Ordinateur mort ?

Résolu
Bonjour,

J'avais posté une demande d'aide (disparition de Firefox), j'avais reçu de l'aide et tout semblait bien aller mais . . . (31 jan 13)

Depuis cet après-midi, l'ordi se coupe sans crier gare, indique "erreur disque", refuse de travailler, . . . . . . . . rien ne va plus (comme à la roulette) mais je n'ai gagné que des problèmes.

Même en mode sans échec, il me nargue ;-)

Pourriez-vous m'aider ?

Merci d'avance

P.S. en cas de besoin, j'ai un second pour le dialogue

Bien à vous,

36 réponses

Résumé de la discussion

Disparition de Firefox et défaillances système surviennent sur un ordinateur sous Windows XP après des symptômes d'erreur disque et des redémarrages impromptus, même en mode sans échec, compliquant l'assistance. La réponse principale recommande un outil de pré-scan destiné à éliminer les infections, avec des liens officiels et des instructions pour désactiver temporairement antivirus et pare-feu, puis à enregistrer et partager le rapport. Des réponses complémentaires restent courtoises et plusieurs évoquent des questions sur la légalité de Windows, tandis que l'échange intègre des liens externes et des rapports pré-scan.

Bobot (l’IA à votre service)
  1. c'est fini ?

    si oui, 14168855686528788669686828/ de fois merci et je mettrai résolu ;-)

    bien à toi et à + (même si je ne l'espère pas : visite ccm = prob) ;-)

    oups vais pas vu
    bonne nuit et encore merci pour ta patience et ton efficacité

    bizz
    1. Bonsoir,

      voilà, je pense que j'ai fait tout sauf le "killer"

      j'ai mis pare-feu, défragmenté, ...... , wot enfin j'ai suivi les consignes.

      Je vais lire le reste mais pas to=day ;-)

      J'ai créé un point de restauration, je lui ai donné ton nom ;-)

      Je reviens demain pour finir si nécessaire

      Merci beaucoup
      1. hello

        lol :)

        mdr le point de resto ^^
    2. Re,

      j'espère que j'y suis !!!!!

      # DelFix v10.1 - Rapport créé le 24/03/2013 à 20:22:35

      # Mis à jour le 23/02/2013 par Xplode
      # Nom d'utilisateur : Administrateur - IND_PC

      ~ Suppression des outils de désinfection ...

      Supprimé : H:\Qoobox
      Supprimé : H:\USBFix
      Supprimé : H:\pre_scan
      Supprimé : H:\ZHP
      Supprimé : H:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZHP
      Supprimé : H:\Program Files\ZHPDiag
      Supprimé : H:\ComboFix.txt
      Supprimé : H:\Documents and Settings\All Users\Bureau\ZHPDiag.lnk
      Supprimé : H:\Documents and Settings\All Users\Bureau\ZHPFix.lnk
      Supprimé : H:\Documents and Settings\Administrateur\Mes documents\Téléchargements\adwcleaner(2).exe
      Supprimé : H:\Documents and Settings\Administrateur\Mes documents\Téléchargements\ComboFix.exe
      Supprimé : H:\Documents and Settings\Administrateur\Mes documents\Téléchargements\Defogger.exe
      Supprimé : H:\Documents and Settings\Administrateur\Mes documents\Téléchargements\defogger_disable.log
      Supprimé : H:\Documents and Settings\Administrateur\Mes documents\Téléchargements\defogger_enable.log
      Supprimé : H:\Documents and Settings\Administrateur\Mes documents\Téléchargements\winlogon(1).exe
      Supprimé : H:\Documents and Settings\Administrateur\Mes documents\Téléchargements\winlogon.exe
      Supprimé : H:\Documents and Settings\Administrateur\Mes documents\Téléchargements\ZHPDiag2.exe
      Supprimé : H:\WINDOWS\grep.exe
      Supprimé : H:\WINDOWS\PEV.exe
      Supprimé : H:\WINDOWS\NIRCMD.exe
      Supprimé : H:\WINDOWS\MBR.exe
      Supprimé : H:\WINDOWS\SED.exe
      Supprimé : H:\WINDOWS\SWREG.exe
      Supprimé : H:\WINDOWS\SWSC.exe
      Supprimé : H:\WINDOWS\SWXCACLS.exe
      Supprimé : H:\WINDOWS\Zip.exe
      Supprimée : HKCU\Software\g3n-h@ckm@n
      Supprimée : HKCU\Software\USBFix
      Supprimée : HKLM\SOFTWARE\AdwCleaner
      Supprimée : HKLM\SOFTWARE\g3n-h@ckm@n
      Supprimée : HKLM\SOFTWARE\Swearware
      Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\USBFix
      Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1
      Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe

      ~ Purge de la restauration système ...

