\F3000_Schage_des_produits_alim_25.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Fiche-20Chips_60\Fiche-20Chips_60.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\FLYER_Mediterra_2007_162\FLYER_Mediterra_2007_162.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\fullxmovies_1\fullxmovies_1.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\ia00p063_140\ia00p063_140.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\ia00p067_139\ia00p067_139.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\ia00p522_137\ia00p522_137.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\ia00p522_138\ia00p522_138.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\ika_rct_basic_173\ika_rct_basic_173.exe
                      c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\IMAD.exe
                      1. Première partie du rapport :

                        AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
                        .

                        (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                        .

                        c:\documents and settings\All Users\Application Data\Microsoft\Dr Watson\Dr Watson.exe
                        c:\documents and settings\All Users\Favoris\Favoris.exe
                        c:\documents and settings\IMAD\Cookies\.exe
                        c:\documents and settings\IMAD\Favoris\Favoris.exe
                        c:\documents and settings\IMAD\Favoris\Liens\Liens.exe
                        c:\documents and settings\IMAD\Favoris\Sites Web Microsoft\Sites Web Microsoft.exe
                        c:\documents and settings\IMAD\IMAD.exe
                        c:\documents and settings\LocalService\Cookies\.exe
                        c:\documents and settings\LocalService\Local Settings\Temporary Internet Files\.exe
                        c:\documents and settings\NetworkService\Cookies\.exe
                        c:\documents and settings\NetworkService\Local Settings\Temporary Internet Files\.exe
                        C:\host232.exe
                        c:\windows\system\system.exe
                        c:\windows\system32\issat.exe
                        c:\windows\system32\restore\restore.exe
                        c:\windows\system32\system32.exe
                        c:\windows\Tasks\.exe
                        c:\windows\windows.exe
                        D:\host232.exe
                        E:\host232.exe

                        ----- Cloneurs de fichier -----

                        c:\documents and settings\All Users\All Users.exe
                        c:\documents and settings\All Users\Application Data\.exe
                        c:\documents and settings\All Users\Application Data\Adobe\Acrobat\9.0\9.0.exe
                        c:\documents and settings\All Users\Application Data\Adobe\Acrobat\9.0\Replicate\Replicate.exe
                        c:\documents and settings\All Users\Application Data\Adobe\Acrobat\9.0\Replicate\Security\Security.exe
                        c:\documents and settings\All Users\Application Data\Adobe\Acrobat\Acrobat.exe
                        c:\documents and settings\All Users\Application Data\Adobe\Adobe.exe
                        c:\documents and settings\All Users\Application Data\Adobe\Updater6\Updater6.exe
                        c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\AntiVir PersonalEdition Classic.exe
                        c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\BACKUP\BACKUP.exe
                        c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\EVENTDB\EVENTDB.exe
                        c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\EVENTS\EVENTS.exe
                        c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\FAILSAVE\FAILSAVE.exe
                        c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\IDX\IDX.exe
                        c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\INFECTED\INFECTED.exe
                        c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\JOBS\JOBS.exe
                        c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\LOGFILES\LOGFILES.exe
                        c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\PROFILES\PROFILES.exe
                        c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\REPORTS\REPORTS.exe
                        c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\SYSSAFE\SYSSAFE.exe
                        c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\TEMP\AVCENTER_4834552e\AVCENTER_4834552e.exe
                        c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\TEMP\TEMP.exe
                        c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\UPDATE\AVUPDATE_48345537\AVUPDATE_48345537.exe
                        c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\UPDATE\AVUPDATE_48345537\idx\idx.exe
                        c:\documents and settings\All Users\Application Data\Avira\Avira.exe
                        c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes.exe
                        c:\documents and settings\All Users\Application Data\Microsoft Help\Microsoft Help.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\Crypto\.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\Crypto\DSS\.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\Crypto\DSS\MachineKeys\.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\Crypto\RSA\.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\Crypto\RSA\S-1-5-18\.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\Encarta Reference Library\2009\2009.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\Encarta Reference Library\2009\F\F.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\Encarta Reference Library\2009\F\Updates\Updates.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\Encarta Reference Library\Encarta Reference Library.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\HTML Help\HTML Help.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\IdentityCRL.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\production.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\Media Index\Media Index.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\Media Player\Media Player.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\MSDAIPP\MSDAIPP.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\MSDAIPP\OFFLINE\OFFLINE.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\Network\Connections\Cm\Cm.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\Network\Connections\Connections.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\Network\Connections\Pbk\Pbk.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\Downloader.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\Network\Network.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\OFFICE\DATA\DATA.exe
                        c:\documents and settings\All Users\Application Data\Microsoft\OFFICE\OFFICE.exe
                        1. bonsoir et désolé pour le retard ,j'ai suivi vos indication et j'ai scané mon PC avec ce logiciel mais la rapport a été telement long que j'ai pas pu le copier içi ,j'ai essayer plusieurs fois sans succès .
                          1. Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe

                            -> Double clique sur combofix.exe.
                            -> Tape sur la touche 1 (Yes) pour démarrer le scan.
                            -> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

                            NOTE : Le rapport se trouve également ici : C:\Combofix.txt

                            Avant d'utiliser ComboFix :

                            -> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

                            -> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil.

                            Une fois fait, sur ton bureau double-clic sur Combofix.exe.

                            - Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

                            /!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

                            - En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

                            - Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

                            -> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

                            -> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.
                            1. telecharge le ici : http://www.malwarebytes.org/mbam/program/mbam-setup.exe
                              1. Bonsoir, j’ai exécuté le l’Anti-malware et voici ce que j’ai obtenu :
                                Malwarebytes' Anti-Malware 1.36
                                Version de la base de données: 2169
                                Windows 5.1.2600 Service Pack 3

                                23/05/2009 23:32:19
                                mbam-log-2009-05-23 (23-32-19).txt

                                Type de recherche: Examen rapide
                                Eléments examinés: 79442
                                Temps écoulé: 5 minute(s), 52 second(s)

                                Processus mémoire infecté(s): 0
                                Module(s) mémoire infecté(s): 0
                                Clé(s) du Registre infectée(s): 0
                                Valeur(s) du Registre infectée(s): 0
                                Elément(s) de données du Registre infecté(s): 0
                                Dossier(s) infecté(s): 0
                                Fichier(s) infecté(s): 13

                                Processus mémoire infecté(s):
                                (Aucun élément nuisible détecté)

                                Module(s) mémoire infecté(s):
                                (Aucun élément nuisible détecté)

                                Clé(s) du Registre infectée(s):
                                (Aucun élément nuisible détecté)

                                Valeur(s) du Registre infectée(s):
                                (Aucun élément nuisible détecté)

                                Elément(s) de données du Registre infecté(s):
                                (Aucun élément nuisible détecté)

                                Dossier(s) infecté(s):
                                (Aucun élément nuisible détecté)

                                Fichier(s) infecté(s):
                                C:\WINDOWS\WINDOWS.exe (Trojan.Agent) -> Quarantined and deleted successfully.
                                C:\Documents and Settings\LocalService\Application Data\Application Data.exe (Trojan.Lop.H) -> Quarantined and deleted successfully.
                                C:\Documents and Settings\NetworkService\Application Data\Application Data.exe (Trojan.Lop.H) -> Quarantined and deleted successfully.
                                C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\.exe (Trojan.Agent) -> Quarantined and deleted successfully.
                                C:\Documents and Settings\IMAD\Local Settings\Temporary Internet Files\.exe (Trojan.Agent) -> Quarantined and deleted successfully.
                                C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\.exe (Trojan.Agent) -> Quarantined and deleted successfully.
                                C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\.exe (Trojan.Agent) -> Quarantined and deleted successfully.
                                C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\Dr Watson.exe (Trojan.Agent) -> Quarantined and deleted successfully.
                                C:\WINDOWS\system32\system32.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
                                C:\RECYCLER\.exe (Heuristics.Malware) -> Quarantined and deleted successfully.
                                C:\WINDOWS\Fonts\.exe (Worm.Archive) -> Quarantined and deleted successfully.
                                C:\WINDOWS\system\system.exe (Trojan.Banker) -> Quarantined and deleted successfully.
                                C:\WINDOWS\pchealth\UploadLB\UploadLB.exe (Worm.Archive) -> Quarantined and deleted successfully.
                                Que dois-je faire maintenant ?,et merci pour vos précieux conseils .
                            2. Bonjour et désolé pour tout ce temps que j'ai mis pour répondre parce que ça très dificil pour moi à télécharger ce programe,j'ai visité "https://www.malwarebytes.com/ " mais j'ai trouvé deux logicièl à télécharger l'un "AROTrial_bd (advenced registry optimizer) et l'autre " so&o advenced Registry optimizer ",j'ai les ai télécharger tout les deux mais quand je l'ai instale ils ne se mette pas automatiquement à jour et en plus ils ne présente pas les les caractiristiques que vous m'avez indiquer ci-dessus ! Merci pour votre aide .
                              1. Telecharge malwarebytes
                                https://www.malwarebytes.com/

                                Tu l´instale; le programme va se mettre automatiquement a jour.

