Infection virale très difficile à éradiquer !
Bonjour,
Alors voila je ne sais plus quoi faire j'ai tout tenté : Mon ordi est infecté par un virus ou quelque chose et voici les symptômes : Pas de mise à jour possible d'avast , redirection quand je clique sur un lien google , impossibilité d'accéder à des sites d'antivirus ou antivirus en ligne , redémarrage automatique du pc . Quelqu'un pourrait il m'aider s'il vous plait ?
Alors voila je ne sais plus quoi faire j'ai tout tenté : Mon ordi est infecté par un virus ou quelque chose et voici les symptômes : Pas de mise à jour possible d'avast , redirection quand je clique sur un lien google , impossibilité d'accéder à des sites d'antivirus ou antivirus en ligne , redémarrage automatique du pc . Quelqu'un pourrait il m'aider s'il vous plait ?
Configuration: Windows XP Firefox 3.0.3
20 réponses
-
Contributeur sécurité
-
Ok j'ai suivi la procédure et c'est la catastrophe : l'infection virale m'a l'air d'être résolu par contre au démarrage mon pc redémarre plusieurs fois et chaque fois avant d'être complètement démarré !
-
Contributeur sécuritéok tout est dans ta restauration
si tout c'est bien passé désactive la restauration système pour purger les virus qui seraient dedans puis redemarre ton ordi
puis réactive là : https://www.informatruc.com -
Ok ba pour la fin de combofix je comprend pas je copie et je colle tout ce que je trouve !
sinon voila pour bit deffender
C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000501.dll
Infecté par: Trojan.TDss.M
C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000501.dll
Echec de la désinfection
C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000501.dll
Supprimé
C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000502.dll
Infecté par: Packer.Malware.Lighty.C
C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000502.dll
Echec de la désinfection
C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000502.dll
Supprimé
C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000503.dll
Infecté par: Packer.Malware.Lighty.C
C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000503.dll
Echec de la désinfection
C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000503.dll
Supprimé
C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000504.dll
Infecté par: Packer.Malware.Lighty.E
C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000504.dll
Echec de la désinfection
C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000504.dll
Supprimé
C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000505.dll
Infecté par: Trojan.Clicker.MRJ
C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000505.dll
Echec de la désinfection
C:\System Volume Information\_restore{CB4D1EB4-1934-41F9-9189-DA827639A7D5}\RP2\A0000505.dll
Supprimé -
Contributeur sécuritéil manque toujours la fin de combofix
sinon pour le scan bitdefender il me faut les noms des fichiers infectés et les actions de bitdefender -
Je sais pas si c'est bon mais en tous cas un grand merci pour le coup de main , je n'ai plus de redirection à partir des liens google , je peux à nouveau accéder aux sites d'antivirus en ligne et mes navigateurs rament moins !
Merci merci merci -
Et voici le rapport bit deffender
BitDefender Online Scanner - Rapport virus en temps réel
Généré à: Mon, Oct 06, 2008 - 16:55:09
Info d'analyse
Fichiers scannés
100786
Infectés Fichiers
5
Virus Détectés
Trojan.Clicker.MRJ
1
Packer.Malware.Lighty.C
2
Trojan.TDss.M
1
Packer.Malware.Lighty.E
1
Ce sommaire du processus d'analyse sera utilisé par les laboratoires Antivirus BitDefender pour créer des statistiques agréguées sur l'activité des virus dans le monde. -
Décidément j'y arrive pas ! voici la fin
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_TDSSSERV
-------\Service_TDSSserv
((((((((((((((((((((((((((((( Fichiers créés du 2008-09-06 au 2008-10-06 ))))))))))))))))))))))))))))))))))))
.
2008-10-06 11:08 . 2008-10-06 11:08 <REP> d-------- C:\_OTMoveIt
2008-10-05 22:00 . 2007-11-28 18:56 <REP> d-------- C:\SDFix
2008-10-04 23:57 . 2008-10-04 23:57 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-10-04 23:47 . 2008-10-04 23:47 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\McAfee
2008-10-04 23:29 . 2008-10-04 23:29 <REP> d-------- C:\Program Files\Safari
2008-10-04 23:29 . 2008-10-04 23:29 <REP> d-------- C:\Program Files\Bonjour
2008-10-03 22:41 . 2008-10-03 22:42 <REP> d-------- C:\Program Files\Windows Live Safety Center
2008-10-03 22:40 . 2008-10-03 22:40 <REP> d-------- C:\Program Files\Microsoft Silverlight
2008-10-02 22:39 . 2008-10-02 22:39 <REP> d-------- C:\Program Files\Trend Micro
2008-10-02 22:20 . 2008-10-02 22:22 <REP> d-------- C:\Program Files\Spyware Terminator
2008-10-02 22:20 . 2008-10-02 22:20 <REP> d-------- C:\Program Files\Crawler
2008-10-02 22:20 . 2008-10-02 22:23 <REP> d-------- C:\Documents and Settings\Jeremy\Application Data\Spyware Terminator
2008-10-02 22:20 . 2008-10-02 22:24 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Spyware Terminator
2008-10-02 22:20 . 2008-10-02 22:20 141,312 --a------ C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2008-10-02 21:37 . 2008-10-06 12:33 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-10-02 21:37 . 2008-10-02 21:37 <REP> d-------- C:\Documents and Settings\Jeremy\Application Data\Malwarebytes
2008-10-02 21:37 . 2008-10-02 21:37 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes
2008-10-02 21:37 . 2008-09-10 00:04 38,528 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-10-02 21:37 . 2008-09-10 00:03 17,200 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-10-02 21:10 . 2008-10-02 21:10 0 --a------ C:\23990098.$$$
2008-10-02 20:33 . 2008-10-02 20:33 <REP> d-a------ C:\WINDOWS\zts2.exe
2008-10-02 20:33 . 2008-10-02 20:33 <REP> d-a------ C:\WINDOWS\system32\iifgfgf.dll
2008-10-02 20:33 . 2008-10-02 20:33 <REP> d-a------ C:\WINDOWS\rundl132.dll
2008-10-02 20:30 . 2008-10-02 20:30 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\MicroWorld
2008-10-02 20:30 . 2006-02-14 13:40 335,872 --a------ C:\WINDOWS\system32\T.COM
2008-10-02 20:30 . 2004-08-19 18:10 153,088 --a------ C:\WINDOWS\R.COM
2008-10-02 20:30 . 2008-10-02 20:30 27 --a------ C:\WINDOWS\Lic.xxx
2008-09-30 20:20 . 2008-09-30 20:20 <REP> d-------- C:\WINDOWS\BDOSCAN8
2008-09-24 16:35 . 2008-09-24 16:35 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft
2008-09-14 22:05 . 2008-09-14 22:05 <REP> d-------- C:\Program Files\CCleaner
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-06 09:14 2,208 ----a-w C:\WINDOWS\system32\tmp.reg
2008-10-04 21:57 --------- d-----w C:\Program Files\Lavasoft
2008-10-04 21:30 --------- d-----w C:\Documents and Settings\Jeremy\Application Data\Apple Computer
2008-10-04 21:29 --------- d-----w C:\Program Files\Apple Software Update
2008-10-04 21:26 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Google Updater
2008-10-02 18:30 34,304 ----a-w C:\WINDOWS\system32\NOTEPAD.EXE
2008-10-02 18:30 34,304 ----a-w C:\WINDOWS\NOTEPAD.EXE
2008-10-01 13:51 87,552 ----a-w C:\WINDOWS\system32\VACFix.exe
2008-09-30 18:24 --------- d-----w C:\Program Files\IDoser v4
2008-09-19 10:26 82,944 ----a-w C:\WINDOWS\system32\o4Patch.exe
2008-09-19 10:26 82,944 ----a-w C:\WINDOWS\system32\IEDFix.C.exe
2008-09-10 20:49 --------- d-----w C:\Program Files\eMule
2008-09-08 21:38 88,576 ----a-w C:\WINDOWS\system32\AntiXPVSTFix.exe
2008-08-26 13:56 --------- d-----w C:\Program Files\MSI
2008-08-23 16:40 --------- d-----w C:\Program Files\SiSLan
2008-08-23 09:17 --------- d-----w C:\Documents and Settings\Jeremy\Application Data\XnView
2008-08-18 12:00 --------- d-----w C:\Program Files\MSN Messenger
2008-08-18 11:59 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-08-18 11:55 --------- d-----w C:\Program Files\Windows Live
2008-08-18 11:55 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\WLInstaller
2008-08-18 10:19 82,432 ----a-w C:\WINDOWS\system32\404Fix.exe
2004-10-01 13:00 40,960 ----a-w C:\Program Files\Uninstall_CDS.exe
2001-09-04 18:04 2,699,309 ----a-w C:\Documents and Settings\miolu\age2_x1.exe
1999-09-21 16:46 2,560,000 ----a-w C:\Documents and Settings\miolu\empires2.exe
. -
VOici avec la fin du rapport
ComboFix 08-10-05.06 - Jeremy 2008-10-06 13:39:18.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.334 [GMT 2:00]
Lancé depuis: C:\Documents and Settings\Jeremy\Bureau\ComboFix.exe
[COLOR=RED][B]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/B][/COLOR]
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
C:\Documents and Settings\miolu\Application Data\install.dat
C:\Documents and Settings\miolu\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
C:\WINDOWS\regedit.com
C:\WINDOWS\system32\ext
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Aut2Exe\Aut2Exe.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Aut2Exe\AutoItSC.bin
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Aut2Exe\Exe2Aut.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\AutoIt.chm
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\AutoIt.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\_Run_Me_First.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\_ReadMe_.txt
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Adlib.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Calc.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Comspec.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\CPanel.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\DialUpNetworking.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Gosub.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\IfEqual.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Notepad.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Shutdown98.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Snapshot.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\BKRenamer\bkren.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\BKRenamer\bkren.txt
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\choice.com
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\choice.txt
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\deltree.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\NirCmd - Freeware command-line tool for Windows.mht
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\nircmd.chm
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\nircmd.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\nircmdc.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\RegCmd\readme.txt
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\RegCmd\regcmd.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\RegCmd\regcmd.ini
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\sleep.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\sleep.txt
C:\WINDOWS\system32\ext\+BONUS\BONUS_Lisez.moi.txt
C:\WINDOWS\system32\ext\+BONUS\CustomStart\CustomStart.exe
C:\WINDOWS\system32\ext\+BONUS\DeskProjection\DProj.exe
C:\WINDOWS\system32\ext\+BONUS\DeskProjection\Readme.txt
C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\dd.exe
C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\DoubleDesktop.url
C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\Readme.txt
C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\v2.0
C:\WINDOWS\system32\ext\+BONUS\ExpiredCookiesCleaner\Expired Cookies Cleaner.url