      Supprimé : RP #173 [Software Distribution Service 3.0 | 12/30/2012 02:00:46]
      Supprimé : RP #174 [Software Distribution Service 3.0 | 12/31/2012 00:01:05]
      Supprimé : RP #175 [Software Distribution Service 3.0 | 12/31/2012 16:57:31]
      Supprimé : RP #176 [Point de vérification système | 01/01/2013 21:13:37]
      Supprimé : RP #177 [Software Distribution Service 3.0 | 01/02/2013 02:00:19]
      Supprimé : RP #178 [Software Distribution Service 3.0 | 01/02/2013 12:00:58]
      Supprimé : RP #179 [Point de vérification système | 01/03/2013 15:18:23]
      Supprimé : RP #180 [Software Distribution Service 3.0 | 01/04/2013 01:09:47]
      Supprimé : RP #181 [Software Distribution Service 3.0 | 01/04/2013 12:56:44]
      Supprimé : RP #182 [Software Distribution Service 3.0 | 01/05/2013 00:00:13]
      Supprimé : RP #183 [Point de vérification système | 01/06/2013 00:29:17]
      Supprimé : RP #184 [Software Distribution Service 3.0 | 01/06/2013 02:00:16]
      Supprimé : RP #185 [Software Distribution Service 3.0 | 01/06/2013 22:53:29]
      Supprimé : RP #186 [Software Distribution Service 3.0 | 01/07/2013 22:41:51]
      Supprimé : RP #187 [Software Distribution Service 3.0 | 01/08/2013 18:40:46]
      Supprimé : RP #188 [Point de vérification système | 01/12/2013 10:56:38]
      Supprimé : RP #189 [Software Distribution Service 3.0 | 01/13/2013 00:26:40]
      Supprimé : RP #190 [Software Distribution Service 3.0 | 01/13/2013 23:33:17]
      Supprimé : RP #191 [Software Distribution Service 3.0 | 01/14/2013 22:22:28]
      Supprimé : RP #192 [Removed Adobe Reader X (10.1.1) - Français. | 01/15/2013 23:05:22]
      Supprimé : RP #193 [Installed Adobe Reader XI (11.0.01) - Français. | 01/15/2013 23:09:43]
      Supprimé : RP #194 [Installed Windows XP -- Software Updates KB952011. | 01/15/2013 23:20:43]
      Supprimé : RP #195 [Software Distribution Service 3.0 | 01/16/2013 02:00:20]
      Supprimé : RP #196 [Software Distribution Service 3.0 | 01/16/2013 13:15:39]
      Supprimé : RP #197 [Software Distribution Service 3.0 | 01/19/2013 01:44:18]
      Supprimé : RP #198 [Opération de restauration | 01/19/2013 09:30:06]
      Supprimé : RP #199 [Software Distribution Service 3.0 | 01/20/2013 02:00:18]
      Supprimé : RP #200 [Software Distribution Service 3.0 | 01/20/2013 22:54:10]
      Supprimé : RP #201 [Point de vérification système | 01/21/2013 23:29:32]
      Supprimé : RP #202 [Software Distribution Service 3.0 | 01/22/2013 02:00:17]
      Supprimé : RP #203 [Software Distribution Service 3.0 | 01/22/2013 22:24:16]
      Supprimé : RP #204 [Software Distribution Service 3.0 | 01/24/2013 16:07:14]
      Supprimé : RP #205 [Software Distribution Service 3.0 | 01/25/2013 02:00:22]
      Supprimé : RP #206 [Opération de restauration | 01/25/2013 13:13:28]
      Supprimé : RP #207 [Opération de restauration | 01/25/2013 13:38:28]
      Supprimé : RP #208 [Software Distribution Service 3.0 | 01/25/2013 23:32:07]
      Supprimé : RP #209 [Software Distribution Service 3.0 | 01/26/2013 21:54:23]
      Supprimé : RP #210 [Point de vérification système | 01/28/2013 13:07:22]
      Supprimé : RP #211 [Software Distribution Service 3.0 | 01/28/2013 17:06:36]
      Supprimé : RP #212 [BIOS | 01/29/2013 19:30:30]
      Supprimé : RP #213 [Software Distribution Service 3.0 | 01/29/2013 21:34:25]
      Supprimé : RP #214 [Software Distribution Service 3.0 | 01/30/2013 10:22:49]
      Supprimé : RP #215 [Point de vérification système | 01/31/2013 12:11:55]
      Supprimé : RP #216 [Software Distribution Service 3.0 | 02/01/2013 02:00:18]
      Supprimé : RP #217 [Software Distribution Service 3.0 | 02/01/2013 22:11:46]
      Supprimé : RP #218 [Point de vérification système | 02/03/2013 17:18:23]
      Supprimé : RP #219 [Software Distribution Service 3.0 | 02/04/2013 02:00:23]
      Supprimé : RP #220 [Software Distribution Service 3.0 | 02/05/2013 02:00:16]
      Supprimé : RP #221 [Software Distribution Service 3.0 | 02/06/2013 02:00:15]
      Supprimé : RP #222 [Software Distribution Service 3.0 | 02/07/2013 02:00:15]
      Supprimé : RP #223 [Software Distribution Service 3.0 | 02/08/2013 02:00:14]
      Supprimé : RP #224 [Software Distribution Service 3.0 | 02/09/2013 02:00:14]
      Supprimé : RP #225 [Software Distribution Service 3.0 | 02/10/2013 02:00:20]
      Supprimé : RP #226 [Software Distribution Service 3.0 | 02/11/2013 02:00:22]
      Supprimé : RP #227 [Software Distribution Service 3.0 | 02/12/2013 02:00:21]
      Supprimé : RP #228 [Software Distribution Service 3.0 | 02/13/2013 02:00:21]
      Supprimé : RP #229 [Software Distribution Service 3.0 | 02/14/2013 02:00:39]
      Supprimé : RP #230 [Software Distribution Service 3.0 | 02/15/2013 02:00:19]
      Supprimé : RP #231 [Software Distribution Service 3.0 | 02/16/2013 02:00:15]
      Supprimé : RP #232 [Software Distribution Service 3.0 | 02/17/2013 02:00:15]
      Supprimé : RP #233 [Software Distribution Service 3.0 | 02/17/2013 20:22:56]
      Supprimé : RP #234 [Point de vérification système | 02/18/2013 21:04:40]
      Supprimé : RP #235 [Software Distribution Service 3.0 | 02/19/2013 02:00:32]
      Supprimé : RP #236 [Software Distribution Service 3.0 | 02/19/2013 22:22:41]
      Supprimé : RP #237 [Point de vérification système | 02/23/2013 09:15:52]
      Supprimé : RP #238 [Software Distribution Service 3.0 | 02/23/2013 09:32:58]
      Supprimé : RP #239 [Software Distribution Service 3.0 | 02/24/2013 02:00:15]
      Supprimé : RP #240 [Software Distribution Service 3.0 | 02/24/2013 20:57:04]
      Supprimé : RP #241 [Point de vérification système | 02/25/2013 21:52:00]
      Supprimé : RP #242 [Software Distribution Service 3.0 | 02/26/2013 02:00:15]
      Supprimé : RP #243 [Software Distribution Service 3.0 | 02/26/2013 06:51:31]
      Supprimé : RP #244 [Software Distribution Service 3.0 | 02/27/2013 02:00:21]
      Supprimé : RP #245 [Software Distribution Service 3.0 | 02/27/2013 06:32:29]
      Supprimé : RP #246 [Software Distribution Service 3.0 | 02/28/2013 02:00:18]
      Supprimé : RP #247 [Software Distribution Service 3.0 | 03/01/2013 02:00:19]
      Supprimé : RP #248 [Software Distribution Service 3.0 | 03/02/2013 02:00:21]
      Supprimé : RP #249 [Software Distribution Service 3.0 | 03/02/2013 07:46:30]
      Supprimé : RP #250 [Software Distribution Service 3.0 | 03/03/2013 11:50:50]
      Supprimé : RP #251 [Software Distribution Service 3.0 | 03/03/2013 15:38:03]
      Supprimé : RP #252 [Point de vérification système | 03/04/2013 17:37:25]
      Supprimé : RP #253 [Software Distribution Service 3.0 | 03/05/2013 02:00:15]
      Supprimé : RP #254 [Software Distribution Service 3.0 | 03/06/2013 11:01:19]
      Supprimé : RP #255 [Software Distribution Service 3.0 | 03/06/2013 11:44:11]
      Supprimé : RP #256 [Software Distribution Service 3.0 | 03/09/2013 03:22:58]
      Supprimé : RP #257 [Software Distribution Service 3.0 | 03/09/2013 18:24:47]
      Supprimé : RP #258 [Point de vérification système | 01/01/2002 00:44:44]
      Supprimé : RP #259 [Software Distribution Service 3.0 | 03/10/2013 13:45:44]
      Supprimé : RP #260 [Software Distribution Service 3.0 | 03/10/2013 21:43:21]
      Supprimé : RP #261 [Software Distribution Service 3.0 | 03/11/2013 21:43:38]
      Supprimé : RP #262 [Point de vérification système | 03/14/2013 18:17:36]
      Supprimé : RP #263 [Software Distribution Service 3.0 | 03/14/2013 19:33:04]
      Supprimé : RP #264 [Point de vérification système | 03/15/2013 20:28:13]
      Supprimé : RP #265 [Software Distribution Service 3.0 | 03/16/2013 10:48:56]
      Supprimé : RP #266 [Software Distribution Service 3.0 | 03/17/2013 02:00:19]
      Supprimé : RP #267 [Software Distribution Service 3.0 | 03/17/2013 10:34:18]
      Supprimé : RP #268 [Software Distribution Service 3.0 | 03/18/2013 12:12:34]
      Supprimé : RP #269 [Software Distribution Service 3.0 | 03/18/2013 23:45:51]
      Supprimé : RP #270 [Software Distribution Service 3.0 | 03/20/2013 05:40:12]
      Supprimé : RP #271 [Software Distribution Service 3.0 | 03/20/2013 05:57:42]
      Supprimé : RP #272 [Software Distribution Service 3.0 | 03/21/2013 16:23:38]
      Supprimé : RP #273 [Opération de restauration | 03/21/2013 16:50:19]
      Supprimé : RP #274 [Software Distribution Service 3.0 | 03/22/2013 04:58:53]
      Supprimé : RP #275 [Software Distribution Service 3.0 | 03/22/2013 05:37:22]
      Supprimé : RP #276 [Software Distribution Service 3.0 | 03/23/2013 07:26:24]
      Supprimé : RP #277 [Supprimé Java(TM) 6 Update 35 | 03/23/2013 15:33:57]
      Supprimé : RP #278 [Software Distribution Service 3.0 | 03/23/2013 18:25:28]
      Supprimé : RP #279 [Point de vérification système | 03/24/2013 18:34:43]
      Supprimé : RP #280 [Removed Adobe Reader XI (11.0.02) - Français. | 03/24/2013 19:11:34]

      Nouveau point de restauration créé !