                                Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression".

                                Click maintenant sur l´onglet recherche et coche la case : "executer un examen rapide".

                                Puis click sur "rechercher".

                                Laisse le scanner le pc...

                                Si des elements on ete trouvés > click sur supprimer la selection.

                                si il t´es demandé de redemarrer > click sur "yes".

                                A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum.

                                Copie et colle le rapport stp.

                                PS : les rapport sont aussi rangé dans l onglet rapport/log
                                1. 1-:Le premier texte « info » :
                                  info.txt logfile of random's system information tool 1.06 2009-05-22 22:01:00

                                  ======Uninstall list======

                                  -->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
                                  -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
                                  Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
                                  Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
                                  AMD Processor Driver-->C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe -runfromtemp -l0x040c -removeonly
                                  Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
                                  Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
                                  Complément Office 2007 - Microsoft Enregistrer en tant que PDF ou XPS (Beta)-->MsiExec.exe /X{30120000-00B2-040C-0000-0000000FF1CE}
                                  Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
                                  DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
                                  DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
                                  Encyclopaedia Universalis-->"C:\Program Files\Encyclopaedia Universalis\Encyclopaedia Universalis\Uninstall_Encyclopaedia Universalis\Désinstaller Encyclopaedia Universalis 2009.exe"
                                  Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
                                  Internet Download Manager-->C:\Program Files\Internet Download Manager\Uninstall.exe
                                  Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
                                  Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
                                  Microsoft Encarta 2009 - Collection-->MsiExec.exe /I{09180081-2C94-4A67-8E55-8483C019C7D2}
                                  Microsoft Encarta Maths-->MsiExec.exe /I{07183840-959A-4B0D-8825-2C533F0DDB19}
                                  Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
                                  Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
                                  Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
                                  Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
                                  Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
                                  Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
                                  Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
                                  Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
                                  Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
                                  Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
                                  Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
                                  Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
                                  Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
                                  Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
                                  Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
                                  Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
                                  Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
                                  Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
                                  Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
                                  Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
                                  MSXML 6.0 Parser-->MsiExec.exe /I{AEB9948B-4FF2-47C9-990E-47014492A0FE}
                                  My Web Search (Smiley Central)-->rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsbar.dll,O
                                  NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
                                  Oxford Advanced Learner's Dictionary - 7th edition-->"C:\Program Files\Oxford\OALD7\uninstall.exe"
                                  QUICKfind-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{593AFFA4-D08E-4272-BABB-420949D32A10}\Setup.exe" -l0x9
                                  RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
                                  Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c -removeonly
                                  Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
                                  SuperCopier2-->"C:\Program Files\SuperCopier2\SC2Uninst.exe"
                                  Total Video Converter 3.11 070908-->"C:\Program Files\Total Video Converter\unins000.exe"
                                  VLC media player 0.9.6-->C:\Program Files\VideoLAN\VLC\uninstall.exe
                                  WBEncarta-->RunDll32.exe advpack.dll, LaunchINFSectionEx C:\Program Files\Learning Essentials\1.0\fr\FR\WBEncarta\Uninstall\Uninstall.inf,Uninstall,,,N
                                  Windows Live Messenger-->MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}
                                  Windows Live Sign-in Assistant-->MsiExec.exe /I{49672EC2-171B-47B4-8CE7-50D7806360D7}
                                  Your Uninstaller! 2008 Version 6.0-->"C:\Program Files\Your Uninstaller 2008\unins000.exe"

                                  ======Security center information======

                                  AV: Avira AntiVir PersonalEdition Classic

                                  ======System event log======

                                  Computer Name: POSTE06
                                  Event Code: 4377
                                  Message: Le correctif Windows XP KB915865 a été installé.

                                  Record Number: 5
                                  Source Name: NtServicePack
                                  Time Written: 20090518214318.000000+120
                                  Event Type: Informations
                                  User: AUTORITE NT\SYSTEM

                                  Computer Name: POSTE06
                                  Event Code: 15007
                                  Message: La réservation de l'espace de nom identifié par le préfixe d'URL http://*:2869/ a été correctement ajoutée.

                                  Record Number: 4
                                  Source Name: HTTP
                                  Time Written: 20090518214208.000000+120
                                  Event Type: Informations
                                  User:

                                  Computer Name: POSTE06
                                  Event Code: 6011
                                  Message: Le nom NetBIOS et le nom de l'hôte DNS de cet ordinateur ont été modifiés de MACHINENAME vers POSTE06.

                                  Record Number: 3
                                  Source Name: EventLog
                                  Time Written: 20090518213814.000000+120
                                  Event Type: Informations
                                  User:

                                  Computer Name: MACHINENAME
                                  Event Code: 6005
                                  Message: Le service d'Enregistrement d'événement a démarré.

                                  Record Number: 2
                                  Source Name: EventLog
                                  Time Written: 20090518232813.000000+120
                                  Event Type: Informations
                                  User:

                                  Computer Name: MACHINENAME
                                  Event Code: 6009
                                  Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Uniprocessor Free.

                                  Record Number: 1
                                  Source Name: EventLog
                                  Time Written: 20090518232813.000000+120
                                  Event Type: Informations
                                  User:

                                  =====Application event log=====

                                  Computer Name: POSTE06
                                  Event Code: 1000
                                  Message: Les compteurs de performances pour le service MSDTC (MSDTC) ont été chargés.
                                  Les données d'enregistrement contiennent les nouvelles valeurs d'index
                                  assignées à ce service.

                                  Record Number: 5
                                  Source Name: LoadPerf
                                  Time Written: 20090518214001.000000+120
                                  Event Type: Informations
                                  User:

                                  Computer Name: POSTE06
                                  Event Code: 1000
                                  Message: Les compteurs de performances pour le service TermService (Services Terminal Server) ont été chargés.
                                  Les données d'enregistrement contiennent les nouvelles valeurs d'index
                                  assignées à ce service.

                                  Record Number: 4
                                  Source Name: LoadPerf
                                  Time Written: 20090518213958.000000+120
                                  Event Type: Informations
                                  User:

                                  Computer Name: POSTE06
                                  Event Code: 1000
                                  Message: Les compteurs de performances pour le service RemoteAccess (Routage et accès distant) ont été chargés.
                                  Les données d'enregistrement contiennent les nouvelles valeurs d'index
                                  assignées à ce service.

                                  Record Number: 3
                                  Source Name: LoadPerf
                                  Time Written: 20090518213847.000000+120
                                  Event Type: Informations
                                  User:

                                  Computer Name: POSTE06
                                  Event Code: 1000
                                  Message: Les compteurs de performances pour le service PSched (PSched) ont été chargés.
                                  Les données d'enregistrement contiennent les nouvelles valeurs d'index
                                  assignées à ce service.

                                  Record Number: 2
                                  Source Name: LoadPerf
                                  Time Written: 20090518213823.000000+120
                                  Event Type: Informations
                                  User:

                                  Computer Name: POSTE06
                                  Event Code: 1000
                                  Message: Les compteurs de performances pour le service RSVP (QoS RSVP) ont été chargés.
                                  Les données d'enregistrement contiennent les nouvelles valeurs d'index
                                  assignées à ce service.