C:\WINDOWS\system32\ext\+BONUS\ExpiredCookiesCleaner\ExpiredCookiesCleaner.exe
C:\WINDOWS\system32\ext\+BONUS\ExpiredCookiesCleaner\ReadMe.txt
C:\WINDOWS\system32\ext\+BONUS\FileCHK\FileCHK.exe
C:\WINDOWS\system32\ext\+BONUS\FileCHK\readme.txt
C:\WINDOWS\system32\ext\+BONUS\FileCHK\Recover CHK Files.url
C:\WINDOWS\system32\ext\+BONUS\FileCHK\source.zip
C:\WINDOWS\system32\ext\+BONUS\FileCHK\v1.1.03
C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\Changes.txt
C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\Excludes.dat
C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\FocusAlpha.exe
C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\License.txt
C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.CNT
C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.exe
C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.hlp
C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.INI
C:\WINDOWS\system32\ext\+BONUS\InCtrl5\v1.0fr
C:\WINDOWS\system32\ext\+BONUS\MatroskaShellExtension\Matroska.url
C:\WINDOWS\system32\ext\+BONUS\MatroskaShellExtension\MatroskaShellExtension_2.8.exe
C:\WINDOWS\system32\ext\+BONUS\MIMEView\MIMEView.chm
C:\WINDOWS\system32\ext\+BONUS\MIMEView\MIMEView.exe
C:\WINDOWS\system32\ext\+BONUS\MIMEView\MIMEView.url
C:\WINDOWS\system32\ext\+BONUS\MIMEView\v1.10
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\about.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\about1.PNG
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\compatibilityissues.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusions.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusions1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusions2.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings2.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings3.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings4.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\features.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\frequentlyaskedquestions.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\generalsettings.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\generalsettings1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\gettingsupport.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\hotkeys.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\hotkeys1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\icon1.gif
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\icon2.gif
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\index.html
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\introduction.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\introduction1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\knownissues.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\left.html
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\settings.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thanks.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize2.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize3.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize4.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thumbnailsettings.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thumbnailsettings1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\what'snew.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Images\about.png
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Images\splash.png
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\miniMIZE.dll
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\miniMIZE.exe
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\miniMIZE.url
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Minimize_Settings.reg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\v1.0.34
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\buy.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\copyright.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\failed.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\faq.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\getplus.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\header.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\InTray.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\MemUsage.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\MmmCfg.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\NoMmmBar.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj103title20shd2pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj104geo247shd19pg5p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj105geo248pg5p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj107geo260shd20pg5p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj10geo29pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj110geo267shd21pg6p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj112geo105pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj113geo272shd22pg6p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj114geo273pg6p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj115geo114pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj116geo77pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj117geo107pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj124geo109shd27pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj127geo159shd26pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj139geo126shd28pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj143geo139shd29pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj190geo163pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj198geo172shd36pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj205geo187pg9p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj206geo188shd35pg9p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj208geo189pg10p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj208geo189pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj208geo189pg9p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj209geo190pg9p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj210geo168shd52pg10p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj212geo165shd46pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj216geo171pg10p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj217geo177pg10p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj218geo178pg10p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj219geo180shd38pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj220geo184pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj222geo185shd56pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj223geo183shd56pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj224geo182shd53pg10p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj225geo197shd37pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj22geo56shd7pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj231geo203shd39pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj232geo194pg9p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj236geo205shd54pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj243geo303shd40pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj247geo308shd41pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj258geo232pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj259geo235pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj261geo237pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj262geo249shd48pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj263geo236shd44pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj265geo238pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj269geo202shd45pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj274geo227shd47pg9p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj278geo246pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj281geo252shd58pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj314geo230pg12p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj315geo231shd59pg12p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj316geo287pg12p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj319geo292shd50pg13p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj321geo289shd60pg12p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj322geo290pg12p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj324geo233shd51pg13p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj325geo234pg13p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj327geo296pg13p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj330geo298pg13p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj331geo299shd61pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj332geo241pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj367title279pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj375title70pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj37geo72shd9pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj39geo73shd10pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj3geo19shd4pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj410geo264shd64pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj431title126pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj521geo433shd6pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj61geo62shd8pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj63geo33shd12pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj64geo34pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj66geo82shd13pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj73geo104pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj75geo127pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj76geo128pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj77geo129pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj7geo24pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj80geo80shd11pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj82geo57pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj83geo61shd24pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj84geo63pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj85title92pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj88geo103shd25pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj91title91pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj92geo216shd15pg4p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj93geo226pg4p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj94geo229shd16pg4p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj95title96pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj9geo28shd5pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\pluscfg.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PlusOptions'.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PlusOptions.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_BarColor.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_BeforeWildMenu.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_Folders.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_iecontext.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_iemenubar.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_IntroCfg.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_IntroMenu.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_MmmTaskbar.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_StartMenu.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_WildCfg.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_WildMenu.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\top.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\topleft.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\verify.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\x-click-but23.gif