      ~ Réinitialisation des paramètres système ... OK

      ########## - EOF - ##########

      Je n'ai pas fini mais je poste ça au cas ........
      et surtout pour ne rien oublier

      je continue ;-)))))
      1. Arffffffffffffffff le killer je ne sais pas le télécharger il me met erreur 404 not found pour le lien !
      2. pas grave la suite
      3. oki
        merci
    3. Bouh ;-)

      rien détecté !

      Malwarebytes Anti-Malware 1.70.0.1100
      www.malwarebytes.org

      Version de la base de données: v2013.03.24.04

      Windows XP Service Pack 3 x86 NTFS
      Internet Explorer 8.0.6001.18702
      Administrateur :: IND_PC [administrateur]

      24/03/2013 13:46:41
      mbam-log-2013-03-24 (13-46-41).txt

      Type d'examen: Examen complet (H:\|M:\|)
      Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
      Options d'examen désactivées: P2P
      Elément(s) analysé(s): 391677
      Temps écoulé: 1 heure(s), 16 minute(s), 44 seconde(s)

      Processus mémoire détecté(s): 0
      (Aucun élément nuisible détecté)

      Module(s) mémoire détecté(s): 0
      (Aucun élément nuisible détecté)

      Clé(s) du Registre détectée(s): 0
      (Aucun élément nuisible détecté)

      Valeur(s) du Registre détectée(s): 0
      (Aucun élément nuisible détecté)

      Elément(s) de données du Registre détecté(s): 0
      (Aucun élément nuisible détecté)

      Dossier(s) détecté(s): 0
      (Aucun élément nuisible détecté)

      Fichier(s) détecté(s): 0
      (Aucun élément nuisible détecté)

      (fin)

      Il tient la route !!!!

      bien à toi
      1. ok on fait un scan generaliste et on plie avec un grand menage

        fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.

        ▶ Télécharge ici :

        Malwarebytes

        ▶ Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

        relance malwarebytes en suivant scrupuleusement ces consignes :

        ! Déconnecte toi et ferme toutes applications en cours !

        ▶ Lance Malwarebyte's .

        Fais un examen dit "Complet" .

        ▶ Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
        ▶ à la fin tu cliques sur "résultat" .
        ▶ Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .

        ▶ Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

        ▶ Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)

        1. Re,

          ça a l'air d'aller

          il "déconne" plus, supporte sa charge de travail, . . .
          respecte lesd 'ordres' et ne me nargue plus ;-)

          surtout il reste "on"

          bien à toi
          1. Fais analyser le(s) fichier(s) suivants sur Virustotal :

            Virus Total

            clique sur "Parcourir" et trouve puis selectionne ce(s) fichier(s) :

            C:\Pre_Scan\MBR.bin

            * Clique maintenant sur Envoyer le fichier. et laisse travailler tant que "Situation actuelle : en cours d'analyse" est affiché.
            * Il est possible que le fichier soit mis en file d'attente en raison d'un grand nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser la page.
            * Lorsque l'analyse est terminée colle le lien de(s)( la) page(s) dans ta prochaine réponse.
            1. re,

              no malware found

              Voici les rapports

              Malwarebytes Anti-Rootkit BETA 1.01.0.1021
              www.malwarebytes.org

              Database version: v2013.03.24.03

              Windows XP Service Pack 3 x86 NTFS
              Internet Explorer 8.0.6001.18702
              Administrateur :: IND_PC [administrator]

              24/03/2013 11:53:27
              mbar-log-2013-03-24 (11-53-27).txt

              Scan type: Quick scan
              Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P
              Scan options disabled:
              Objects scanned: 26615
              Time elapsed: 13 minute(s), 30 second(s)

              Memory Processes Detected: 0
              (No malicious items detected)

              Memory Modules Detected: 0
              (No malicious items detected)

              Registry Keys Detected: 0
              (No malicious items detected)

              Registry Values Detected: 0
              (No malicious items detected)

              Registry Data Items Detected: 0
              (No malicious items detected)

              Folders Detected: 0
              (No malicious items detected)

              Files Detected: 0
              (No malicious items detected)

              (end)

              ---------------------------------------
              Malwarebytes Anti-Rootkit BETA 1.01.0.1021

              (c) Malwarebytes Corporation 2011-2012

              OS version: 5.1.2600 Windows XP Service Pack 3 x86

              Account is Administrative

              Internet Explorer version: 8.0.6001.18702

              File system is: NTFS
              Disk drives: H:\ DRIVE_FIXED, M:\ DRIVE_FIXED
              CPU speed: 3.201000 GHz
              Memory total: 536129536, free: 78479360

              Bien à toi

              ------------ Kernel report ------------
              03/24/2013 11:39:16
              ------------ Loaded modules -----------
              \WINDOWS\system32\ntkrnlpa.exe
              \WINDOWS\system32\hal.dll
              \WINDOWS\system32\KDCOM.DLL
              \WINDOWS\system32\BOOTVID.dll
              spkn.sys
              \WINDOWS\System32\Drivers\WMILIB.SYS
              \WINDOWS\System32\Drivers\SCSIPORT.SYS
              d347bus.sys
              ACPI.sys
              pci.sys
              ohci1394.sys
              \WINDOWS\system32\DRIVERS\1394BUS.SYS
              isapnp.sys
              pciide.sys
              \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
              MountMgr.sys
              ftdisk.sys
              dmload.sys
              dmio.sys
              PartMgr.sys
              VolSnap.sys