                                  Record Number: 1
                                  Source Name: LoadPerf
                                  Time Written: 20090518213822.000000+120
                                  Event Type: Informations
                                  User:

                                  ======Environment variables======

                                  "ComSpec"=%SystemRoot%\system32\cmd.exe
                                  "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
                                  "windir"=%SystemRoot%
                                  "FP_NO_HOST_CHECK"=NO
                                  "OS"=Windows_NT
                                  "PROCESSOR_ARCHITECTURE"=x86
                                  "PROCESSOR_LEVEL"=15
                                  "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 95 Stepping 3, AuthenticAMD
                                  "PROCESSOR_REVISION"=5f03
                                  "NUMBER_OF_PROCESSORS"=1
                                  "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
                                  "TEMP"=%SystemRoot%\TEMP
                                  "TMP"=%SystemRoot%\TEMP

                                  -----------------EOF-----------------
                                  2-deuxième texte "log"
                                  Logfile of random's system information tool 1.06 (written by random/random)
                                  Run by IMAD at 2009-05-22 21:58:23
                                  Microsoft Windows XP Professionnel Service Pack 3
                                  System drive C: has 34 GB (69%) free of 50 GB
                                  Total RAM: 894 MB (58% free)

                                  HijackThis download failed

                                  ======Scheduled tasks folder======

                                  C:\WINDOWS\tasks\WGASetup.job

                                  ======Registry dump======

                                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}]
                                  IDMIEHlprObj Class - C:\Program Files\Internet Download Manager\IDMIECC.dll [2008-02-18 99760]

                                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}]
                                  MyWebSearch Search Assistant BHO - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL [2009-05-22 65536]

                                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]

                                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}]
                                  mwsBar BHO - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL [2009-05-22 434271]

                                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
                                  Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

                                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
                                  Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-11-07 1088296]

                                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
                                  RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-05-18 308832]

                                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

                                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
                                  Windows Live Sign-in Helper - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-08-31 322368]

                                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C08DF07A-3E49-4E25-9AB0-D3882835F153}]
                                  QUICKfind BHO Object - C:\PROGRA~1\IDM\QUICKF~1\PlugIns\IEHelp.dll [2003-06-30 337920]

                                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
                                  Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-05-18 35840]

                                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
                                  JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-05-18 73728]

                                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
                                  {07B18EA9-A523-4961-B6BB-170DE4475CCA} - My Web Search - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL [2009-05-22 434271]

                                  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
                                  "PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2008-04-13 455168]
                                  "Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
                                  "avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]
                                  "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
                                  "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-05-18 148888]
                                  "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-12-04 8523776]
                                  "nwiz"=nwiz.exe /install []
                                  "NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-12-04 81920]
                                  "TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-05-18 185872]
                                  "issat"=C:\WINDOWS\system32\issat.exe [2002-01-05 53248]
                                  "SystemInit"= []
                                  "Karen"= []
                                  "raVe"= []
                                  "Win32BaseServiceMOD"= []
                                  "startIE"= []
                                  "MyWebSearch Plugin"=rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL,UPF []
                                  "My Web Search Bar Search Scope Monitor"=C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe [2009-05-22 24688]
                                  "MyWebSearch Email Plugin"=C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe [2009-05-22 32838]

                                  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
                                  "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]
                                  "DriverInstall"=F:\Drivers\QInstall.exe []
                                  "SuperCopier2.exe"=C:\Program Files\SuperCopier2\SuperCopier2.exe [2006-07-07 1052672]
                                  "IDMan"=C:\Program Files\Internet Download Manager\IDMan.exe [2009-05-18 2594224]
                                  "MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-13 1695232]
                                  "msnmsgr"=C:\Program Files\MSN Messenger\msnmsgr.exe [2007-01-19 5674352]
                                  "E09FXLRD_1170125"=C:\Program Files\Microsoft Encarta\Microsoft Encarta 2009 - Collection DVD\EDICT.EXE [2008-05-28 351000]
                                  "MyWebSearch Email Plugin"=C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe [2009-05-22 32838]
                                  "Search Protection"=C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe []

                                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
                                  C:\Program Files\MSN Messenger\MsnMsgr.Exe [2007-01-19 5674352]

                                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A]
                                  C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2008-04-13 455168]

                                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
                                  C:\WINDOWS\RTHDCPL.EXE [2008-03-04 16858112]

                                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
                                  C:\Program Files\Skype\Phone\Skype.exe [2008-11-07 21633320]

                                  C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
                                  Démarrage.exe

                                  C:\Documents and Settings\IMAD\Menu Démarrer\Programmes\Démarrage
                                  Démarrage.exe
                                  Outil de notification Live Search.lnk - C:\Documents and Settings\IMAD\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe

                                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
                                  WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-05-09 133632]
                                  UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-13 240128]

                                  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

                                  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSEXESVC]

                                  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

                                  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PSEXESVC]

                                  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

                                  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
                                  "NoDispAppearancePage"=0
                                  "NoDispScrSavPage"=0
                                  "NoDispSettingsPage"=0
                                  "NoConfigPage"=0
                                  "NoDevMgrPage"=0
                                  "NoFileSysPage"=0
                                  "NoVirtMemPage"=0
                                  "DisableChangePassword"=0
                                  "NoFolderOptions"=0
                                  "DisableTaskMgr"=0

                                  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
                                  "NoClose"=0
                                  "NoFind"=0
                                  "NoRun"=0
                                  "NoDesktop"=0
                                  "NoDrives"=0

                                  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
                                  "NoDesktop"=

                                  [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
                                  "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
                                  "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
                                  "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
                                  "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
                                  "C:\Program Files\Encyclopaedia Universalis\Encyclopaedia Universalis\starter.exe"="C:\Program Files\Encyclopaedia Universalis\Encyclopaedia Universalis\starter.exe:*:Enabled:starter"
                                  "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

                                  [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
                                  "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
                                  "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
                                  "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
                                  "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

                                  [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6c85ea20-2752-11dd-a5e6-0018370a9689}]
                                  shell\AutoRun\command - G:\host232.exe
                                  shell\explore\command - G:\host232.exe
                                  shell\open\command - G:\host232.exe

                                  [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b5f43f12-e08b-11dc-a5e5-0018370a9689}]
                                  shell\AutoRun\command - G:\host232.exe
                                  shell\explore\command - G:\host232.exe
                                  shell\open\command - G:\host232.exe

                                  [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b5f43f16-e08b-11dc-a5e5-0018370a9689}]
                                  shell\AutoRun\command - G:\host232.exe
                                  shell\explore\command - G:\host232.exe
                                  shell\open\command - G:\host232.exe

                                  ======File associations======

                                  .reg - open - regedit.exe %1
                                  .scr - open - "%1" %*
                                  .txt - open - NOTEPAD %1
                                  .vbs - edit - C:\WINDOWS\Notepad.exe %1