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\index.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\licenses.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\mmmplus.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\new.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\screenshots.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\sending.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\success.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\whatsmmmplus.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\LANCER AU DEMARRAGE.cmd
C:\WINDOWS\system32\ext\+BONUS\Mmm\Mmm.dll
C:\WINDOWS\system32\ext\+BONUS\Mmm\Mmm.exe
C:\WINDOWS\system32\ext\+BONUS\Mmm\Mmm.url
C:\WINDOWS\system32\ext\+BONUS\Mmm\SUPPRIMER DU DEMARRAGE.cmd
C:\WINDOWS\system32\ext\+BONUS\Mmm\v2.02
C:\WINDOWS\system32\ext\+BONUS\OriMado\Demo JAVA\Concept originel Fold n' Drop.url
C:\WINDOWS\system32\ext\+BONUS\OriMado\Demo JAVA\foldndrop2.jar
C:\WINDOWS\system32\ext\+BONUS\OriMado\Demo JAVA\foldndrop2.txt
C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\background.png
C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado - kMonos.NET.url
C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado.dll
C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado.exe
C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado.ini
C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\ReadMe.txt
C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\data.clp
C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\data.qrp
C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\mclip.cnt
C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\mclip.exe
C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\MCLIP.HLP
C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\mclip.url
C:\WINDOWS\system32\ext\+BONUS\ProduKey\ProduKey.chm
C:\WINDOWS\system32\ext\+BONUS\ProduKey\ProduKey.url
C:\WINDOWS\system32\ext\+BONUS\ProduKey\ProduKey_lng.ini
C:\WINDOWS\system32\ext\+BONUS\ProduKey\readme.txt
C:\WINDOWS\system32\ext\+BONUS\ProduKey\v1.03fr
C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\INSTALLER.cmd
C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\Registry Explorer.url
C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\regxplor.dll
C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\v1.4.4
C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\Resize Enable.url
C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\ResizeEnable.dll
C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\ResizeEnable.txt
C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\ResizeEnableRunner.exe
C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\v1.4
C:\WINDOWS\system32\ext\+BONUS\RickDangerous\ReadMe.html
C:\WINDOWS\system32\ext\+BONUS\RickDangerous\RICK DANGEROUS Forever.url
C:\WINDOWS\system32\ext\+BONUS\RickDangerous\rick32kb.exe
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\actions.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\actions2.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\index.html
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\menu.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\menu2.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\menuc.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\options.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\sdesk.html
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\task.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\toolwin1.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\toolwin2.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\sdesk.dll
C:\WINDOWS\system32\ext\+BONUS\SDesk\sdesk.exe
C:\WINDOWS\system32\ext\+BONUS\SDesk\sdesk.ini
C:\WINDOWS\system32\ext\+BONUS\SDesk\v1.66s
C:\WINDOWS\system32\ext\+BONUS\SDesk\WINDOWS (copier sdesk.ini ici).lnk
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Empty.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Full.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Full2.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\led.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Skin.ini
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Empty.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Full.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Full2.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\led.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Skin.ini
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\frReadme.txt
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Language\English.ini
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Language\French.ini
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Empty.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Full.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Full2.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\led.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Skin.ini
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\SkinTrash.exe
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\SkinTrash.ini
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Empty.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Full.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Full2.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\led.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Skin.ini
C:\WINDOWS\system32\ext\+BONUS\SMPSeesaw (pour bi-proc)\readme.rtf
C:\WINDOWS\system32\ext\+BONUS\SMPSeesaw (pour bi-proc)\SMP Seesaw.exe
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\ApiHooks.dll
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\lisezmoi.txt
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\Psapi.Dll
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\SCConfig.exe
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\SCHook.dll
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\SuperCopier.exe
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\v1.35fr stable
C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\ConfigTsXP.exe
C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\lang\_Translation.txt
C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\lang\Français.lng
C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\TaskSwitchXP.exe
C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\TaskSwitchXP.url
C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\v2.0.8fr
C:\WINDOWS\system32\ext\+BONUS\TextGrabber\Lisez_moi.txt
C:\WINDOWS\system32\ext\+BONUS\TextGrabber\TextGrab.dll
C:\WINDOWS\system32\ext\+BONUS\TextGrabber\TextGrabber.exe
C:\WINDOWS\system32\ext\+BONUS\TextGrabber\TextGrabber.hlp
C:\WINDOWS\system32\ext\+BONUS\TextGrabber\v1.0
C:\WINDOWS\system32\ext\+BONUS\UberIcon\Data\About\About.ini
C:\WINDOWS\system32\ext\+BONUS\UberIcon\Data\About\About.png
C:\WINDOWS\system32\ext\+BONUS\UberIcon\Languages\1036.ini
C:\WINDOWS\system32\ext\+BONUS\UberIcon\Languages\LanguageID Finder.exe
C:\WINDOWS\system32\ext\+BONUS\UberIcon\Plugins\iBounce\fx.dll
C:\WINDOWS\system32\ext\+BONUS\UberIcon\Plugins\iZoom\fx.dll
C:\WINDOWS\system32\ext\+BONUS\UberIcon\UberIcon.dll
C:\WINDOWS\system32\ext\+BONUS\UberIcon\UberIcon.url
C:\WINDOWS\system32\ext\+BONUS\UberIcon\UberIconManager.exe
C:\WINDOWS\system32\ext\+BONUS\UberIcon\v1.0fr
C:\WINDOWS\system32\ext\+BONUS\xCap\README.txt
C:\WINDOWS\system32\ext\+BONUS\xCap\settings.ini
C:\WINDOWS\system32\ext\+BONUS\xCap\xCapV109.exe
C:\WINDOWS\system32\ext\A43\a43.dat
C:\WINDOWS\system32\ext\A43\A43.exe
C:\WINDOWS\system32\ext\A43\A43.ini
C:\WINDOWS\system32\ext\A43\A43.url
C:\WINDOWS\system32\ext\A43\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\A43\language.ini
C:\WINDOWS\system32\ext\A43\ReadMe.txt
C:\WINDOWS\system32\ext\A43\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\A43\unrar.dll
C:\WINDOWS\system32\ext\A43\v2.45fr
C:\WINDOWS\system32\ext\AllSnap\allSnap.chm
C:\WINDOWS\system32\ext\AllSnap\allSnap.exe
C:\WINDOWS\system32\ext\AllSnap\auto_lineup.dll
C:\WINDOWS\system32\ext\AllSnap\snap_libW.dll
C:\WINDOWS\system32\ext\AllSnap\v1.31.5fr
C:\WINDOWS\system32\ext\Applications.htm
C:\WINDOWS\system32\ext\Applications\A43.gif
C:\WINDOWS\system32\ext\Applications\allsnap01.gif
C:\WINDOWS\system32\ext\Applications\allsnap02.gif
C:\WINDOWS\system32\ext\Applications\allsnap03.gif
C:\WINDOWS\system32\ext\Applications\allsnap04.gif
C:\WINDOWS\system32\ext\Applications\AsteriskLogger.gif
C:\WINDOWS\system32\ext\Applications\audio01.gif
C:\WINDOWS\system32\ext\Applications\audio02.gif
C:\WINDOWS\system32\ext\Applications\Autoruns.gif
C:\WINDOWS\system32\ext\Applications\CatAutres.gif
C:\WINDOWS\system32\ext\Applications\CatDemarrage.gif
C:\WINDOWS\system32\ext\Applications\CatMenuDemarrer.gif
C:\WINDOWS\system32\ext\Applications\CatMenuFichiersDossiers.gif
C:\WINDOWS\system32\ext\Applications\CatMenuPosteTravail.gif
C:\WINDOWS\system32\ext\Applications\CatProprietesFichiersDossiers.gif
C:\WINDOWS\system32\ext\Applications\cdbfshell.gif
C:\WINDOWS\system32\ext\Applications\cliptray01.gif
C:\WINDOWS\system32\ext\Applications\cliptray02.gif
C:\WINDOWS\system32\ext\Applications\cliptray03.gif
C:\WINDOWS\system32\ext\Applications\cliptray04.gif
C:\WINDOWS\system32\ext\Applications\cliptray05.gif
C:\WINDOWS\system32\ext\Applications\clocx01.gif
C:\WINDOWS\system32\ext\Applications\clocx02.gif
C:\WINDOWS\system32\ext\Applications\clocx03.gif
C:\WINDOWS\system32\ext\Applications\clocx04.gif
C:\WINDOWS\system32\ext\Applications\coccinelle.gif
C:\WINDOWS\system32\ext\Applications\contextviewer1.gif
C:\WINDOWS\system32\ext\Applications\contextviewer2.gif
C:\WINDOWS\system32\ext\Applications\CopyURL.gif
C:\WINDOWS\system32\ext\Applications\CurrentPorts.gif
C:\WINDOWS\system32\ext\Applications\demineur.gif
C:\WINDOWS\system32\ext\Applications\dialog01.gif
C:\WINDOWS\system32\ext\Applications\dialog02.gif
C:\WINDOWS\system32\ext\Applications\dialog03.gif
C:\WINDOWS\system32\ext\Applications\disasteroids.gif
C:\WINDOWS\system32\ext\Applications\divx.gif
C:\WINDOWS\system32\ext\Applications\dmex01.gif
C:\WINDOWS\system32\ext\Applications\dmex02.gif
C:\WINDOWS\system32\ext\Applications\dmexcol.gif
C:\WINDOWS\system32\ext\Applications\doubledriver.gif
C:\WINDOWS\system32\ext\Applications\edithexa.gif
C:\WINDOWS\system32\ext\Applications\everest.gif
C:\WINDOWS\system32\ext\Applications\exif.gif
C:\WINDOWS\system32\ext\Applications\favoritesview.gif
C:\WINDOWS\system32\ext\Applications\febooticase.gif
C:\WINDOWS\system32\ext\Applications\febootihex.gif
C:\WINDOWS\system32\ext\Applications\filenote01.gif
C:\WINDOWS\system32\ext\Applications\filenote02.gif
C:\WINDOWS\system32\ext\Applications\filenote03.gif
C:\WINDOWS\system32\ext\Applications\flexiblerenamer.gif
C:\WINDOWS\system32\ext\Applications\foldersize.gif
C:\WINDOWS\system32\ext\Applications\fond.jpg
C:\WINDOWS\system32\ext\Applications\getfilesize1.gif
C:\WINDOWS\system32\ext\Applications\getfilesize2.gif
C:\WINDOWS\system32\ext\Applications\gmail01.gif