              d347prt.sys
              disk.sys
              \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
              fltmgr.sys
              sr.sys
              KSecDD.sys
              Ntfs.sys
              NDIS.sys
              Mup.sys
              avgrkx86.sys
              avgidshx.sys
              \SystemRoot\system32\DRIVERS\intelppm.sys
              \SystemRoot\system32\DRIVERS\nv4_mini.sys
              \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
              \SystemRoot\system32\DRIVERS\HDAudBus.sys
              \SystemRoot\system32\DRIVERS\usbuhci.sys
              \SystemRoot\system32\DRIVERS\USBPORT.SYS
              \SystemRoot\system32\DRIVERS\usbehci.sys
              \SystemRoot\system32\DRIVERS\Rtnicxp.sys
              \SystemRoot\system32\DRIVERS\parport.sys
              \SystemRoot\system32\DRIVERS\imapi.sys
              \SystemRoot\system32\DRIVERS\cdrom.sys
              \SystemRoot\system32\DRIVERS\redbook.sys
              \SystemRoot\system32\DRIVERS\ks.sys
              \SystemRoot\system32\DRIVERS\audstub.sys
              \SystemRoot\system32\DRIVERS\rasl2tp.sys
              \SystemRoot\system32\DRIVERS\ndistapi.sys
              \SystemRoot\system32\DRIVERS\ndiswan.sys
              \SystemRoot\system32\DRIVERS\raspppoe.sys
              \SystemRoot\system32\DRIVERS\raspptp.sys
              \SystemRoot\system32\DRIVERS\TDI.SYS
              \SystemRoot\system32\DRIVERS\psched.sys
              \SystemRoot\system32\DRIVERS\msgpc.sys
              \SystemRoot\system32\DRIVERS\ptilink.sys
              \SystemRoot\system32\DRIVERS\raspti.sys
              \SystemRoot\system32\DRIVERS\rdpdr.sys
              \SystemRoot\system32\DRIVERS\termdd.sys
              \SystemRoot\system32\DRIVERS\kbdclass.sys
              \SystemRoot\system32\DRIVERS\mouclass.sys
              \SystemRoot\system32\DRIVERS\swenum.sys
              \SystemRoot\system32\DRIVERS\update.sys
              \SystemRoot\system32\DRIVERS\mssmbios.sys
              \SystemRoot\System32\Drivers\NDProxy.SYS
              \SystemRoot\system32\drivers\RtkHDAud.sys
              \SystemRoot\system32\drivers\portcls.sys
              \SystemRoot\system32\drivers\drmk.sys
              \SystemRoot\system32\DRIVERS\usbhub.sys
              \SystemRoot\system32\DRIVERS\USBD.SYS
              \SystemRoot\system32\DRIVERS\avgmfx86.sys
              \SystemRoot\System32\Drivers\Fs_Rec.SYS
              \SystemRoot\System32\Drivers\Null.SYS
              \SystemRoot\System32\Drivers\Beep.SYS
              \??\H:\WINDOWS\system32\drivers\avgtpx86.sys
              \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
              \SystemRoot\System32\drivers\vga.sys
              \SystemRoot\System32\Drivers\mnmdd.SYS
              \SystemRoot\System32\DRIVERS\RDPCDD.sys
              \SystemRoot\System32\Drivers\Msfs.SYS
              \SystemRoot\System32\Drivers\Npfs.SYS
              \SystemRoot\system32\DRIVERS\rasacd.sys
              \SystemRoot\system32\DRIVERS\ipsec.sys
              \SystemRoot\system32\DRIVERS\tcpip.sys
              \SystemRoot\system32\DRIVERS\avgtdix.sys
              \SystemRoot\system32\DRIVERS\ipnat.sys
              \SystemRoot\system32\DRIVERS\wanarp.sys
              \SystemRoot\system32\DRIVERS\netbt.sys
              \SystemRoot\System32\drivers\ws2ifsl.sys
              \SystemRoot\System32\drivers\afd.sys
              \SystemRoot\system32\DRIVERS\netbios.sys
              \SystemRoot\system32\DRIVERS\rdbss.sys
              \SystemRoot\system32\DRIVERS\mrxsmb.sys
              \SystemRoot\System32\Drivers\Fips.SYS
              \SystemRoot\system32\DRIVERS\avgldx86.sys
              \SystemRoot\system32\DRIVERS\usbccgp.sys
              \SystemRoot\system32\DRIVERS\hidusb.sys
              \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
              \SystemRoot\system32\DRIVERS\kbdhid.sys
              \SystemRoot\system32\DRIVERS\mouhid.sys
              \SystemRoot\system32\DRIVERS\USBSTOR.SYS
              \SystemRoot\System32\Drivers\Cdfs.SYS
              \SystemRoot\System32\Drivers\dump_atapi.sys
              \SystemRoot\System32\Drivers\dump_WMILIB.SYS
              \SystemRoot\System32\win32k.sys
              \SystemRoot\System32\drivers\Dxapi.sys
              \SystemRoot\System32\watchdog.sys
              \SystemRoot\System32\drivers\dxg.sys
              \SystemRoot\System32\drivers\dxgthk.sys
              \SystemRoot\System32\nv4_disp.dll
              \SystemRoot\System32\ATMFD.DLL
              \SystemRoot\system32\DRIVERS\ndisuio.sys
              \SystemRoot\system32\drivers\wdmaud.sys
              \SystemRoot\system32\drivers\sysaudio.sys
              \SystemRoot\system32\DRIVERS\mrxdav.sys
              \SystemRoot\System32\Drivers\ParVdm.SYS
              \SystemRoot\System32\Drivers\StarOpen.SYS
              \SystemRoot\system32\DRIVERS\avgidsshimx.sys
              \SystemRoot\system32\DRIVERS\srv.sys
              \SystemRoot\system32\DRIVERS\secdrv.sys
              \SystemRoot\system32\DRIVERS\avgidsfilterx.sys
              \SystemRoot\system32\DRIVERS\avgidsdriverx.sys
              \SystemRoot\System32\Drivers\HTTP.sys
              \SystemRoot\system32\drivers\kmixer.sys
              \??\H:\WINDOWS\system32\drivers\mbamchameleon.sys
              \??\H:\WINDOWS\system32\drivers\mbamswissarmy.sys
              \WINDOWS\system32\ntdll.dll
              ----------- End -----------
              <<<1>>>
              Upper Device Name: \Device\Harddisk4\DR6
              Upper Device Object: 0xffffffff82a15ab8
              Upper Device Driver Name: \Driver\Disk\
              Lower Device Name: \Device\00000080\
              Lower Device Object: 0xffffffff82b3c8f0
              Lower Device Driver Name: \Driver\usbstor\
              Driver name found: usbstor
              Initialization returned 0x0
              Load Function returned 0x0
              <<<1>>>
              Upper Device Name: \Device\Harddisk3\DR5
              Upper Device Object: 0xffffffff82a12ab8
              Upper Device Driver Name: \Driver\Disk\
              Lower Device Name: \Device\0000007f\
              Lower Device Object: 0xffffffff82a1c498
              Lower Device Driver Name: \Driver\usbstor\
              Driver name found: usbstor
              <<<1>>>
              Upper Device Name: \Device\Harddisk2\DR4
              Upper Device Object: 0xffffffff82b7c310
              Upper Device Driver Name: \Driver\Disk\
              Lower Device Name: \Device\0000007e\
              Lower Device Object: 0xffffffff829be030
              Lower Device Driver Name: \Driver\usbstor\
              Driver name found: usbstor
              <<<1>>>
              Upper Device Name: \Device\Harddisk1\DR3
              Upper Device Object: 0xffffffff829ee668
              Upper Device Driver Name: \Driver\Disk\
              Lower Device Name: \Device\0000007d\
              Lower Device Object: 0xffffffff829c8228
              Lower Device Driver Name: \Driver\usbstor\
              Driver name found: usbstor
              <<<1>>>
              Upper Device Name: \Device\Harddisk0\DR0
              Upper Device Object: 0xffffffff82cd8ab8
              Upper Device Driver Name: \Driver\Disk\
              Lower Device Name: \Device\Ide\IdeDeviceP1T0L0-e\
              Lower Device Object: 0xffffffff82cd7d98
              Lower Device Driver Name: \Driver\atapi\
              Driver name found: atapi
              Load Function returned 0xc0000001
              Downloaded database version: v2013.03.24.03
              Initializing...
              Done!
              <<<2>>>
              Device number: 0, partition: 1
              Physical Sector Size: 512
              Drive: 0, DevicePointer: 0xffffffff82cd8ab8, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
              --------- Disk Stack ------
              DevicePointer: 0xffffffff82cd8890, DeviceName: Unknown, DriverName: \Driver\PartMgr\
              DevicePointer: 0xffffffff82cd8ab8, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
              DevicePointer: 0xffffffff82cd7d98, DeviceName: \Device\Ide\IdeDeviceP1T0L0-e\, DriverName: \Driver\atapi\
              ------------ End ----------
              Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
              Upper DeviceData: 0x0, 0x0, 0x0
              Lower DeviceData: 0x0, 0x0, 0x0
              <<<3>>>
              Volume: H:
              File system type: NTFS
              SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
              Scanning directory: H:\WINDOWS\system32\drivers...
              <<<2>>>
              Device number: 0, partition: 1
              <<<3>>>
              Volume: H:
              File system type: NTFS
              SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
              Read File: File "H:\WINDOWS\system32\drivers\gm.dls" is compressed (flags = 1)
              Read File: File "H:\WINDOWS\system32\drivers\gmreadme.txt" is compressed (flags = 1)
              File user open failed: H:\WINDOWS\system32\drivers\sptd.sys (0x00000020)
              Read File: File "H:\WINDOWS\system32\drivers\CamF0111.bin" is compressed (flags = 1)
              Read File: File "H:\WINDOWS\system32\drivers\CamF0121.bin" is compressed (flags = 1)
              Read File: File "H:\WINDOWS\system32\drivers\CamF2111.bin" is compressed (flags = 1)
              Read File: File "H:\WINDOWS\system32\drivers\CamF3111.bin" is compressed (flags = 1)
              Read File: File "H:\WINDOWS\system32\drivers\CamH0111.bin" is compressed (flags = 1)
              Read File: File "H:\WINDOWS\system32\drivers\CamH2111.bin" is compressed (flags = 1)
              Read File: File "H:\WINDOWS\system32\drivers\CamH3111.bin" is compressed (flags = 1)
              Done!
              Drive 0
              Scanning MBR on drive 0...
              Inspecting partition table:
              MBR Signature: 55AA
              Disk Signature: C95BC95B