                                  ======List of files/folders created in the last 1 months======

                                  2009-05-22 21:58:24 ----D---- C:\Program Files\trend micro
                                  2009-05-22 21:58:23 ----D---- C:\rsit
                                  2009-05-22 21:34:06 ----D---- C:\Documents and Settings\IMAD\Application Data\URSoft
                                  2009-05-22 21:34:03 ----D---- C:\Program Files\Your Uninstaller 2008
                                  2009-05-22 21:22:48 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo!
                                  2009-05-22 21:22:38 ----D---- C:\Documents and Settings\IMAD\Application Data\Yahoo!
                                  2009-05-22 21:22:37 ----D---- C:\Program Files\Yahoo!
                                  2009-05-22 21:13:29 ----D---- C:\WINDOWS\LastGood
                                  2009-05-22 20:37:23 ----D---- C:\Program Files\MyWebSearch
                                  2009-05-22 20:29:45 ----D---- C:\Program Files\FunWebProducts
                                  2009-05-22 00:31:18 ----D---- C:\WINDOWS\system32\KB905474
                                  2009-05-21 19:47:19 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
                                  2009-05-21 19:46:54 ----A---- C:\WINDOWS\system32\wmpns.dll
                                  2009-05-21 19:46:49 ----HDC---- C:\WINDOWS\$NtUninstallKB959772_WM11$
                                  2009-05-21 19:46:43 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
                                  2009-05-21 16:35:57 ----D---- C:\WINDOWS\Sun
                                  2009-05-21 11:57:03 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
                                  2009-05-21 11:56:58 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
                                  2009-05-21 11:56:54 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
                                  2009-05-21 11:56:50 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
                                  2009-05-21 11:56:45 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
                                  2009-05-21 11:56:42 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
                                  2009-05-21 11:56:37 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
                                  2009-05-21 11:56:31 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
                                  2009-05-21 11:56:27 ----D---- C:\WINDOWS\ie7updates
                                  2009-05-21 11:56:22 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
                                  2009-05-21 11:56:14 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
                                  2009-05-21 11:56:08 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
                                  2009-05-21 11:56:03 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
                                  2009-05-21 11:55:59 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
                                  2009-05-21 11:55:52 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
                                  2009-05-21 11:55:48 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
                                  2009-05-21 11:55:44 ----HDC---- C:\WINDOWS\$NtUninstallKB960715$
                                  2009-05-21 11:55:40 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
                                  2009-05-21 11:55:36 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
                                  2009-05-21 11:55:29 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
                                  2009-05-21 11:55:24 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
                                  2009-05-21 11:55:11 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
                                  2009-05-21 11:55:07 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
                                  2009-05-21 11:55:03 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$
                                  2009-05-21 11:54:59 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
                                  2009-05-21 11:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
                                  2009-05-21 11:54:49 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
                                  2009-05-21 11:54:45 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
                                  2009-05-21 11:54:41 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
                                  2009-05-21 11:54:37 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
                                  2009-05-21 11:53:28 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
                                  2009-05-21 11:53:25 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
                                  2009-05-21 11:53:19 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
                                  2009-05-21 03:00:21 ----D---- C:\WINDOWS\system32\PreInstall
                                  2009-05-21 03:00:20 ----A---- C:\WINDOWS\system32\spupdsvc.exe
                                  2009-05-21 03:00:19 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
                                  2009-05-21 02:49:27 ----D---- C:\Program Files\AGI
                                  2009-05-21 00:13:43 ----SHD---- C:\found.000
                                  2009-05-20 20:41:45 ----A---- C:\WINDOWS\zip.exe
                                  2009-05-20 20:41:45 ----A---- C:\WINDOWS\vFind.exe
                                  2009-05-20 20:41:45 ----A---- C:\WINDOWS\SWXCACLS.exe
                                  2009-05-20 20:41:45 ----A---- C:\WINDOWS\SWSC.exe
                                  2009-05-20 20:41:45 ----A---- C:\WINDOWS\SWREG.exe
                                  2009-05-20 20:41:45 ----A---- C:\WINDOWS\sed.exe
                                  2009-05-20 20:41:45 ----A---- C:\WINDOWS\NIRCMD.exe
                                  2009-05-20 20:41:45 ----A---- C:\WINDOWS\grep.exe
                                  2009-05-20 20:40:56 ----D---- C:\WINDOWS\ERDNT
                                  2009-05-20 20:40:55 ----SD---- C:\ComboFix
                                  2009-05-20 20:40:54 ----A---- C:\WINDOWS\system32\CF29264.exe
                                  2009-05-20 20:40:05 ----D---- C:\Qoobox
                                  2009-05-19 00:38:39 ----D---- C:\Documents and Settings\IMAD\Application Data\Adobe
                                  2009-05-19 00:32:23 ----D---- C:\Program Files\MSECache
                                  2009-05-19 00:14:15 ----D---- C:\Documents and Settings\IMAD\Application Data\dvdcss
                                  2009-05-19 00:12:25 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
                                  2009-05-18 23:51:48 ----D---- C:\WINDOWS\pss
                                  2009-05-18 23:51:14 ----D---- C:\Documents and Settings\IMAD\Application Data\Skype
                                  2009-05-18 23:41:48 ----D---- C:\WINDOWS\SHELLNEW
                                  2009-05-18 23:41:35 ----D---- C:\Program Files\Microsoft Office
                                  2009-05-18 23:41:35 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
                                  2009-05-18 23:41:12 ----RHD---- C:\MSOCache
                                  2009-05-18 23:38:10 ----A---- C:\WINDOWS\system32\h323log.txt
                                  2009-05-18 23:37:24 ----D---- C:\Documents and Settings\IMAD\Application Data\IDM
                                  2009-05-18 23:37:24 ----D---- C:\Documents and Settings\IMAD\Application Data\DMCache
                                  2009-05-18 23:37:22 ----D---- C:\Program Files\Internet Download Manager
                                  2009-05-18 23:37:05 ----D---- C:\Documents and Settings\IMAD\Application Data\WinRAR
                                  2009-05-18 23:36:03 ----D---- C:\Program Files\Total Video Converter
                                  2009-05-18 23:34:27 ----A---- C:\WINDOWS\system32\uniime.dll
                                  2009-05-18 23:34:17 ----D---- C:\Program Files\Fichiers communs\xing shared
                                  2009-05-18 23:34:17 ----A---- C:\WINDOWS\system32\c_g18030.dll
                                  2009-05-18 23:34:15 ----A---- C:\WINDOWS\system32\kbdlk41j.dll
                                  2009-05-18 23:34:15 ----A---- C:\WINDOWS\system32\kbdlk41a.dll
                                  2009-05-18 23:34:15 ----A---- C:\WINDOWS\system32\kbdibm02.dll
                                  2009-05-18 23:34:15 ----A---- C:\WINDOWS\system32\kbdax2.dll
                                  2009-05-18 23:34:15 ----A---- C:\WINDOWS\system32\kbd106n.dll
                                  2009-05-18 23:34:15 ----A---- C:\WINDOWS\system32\kbd101.dll
                                  2009-05-18 23:34:15 ----A---- C:\WINDOWS\system32\f3ahvoas.dll
                                  2009-05-18 23:34:14 ----A---- C:\WINDOWS\system32\imjp81k.dll
                                  2009-05-18 23:34:11 ----A---- C:\WINDOWS\system32\rmoc3260.dll
                                  2009-05-18 23:34:08 ----A---- C:\WINDOWS\system32\pndx5032.dll
                                  2009-05-18 23:34:08 ----A---- C:\WINDOWS\system32\pndx5016.dll
                                  2009-05-18 23:34:08 ----A---- C:\WINDOWS\system32\pncrt.dll
                                  2009-05-18 23:34:08 ----A---- C:\WINDOWS\system32\msvcr71.dll
                                  2009-05-18 23:34:08 ----A---- C:\WINDOWS\system32\msvcp71.dll
                                  2009-05-18 23:34:08 ----A---- C:\WINDOWS\system32\chsbrkr.dll
                                  2009-05-18 23:34:07 ----D---- C:\Program Files\Fichiers communs\Real
                                  2009-05-18 23:34:07 ----A---- C:\WINDOWS\system32\chtbrkr.dll
                                  2009-05-18 23:34:06 ----A---- C:\WINDOWS\system32\msir3jp.dll
                                  2009-05-18 23:34:06 ----A---- C:\WINDOWS\system32\korwbrkr.dll
                                  2009-05-18 23:34:00 ----D---- C:\Program Files\Real
                                  2009-05-18 23:33:51 ----D---- C:\Documents and Settings\IMAD\Application Data\Real
                                  2009-05-18 23:33:48 ----A---- C:\WINDOWS\system32\kbd101a.dll
                                  2009-05-18 23:33:37 ----A---- C:\WINDOWS\system32\kbdnecNT.dll
                                  2009-05-18 23:33:37 ----A---- C:\WINDOWS\system32\kbdnecAT.dll
                                  2009-05-18 23:33:37 ----A---- C:\WINDOWS\system32\kbdnec95.dll
                                  2009-05-18 23:33:16 ----A---- C:\WINDOWS\system32\c_is2022.dll
                                  2009-05-18 23:33:14 ----A---- C:\WINDOWS\system32\kbdkor.dll
                                  2009-05-18 23:33:14 ----A---- C:\WINDOWS\system32\kbdjpn.dll
                                  2009-05-18 23:33:14 ----A---- C:\WINDOWS\system32\kbd106.dll
                                  2009-05-18 23:33:14 ----A---- C:\WINDOWS\system32\kbd103.dll
                                  2009-05-18 23:33:14 ----A---- C:\WINDOWS\system32\kbd101c.dll
                                  2009-05-18 23:33:14 ----A---- C:\WINDOWS\system32\kbd101b.dll
                                  2009-05-18 23:33:12 ----RA---- C:\WINDOWS\system32\kbdarmw.dll
                                  2009-05-18 23:33:12 ----RA---- C:\WINDOWS\system32\kbdarme.dll
                                  2009-05-18 23:33:12 ----A---- C:\WINDOWS\system32\Thawbrkr.dll
                                  2009-05-18 23:33:11 ----RA---- C:\WINDOWS\system32\kbdgeo.dll
                                  2009-05-18 23:33:10 ----RA---- C:\WINDOWS\system32\kbdintel.dll