C:\WINDOWS\system32\ext\Applications\gmail02.gif
C:\WINDOWS\system32\ext\Applications\gmail03.gif
C:\WINDOWS\system32\ext\Applications\gmail04.gif
C:\WINDOWS\system32\ext\Applications\gotoshared.gif
C:\WINDOWS\system32\ext\Applications\hash.gif
C:\WINDOWS\system32\ext\Applications\IECookiesView.gif
C:\WINDOWS\system32\ext\Applications\IEHistoryView.gif
C:\WINDOWS\system32\ext\Applications\IEPrivacyKeeper1.gif
C:\WINDOWS\system32\ext\Applications\IEPrivacyKeeper2.gif
C:\WINDOWS\system32\ext\Applications\invaders1.gif
C:\WINDOWS\system32\ext\Applications\invaders2.gif
C:\WINDOWS\system32\ext\Applications\LabelFonctions.gif
C:\WINDOWS\system32\ext\Applications\LabelRepertoire.gif
C:\WINDOWS\system32\ext\Applications\LabelType.gif
C:\WINDOWS\system32\ext\Applications\menupostetravail.gif
C:\WINDOWS\system32\ext\Applications\messenpass.gif
C:\WINDOWS\system32\ext\Applications\mitecexec01.gif
C:\WINDOWS\system32\ext\Applications\mitecexec02.gif
C:\WINDOWS\system32\ext\Applications\mitecexec03.gif
C:\WINDOWS\system32\ext\Applications\mitecexec04.gif
C:\WINDOWS\system32\ext\Applications\mitecimage01.gif
C:\WINDOWS\system32\ext\Applications\mitecimage02.gif
C:\WINDOWS\system32\ext\Applications\mpv.gif
C:\WINDOWS\system32\ext\Applications\netpass.gif
C:\WINDOWS\system32\ext\Applications\notepad++.gif
C:\WINDOWS\system32\ext\Applications\Othello.gif
C:\WINDOWS\system32\ext\Applications\pathcopy.gif
C:\WINDOWS\system32\ext\Applications\phmBootLogo.dll..gif
C:\WINDOWS\system32\ext\Applications\phmFolderAppearance.dll.gif
C:\WINDOWS\system32\ext\Applications\phmFolderAppearance02.dll.gif
C:\WINDOWS\system32\ext\Applications\ProcessViewer.gif
C:\WINDOWS\system32\ext\Applications\propplus01.gif
C:\WINDOWS\system32\ext\Applications\propplus02.gif
C:\WINDOWS\system32\ext\Applications\pspad.gif
C:\WINDOWS\system32\ext\Applications\pspv.gif
C:\WINDOWS\system32\ext\Applications\regalyzer.gif
C:\WINDOWS\system32\ext\Applications\regcompact.gif
C:\WINDOWS\system32\ext\Applications\regseeker.gif
C:\WINDOWS\system32\ext\Applications\Regshot.gif
C:\WINDOWS\system32\ext\Applications\restoredesktop.gif
C:\WINDOWS\system32\ext\Applications\runwithparameters.gif
C:\WINDOWS\system32\ext\Applications\shellmenuview.gif
C:\WINDOWS\system32\ext\Applications\sherlock.gif
C:\WINDOWS\system32\ext\Applications\shortcutsman.gif
C:\WINDOWS\system32\ext\Applications\sizer1.gif
C:\WINDOWS\system32\ext\Applications\sizer2.gif
C:\WINDOWS\system32\ext\Applications\sizer3.gif
C:\WINDOWS\system32\ext\Applications\starter.gif
C:\WINDOWS\system32\ext\Applications\statbar01.gif
C:\WINDOWS\system32\ext\Applications\statbar02.gif
C:\WINDOWS\system32\ext\Applications\swf1.gif
C:\WINDOWS\system32\ext\Applications\swf2.gif
C:\WINDOWS\system32\ext\Applications\swf3.gif
C:\WINDOWS\system32\ext\Applications\swf4.gif
C:\WINDOWS\system32\ext\Applications\thumbview.gif
C:\WINDOWS\system32\ext\Applications\tri.gif
C:\WINDOWS\system32\ext\Applications\tugzip.gif
C:\WINDOWS\system32\ext\Applications\TypeDLL.gif
C:\WINDOWS\system32\ext\Applications\TypeEXE.gif
C:\WINDOWS\system32\ext\Applications\unlocker01.gif
C:\WINDOWS\system32\ext\Applications\unlocker02.gif
C:\WINDOWS\system32\ext\Applications\unlocker03.gif
C:\WINDOWS\system32\ext\Applications\whyreboot.gif
C:\WINDOWS\system32\ext\Applications\winroll.gif
C:\WINDOWS\system32\ext\Applications\winservices.gif
C:\WINDOWS\system32\ext\Applications\xnstop.gif
C:\WINDOWS\system32\ext\Applications\XPSP2+_Chrysalide_Widescreen.jpg
C:\WINDOWS\system32\ext\Applications\xvid.gif
C:\WINDOWS\system32\ext\Applications\yz01.gif
C:\WINDOWS\system32\ext\Applications\yz02.gif
C:\WINDOWS\system32\ext\Applications\yz02b.gif
C:\WINDOWS\system32\ext\Applications\yz03.gif
C:\WINDOWS\system32\ext\AsteriskLogger\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\AsteriskLogger\Asterisk Logger.url
C:\WINDOWS\system32\ext\AsteriskLogger\astlog.chm
C:\WINDOWS\system32\ext\AsteriskLogger\astlog_lng.ini
C:\WINDOWS\system32\ext\AsteriskLogger\ReadMe.txt
C:\WINDOWS\system32\ext\AsteriskLogger\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\AsteriskLogger\v1.02fr
C:\WINDOWS\system32\ext\Audioshellext\AudioShell.url
C:\WINDOWS\system32\ext\Audioshellext\AudioShellExt.dll
C:\WINDOWS\system32\ext\Audioshellext\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\Audioshellext\INSTALLER.cmd
C:\WINDOWS\system32\ext\Audioshellext\v1.0.1
C:\WINDOWS\system32\ext\Autoruns\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\Autoruns\autoruns.chm
C:\WINDOWS\system32\ext\Autoruns\autoruns.exe
C:\WINDOWS\system32\ext\Autoruns\Autoruns.url
C:\WINDOWS\system32\ext\Autoruns\autorunsc.exe
C:\WINDOWS\system32\ext\Autoruns\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\Autoruns\v8.42fr
C:\WINDOWS\system32\ext\CDBFShellExt\CDBF Shell Extension.url
C:\WINDOWS\system32\ext\CDBFShellExt\cdbfshell.dll
C:\WINDOWS\system32\ext\CDBFShellExt\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\CDBFShellExt\exemple.dbf
C:\WINDOWS\system32\ext\CDBFShellExt\INSTALLER.cmd
C:\WINDOWS\system32\ext\CDBFShellExt\readme.txt
C:\WINDOWS\system32\ext\CDBFShellExt\v1.0fr
C:\WINDOWS\system32\ext\ClipTray\ClipTray.chm
C:\WINDOWS\system32\ext\ClipTray\ClipTray.exe
C:\WINDOWS\system32\ext\ClipTray\ClipTray.ini
C:\WINDOWS\system32\ext\ClipTray\ClipTray.url
C:\WINDOWS\system32\ext\ClipTray\Personal.dat
C:\WINDOWS\system32\ext\ClipTray\v1.61fr
C:\WINDOWS\system32\ext\ClocX\ClocX.exe
C:\WINDOWS\system32\ext\ClocX\ClocX.url
C:\WINDOWS\system32\ext\ClocX\Lang\French.lng
C:\WINDOWS\system32\ext\ClocX\Presets\BlueSphere2.png
C:\WINDOWS\system32\ext\ClocX\Presets\CloQ.ini
C:\WINDOWS\system32\ext\ClocX\Presets\CloQ.png
C:\WINDOWS\system32\ext\ClocX\Presets\default.bmp
C:\WINDOWS\system32\ext\ClocX\Presets\default.ini
C:\WINDOWS\system32\ext\ClocX\Presets\GlowMarvilla.png
C:\WINDOWS\system32\ext\ClocX\Presets\Snowball Clock.png
C:\WINDOWS\system32\ext\ClocX\Presets\street.ini
C:\WINDOWS\system32\ext\ClocX\Presets\street.png
C:\WINDOWS\system32\ext\ClocX\Presets\streethour.hpng
C:\WINDOWS\system32\ext\ClocX\Presets\streetmin.hpng
C:\WINDOWS\system32\ext\ClocX\ReadMe.txt
C:\WINDOWS\system32\ext\ClocX\v1.5.1fr
C:\WINDOWS\system32\ext\ContextViewer\Context Viewer.url
C:\WINDOWS\system32\ext\ContextViewer\ContView.exe
C:\WINDOWS\system32\ext\ContextViewer\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\ContextViewer\INSTALLER.cmd
C:\WINDOWS\system32\ext\ContextViewer\plugins\AXZIP.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\AXZIP.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifDIB.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFGIF.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifgif.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFJPEG.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifjpeg.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFMAG.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFMAG.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPI.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPI.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC2.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC2.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifpict.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifSunRAS.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifTGA.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFTIFF.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\iftiff.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifTIFF6.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifWMF.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFXLD4.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFXLD4.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\LHASAD.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\LHASAD.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\LZR.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\LZRP.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.clw
C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.dsp
C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.dsw
C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.rc
C:\WINDOWS\system32\ext\ContextViewer\ReadMe.txt
C:\WINDOWS\system32\ext\ContextViewer\v1.41fr
C:\WINDOWS\system32\ext\CopyURL\CopyURL.dll
C:\WINDOWS\system32\ext\CopyURL\CopyURL.txt
C:\WINDOWS\system32\ext\CopyURL\CopyURL.url
C:\WINDOWS\system32\ext\CopyURL\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\CopyURL\INSTALLER.cmd
C:\WINDOWS\system32\ext\CopyURL\ReadMe.txt
C:\WINDOWS\system32\ext\CopyURL\v2.31fr
C:\WINDOWS\system32\ext\CurrentPorts\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\CurrentPorts\cports.chm
C:\WINDOWS\system32\ext\CurrentPorts\cports.exe
C:\WINDOWS\system32\ext\CurrentPorts\cports_lng.ini
C:\WINDOWS\system32\ext\CurrentPorts\CurrPorts.url
C:\WINDOWS\system32\ext\CurrentPorts\readme.txt
C:\WINDOWS\system32\ext\CurrentPorts\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\CurrentPorts\v1.07fr
C:\WINDOWS\system32\ext\DialogBoxAssistant\Dialog Box Assistant.url
C:\WINDOWS\system32\ext\DialogBoxAssistant\OSDEx.chm
C:\WINDOWS\system32\ext\DialogBoxAssistant\OSDEx.exe
C:\WINDOWS\system32\ext\DialogBoxAssistant\OSDExLib.dll
C:\WINDOWS\system32\ext\DialogBoxAssistant\ReadMe.txt
C:\WINDOWS\system32\ext\DialogBoxAssistant\v1.1fr
C:\WINDOWS\system32\ext\Disasteroids3D\Disasteroids 3D.url
C:\WINDOWS\system32\ext\Disasteroids3D\Disasteroids3D.cfg
C:\WINDOWS\system32\ext\Disasteroids3D\disasteroids3d.dat
C:\WINDOWS\system32\ext\Disasteroids3D\Disasteroids3D.exe
C:\WINDOWS\system32\ext\Divx\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\Divx\DivX.url
C:\WINDOWS\system32\ext\Divx\Divxconfig.exe
C:\WINDOWS\system32\ext\Divx\divxdec.ax
C:\WINDOWS\system32\ext\Divx\INSTALLER.cmd
C:\WINDOWS\system32\ext\Divx\v5.0.5 (dernière compatible VirtualDub)
C:\WINDOWS\system32\ext\DmexBar\allemand.lng
C:\WINDOWS\system32\ext\DmexBar\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\DmexBar\Deutsch.lng
C:\WINDOWS\system32\ext\DmexBar\dmexalign.exe
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange all horizontal.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange all vertical.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange two horizontal.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange two vertical.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Restore positions.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Save position and minimize.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Save position.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexbar.dll
C:\WINDOWS\system32\ext\DmexBar\dmexbar.dll.manifest
C:\WINDOWS\system32\ext\DmexBar\DMEXBAR.HLP
C:\WINDOWS\system32\ext\DmexBar\dmexbar.ini
C:\WINDOWS\system32\ext\DmexBar\DmexBar.url
C:\WINDOWS\system32\ext\DmexBar\INSTALLER.cmd
C:\WINDOWS\system32\ext\DmexBar\unsplit.exe
C:\WINDOWS\system32\ext\DmexBar\UnzDll.dll
C:\WINDOWS\system32\ext\DmexBar\v10
C:\WINDOWS\system32\ext\DmexBar\viewer.exe
C:\WINDOWS\system32\ext\DmexBar\viewer.ini
C:\WINDOWS\system32\ext\DmexBar\ZipDll.dll
C:\WINDOWS\system32\ext\DmexCol\DESINSTALLER.reg
C:\WINDOWS\system32\ext\DmexCol\DmexBar.url
C:\WINDOWS\system32\ext\DmexCol\dmexcol.dll
C:\WINDOWS\system32\ext\DmexCol\dmexcol.hlp
C:\WINDOWS\system32\ext\DmexCol\INSTALLER.cmd
C:\WINDOWS\system32\ext\DmexCol\v11fr