              Partition information:

              Partition 0 type is Primary (0x7)
              Partition is ACTIVE.
              Partition starts at LBA: 63 Numsec = 204709617
              Partition file system is NTFS
              Partition is bootable

              Partition 1 type is Extended with LBA (0xf)
              Partition is NOT ACTIVE.
              Partition starts at LBA: 204709680 Numsec = 420426720

              Partition 2 type is Empty (0x0)
              Partition is NOT ACTIVE.
              Partition starts at LBA: 0 Numsec = 0

              Partition 3 type is Empty (0x0)
              Partition is NOT ACTIVE.
              Partition starts at LBA: 0 Numsec = 0

              Disk Size: 320072933376 bytes
              Sector size: 512 bytes

              Scanning physical sectors of unpartitioned space on drive 0 (1-62-625122448-625142448)...
              Physical Sector Size: 0
              Drive: 1, DevicePointer: 0xffffffff829ee668, DeviceName: \Device\Harddisk1\DR3\, DriverName: \Driver\Disk\
              --------- Disk Stack ------
              DevicePointer: 0xffffffff829e56b8, DeviceName: Unknown, DriverName: \Driver\PartMgr\
              DevicePointer: 0xffffffff829ee668, DeviceName: \Device\Harddisk1\DR3\, DriverName: \Driver\Disk\
              DevicePointer: 0xffffffff829c8228, DeviceName: \Device\0000007d\, DriverName: \Driver\usbstor\
              ------------ End ----------
              Physical Sector Size: 0
              Drive: 2, DevicePointer: 0xffffffff82b7c310, DeviceName: \Device\Harddisk2\DR4\, DriverName: \Driver\Disk\
              --------- Disk Stack ------
              DevicePointer: 0xffffffff829f4850, DeviceName: Unknown, DriverName: \Driver\PartMgr\
              DevicePointer: 0xffffffff82b7c310, DeviceName: \Device\Harddisk2\DR4\, DriverName: \Driver\Disk\
              DevicePointer: 0xffffffff829be030, DeviceName: \Device\0000007e\, DriverName: \Driver\usbstor\
              ------------ End ----------
              Physical Sector Size: 0
              Drive: 3, DevicePointer: 0xffffffff82a12ab8, DeviceName: \Device\Harddisk3\DR5\, DriverName: \Driver\Disk\
              --------- Disk Stack ------
              DevicePointer: 0xffffffff829d0290, DeviceName: Unknown, DriverName: \Driver\PartMgr\
              DevicePointer: 0xffffffff82a12ab8, DeviceName: \Device\Harddisk3\DR5\, DriverName: \Driver\Disk\
              DevicePointer: 0xffffffff82a1c498, DeviceName: \Device\0000007f\, DriverName: \Driver\usbstor\
              ------------ End ----------
              Physical Sector Size: 0
              Drive: 4, DevicePointer: 0xffffffff82a15ab8, DeviceName: \Device\Harddisk4\DR6\, DriverName: \Driver\Disk\
              --------- Disk Stack ------
              DevicePointer: 0xffffffff829d1c78, DeviceName: Unknown, DriverName: \Driver\PartMgr\
              DevicePointer: 0xffffffff82a15ab8, DeviceName: \Device\Harddisk4\DR6\, DriverName: \Driver\Disk\
              DevicePointer: 0xffffffff82b3c8f0, DeviceName: \Device\00000080\, DriverName: \Driver\usbstor\
              ------------ End ----------
              Done!
              Performing system, memory and registry scan...
              Read File: File "h:\Documents and Settings\Administrateur\Application Data\Microsoft\Internet Explorer\brndlog.bak" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Administrateur\Application Data\Microsoft\Media Player\001403D7.wpl" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Administrateur\Application Data\Microsoft\Office\CLView12.pip" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Administrateur\Application Data\Microsoft\Protect\CREDHIST" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Administrateur\Application Data\Microsoft\UProof\ExcludeDictionaryEN0809.lex" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Administrateur\Application Data\Microsoft\UProof\ExcludeDictionaryFR080c.lex" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Administrateur\Application Data\Microsoft\UProof\ExcludeDictionaryGE0407.lex" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Administrateur\Application Data\Microsoft\UProof\ExcludeDictionaryNL0413.lex" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Ament.ini" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\AVG2012\log\avgual.2013-03-23.log" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Common Files\62A20411-1D0D-FAB8-E87E-EB93EE2B1344" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\ma-config.com\Logs\activex.txt" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Microsoft Help\Hx.hxn" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Microsoft Help\Hx_1036_MValidator.Lck" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Microsoft Help\MS.EXCEL.12.1036.hxn" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Microsoft Help\MS.EXCEL.12.1036_1036_MValidator.Lck" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Microsoft Help\MS.GRAPH.12.1036.hxn" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Microsoft Help\MS.INFOPATH.12.1036.hxn" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Microsoft Help\MS.INFOPATHEDITOR.12.1036.hxn" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Microsoft Help\MS.MSE_LEGACY.12.1036.hxn" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Microsoft Help\MS.MSPUB.12.1036.hxn" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Microsoft Help\MS.MSTORE.12.1036.hxn" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Microsoft Help\MS.OIS.12.1036.hxn" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Microsoft Help\MS.OUTLOOK.12.1036.hxn" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Microsoft Help\MS.POWERPNT.12.1036.hxn" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Microsoft Help\MS.POWERPNT.12.1036_1036_MValidator.Lck" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Microsoft Help\MS.RIBBON.12.1036.hxn" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Microsoft Help\MS.SETLANG.12.1036.hxn" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Microsoft Help\MS.VBE.DEV.12.1036.hxn" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Microsoft Help\MS.WINWORD.12.1036.hxn" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Microsoft Help\MS.WINWORD.12.1036_1036_MValidator.Lck" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\PCPitstop\Scheduler-20100925.log" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\PCPitstop\Scheduler-20101004.log" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\nsIZylomPlugin.xpt" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Default User\Application Data\desktop.ini" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.bak" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.txt" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Maman\Application Data\Microsoft\Internet Explorer\brndlog.bak" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Maman\Application Data\Microsoft\Protect\CREDHIST" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Maman\Application Data\Microsoft\UProof\CUSTOM.DIC" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Maman\Application Data\Microsoft\UProof\ExcludeDictionaryEN0409.lex" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Maman\Application Data\Microsoft\UProof\ExcludeDictionaryFR040c.lex" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\LimeWire\createtimes.cache" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\LimeWire\installation.props" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\LimeWire\library.dat" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\LimeWire\mojito.props" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\LimeWire\player.props" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\LimeWire\questions.props" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\LimeWire\restaccess.txt" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\LimeWire\tables.props" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\LimeWire\versions.props" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\LimeWire\mozilla-profile\extensions.ini" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\LimeWire\mozilla-profile\prefs.js" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\LimeWire\promotion\promodb.log" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\LimeWire\promotion\promodb.properties" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\Microsoft\Internet Explorer\brndlog.bak" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\Microsoft\Media Player\00319B86.wpl" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\Microsoft\Office\CLView12.pip" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\Microsoft\Protect\CREDHIST" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\Microsoft\UProof\CUSTOM.DIC" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\Microsoft\UProof\ExcludeDictionaryEN0409.lex" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\Microsoft\UProof\ExcludeDictionaryFR040c.lex" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\Real\Msg\Category.dat" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\Real\Msg\SCategory.dat" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Application Data\vlc\ml.xspf" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Application Data\Microsoft\Internet Explorer\brndlog.bak" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Application Data\Microsoft\Office\CLView12.pip" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Application Data\Microsoft\PowerPoint\PPT12.pcb" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Application Data\Microsoft\Protect\CREDHIST" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Application Data\Microsoft\UProof\ExcludeDictionaryEN0409.lex" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Application Data\Microsoft\UProof\ExcludeDictionaryFR080c.lex" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Application Data\Real\RealPlayer\viz.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Internet Explorer\brndlog.bak" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Internet Explorer\brndlog.txt" is compressed (flags = 1)
              Read File: File "h:\Program Files\Fichiers communs\System\ado\MDACReadme.htm" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Bureau\Mes documents.lnk" is compressed (flags = 1)
              Read File: File "h:\Program Files\Outlook Express\msoe.txt" is compressed (flags = 1)
              Read File: File "h:\Program Files\Windows Media Player\npdrmv2.zip" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Default User\Menu Démarrer\Programmes\Démarrage\desktop.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Démarrage\desktop.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\dsound.vxd" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\l_except.nls" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\pscript.sep" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\cmos.ram" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\desktop.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\pcl.sep" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\perfwci.h" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\perfci.h" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\perffilt.h" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\prodspec.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\Chaînes.scf" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\login.cmd" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\logonui.exe.manifest" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\drivers\etc\networks" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\oobe\migip.dun" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\oobe\migrate.isp" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\oobe\msobe.isp" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\oobe\obeip.dun" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\oobe\reg.isp" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\wbem\wmiclivalueformat.xsl" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\Twain001.Mtx" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\Twunk001.MTX" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\chrome_installer.log" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\Historique\History.IE5\desktop.ini" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\Temporary Internet Files\Content.IE5\desktop.ini" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TIR45AF\desktop.ini" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\Temporary Internet Files\Content.IE5\CHIBCP2V\desktop.ini" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\Temporary Internet Files\Content.IE5\G1MRO9UN\desktop.ini" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\Temporary Internet Files\Content.IE5\O5MJOXQB\desktop.ini" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\plugtmp-1\plugin-yellowPageService-1.xml" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\plugtmp-1\plugin-crossdomain.xml" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\plugtmp-1\plugin-footer_nikestore.css" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\plugtmp-1\plugin-minicart_nikestore.css" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\plugtmp-1\plugin-yellowPageService-2.xml" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\plugtmp-1\plugin-yellowPageService-3.xml" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\plugtmp-1\plugin-yellowPageService-4.xml" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\plugtmp-1\plugin-yellowPageService-5.xml" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\plugtmp-1\plugin-yellowPageService-6.xml" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\plugtmp-1\plugin-yellowPageService-7.xml" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\plugtmp-1\plugin-yellowPageService-8.xml" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\plugtmp-1\plugin-yellowPageService-9.xml" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Temp\plugtmp-1\plugin-yellowPageService.xml" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Administrateur\.recently-used.xbel" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\LocalService\ntuser.ini" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\NetworkService\ntuser.ini" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Default User\Local Settings\desktop.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\system32\config\systemprofile\Local Settings\desktop.ini" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Local Settings\Application Data\FASTWiz.log" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Papa\Local Settings\Application Data\fusioncache.dat" is compressed (flags = 1)