                                  2009-05-18 23:33:10 ----RA---- C:\WINDOWS\system32\kbdintam.dll
                                  2009-05-18 23:33:10 ----RA---- C:\WINDOWS\system32\kbdinpun.dll
                                  2009-05-18 23:33:10 ----RA---- C:\WINDOWS\system32\kbdinmar.dll
                                  2009-05-18 23:33:10 ----RA---- C:\WINDOWS\system32\kbdinkan.dll
                                  2009-05-18 23:33:10 ----RA---- C:\WINDOWS\system32\kbdinhin.dll
                                  2009-05-18 23:33:10 ----RA---- C:\WINDOWS\system32\kbdinguj.dll
                                  2009-05-18 23:33:10 ----RA---- C:\WINDOWS\system32\kbdindev.dll
                                  2009-05-18 23:33:10 ----A---- C:\WINDOWS\system32\c_iscii.dll
                                  2009-05-18 23:33:09 ----RA---- C:\WINDOWS\system32\kbdvntc.dll
                                  2009-05-18 23:33:06 ----RA---- C:\WINDOWS\system32\kbdurdu.dll
                                  2009-05-18 23:33:06 ----RA---- C:\WINDOWS\system32\kbdsyr2.dll
                                  2009-05-18 23:33:06 ----RA---- C:\WINDOWS\system32\kbdsyr1.dll
                                  2009-05-18 23:33:06 ----RA---- C:\WINDOWS\system32\kbdfa.dll
                                  2009-05-18 23:33:06 ----RA---- C:\WINDOWS\system32\kbddiv2.dll
                                  2009-05-18 23:33:06 ----RA---- C:\WINDOWS\system32\kbddiv1.dll
                                  2009-05-18 23:33:06 ----RA---- C:\WINDOWS\system32\kbda3.dll
                                  2009-05-18 23:33:06 ----RA---- C:\WINDOWS\system32\kbda2.dll
                                  2009-05-18 23:33:06 ----RA---- C:\WINDOWS\system32\kbda1.dll
                                  2009-05-18 23:33:06 ----A---- C:\WINDOWS\system32\kbdusa.dll
                                  2009-05-18 23:33:02 ----RA---- C:\WINDOWS\system32\kbdheb.dll
                                  2009-05-18 23:32:55 ----RA---- C:\WINDOWS\system32\kbdth3.dll
                                  2009-05-18 23:32:55 ----RA---- C:\WINDOWS\system32\kbdth2.dll
                                  2009-05-18 23:32:55 ----RA---- C:\WINDOWS\system32\kbdth1.dll
                                  2009-05-18 23:32:55 ----RA---- C:\WINDOWS\system32\kbdth0.dll
                                  2009-05-18 23:32:55 ----A---- C:\WINDOWS\system32\ftlx041e.dll
                                  2009-05-18 23:30:15 ----A---- C:\WINDOWS\system32\usbui.dll
                                  2009-05-18 23:29:23 ----A---- C:\WINDOWS\imsins.BAK
                                  2009-05-18 23:29:21 ----SHD---- C:\WINDOWS\Installer
                                  2009-05-18 23:29:21 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
                                  2009-05-18 23:29:20 ----D---- C:\Program Files\Fichiers communs\ODBC
                                  2009-05-18 23:29:20 ----A---- C:\WINDOWS\ODBCINST.INI
                                  2009-05-18 23:29:17 ----RD---- C:\Program Files
                                  2009-05-18 23:29:17 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
                                  2009-05-18 23:29:17 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
                                  2009-05-18 23:29:17 ----D---- C:\Program Files\Fichiers communs
                                  2009-05-18 23:29:08 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
                                  2009-05-18 23:29:08 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
                                  2009-05-18 23:29:08 ----RA---- C:\WINDOWS\system32\kbdazel.dll
                                  2009-05-18 23:29:07 ----RA---- C:\WINDOWS\system32\kbdtat.dll
                                  2009-05-18 23:29:07 ----RA---- C:\WINDOWS\system32\kbdmon.dll
                                  2009-05-18 23:29:07 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
                                  2009-05-18 23:29:07 ----RA---- C:\WINDOWS\system32\kbdaze.dll
                                  2009-05-18 23:29:06 ----RA---- C:\WINDOWS\system32\kbdycc.dll
                                  2009-05-18 23:29:06 ----RA---- C:\WINDOWS\system32\kbduzb.dll
                                  2009-05-18 23:29:06 ----RA---- C:\WINDOWS\system32\kbdur.dll
                                  2009-05-18 23:29:06 ----RA---- C:\WINDOWS\system32\kbdru1.dll
                                  2009-05-18 23:29:06 ----RA---- C:\WINDOWS\system32\kbdru.dll
                                  2009-05-18 23:29:06 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
                                  2009-05-18 23:29:06 ----RA---- C:\WINDOWS\system32\kbdbu.dll
                                  2009-05-18 23:29:06 ----RA---- C:\WINDOWS\system32\kbdblr.dll
                                  2009-05-18 23:29:05 ----RA---- C:\WINDOWS\system32\kbdhept.dll
                                  2009-05-18 23:29:05 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
                                  2009-05-18 23:29:05 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
                                  2009-05-18 23:29:05 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
                                  2009-05-18 23:29:05 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
                                  2009-05-18 23:29:05 ----RA---- C:\WINDOWS\system32\kbdhe.dll
                                  2009-05-18 23:29:05 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
                                  2009-05-18 23:29:03 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
                                  2009-05-18 23:29:03 ----RA---- C:\WINDOWS\system32\kbdlv.dll
                                  2009-05-18 23:29:03 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
                                  2009-05-18 23:29:03 ----RA---- C:\WINDOWS\system32\kbdlt.dll
                                  2009-05-18 23:29:03 ----RA---- C:\WINDOWS\system32\kbdest.dll
                                  2009-05-18 23:29:02 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
                                  2009-05-18 23:29:02 ----RA---- C:\WINDOWS\system32\kbdsl.dll
                                  2009-05-18 23:29:02 ----RA---- C:\WINDOWS\system32\kbdro.dll
                                  2009-05-18 23:29:02 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
                                  2009-05-18 23:29:02 ----RA---- C:\WINDOWS\system32\kbdpl.dll
                                  2009-05-18 23:29:01 ----RA---- C:\WINDOWS\system32\kbdycl.dll
                                  2009-05-18 23:29:01 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
                                  2009-05-18 23:29:01 ----RA---- C:\WINDOWS\system32\kbdhu.dll
                                  2009-05-18 23:29:01 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
                                  2009-05-18 23:29:01 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
                                  2009-05-18 23:29:01 ----RA---- C:\WINDOWS\system32\kbdcz.dll
                                  2009-05-18 23:29:01 ----RA---- C:\WINDOWS\system32\kbdcr.dll
                                  2009-05-18 23:29:01 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
                                  2009-05-18 23:28:57 ----A---- C:\WINDOWS\system32\spxcoins.dll
                                  2009-05-18 23:28:57 ----A---- C:\WINDOWS\system32\irclass.dll
                                  2009-05-18 23:28:57 ----A---- C:\WINDOWS\system32\dgsetup.dll
                                  2009-05-18 23:28:57 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
                                  2009-05-18 23:28:56 ----A---- C:\WINDOWS\system32\EqnClass.Dll
                                  2009-05-18 23:28:54 ----N---- C:\WINDOWS\system32\CONFIG.TMP
                                  2009-05-18 23:28:54 ----A---- C:\WINDOWS\TASKMAN.EXE
                                  2009-05-18 23:28:54 ----A---- C:\WINDOWS\system32\batt.dll
                                  2009-05-18 23:28:53 ----A---- C:\WINDOWS\system32\storprop.dll
                                  2009-05-18 23:28:53 ----A---- C:\WINDOWS\NOTEPAD.EXE
                                  2009-05-18 23:28:46 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
                                  2009-05-18 23:28:42 ----RA---- C:\WINDOWS\SET8.tmp
                                  2009-05-18 23:28:40 ----RA---- C:\WINDOWS\SET4.tmp
                                  2009-05-18 23:28:39 ----RA---- C:\WINDOWS\SET3.tmp
                                  2009-05-18 23:28:34 ----D---- C:\WINDOWS\system32\CatRoot2
                                  2009-05-18 23:28:34 ----D---- C:\WINDOWS\system32\CatRoot
                                  2009-05-18 23:28:28 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
                                  2009-05-18 23:28:11 ----A---- C:\WINDOWS\setuplog.txt
                                  2009-05-18 23:28:07 ----SHD---- C:\System Volume Information
                                  2009-05-18 23:28:07 ----D---- C:\Documents and Settings
                                  2009-05-18 23:27:48 ----D---- C:\WINDOWS\nview
                                  2009-05-18 23:27:48 ----A---- C:\WINDOWS\system32\nvudisp.exe
                                  2009-05-18 23:27:35 ----SH---- C:\boot.ini
                                  2009-05-18 23:25:57 ----A---- C:\WINDOWS\system32\javaws.exe
                                  2009-05-18 23:25:57 ----A---- C:\WINDOWS\system32\javaw.exe
                                  2009-05-18 23:25:57 ----A---- C:\WINDOWS\system32\java.exe
                                  2009-05-18 23:25:48 ----D---- C:\Program Files\Java
                                  2009-05-18 23:24:37 ----A---- C:\WINDOWS\system32\deploytk.dll
                                  2009-05-18 23:23:46 ----D---- C:\Documents and Settings\IMAD\Application Data\Sun
                                  2009-05-18 23:23:27 ----D---- C:\Documents and Settings\IMAD\Application Data\vlc
                                  2009-05-18 23:23:07 ----D---- C:\Program Files\VideoLAN
                                  2009-05-18 23:23:03 ----SD---- C:\WINDOWS\Downloaded Program Files
                                  2009-05-18 23:23:03 ----RSHDC---- C:\WINDOWS\system32\dllcache
                                  2009-05-18 23:23:03 ----RSD---- C:\WINDOWS\Fonts
                                  2009-05-18 23:23:03 ----RD---- C:\WINDOWS\Web
                                  2009-05-18 23:23:03 ----HD---- C:\WINDOWS\inf
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\WinSxS
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\WBEM
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\twain_32
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\Temp
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\wins
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\wbem
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\usmt
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\spool
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\ShellExt
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\Setup
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\ras
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\oobe
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\npp
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\mui
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\inetsrv
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\IME
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\icsxml
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\ias
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\fr-fr
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\fr
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\export
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\drivers
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\dhcp
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\config
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\3com_dmi