C:\WINDOWS\system32\ext\DoubleDriver\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\DoubleDriver\dd.chm
C:\WINDOWS\system32\ext\DoubleDriver\dd.exe
C:\WINDOWS\system32\ext\DoubleDriver\dd.ini
C:\WINDOWS\system32\ext\DoubleDriver\Double Driver.url
C:\WINDOWS\system32\ext\DoubleDriver\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\DoubleDriver\v1.0
C:\WINDOWS\system32\ext\EasyRead\AJOUTER A LA BARRE DE BOUTONS.cmd
C:\WINDOWS\system32\ext\EasyRead\EasyRead.cmd
C:\WINDOWS\system32\ext\EasyRead\EasyRead.gif
C:\WINDOWS\system32\ext\EasyRead\EasyRead.url
C:\WINDOWS\system32\ext\EasyRead\Iconico.ico
C:\WINDOWS\system32\ext\EasyRead\ShellExec.exe
C:\WINDOWS\system32\ext\EasyRead\SUPPRIMER DE LA BARRE DE BOUTONS.cmd
C:\WINDOWS\system32\ext\EasyRead\ZoomIn.ico
C:\WINDOWS\system32\ext\EasyRead\ZoomIn.js
C:\WINDOWS\system32\ext\EasyRead\ZoomOut.ico
C:\WINDOWS\system32\ext\EasyRead\ZoomOut.js
C:\WINDOWS\system32\ext\Everest\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\Everest\everest.bin
C:\WINDOWS\system32\ext\Everest\everest.chm
C:\WINDOWS\system32\ext\Everest\everest.dat
C:\WINDOWS\system32\ext\Everest\everest.exe
C:\WINDOWS\system32\ext\Everest\everest.mem
C:\WINDOWS\system32\ext\Everest\everest.web
C:\WINDOWS\system32\ext\Everest\everest_cpl.cpl
C:\WINDOWS\system32\ext\Everest\everest_icons.dll
C:\WINDOWS\system32\ext\Everest\everest_memlat.dll
C:\WINDOWS\system32\ext\Everest\everest_xpicons.dll
C:\WINDOWS\system32\ext\Everest\everest_zipdll.dll
C:\WINDOWS\system32\ext\Everest\kerneld.amd64
C:\WINDOWS\system32\ext\Everest\kerneld.ia64
C:\WINDOWS\system32\ext\Everest\kerneld.w9x
C:\WINDOWS\system32\ext\Everest\kerneld.wnt
C:\WINDOWS\system32\ext\Everest\Language\lang_fr.txt
C:\WINDOWS\system32\ext\Everest\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\Everest\v2.20fr
C:\WINDOWS\system32\ext\Exif\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\Exif\Exif Shell Extension.url
C:\WINDOWS\system32\ext\Exif\exif.dll
C:\WINDOWS\system32\ext\Exif\INSTALLER.cmd
C:\WINDOWS\system32\ext\Exif\v1.02
C:\WINDOWS\system32\ext\FavoritesView\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\FavoritesView\faview.chm
C:\WINDOWS\system32\ext\FavoritesView\faview.exe
C:\WINDOWS\system32\ext\FavoritesView\faview_lng.ini
C:\WINDOWS\system32\ext\FavoritesView\FavoritesView.url
C:\WINDOWS\system32\ext\FavoritesView\ReadMe.txt
C:\WINDOWS\system32\ext\FavoritesView\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\FavoritesView\v1.0fr
C:\WINDOWS\system32\ext\FebootiCase\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\FebootiCase\fCase.dll
C:\WINDOWS\system32\ext\FebootiCase\Febooti.url
C:\WINDOWS\system32\ext\FebootiCase\INSTALLER.cmd
C:\WINDOWS\system32\ext\FebootiCase\Traduction française par club83 du forum xpcoccinelle.free.fr
C:\WINDOWS\system32\ext\FebootiCase\V1.1fr
C:\WINDOWS\system32\ext\FebootiHex\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\FebootiHex\Febooti.url
C:\WINDOWS\system32\ext\FebootiHex\fHex.dll
C:\WINDOWS\system32\ext\FebootiHex\INSTALLER.cmd
C:\WINDOWS\system32\ext\FebootiHex\Traduction française par club83 du forum xpcoccinelle.free.fr
C:\WINDOWS\system32\ext\FebootiHex\V1.0fr
C:\WINDOWS\system32\ext\Filenote\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\Filenote\FileNote.dll
C:\WINDOWS\system32\ext\Filenote\FileNote.url
C:\WINDOWS\system32\ext\Filenote\INSTALLER.cmd
C:\WINDOWS\system32\ext\Filenote\ReadMe.txt
C:\WINDOWS\system32\ext\Filenote\v1.0
C:\WINDOWS\system32\ext\FlexibleRenamer\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.exe
C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.exe.manifest
C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.ini
C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.url
C:\WINDOWS\system32\ext\FlexibleRenamer\HistoryEN.txt
C:\WINDOWS\system32\ext\FlexibleRenamer\PresetEN.ini
C:\WINDOWS\system32\ext\FlexibleRenamer\ReadMeEN.txt
C:\WINDOWS\system32\ext\FlexibleRenamer\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\FlexibleRenamer\v7.3
C:\WINDOWS\system32\ext\FolderSize\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\FolderSize\Folder Size.url
C:\WINDOWS\system32\ext\FolderSize\FolderSize.msi
C:\WINDOWS\system32\ext\FolderSize\fr\FolderSizeColumn.dll
C:\WINDOWS\system32\ext\FolderSize\INSTALLER.cmd
C:\WINDOWS\system32\ext\FolderSize\v2.1fr
C:\WINDOWS\system32\ext\GetFileSize\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\GetFileSize\Get File Size.url
C:\WINDOWS\system32\ext\GetFileSize\GetFileSize.exe
C:\WINDOWS\system32\ext\GetFileSize\gfs.chm
C:\WINDOWS\system32\ext\GetFileSize\INSTALLER.cmd
C:\WINDOWS\system32\ext\GetFileSize\v2.2
C:\WINDOWS\system32\ext\Gmail\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\Gmail\Gmail Drive en francais.url
C:\WINDOWS\system32\ext\Gmail\GMail Drive shell extension.url
C:\WINDOWS\system32\ext\Gmail\GMailFS.cnt
C:\WINDOWS\system32\ext\Gmail\GMailFS.dll
C:\WINDOWS\system32\ext\Gmail\GMailFS.hlp
C:\WINDOWS\system32\ext\Gmail\INSTALLER.cmd
C:\WINDOWS\system32\ext\Gmail\v1.0.9fr
C:\WINDOWS\system32\ext\GotoShared\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\GotoShared\GoTo Shared.url
C:\WINDOWS\system32\ext\GotoShared\GotoShared.exe
C:\WINDOWS\system32\ext\GotoShared\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\GotoShared\v1.0fr
C:\WINDOWS\system32\ext\HashTab\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\HashTab\HashTab Shell Extension.url
C:\WINDOWS\system32\ext\HashTab\HashTab.dll
C:\WINDOWS\system32\ext\HashTab\INSTALLER.cmd
C:\WINDOWS\system32\ext\HashTab\v1.7fr
C:\WINDOWS\system32\ext\Icones_Cocci.cmd
C:\WINDOWS\system32\ext\Icones_Cocci.reg
C:\WINDOWS\system32\ext\Icones_XP.cmd
C:\WINDOWS\system32\ext\Icones_XP.reg
C:\WINDOWS\system32\ext\IECookiesView\ads.txt
C:\WINDOWS\system32\ext\IECookiesView\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\IECookiesView\IECookiesView.url
C:\WINDOWS\system32\ext\IECookiesView\iecv.chm
C:\WINDOWS\system32\ext\IECookiesView\iecv.exe
C:\WINDOWS\system32\ext\IECookiesView\iecv_lng.ini
C:\WINDOWS\system32\ext\IECookiesView\ReadMe.txt
C:\WINDOWS\system32\ext\IECookiesView\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\IECookiesView\v1.70fr
C:\WINDOWS\system32\ext\IEHistoryView\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\IEHistoryView\IEHistoryView.url
C:\WINDOWS\system32\ext\IEHistoryView\iehv.chm
C:\WINDOWS\system32\ext\IEHistoryView\iehv.exe
C:\WINDOWS\system32\ext\IEHistoryView\iehv_lng.ini
C:\WINDOWS\system32\ext\IEHistoryView\ReadMe.txt
C:\WINDOWS\system32\ext\IEHistoryView\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\IEHistoryView\v1.30fr
C:\WINDOWS\system32\ext\IEPrivacyKeeper\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\IEPrivacyKeeper\dbghelp.dll
C:\WINDOWS\system32\ext\IEPrivacyKeeper\hgc.ani
C:\WINDOWS\system32\ext\IEPrivacyKeeper\IE Privacy Keeper.url
C:\WINDOWS\system32\ext\IEPrivacyKeeper\iepk.ico
C:\WINDOWS\system32\ext\IEPrivacyKeeper\iepk.wav
C:\WINDOWS\system32\ext\IEPrivacyKeeper\IEPrivacyKeeper.exe
C:\WINDOWS\system32\ext\IEPrivacyKeeper\Lang\French.lng
C:\WINDOWS\system32\ext\IEPrivacyKeeper\license_fr.txt
C:\WINDOWS\system32\ext\IEPrivacyKeeper\ntqsi.dll
C:\WINDOWS\system32\ext\IEPrivacyKeeper\SecureDelete.dll
C:\WINDOWS\system32\ext\IEPrivacyKeeper\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\IEPrivacyKeeper\UnHCrashReport.exe
C:\WINDOWS\system32\ext\IEPrivacyKeeper\v2.7.2fr
C:\WINDOWS\system32\ext\MailPassView\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\MailPassView\Lisez-moi.txt
C:\WINDOWS\system32\ext\MailPassView\mailpv.chm
C:\WINDOWS\system32\ext\MailPassView\mailpv_lng.ini
C:\WINDOWS\system32\ext\MailPassView\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\MailPassView\v1.32fr
C:\WINDOWS\system32\ext\MessenPass\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\MessenPass\mspass.chm
C:\WINDOWS\system32\ext\MessenPass\mspass_lng.ini
C:\WINDOWS\system32\ext\MessenPass\ReadMe.txt
C:\WINDOWS\system32\ext\MessenPass\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\MessenPass\v1.04fr
C:\WINDOWS\system32\ext\Minesweeper3D\docs\cubes-screenshot.png
C:\WINDOWS\system32\ext\Minesweeper3D\docs\dodeca-screenshot.png
C:\WINDOWS\system32\ext\Minesweeper3D\docs\index.html
C:\WINDOWS\system32\ext\Minesweeper3D\docs\mail.png
C:\WINDOWS\system32\ext\Minesweeper3D\docs\sprites-screenshot.png
C:\WINDOWS\system32\ext\Minesweeper3D\Minesweeper 3D.url
C:\WINDOWS\system32\ext\Minesweeper3D\Minesweeper3D.exe
C:\WINDOWS\system32\ext\Minesweeper3D\Minesweeper3D.ico
C:\WINDOWS\system32\ext\Minesweeper3D\mingwm10.dll
C:\WINDOWS\system32\ext\Minesweeper3D\saves\screenshot
C:\WINDOWS\system32\ext\Minesweeper3D\settings\default
C:\WINDOWS\system32\ext\Minesweeper3D\skins\default\fields.png
C:\WINDOWS\system32\ext\Minesweeper3D\skins\default\tiled.png
C:\WINDOWS\system32\ext\Minesweeper3D\skins\sprites\fields.png
C:\WINDOWS\system32\ext\Minesweeper3D\skins\sprites\tiled.png
C:\WINDOWS\system32\ext\Minesweeper3D\skins\transolid\fields.png
C:\WINDOWS\system32\ext\Minesweeper3D\skins\transolid\tiled.png
C:\WINDOWS\system32\ext\Minesweeper3D\v2005-01-10
C:\WINDOWS\system32\ext\MitecExec\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\MitecExec\INSTALLER.cmd
C:\WINDOWS\system32\ext\MitecExec\MiTeC Shell Extension Pack.url
C:\WINDOWS\system32\ext\MitecExec\MPEISE.dll
C:\WINDOWS\system32\ext\MitecExec\ReadMe.txt
C:\WINDOWS\system32\ext\MitecExec\v3.2
C:\WINDOWS\system32\ext\MitecImage\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\MitecImage\INSTALLER.cmd
C:\WINDOWS\system32\ext\MitecImage\MIPSE.dll
C:\WINDOWS\system32\ext\MitecImage\MiTeC Shell Extension Pack.url
C:\WINDOWS\system32\ext\MitecImage\ReadMe.txt
C:\WINDOWS\system32\ext\MitecImage\v3.2
C:\WINDOWS\system32\ext\MP3Lame\ACM codec version of Lame MP3 encoder.url
C:\WINDOWS\system32\ext\MP3Lame\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\MP3Lame\INSTALLER.cmd
C:\WINDOWS\system32\ext\MP3Lame\lame.exe
C:\WINDOWS\system32\ext\MP3Lame\lame_acm.xml
C:\WINDOWS\system32\ext\MP3Lame\lame_enc.dll
C:\WINDOWS\system32\ext\MP3Lame\lameACM.acm
C:\WINDOWS\system32\ext\MP3Lame\LameACM.inf
C:\WINDOWS\system32\ext\MP3Lame\v3.96
C:\WINDOWS\system32\ext\NetPass\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\NetPass\netpass.chm
C:\WINDOWS\system32\ext\NetPass\netpass.exe
C:\WINDOWS\system32\ext\NetPass\netpass_lng.ini
C:\WINDOWS\system32\ext\NetPass\Network Password Recovery.url
C:\WINDOWS\system32\ext\NetPass\ReadMe.txt
C:\WINDOWS\system32\ext\NetPass\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\NetPass\v1.02fr
C:\WINDOWS\system32\ext\Notepad++\config.xml
C:\WINDOWS\system32\ext\Notepad++\contextMenu.xml
C:\WINDOWS\system32\ext\Notepad++\doLocalConf.xml