              Read File: File "h:\Documents and Settings\Pioupiou\Local Settings\Application Data\fusioncache.dat" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\NAVIGMA.INI" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\Timezone.exe.manifest" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\vb.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\vbaddin.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\INSECTE.JEU" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\explorer.scf" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Accessibility\1.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\AxInterop.LTRASTERVIEWLib\1.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\AxInterop.MediaPlayer\1.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\AxInterop.SHDocVw\1.1.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hplMosaicNet\1.1.0.0__0d5444959b41355f\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\HPODMmcLib\1.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqactiv\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqactiv.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqalb\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqasset\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqcalp\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqcalp.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqcalrsc\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqcalrsc.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\mscorcfg\1.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\mscorcfg.resources\1.0.5000.0_fr_b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\mscorlib.resources\1.0.5000.0_fr_b77a5c561934e089\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\office\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.InfoPath\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.InfoPath.Xml\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Outlook\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Publisher\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Microsoft.VisualBasic\7.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Microsoft.VisualBasic.resources\7.0.5000.0_fr_b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Microsoft.VisualBasic.Vsa\7.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Microsoft.VisualC\7.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Microsoft.Vsa\7.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor\7.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Microsoft_VsaVb\7.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Policy.11.0.office\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Regcode\1.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Regcode.resources\1.0.5000.0_fr_b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Configuration.Install\1.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Configuration.Install.resources\1.0.5000.0_fr_b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Data\1.0.5000.0__b77a5c561934e089\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Data.OracleClient\1.0.5000.0__b77a5c561934e089\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Data.resources\1.0.5000.0_fr_b77a5c561934e089\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Design\1.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Design.resources\1.0.5000.0_fr_b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.DirectoryServices\1.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqccrsc\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqfmrsc.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqptfnd\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqvec\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Interop.hpodio08\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\ipdmctrl\11.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Outlook\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Publisher\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.DirectoryServices.resources\1.0.5000.0_fr_b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Web.resources\1.0.5000.0_fr_b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Web.Services\1.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Web.Services.resources\1.0.5000.0_fr_b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\SYSTEM.WINDOWS.FORMS.resources\1.0.5000.0_fr_b77a5c561934e089\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Xml\1.0.5000.0__b77a5c561934e089\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.XML.resources\1.0.5000.0_fr_b77a5c561934e089\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Drawing.Design.resources\1.0.5000.0_fr_b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Drawing.resources\1.0.5000.0_fr_b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.EnterpriseServices.resources\1.0.5000.0_fr_b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Management\1.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\system.management.resources\1.0.5000.0_fr_b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Messaging\1.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Messaging.resources\1.0.5000.0_fr_b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.resources\1.0.5000.0_fr_b77a5c561934e089\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Runtime.Remoting\1.0.5000.0__b77a5c561934e089\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Runtime.Remoting.resources\1.0.5000.0_fr_b77a5c561934e089\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Runtime.Serialization.Formatters.Soap.resources\1.0.5000.0_fr_b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Security.resources\1.0.5000.0_fr_b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.ServiceProcess\1.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.ServiceProcess.resources\1.0.5000.0_fr_b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Web.Mobile\1.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Web.Mobile.resources\1.0.5000.0_fr_b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\System.Web.RegularExpressions\1.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\ISymWrapper\1.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\LEAD\13.0.0.66__9cf889f53ea9b907\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\LEAD.Drawing\13.0.0.66__9cf889f53ea9b907\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\LEAD.Drawing.Imaging.Codecs\13.0.0.66__9cf889f53ea9b907\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\LEAD.Drawing.Imaging.ImageProcessing\13.0.0.66__9cf889f53ea9b907\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\LEAD.Drawing.Imaging.Ocr\13.0.0.35__9cf889f53ea9b907\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\LEAD.Drawing.Imaging.Twain\13.0.0.66__9cf889f53ea9b907\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\LEAD.Windows.Forms\13.0.0.66__9cf889f53ea9b907\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\LEAD.Windows.Forms.CommonDialogs\13.0.0.66__9cf889f53ea9b907\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\LEAD.Windows.Forms.DrawingContainer\13.0.0.66__9cf889f53ea9b907\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\LEAD.Windows.Forms.hp\13.0.0.58__9cf889f53ea9b907\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\LEAD.Wrapper\13.0.0.66__9cf889f53ea9b907\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\IEExecRemote\1.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\IEHost\1.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\IIEHost\1.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Interop.HPDarc\1.0.0.0__19565c63d39c2842\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Interop.hpocxi08\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\interop.hpodae\2.0.506.1634__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\interop.hpodai\2.0.506.1634__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\interop.hpodaud\2.0.506.1634__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Interop.hpodeb08\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Interop.hpodev08\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqgldlg\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqgldlg.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqglutl\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqgprsc\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqgprsc.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqgskin\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqgtpin\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqgtpin.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqietpz\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqietpz.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqiface\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqimgrc\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqimlib\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqisrtb\4.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqisrtb.resources\4.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqistab\4.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqmdmr\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqmdmr.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\interop.hpodmmc\1.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\interop.hpodmp\2.0.506.1634__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\interop.hpodmpv\2.0.506.1634__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\interop.hpodmpv_md\2.0.506.1634__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\interop.hpodprint2\4.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\interop.hpodtrk\2.0.506.1634__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\interop.hpodvid\2.0.506.1634__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\interop.hpodxmlutil\2.0.506.1634__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\interop.hpqcldat\1.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Interop.hpqcxm08\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Interop.hpqdstcp\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\interop.hpqimgr\1.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Interop.hprblog\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Interop.LTANNLib\1.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Interop.MediaPlayer\1.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Interop.MsHtmHst\0.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Interop.SHDocVw\1.1.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\LTRASTERIOLib\1.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\LTRASTERLib\1.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\LTRASTERVIEWLib\1.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Microsoft.JScript\7.0.5000.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Microsoft.JScript.resources\7.0.5000.0_fr_b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Microsoft.Office.InfoPath.Permission\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Access.Dao\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.InfoPath\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.InfoPath.SemiTrust\11.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.InfoPath.Xml\12.0.0.0__71e9bce111e9429c\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqccrsc.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqcmctl\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqcmctl.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqcpint\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqcprsc\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqcprsc.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqdcprf\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqdcprf.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqdcrsc\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqdcrsc.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqdocpt\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqdocpt.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqdocvw\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqdocvw.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqeal\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqedppi\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqfmrsc\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqptfx\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqptfx.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqptint\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqptint.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqshfop\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqshfop.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqthrsc\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqthrsc.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqthumb\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqtray\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqtray.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqutils\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqmpvad\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqmydoc\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqmydoc.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqmyint\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqntrop\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqpaac\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqpanop\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqpanop.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqpdmdl\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqpel10\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqpel10.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqprif\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqprjfx\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqprjfx.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqprrsc\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqprrsc.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqprt\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqprt.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqprutl\3.0.0.0__a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\assembly\GAC\hpqprutl.resources\3.0.0.0_fr_a53cf5803f4c3827\__AssemblyInfo__.ini" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\Help\ciadmin.htm" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\Help\conf.cnt" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\Help\connect.cnt" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\Help\mshearts.cnt" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\Help\msnauth.cnt" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\Help\nocontnt.cnt" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\Help\ratings.cnt" is compressed (flags = 1)
              Read File: File "h:\WINDOWS\Help\update.cnt" is compressed (
              1. Il a redémarré seul : normal ?