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\3076
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\2052
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\1054
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\1042
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\1041
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\1037
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\1036
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\1033
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\1031
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\1028
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\1025
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\system
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\security
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\Resources
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\repair
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\Provisioning
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\PeerNet
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\pchealth
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\Offline Web Pages
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\Network Diagnostic
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\mui
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\msapps
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\msagent
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\Media
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\L2Schemas
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\java
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\ime
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\Help
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\ehome
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\Driver Cache
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\Debug
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\Cursors
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\Connection Wizard
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\Config
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\AppPatch
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS\addins
                                  2009-05-18 23:23:03 ----D---- C:\WINDOWS
                                  2009-05-18 23:22:23 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
                                  2009-05-18 23:22:17 ----D---- C:\Program Files\Fichiers communs\Adobe
                                  2009-05-18 23:22:17 ----D---- C:\Program Files\Adobe
                                  2009-05-18 23:21:32 ----D---- C:\Program Files\SuperCopier2
                                  2009-05-18 23:20:56 ----D---- C:\Program Files\WinRAR
                                  2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\vxblock.dll
                                  2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\pxwave.dll
                                  2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\pxsfs.dll
                                  2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\pxmas.dll
                                  2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\pxinsi64.exe
                                  2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\pxinsa64.exe
                                  2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\pxhpinst.exe
                                  2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\pxdrv.dll
                                  2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\pxcpyi64.exe
                                  2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\pxcpya64.exe
                                  2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\pxafs.dll
                                  2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\px.dll
                                  2009-05-18 23:18:58 ----D---- C:\Program Files\DivX
                                  2009-05-18 23:17:06 ----D---- C:\Program Files\MSN Messenger
                                  2009-05-18 23:16:29 ----D---- C:\Program Files\Skype
                                  2009-05-18 23:16:29 ----D---- C:\Program Files\Fichiers communs\Skype
                                  2009-05-18 23:16:23 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
                                  2009-05-18 23:15:55 ----SHD---- C:\RECYCLER
                                  2009-05-18 23:15:13 ----D---- C:\Program Files\Avira
                                  2009-05-18 23:15:13 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
                                  2009-05-18 21:54:16 ----D---- C:\WINDOWS\system32\Lang
                                  2009-05-18 21:53:23 ----D---- C:\Temp
                                  2009-05-18 21:53:08 ----A---- C:\WINDOWS\system32\nvunrm.exe
                                  2009-05-18 21:52:37 ----A---- C:\WINDOWS\system32\nvusmb.exe
                                  2009-05-18 21:52:35 ----RA---- C:\WINDOWS\system32\NVUNINST.EXE
                                  2009-05-18 21:52:20 ----A---- C:\WINDOWS\system32\nvconrm.dll
                                  2009-05-18 21:52:20 ----A---- C:\WINDOWS\system32\fdco1ins.dll
                                  2009-05-18 21:52:20 ----A---- C:\WINDOWS\system32\fdco1.dll
                                  2009-05-18 21:52:20 ----A---- C:\WINDOWS\system32\bdco1ins.dll
                                  2009-05-18 21:52:20 ----A---- C:\WINDOWS\system32\bdco1.dll
                                  2009-05-18 21:52:11 ----D---- C:\WINDOWS\system32\ReinstallBackups
                                  2009-05-18 21:52:10 ----DC---- C:\WINDOWS\system32\DRVSTORE
                                  2009-05-18 21:51:31 ----D---- C:\Program Files\AMD
                                  2009-05-18 21:51:26 ----D---- C:\Documents and Settings\IMAD\Application Data\InstallShield
                                  2009-05-18 21:51:04 ----A---- C:\WINDOWS\system32\ChCfg.exe
                                  2009-05-18 21:50:43 ----D---- C:\WINDOWS\system32\RTCOM
                                  2009-05-18 21:50:42 ----A---- C:\WINDOWS\system32\ksuser.dll
                                  2009-05-18 21:50:38 ----A---- C:\WINDOWS\SoundMan.exe
                                  2009-05-18 21:50:38 ----A---- C:\WINDOWS\SkyTel.exe
                                  2009-05-18 21:50:38 ----A---- C:\WINDOWS\RtlUpd.exe
                                  2009-05-18 21:50:38 ----A---- C:\WINDOWS\RTLCPL.exe
                                  2009-05-18 21:50:36 ----HD---- C:\Program Files\InstallShield Installation Information
                                  2009-05-18 21:50:36 ----D---- C:\Program Files\Realtek
                                  2009-05-18 21:50:36 ----A---- C:\WINDOWS\RTHDCPL.exe
                                  2009-05-18 21:50:36 ----A---- C:\WINDOWS\MicCal.exe
                                  2009-05-18 21:50:36 ----A---- C:\WINDOWS\alcwzrd.exe
                                  2009-05-18 21:50:36 ----A---- C:\WINDOWS\Alcmtr.exe
                                  2009-05-18 21:50:35 ----A---- C:\WINDOWS\RtlExUpd.dll
                                  2009-05-18 21:50:35 ----A---- C:\WINDOWS\HideWin.exe
                                  2009-05-18 21:50:32 ----D---- C:\Program Files\Fichiers communs\InstallShield
                                  2009-05-18 21:47:13 ----D---- C:\Documents and Settings\IMAD\Application Data\Identities
                                  2009-05-18 21:47:11 ----HD---- C:\Program Files\Uninstall Information
                                  2009-05-18 21:47:09 ----ASH---- C:\Documents and Settings\IMAD\Application Data\desktop.ini
                                  2009-05-18 21:47:08 ----SD---- C:\Documents and Settings\IMAD\Application Data\Microsoft
                                  2009-05-18 21:46:02 ----D---- C:\WINDOWS\SoftwareDistribution
                                  2009-05-18 21:46:01 ----D---- C:\WINDOWS\Prefetch
                                  2009-05-18 21:46:00 ----SD---- C:\WINDOWS\system32\Microsoft
                                  2009-05-18 21:46:00 ----A---- C:\WINDOWS\SchedLgU.Txt
                                  2009-05-18 21:43:49 ----D---- C:\WINDOWS\system32\xircom
                                  2009-05-18 21:43:49 ----D---- C:\Program Files\xerox
                                  2009-05-18 21:43:49 ----D---- C:\Program Files\microsoft frontpage
                                  2009-05-18 21:43:17 ----N---- C:\WINDOWS\system32\spmsg.dll
                                  2009-05-18 21:43:16 ----HD---- C:\WINDOWS\$hf_mig$
                                  2009-05-18 21:43:09 ----A---- C:\WINDOWS\control.ini
                                  2009-05-18 21:43:09 ----A---- C:\AUTOEXEC.BAT
                                  2009-05-18 21:42:58 ----A---- C:\WINDOWS\OEWABLog.txt
                                  2009-05-18 21:42:55 ----A---- C:\WINDOWS\system32\mapi32.dll
                                  2009-05-18 21:42:15 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
                                  2009-05-18 21:42:12 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
                                  2009-05-18 21:42:09 ----HD---- C:\Program Files\WindowsUpdate
                                  2009-05-18 21:42:06 ----D---- C:\Program Files\Services en ligne
                                  2009-05-18 21:41:52 ----D---- C:\WINDOWS\system32\DirectX
                                  2009-05-18 21:41:44 ----A---- C:\WINDOWS\system32\atrace.dll
                                  2009-05-18 21:41:41 ----A---- C:\WINDOWS\system32\desktop.ini
                                  2009-05-18 21:41:41 ----A---- C:\WINDOWS\desktop.ini
                                  2009-05-18 21:41:35 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
                                  2009-05-18 21:41:34 ----A---- C:\WINDOWS\system32\acctres.dll
                                  2009-05-18 21:41:33 ----D---- C:\Program Files\Fichiers communs\Services
                                  2009-05-18 21:41:31 ----SD---- C:\WINDOWS\Tasks
                                  2009-05-18 21:41:31 ----A---- C:\WINDOWS\system32\icfgnt5.dll
                                  2009-05-18 21:41:30 ----D---- C:\Program Files\Fichiers communs\MSSoap
                                  2009-05-18 21:41:25 ----D---- C:\WINDOWS\srchasst
                                  2009-05-18 21:41:24 ----D---- C:\WINDOWS\system32\Macromed
                                  2009-05-18 21:41:22 ----A---- C:\WINDOWS\system32\wuweb.dll
                                  2009-05-18 21:41:22 ----A---- C:\WINDOWS\system32\wucltui.dll
                                  2009-05-18 21:41:22 ----A---- C:\WINDOWS\system32\wuauserv.dll
                                  2009-05-18 21:41:22 ----A---- C:\WINDOWS\system32\wuaueng1.dll
                                  2009-05-18 21:41:22 ----A---- C:\WINDOWS\system32\wuaueng.dll
                                  2009-05-18 21:41:21 ----A---- C:\WINDOWS\system32\wups.dll
                                  2009-05-18 21:41:21 ----A---- C:\WINDOWS\system32\wuauclt1.exe
                                  2009-05-18 21:41:21 ----A---- C:\WINDOWS\system32\wuauclt.exe
                                  2009-05-18 21:41:21 ----A---- C:\WINDOWS\system32\wuapi.dll
                                  2009-05-18 21:41:21 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
                                  2009-05-18 21:41:21 ----A---- C:\WINDOWS\system32\qmgr.dll
                                  2009-05-18 21:41:21 ----A---- C:\WINDOWS\system32\bitsprx4.dll
                                  2009-05-18 21:41:21 ----A---- C:\WINDOWS\system32\bitsprx3.dll
                                  2009-05-18 21:41:21 ----A---- C:\WINDOWS\system32\bitsprx2.dll
                                  2009-05-18 21:41:17 ----D---- C:\Program Files\Movie Maker
                                  2009-05-18 21:41:00 ----A---- C:\WINDOWS\system32\safrslv.dll