C:\WINDOWS\system32\ext\Notepad++\Icons\blank.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\close_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\close_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\close_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\closeAll_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\closeAll_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\closeAll_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\copy_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\copy_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\copy_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\cut_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\cut_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\cut_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\fileopen_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\fileopen_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\find_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\find_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\indent_guideline_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\indent_guideline_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\invisible_char_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\invisible_char_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\new_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\new_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\paste_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\paste_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\paste_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\playback_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\playback_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\print_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\print_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\record_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\redo_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\redo_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\redo_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\replace_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\replace_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\replace_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\save_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\save_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\save_makro_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\save_makro_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\save_makro_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\save_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\saveAll_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\saveAll_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\saveAll_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\stop_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\stop_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\undo_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\undo_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\undo_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\viewDlg_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\viewDlg_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\wrap_text_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\wrap_text_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\zoomIn_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\zoomIn_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\zoomOut_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\zoomOut_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\close_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\close_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\close_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\closeAll_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\closeAll_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\closeAll_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\copy_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\copy_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\copy_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\cut_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\cut_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\cut_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\fileopen_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\fileopen_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\find_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\find_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\new_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\new_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\paste_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\paste_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\paste_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\print_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\print_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\readme.txt
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\redo_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\redo_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\redo_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\replace_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\replace_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\replace_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\save_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\save_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\save_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\saveAll_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\saveAll_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\saveAll_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\toolbarIcons.xml
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\undo_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\undo_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\undo_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\viewDlg_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\viewDlg_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomIn_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomIn_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomOut_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomOut_normal.ico
C:\WINDOWS\system32\ext\Notepad++\insertExt.ini
C:\WINDOWS\system32\ext\Notepad++\langs.xml
C:\WINDOWS\system32\ext\Notepad++\license.txt
C:\WINDOWS\system32\ext\Notepad++\LINEDRAW.TTF
C:\WINDOWS\system32\ext\Notepad++\nativeLang.xml
C:\WINDOWS\system32\ext\Notepad++\notepad++.exe
C:\WINDOWS\system32\ext\Notepad++\Notepad++.url
C:\WINDOWS\system32\ext\Notepad++\NppLauncher\1 - dllcache.lnk
C:\WINDOWS\system32\ext\Notepad++\NppLauncher\2 - system32.lnk
C:\WINDOWS\system32\ext\Notepad++\NppLauncher\3 - WINDOWS.lnk
C:\WINDOWS\system32\ext\Notepad++\NppLauncher\notepad.exe
C:\WINDOWS\system32\ext\Notepad++\NppLauncher\readme.txt
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\c.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\cpp.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\css.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\flash.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\java.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\javascript.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\lisp.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\perl.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\php.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\python.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\vb.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\vhdl.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\winbatch.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\xml.api
C:\WINDOWS\system32\ext\Notepad++\plugins\NppInsertPlugin.dll
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX.dll
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX.ini
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\AsciiToEBCDIC.bin
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\libTidy.dll
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\NPPTextFXdemo.TXT
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\TIDYCFG.INI
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\W3C-CSSValidator.htm
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\W3C-HTMLValidator.htm
C:\WINDOWS\system32\ext\Notepad++\plugins\XMLCheck.dll
C:\WINDOWS\system32\ext\Notepad++\ReadMe.txt
C:\WINDOWS\system32\ext\Notepad++\SciLexer.dll
C:\WINDOWS\system32\ext\Notepad++\shortcuts.xml
C:\WINDOWS\system32\ext\Notepad++\stylers.xml
C:\WINDOWS\system32\ext\Notepad++\toolbarIcons.xml
C:\WINDOWS\system32\ext\Notepad++\userDefineLang_ruby.xml
C:\WINDOWS\system32\ext\Notepad++\userDefineLang_winbatch.xml
C:\WINDOWS\system32\ext\Notepad++\v3.3fr
C:\WINDOWS\system32\ext\OGGVorbis\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\OGGVorbis\INSTALLER.cmd
C:\WINDOWS\system32\ext\OGGVorbis\ReadMe.txt
C:\WINDOWS\system32\ext\OGGVorbis\uninstall.inf
C:\WINDOWS\system32\ext\OGGVorbis\v1.0
C:\WINDOWS\system32\ext\OGGVorbis\Vorbis Ogg ACM Codec.url
C:\WINDOWS\system32\ext\OGGVorbis\vorbis.acm
C:\WINDOWS\system32\ext\OGGVorbis\vorbisacm.inf
C:\WINDOWS\system32\ext\Othello\Othello.exe
C:\WINDOWS\system32\ext\Othello\ReadMe.txt
C:\WINDOWS\system32\ext\Othello\v2.0
C:\WINDOWS\system32\ext\PathCopy\DESINSTALLER.cmd
C:\WINDO -
Contributeur sécuritétu as la fin du rapport combofix?
puis
colle le rapport d'un scan en ligne
avec un des suivants:
bitdefender en ligne :
http://www.bitdefender.fr/scan_fr/scan8/ie.html
Panda en ligne :
http://pandasoftware.fr
Kaspersky en ligne
https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr -
Voici le rapport :
----------------- FindyKill V3.095 ------------------
* User : Jeremy - JAY
* Emplacement : C:\Program Files\FindyKill
* Outils Mis a jours le 02/10/08 par Chiquitine29
* Recherche effectuée à 13:52:27 le 2008-10-06
* Windows XP - Internet Explorer 6.0.2900.2180
((((((((((((((((( *** Recherche *** ))))))))))))))))))
»»»» Presence des fichiers dans C:
»»»» Presence des fichiers dans C:\WINDOWS
»»»» Presence des fichiers dans C:\WINDOWS\Prefetch
»»»» Presence des fichiers dans C:\WINDOWS\system32
»»»» Presence des fichiers dans C:\WINDOWS\system32\drivers
»»»» Presence des fichiers dans C:\Documents and Settings\Jeremy\Application Data
»»»» Presence des fichiers dans C:\DOCUME~1\Jeremy\LOCALS~1\Temp
»»»» Registre :
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
SiSUSBRG REG_SZ C:\WINDOWS\SiSUSBrg.exe
NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
nwiz REG_SZ nwiz.exe /install
QuickTime Task REG_SZ "C:\Program Files\QuickTime\qttask.exe" -atboottime
CreativeTaskScheduler REG_SZ "C:\Program Files\Creative\Shared Files\CTSched.exe" /logon
NeroFilterCheck REG_SZ C:\WINDOWS\system32\NeroCheck.exe
NvMediaCenter REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
SoundMan REG_SZ SOUNDMAN.EXE
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents
! REG.EXE VERSION 3.0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
RestoreDesktop REG_SZ C:\WINDOWS\System32\Ext\RestoreDesktop\RestoreDesktop.exe
Google Update REG_SZ "C:\Documents and Settings\Jeremy\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
»»»» Presence d infections dans Support amovible :
----------------- ! Fin du rapport ! ------------------ -
Contributeur sécuritéil manque la fin du rapport!
puis
Telecharge FindyKill sur ton bureau :
--> http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe
--> Lance l installation avec les parametres par default
--> Double clic sur le raccourci FindyKill sur ton bureau
--> Au menu principal,choisi l option 1 (Recherche)
--> Post le rapport FindyKill.txt
Note : le rapport FindyKill.txt est sauvegardé a la racine du disque -
J'ai refais combo voici le rapport :