                oui ^^

                =========

                Télécharge et enregistre Malwarebytes Anti Rootkit en cliquant sur ce lien sur ton Bureau :

                https://data-cdn.mbamupdates.com/web/mbar-1.10.3.1001.exe

                * Décompresse le fichier mbar xxxxx.zip sur ton bureau (clic droit sur mbarxxx.zip et choisir decompresser ici)
                *Lance le en double-cliquant sur le fichier mbar.exe. (dans le repertoire mbar)

                /!\ Important: Sous Vista et Windows 7, il faut lancer le fichier par clic-droit -> Exécuter en tant qu'administrateur

                * Dans la fêntre suivante, clique sur "Next"

                * Clique sur l'option de mise à jour "Update"

                * Patientez pendant la mise à jour, puis cliquez sur "Next"

                * Si cela n'est pas déjà fait, sélectionne "[bles 3 cases (drivers, Sectors, System)".

                * Patienter

                * Une fois le scan terminé, une fenêtre s'ouvre, clic sur OK. Deux possibilités s'offrent à toi :

                ==> Si le programme n'a rien trouvé, clique sur Exit.

                ==> Si des infections sont présentes ton PC redemarrera plusieurs fois

                2 Rapports sont générés et sont enregistrés dans le repertoire d'ou tu as lancé Mbar.exe en général le Bureau.

                ==> system-log.txt
                ==> mbar-log-la date-(*****).txt

                * poste les 2 rapports dans ta prochaine réponse en fichiers joints.

                1. Bon dimanche.

                  Voilà, je suis au poste

                  .-)
                2. hello bah j'attends mes rapports ^^
              2. Je pars au boulot jusque minimum 05.00 Hrs.
                J'exécute mes devoirs ;-) dès que possible

                merci pour tout
                1. REEEEEEEEEEEEEEEEEEEEEEEEEEE

                  désolé pour le retard mais j'ai fait la sieste, je travaille cette nuit, il neige, il gèle, . . . parfait.

                  Il a redémarré seul : normal ?

                  Voilà le rapport

                  ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Pre_Script | 3.0321 ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

                  Administrateur : Microsoft Windows XP (32 bits)

                  Switchs : https://gen-hackman.kanak.fr/

                  New restorepoint created

                  Script : 16:38:33

                  ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

                  ¤¤¤¤¤¤¤¤¤¤ | Stopped Processes

                  (672) -- avgrsx.exe
                  (708) -- avgcsrvx.exe
                  (1828) -- spoolsv.exe
                  (2028) -- WgaTray.exe
                  (348) -- avgwdsvc.exe
                  (580) -- nvsvc32.exe
                  (844) -- SeaPort.exe
                  (1332) -- daemon.exe
                  (1424) -- SOUNDMAN.EXE
                  (1464) -- ALCWZRD.EXE
                  (1508) -- hpwuschd2.exe
                  (1652) -- avgtray.exe
                  (600) -- avgidsagent.exe
                  (1972) -- TaskSwitchXP.exe
                  (2084) -- ctfmon.exe
                  (2116) -- avgnsx.exe
                  (2160) -- tclock.exe
                  (3632) -- wscntfy.exe
                  (3728) -- alg.exe
                  (460) -- wuauclt.exe
                  (4072) -- explorer.exe
                  (1460) -- firefox.exe
                  (1064) -- msiexec.exe

                  ¤¤¤¤¤¤¤¤¤¤ | File search

                  ¤¤¤¤¤¤¤¤¤¤ | RegRead :

                  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{18646F66-8C25-0000-BEE4-C2CE1298969D}]|[Default] : Win 2K Style User Accounts

                  ¤¤¤¤¤¤¤¤¤¤ | Deletion | Drivers | Services

                  Service : 98845316 Not actif
                  Service : VTOOLBARUPDATER14.0.1 Not actif

                  Deleted : [HKLM\..\ControlSet001\..\Root\LEGACY_98845316]
                  Deleted : [HKLM\..\ControlSet003\..\Root\LEGACY_98845316]
                  Deleted : [HKLM\..\ControlSet001\..\Root\LEGACY_VTOOLBARUPDATER14.0.1]
                  Deleted : [HKLM\..\ControlSet003\Services\VTOOLBARUPDATER14.0.1]
                  Deleted : [HKLM\..\ControlSet003\..\Root\LEGACY_VTOOLBARUPDATER14.0.1]

                  ¤

                  ¤¤¤¤¤¤¤¤¤¤ | Registry Deletions

                  Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{86BCE89F-9FD5-46BE-88D1-9AB111C3618B}
                  Value Deleted : [HKLM\Software\mozilla\Firefox\Extensions]:ocr@babylon.com
                  Key Deleted : HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}
                  Key Deleted : HKCR\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}
                  Key Deleted : HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
                  Key Deleted : HKCR\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
                  Key Deleted : HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
                  Key Deleted : HKCR\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
                  Key Deleted : HKU\S-1-5-21-1715567821-1390067357-839522115-500\Software\YahooPartnerToolbar
                  Value Deleted : [HKLM\System\CurrentControlSet\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]:1900:UDP
                  Value Deleted : [HKLM\System\CurrentControlSet\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]:2869:TCP
                  Key Deleted : HKCR\Installer\Products\4EA42A62D9304AC4784BF238120653FF