                                  2009-05-18 21:41:00 ----A---- C:\WINDOWS\system32\safrdm.dll
                                  2009-05-18 21:41:00 ----A---- C:\WINDOWS\system32\safrcdlg.dll
                                  2009-05-18 21:41:00 ----A---- C:\WINDOWS\system32\racpldlg.dll
                                  2009-05-18 21:40:56 ----A---- C:\WINDOWS\system32\fltMc.exe
                                  2009-05-18 21:40:56 ----A---- C:\WINDOWS\system32\fltlib.dll
                                  2009-05-18 21:40:55 ----D---- C:\WINDOWS\system32\Restore
                                  2009-05-18 21:40:55 ----A---- C:\WINDOWS\system32\srsvc.dll
                                  2009-05-18 21:40:55 ----A---- C:\WINDOWS\system32\srrstr.dll
                                  2009-05-18 21:40:55 ----A---- C:\WINDOWS\system32\srclient.dll
                                  2009-05-18 21:40:54 ----A---- C:\WINDOWS\system32\nmmkcert.dll
                                  2009-05-18 21:40:54 ----A---- C:\WINDOWS\system32\msconf.dll
                                  2009-05-18 21:40:54 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
                                  2009-05-18 21:40:54 ----A---- C:\WINDOWS\system32\mnmdd.dll
                                  2009-05-18 21:40:54 ----A---- C:\WINDOWS\system32\isrdbg32.dll
                                  2009-05-18 21:40:54 ----A---- C:\WINDOWS\system32\ils.dll
                                  2009-05-18 21:40:51 ----D---- C:\Program Files\NetMeeting
                                  2009-05-18 21:40:51 ----A---- C:\WINDOWS\system32\msoert2.dll
                                  2009-05-18 21:40:51 ----A---- C:\WINDOWS\system32\msoeacct.dll
                                  2009-05-18 21:40:50 ----A---- C:\WINDOWS\system32\inetres.dll
                                  2009-05-18 21:40:49 ----A---- C:\WINDOWS\system32\inetcomm.dll
                                  2009-05-18 21:40:48 ----D---- C:\Program Files\Outlook Express
                                  2009-05-18 21:40:48 ----A---- C:\WINDOWS\system32\schedsvc.dll
                                  2009-05-18 21:40:47 ----A---- C:\WINDOWS\system32\mstinit.exe
                                  2009-05-18 21:40:47 ----A---- C:\WINDOWS\system32\mstask.dll
                                  2009-05-18 21:40:47 ----A---- C:\WINDOWS\system32\isign32.dll
                                  2009-05-18 21:40:47 ----A---- C:\WINDOWS\system32\inetcfg.dll
                                  2009-05-18 21:40:47 ----A---- C:\WINDOWS\system32\icwphbk.dll
                                  2009-05-18 21:40:47 ----A---- C:\WINDOWS\system32\icwdial.dll
                                  2009-05-18 21:40:41 ----D---- C:\Program Files\Fichiers communs\System
                                  2009-05-18 21:40:40 ----D---- C:\Program Files\Internet Explorer
                                  2009-05-18 21:40:10 ----D---- C:\Program Files\ComPlus Applications
                                  2009-05-18 21:40:08 ----A---- C:\WINDOWS\vbaddin.ini
                                  2009-05-18 21:40:08 ----A---- C:\WINDOWS\vb.ini
                                  2009-05-18 21:40:04 ----D---- C:\WINDOWS\Registration
                                  2009-05-18 21:39:59 ----D---- C:\Program Files\Online Services
                                  2009-05-18 21:39:49 ----D---- C:\Program Files\Windows Media Connect 2
                                  2009-05-18 21:39:48 ----D---- C:\Program Files\Windows Media Player
                                  2009-05-18 21:39:47 ----D---- C:\Program Files\Messenger
                                  2009-05-18 21:39:43 ----D---- C:\Program Files\MSN Gaming Zone
                                  2009-05-18 21:39:43 ----A---- C:\WINDOWS\system32\write.exe
                                  2009-05-18 21:39:35 ----A---- C:\WINDOWS\system32\sndvol32.exe
                                  2009-05-18 21:39:35 ----A---- C:\WINDOWS\system32\hticons.dll
                                  2009-05-18 21:39:35 ----A---- C:\WINDOWS\system32\avwav.dll
                                  2009-05-18 21:39:35 ----A---- C:\WINDOWS\system32\avtapi.dll
                                  2009-05-18 21:39:35 ----A---- C:\WINDOWS\system32\avmeter.dll
                                  2009-05-18 21:39:34 ----A---- C:\WINDOWS\system32\winchat.exe
                                  2009-05-18 21:39:29 ----A---- C:\WINDOWS\system32\getuname.dll
                                  2009-05-18 21:39:28 ----A---- C:\WINDOWS\system32\sol.exe
                                  2009-05-18 21:39:28 ----A---- C:\WINDOWS\system32\charmap.exe
                                  2009-05-18 21:39:28 ----A---- C:\WINDOWS\system32\calc.exe
                                  2009-05-18 21:39:27 ----A---- C:\WINDOWS\system32\winmine.exe
                                  2009-05-18 21:39:27 ----A---- C:\WINDOWS\system32\usrlogon.cmd
                                  2009-05-18 21:39:27 ----A---- C:\WINDOWS\system32\tsshutdn.exe
                                  2009-05-18 21:39:27 ----A---- C:\WINDOWS\system32\tslabels.ini
                                  2009-05-18 21:39:27 ----A---- C:\WINDOWS\system32\tskill.exe
                                  2009-05-18 21:39:27 ----A---- C:\WINDOWS\system32\tsdiscon.exe
                                  2009-05-18 21:39:27 ----A---- C:\WINDOWS\system32\tscon.exe
                                  2009-05-18 21:39:27 ----A---- C:\WINDOWS\system32\reset.exe
                                  2009-05-18 21:39:27 ----A---- C:\WINDOWS\system32\mshearts.exe
                                  2009-05-18 21:39:27 ----A---- C:\WINDOWS\system32\freecell.exe
                                  2009-05-18 21:39:26 ----A---- C:\WINDOWS\system32\shadow.exe
                                  2009-05-18 21:39:26 ----A---- C:\WINDOWS\system32\rwinsta.exe
                                  2009-05-18 21:39:26 ----A---- C:\WINDOWS\system32\regini.exe
                                  2009-05-18 21:39:26 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
                                  2009-05-18 21:39:26 ----A---- C:\WINDOWS\system32\qwinsta.exe
                                  2009-05-18 21:39:26 ----A---- C:\WINDOWS\system32\qappsrv.exe
                                  2009-05-18 21:39:26 ----A---- C:\WINDOWS\system32\msg.exe
                                  2009-05-18 21:39:26 ----A---- C:\WINDOWS\system32\msdtcprf.ini
                                  2009-05-18 21:39:26 ----A---- C:\WINDOWS\system32\logoff.exe
                                  2009-05-18 21:39:26 ----A---- C:\WINDOWS\system32\cdmodem.dll
                                  2009-05-18 21:39:20 ----A---- C:\WINDOWS\system32\wmimgmt.msc
                                  2009-05-18 21:39:08 ----D---- C:\Program Files\MSN
                                  2009-05-18 21:39:07 ----A---- C:\WINDOWS\system32\sndrec32.exe
                                  2009-05-18 21:39:07 ----A---- C:\WINDOWS\system32\mplay32.exe
                                  2009-05-18 21:39:07 ----A---- C:\WINDOWS\system32\hypertrm.dll
                                  2009-05-18 21:39:07 ----A---- C:\WINDOWS\system32\accwiz.exe
                                  2009-05-18 21:39:06 ----D---- C:\Program Files\Windows NT
                                  2009-05-18 21:39:06 ----A---- C:\WINDOWS\system32\mspaint.exe
                                  2009-05-18 21:39:06 ----A---- C:\WINDOWS\system32\clipbrd.exe
                                  2009-05-18 21:39:05 ----A---- C:\WINDOWS\system32\spider.exe
                                  2009-05-18 21:39:04 ----A---- C:\WINDOWS\system32\tsgqec.dll
                                  2009-05-18 21:39:04 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
                                  2009-05-18 21:39:04 ----A---- C:\WINDOWS\system32\rhttpaa.dll
                                  2009-05-18 21:39:04 ----A---- C:\WINDOWS\system32\aaclient.dll
                                  2009-05-18 21:39:03 ----A---- C:\WINDOWS\system32\sessmgr.exe
                                  2009-05-18 21:39:03 ----A---- C:\WINDOWS\system32\remotepg.dll
                                  2009-05-18 21:39:03 ----A---- C:\WINDOWS\system32\rdshost.exe
                                  2009-05-18 21:39:03 ----A---- C:\WINDOWS\system32\rdsaddin.exe
                                  2009-05-18 21:39:03 ----A---- C:\WINDOWS\system32\mstscax.dll
                                  2009-05-18 21:39:03 ----A---- C:\WINDOWS\system32\mstsc.exe
                                  2009-05-18 21:39:02 ----A---- C:\WINDOWS\system32\termsrv.dll
                                  2009-05-18 21:39:02 ----A---- C:\WINDOWS\system32\rdpwsx.dll
                                  2009-05-18 21:39:02 ----A---- C:\WINDOWS\system32\rdpsnd.dll
                                  2009-05-18 21:39:02 ----A---- C:\WINDOWS\system32\rdpclip.exe
                                  2009-05-18 21:39:02 ----A---- C:\WINDOWS\system32\rdchost.dll
                                  2009-05-18 21:39:02 ----A---- C:\WINDOWS\system32\qprocess.exe
                                  2009-05-18 21:39:02 ----A---- C:\WINDOWS\system32\icaapi.dll
                                  2009-05-18 21:39:02 ----A---- C:\WINDOWS\system32\cfgbkend.dll
                                  2009-05-18 21:39:01 ----D---- C:\WINDOWS\system32\MsDtc
                                  2009-05-18 21:39:01 ----A---- C:\WINDOWS\system32\xolehlp.dll
                                  2009-05-18 21:39:01 ----A---- C:\WINDOWS\system32\mtxoci.dll
                                  2009-05-18 21:39:01 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
                                  2009-05-18 21:39:01 ----A---- C:\WINDOWS\system32\msdtctm.dll
                                  2009-05-18 21:39:01 ----A---- C:\WINDOWS\system32\msdtcprx.dll
                                  2009-05-18 21:39:01 ----A---- C:\WINDOWS\system32\msdtclog.dll
                                  2009-05-18 21:39:00 ----A---- C:\WINDOWS\system32\msdtc.exe
                                  2009-05-18 21:39:00 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
                                  2009-05-18 21:38:59 ----D---- C:\WINDOWS\system32\Com
                                  2009-05-18 21:38:59 ----A---- C:\WINDOWS\system32\stclient.dll
                                  2009-05-18 21:38:59 ----A---- C:\WINDOWS\system32\mtxlegih.dll
                                  2009-05-18 21:38:59 ----A---- C:\WINDOWS\system32\mtxex.dll
                                  2009-05-18 21:38:59 ----A---- C:\WINDOWS\system32\mtxdm.dll
                                  2009-05-18 21:38:59 ----A---- C:\WINDOWS\system32\comrepl.dll
                                  2009-05-18 21:38:59 ----A---- C:\WINDOWS\system32\comaddin.dll
                                  2009-05-18 21:38:59 ----A---- C:\WINDOWS\system32\colbact.dll
                                  2009-05-18 21:38:59 ----A---- C:\WINDOWS\system32\clbcatex.dll
                                  2009-05-18 21:38:59 ----A---- C:\WINDOWS\system32\catsrvps.dll
                                  2009-05-18 21:38:58 ----A---- C:\WINDOWS\system32\comsvcs.dll
                                  2009-05-18 21:38:58 ----A---- C:\WINDOWS\system32\catsrvut.dll
                                  2009-05-18 21:38:58 ----A---- C:\WINDOWS\system32\catsrv.dll
                                  2009-05-18 21:38:57 ----A---- C:\WINDOWS\system32\comuid.dll
                                  2009-05-18 21:38:57 ----A---- C:\WINDOWS\system32\comsnap.dll
                                  2009-05-18 21:38:57 ----A---- C:\WINDOWS\system32\clbcatq.dll
                                  2009-05-18 21:38:51 ----A---- C:\WINDOWS\system32\servdeps.dll
                                  2009-05-18 21:38:51 ----A---- C:\WINDOWS\system32\mmfutil.dll
                                  2009-05-18 21:38:51 ----A---- C:\WINDOWS\system32\licwmi.dll
                                  2009-05-18 21:38:51 ----A---- C:\WINDOWS\system32\cmprops.dll