Je fais findykill
ComboFix 08-10-05.06 - Jeremy 2008-10-06 13:39:18.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.334 [GMT 2:00]
Lancé depuis: C:\Documents and Settings\Jeremy\Bureau\ComboFix.exe
[COLOR=RED][B]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/B][/COLOR]
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
C:\Documents and Settings\miolu\Application Data\install.dat
C:\Documents and Settings\miolu\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
C:\WINDOWS\regedit.com
C:\WINDOWS\system32\ext
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Aut2Exe\Aut2Exe.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Aut2Exe\AutoItSC.bin
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Aut2Exe\Exe2Aut.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\AutoIt.chm
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\AutoIt.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\_Run_Me_First.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\_ReadMe_.txt
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Adlib.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Calc.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Comspec.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\CPanel.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\DialUpNetworking.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Gosub.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\IfEqual.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Notepad.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Shutdown98.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Snapshot.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\BKRenamer\bkren.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\BKRenamer\bkren.txt
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\choice.com
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\choice.txt
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\deltree.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\NirCmd - Freeware command-line tool for Windows.mht
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\nircmd.chm
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\nircmd.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\nircmdc.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\RegCmd\readme.txt
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\RegCmd\regcmd.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\RegCmd\regcmd.ini
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\sleep.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\sleep.txt
C:\WINDOWS\system32\ext\+BONUS\BONUS_Lisez.moi.txt
C:\WINDOWS\system32\ext\+BONUS\CustomStart\CustomStart.exe
C:\WINDOWS\system32\ext\+BONUS\DeskProjection\DProj.exe
C:\WINDOWS\system32\ext\+BONUS\DeskProjection\Readme.txt
C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\dd.exe
C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\DoubleDesktop.url
C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\Readme.txt
C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\v2.0
C:\WINDOWS\system32\ext\+BONUS\ExpiredCookiesCleaner\Expired Cookies Cleaner.url
C:\WINDOWS\system32\ext\+BONUS\ExpiredCookiesCleaner\ExpiredCookiesCleaner.exe
C:\WINDOWS\system32\ext\+BONUS\ExpiredCookiesCleaner\ReadMe.txt
C:\WINDOWS\system32\ext\+BONUS\FileCHK\FileCHK.exe
C:\WINDOWS\system32\ext\+BONUS\FileCHK\readme.txt
C:\WINDOWS\system32\ext\+BONUS\FileCHK\Recover CHK Files.url
C:\WINDOWS\system32\ext\+BONUS\FileCHK\source.zip
C:\WINDOWS\system32\ext\+BONUS\FileCHK\v1.1.03
C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\Changes.txt
C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\Excludes.dat
C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\FocusAlpha.exe
C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\License.txt
C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.CNT
C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.exe
C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.hlp
C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.INI
C:\WINDOWS\system32\ext\+BONUS\InCtrl5\v1.0fr
C:\WINDOWS\system32\ext\+BONUS\MatroskaShellExtension\Matroska.url
C:\WINDOWS\system32\ext\+BONUS\MatroskaShellExtension\MatroskaShellExtension_2.8.exe
C:\WINDOWS\system32\ext\+BONUS\MIMEView\MIMEView.chm
C:\WINDOWS\system32\ext\+BONUS\MIMEView\MIMEView.exe
C:\WINDOWS\system32\ext\+BONUS\MIMEView\MIMEView.url
C:\WINDOWS\system32\ext\+BONUS\MIMEView\v1.10
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\about.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\about1.PNG
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\compatibilityissues.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusions.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusions1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusions2.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings2.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings3.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings4.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\features.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\frequentlyaskedquestions.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\generalsettings.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\generalsettings1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\gettingsupport.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\hotkeys.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\hotkeys1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\icon1.gif
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\icon2.gif
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\index.html
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\introduction.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\introduction1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\knownissues.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\left.html
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\settings.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thanks.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize2.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize3.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize4.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thumbnailsettings.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thumbnailsettings1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\what'snew.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Images\about.png
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Images\splash.png
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\miniMIZE.dll
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\miniMIZE.exe
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\miniMIZE.url
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Minimize_Settings.reg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\v1.0.34
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\buy.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\copyright.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\failed.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\faq.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\getplus.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\header.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\InTray.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\MemUsage.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\MmmCfg.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\NoMmmBar.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj103title20shd2pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj104geo247shd19pg5p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj105geo248pg5p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj107geo260shd20pg5p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj10geo29pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj110geo267shd21pg6p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj112geo105pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj113geo272shd22pg6p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj114geo273pg6p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj115geo114pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj116geo77pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj117geo107pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj124geo109shd27pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj127geo159shd26pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj139geo126shd28pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj143geo139shd29pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj190geo163pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj198geo172shd36pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj205geo187pg9p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj206geo188shd35pg9p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj208geo189pg10p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj208geo189pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj208geo189pg9p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj209geo190pg9p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj210geo168shd52pg10p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj212geo165shd46pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj216geo171pg10p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj217geo177pg10p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj218geo178pg10p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj219geo180shd38pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj220geo184pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj222geo185shd56pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj223geo183shd56pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj224geo182shd53pg10p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj225geo197shd37pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj22geo56shd7pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj231geo203shd39pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj232geo194pg9p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj236geo205shd54pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj243geo303shd40pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj247geo308shd41pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj258geo232pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj259geo235pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj261geo237pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj262geo249shd48pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj263geo236shd44pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj265geo238pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj269geo202shd45pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj274geo227shd47pg9p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj278geo246pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj281geo252shd58pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj314geo230pg12p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj315geo231shd59pg12p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj316geo287pg12p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj319geo292shd50pg13p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj321geo289