                  ¤

                  File Moved to quarantine successfully : |A| - H:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\vhqa4q4j.default\searchplugins\flv-runner-customized-web-search.xml
                  Folder Moved to quarantine successfully : |D| - H:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
                  H:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} : Not Found !
                  File Moved to quarantine successfully : |A| - H:\WINDOWS\$Tmp
                  File Moved to quarantine successfully : |A| - H:\Documents and Settings\Administrateur\Bureau\SoftonicDownloader73110.exe
                  File Moved to quarantine successfully : |AC| - H:\Documents and Settings\Papa\Local Settings\Application Data\prvlcl.dat
                  File Moved to quarantine successfully : |AC| - H:\Documents and Settings\Pioupiou\Local Settings\Application Data\d3d9caps.tmp
                  File Moved to quarantine successfully : |AC| - H:\Documents and Settings\Pioupiou\Local Settings\Application Data\prvlcl.dat
                  File Moved to quarantine successfully : |AC| - H:\Documents and Settings\Maman\Local Settings\Application Data\prvlcl.dat
                  Folder Moved to quarantine successfully : |D| - H:\Program Files\McAfee Security Scan

                  ¤¤¤¤¤¤¤¤¤¤ | MBR

                  Windows Version: Windows XP Professional
                  Windows Information: Service Pack 3 (build 2600)
                  Logical Drives Mask: 0x00001fd0

                  Analysis of file "H:\Pre_Scan\MBR.bin":
                  Windows XP MBR code detected

                  Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
                  Windows 5.1.2600 Disk: WDC_WD3202ABYS-02B7A0 rev.02.03B03 -> Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e

                  device: opened successfully
                  user: MBR read successfully

                  Disk trace:
                  called modules: ntkrnlpa.exe catchme.sys CLASSPNP.SYS disk.sys >>UNKNOWN [0x829CAF00]<<
                  H:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\catchme.sys
                  _asm { JMP 0x4; }
                  1 ntkrnlpa!IofCallDriver[0x804EF1F0] -> \Device\Harddisk0\DR0[0x82DE4AB8]
                  3 CLASSPNP[0xF8585FD7] -> ntkrnlpa!IofCallDriver[0x804EF1F0] -> \Device\Ide\IdeDeviceP1T0L0-e[0x82D30D98]
                  \Driver\atapi[0x82DCB6C0] -> IRP_MJ_CREATE -> 0x829CAF00
                  kernel: MBR read successfully
                  _asm { XOR AX, AX; MOV SS, AX; MOV SP, 0x7c00; STI ; PUSH AX; POP ES; PUSH AX; POP DS; CLD ; MOV SI, 0x7c1b; MOV DI, 0x61b; PUSH AX; PUSH DI; MOV CX, 0x1e5; REP MOVSB ; RETF ; MOV BP, 0x7be; MOV CL, 0x4; CMP [BP+0x0], CH; JL 0x2e; JNZ 0x3a; }
                  detected disk devices:
                  detected hooks:
                  \Driver\atapi -> 0x829caf00
                  user & kernel MBR OK
                  Warning: possible MBR rootkit infection !

                  ¤

                  ¤¤¤¤¤¤¤¤¤¤ | Disk cleaning

                  Disk cleaned

                  ¤

                  End : 16:42:28

                  ¤¤¤¤¤¤¤¤¤¤ ( EOF ) ¤¤¤¤¤¤¤¤¤¤

                  S'il le faut, je sais l'heberger maintenant ;-)))))))

                  Merciiiiiiiiiiiiiiiiiiiiiiiiiiiiii
                  1. bien !

                    desinstalle tout Java

                    ===========

                    desinstalle tout ce qui contient le mot "Toolbar" , ca relentit tes navigateurs et t'affilie à des services de publicité ciblée

                    ===========

                    ne telecharge plus sur les sites Softonic , 01net , telechargergratuit.com , telecharger.com , ils mettent des barres d'outils pourries et des adwares dans les installeurs de programmes

                    ==========

                    selectionne ce texte , puis CTRL + C :

                    Kill::

                    search::
                    spax.sys

                    RegRead::
                    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{18646F66-8C25-0000-BEE4-C2CE1298969D}]

                    Key::
                    [HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{86BCE89F-9FD5-46BE-88D1-9AB111C3618B}]
                    [HKLM\Software\mozilla\Firefox\Extensions]|[ocr@babylon.com]
                    [HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}]
                    [HKCR\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}]
                    [HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}]
                    [HKCR\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}]
                    [HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}]
                    [HKCR\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}]
                    [HKU\S-1-5-21-1715567821-1390067357-839522115-500\Software\YahooPartnerToolbar]
                    [HKLM\System\CurrentControlSet\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]|[1900:UDP]
                    [HKLM\System\CurrentControlSet\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]|[2869:TCP]
                    [HKCR\Installer\Products\4EA42A62D9304AC4784BF238120653FF]

                    File|Fold::
                    H:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\vhqa4q4j.default\searchplugins\flv-runner-customized-web-search.xml
                    H:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
                    H:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
                    H:\WINDOWS\$Tmp
                    H:\Documents and Settings\Administrateur\Bureau\SoftonicDownloader73110.exe
                    H:\Documents and Settings\Papa\Local Settings\Application Data\prvlcl.dat
                    H:\Documents and Settings\Pioupiou\Local Settings\Application Data\d3d9caps.tmp
                    H:\Documents and Settings\Pioupiou\Local Settings\Application Data\prvlcl.dat
                    H:\Documents and Settings\Maman\Local Settings\Application Data\prvlcl.dat
                    H:\Program Files\McAfee Security Scan

                    Driver::
                    98845316
                    VTOOLBARUPDATER14.0.1

                    Clean::

                    MBR::

                    Reboot::


                    Relance Pre_scan puis choisis l'option "Script"

                    une page va s'ouvrir

                    logiquement le texte que tu as sélectionné s'y trouve déjà , donc tu fermes et le programme va travailler.

                    sinon colle-le (clic droit/coller ou ctrl+V) dans la page vierge.

                    puis onglet fichier => enregistrer (pas enregistrer sous...) , puis ferme le texte

                    des fenetres noires risquent de clignoter , c'est normal , c'est le programme qui travaille

                    poste Pre_Script.txt qui apparaitra sur le bureau en fin de travail
                    1. Mouais,

                      à trop faire confiance !!!!

                      maintenant ceci explique peut être cela (problèmes récurrents : lenteur, pages intempestives, . . )

                      1) Comment je peux faire pour retrouver un licence légale ?
                      2) cela en vaut-il la peine sur ce vieux "truc"

                      En fait, j'essaye de le faire survivre car je m'en sers pour ne pas squatter celui de ma fille et car je le garde quand j'ai de la visite à la maison pour les enfants.

                      Merci pour tes précieux conseils
                    2. Bonsoir,

                      départ pour le boulot jusque minimum 05.00 Hrs
                      Je réponds à tes demandes dès que possible
                      merci pour tout
                  2. ben dis donc !!! sympa le reparateur !!!!

                    pour info :

                    https://www.commentcamarche.net/faq/2981-j-utilise-une-version-piratee-de-windows

                    je regarde ton rapport plus en detail....
                    1. Je l'avais déjà signalé sur CCM.
                      J'ai acheté l'ordinateur nouveau.

                      Puis je l'ai mis une fois en réparation et il m'est revenu comme cela ! ! !
                      Il y a plusieurs années !!!!!!!!!!!!!!!!!!!!!!!
                      :-(
                      • 1
                      • 2