                                  ======List of files/folders modified in the last 1 months======

                                  2009-05-22 20:00:42 ----A---- C:\WINDOWS\cdplayer.ini
                                  2009-05-22 18:55:51 ----D---- C:\z0120
                                  2009-05-22 10:43:35 ----D---- C:\Documents and Settings\IMAD\Application Data\skypePM
                                  2009-05-18 23:52:16 ----A---- C:\WINDOWS\win.ini
                                  2009-05-18 23:52:16 ----A---- C:\WINDOWS\system.ini

                                  ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                                  R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520]
                                  R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys []
                                  R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-10-30 75072]
                                  R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-11-08 21248]
                                  R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
                                  R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
                                  R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-03-04 4738560]
                                  R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-12-04 7435392]
                                  R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2007-07-30 54400]
                                  R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2007-07-30 22016]
                                  R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
                                  R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
                                  R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
                                  S3 ALLOW-IO;ALLOW-IO; \??\F:\ALLOW-IO.sys []
                                  S3 catchme;catchme; \??\C:\DOCUME~1\IMAD\LOCALS~1\Temp\catchme.sys []
                                  S3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
                                  S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-28 12288]
                                  S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
                                  S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-05-09 77568]
                                  S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-05-09 82944]
                                  S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
                                  S4 mchInjDrv;mchInjDrv; \??\C:\DOCUME~1\IMAD\LOCALS~1\Temp\mc23.tmp []

                                  ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                                  R2 AntiVirScheduler;Planificateur Avira AntiVir Personal - Free Antivirus; C:\Program Files\Avira\Anti
                                  1. Contributeur sécurité
                                    bonjour , je retire mon intervention chiquitine a été plus rapide @+
                                    • 1
                                    • 2