shd60pg12p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj322geo290pg12p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj324geo233shd51pg13p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj325geo234pg13p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj327geo296pg13p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj330geo298pg13p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj331geo299shd61pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj332geo241pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj367title279pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj375title70pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj37geo72shd9pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj39geo73shd10pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj3geo19shd4pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj410geo264shd64pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj431title126pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj521geo433shd6pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj61geo62shd8pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj63geo33shd12pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj64geo34pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj66geo82shd13pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj73geo104pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj75geo127pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj76geo128pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj77geo129pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj7geo24pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj80geo80shd11pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj82geo57pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj83geo61shd24pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj84geo63pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj85title92pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj88geo103shd25pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj91title91pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj92geo216shd15pg4p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj93geo226pg4p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj94geo229shd16pg4p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj95title96pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj9geo28shd5pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\pluscfg.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PlusOptions'.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PlusOptions.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_BarColor.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_BeforeWildMenu.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_Folders.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_iecontext.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_iemenubar.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_IntroCfg.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_IntroMenu.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_MmmTaskbar.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_StartMenu.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_WildCfg.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_WildMenu.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\top.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\topleft.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\verify.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\x-click-but23.gif
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\index.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\licenses.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\mmmplus.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\new.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\screenshots.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\sending.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\success.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\whatsmmmplus.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\LANCER AU DEMARRAGE.cmd
C:\WINDOWS\system32\ext\+BONUS\Mmm\Mmm.dll
C:\WINDOWS\system32\ext\+BONUS\Mmm\Mmm.exe
C:\WINDOWS\system32\ext\+BONUS\Mmm\Mmm.url
C:\WINDOWS\system32\ext\+BONUS\Mmm\SUPPRIMER DU DEMARRAGE.cmd
C:\WINDOWS\system32\ext\+BONUS\Mmm\v2.02
C:\WINDOWS\system32\ext\+BONUS\OriMado\Demo JAVA\Concept originel Fold n' Drop.url
C:\WINDOWS\system32\ext\+BONUS\OriMado\Demo JAVA\foldndrop2.jar
C:\WINDOWS\system32\ext\+BONUS\OriMado\Demo JAVA\foldndrop2.txt
C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\background.png
C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado - kMonos.NET.url
C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado.dll
C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado.exe
C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado.ini
C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\ReadMe.txt
C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\data.clp
C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\data.qrp
C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\mclip.cnt
C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\mclip.exe
C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\MCLIP.HLP
C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\mclip.url
C:\WINDOWS\system32\ext\+BONUS\ProduKey\ProduKey.chm
C:\WINDOWS\system32\ext\+BONUS\ProduKey\ProduKey.url
C:\WINDOWS\system32\ext\+BONUS\ProduKey\ProduKey_lng.ini
C:\WINDOWS\system32\ext\+BONUS\ProduKey\readme.txt
C:\WINDOWS\system32\ext\+BONUS\ProduKey\v1.03fr
C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\INSTALLER.cmd
C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\Registry Explorer.url
C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\regxplor.dll
C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\v1.4.4
C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\Resize Enable.url
C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\ResizeEnable.dll
C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\ResizeEnable.txt
C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\ResizeEnableRunner.exe
C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\v1.4
C:\WINDOWS\system32\ext\+BONUS\RickDangerous\ReadMe.html
C:\WINDOWS\system32\ext\+BONUS\RickDangerous\RICK DANGEROUS Forever.url
C:\WINDOWS\system32\ext\+BONUS\RickDangerous\rick32kb.exe
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\actions.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\actions2.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\index.html
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\menu.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\menu2.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\menuc.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\options.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\sdesk.html
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\task.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\toolwin1.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\toolwin2.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\sdesk.dll
C:\WINDOWS\system32\ext\+BONUS\SDesk\sdesk.exe
C:\WINDOWS\system32\ext\+BONUS\SDesk\sdesk.ini
C:\WINDOWS\system32\ext\+BONUS\SDesk\v1.66s
C:\WINDOWS\system32\ext\+BONUS\SDesk\WINDOWS (copier sdesk.ini ici).lnk
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Empty.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Full.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Full2.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\led.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Skin.ini
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Empty.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Full.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Full2.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\led.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Skin.ini
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\frReadme.txt
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Language\English.ini
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Language\French.ini
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Empty.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Full.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Full2.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\led.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Skin.ini
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\SkinTrash.exe
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\SkinTrash.ini
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Empty.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Full.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Full2.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\led.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Skin.ini
C:\WINDOWS\system32\ext\+BONUS\SMPSeesaw (pour bi-proc)\readme.rtf
C:\WINDOWS\system32\ext\+BONUS\SMPSeesaw (pour bi-proc)\SMP Seesaw.exe
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\ApiHooks.dll
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\lisezmoi.txt
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\Psapi.Dll
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\SCConfig.exe
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\SCHook.dll
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\SuperCopier.exe
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\v1.35fr stable
C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\ConfigTsXP.exe
C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\lang\_Translation.txt
C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\lang\Français.lng
C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\TaskSwitchXP.exe
C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\TaskSwitchXP.url
C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\v2.0.8fr
C:\WINDOWS\system32\ext\+BONUS\TextGrabber\Lisez_moi.txt
C:\WINDOWS\system32\ext\+BONUS\TextGrabber\TextGrab.dll
C:\WINDOWS\system32\ext\+BONUS\TextGrabber\TextGrabber.exe
C:\WINDOWS\system32\ext\+BONUS\TextGrabber\TextGrabber.hlp
C:\WINDOWS\system32\ext\+BONUS\TextGrabber\v1.0
C:\WINDOWS\system32\ext\+BONUS\UberIcon\Data\About\About.ini
C:\WINDOWS\system32\ext\+BONUS\UberIcon\Data\About\About.png
C:\WINDOWS\system32\ext\+BONUS\UberIcon\Languages\1036.ini
C:\WINDOWS\system32\ext\+BONUS\UberIcon\Languages\LanguageID Finder.exe
C:\WINDOWS\system32\ext\+BONUS\UberIcon\Plugins\iBounce\fx.dll
C:\WINDOWS\system32\ext\+BONUS\UberIcon\Plugins\iZoom\fx.dll
C:\WINDOWS\system32\ext\+BONUS\UberIcon\UberIcon.dll
C:\WINDOWS\system32\ext\+BONUS\UberIcon\UberIcon.url
C:\WINDOWS\system32\ext\+BONUS\UberIcon\UberIconManager.exe
C:\WINDOWS\system32\ext\+BONUS\UberIcon\v1.0fr
C:\WINDOWS\system32\ext\+BONUS\xCap\README.txt
C:\WINDOWS\system32\ext\+BONUS\xCap\settings.ini
C:\WINDOWS\system32\ext\+BONUS\xCap\xCapV109.exe
C:\WINDOWS\system32\ext\A43\a43.dat
C:\WINDOWS\system32\ext\A43\A43.exe
C:\WINDOWS\system32\ext\A43\A43.ini
C:\WINDOWS\system32\ext\A43\A43.url
C:\WINDOWS\system32\ext\A43\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\A43\language.ini
C:\WINDOWS\system32\ext\A43\ReadMe.txt
C:\WINDOWS\system32\ext\A43\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\A43\unrar.dll
C:\WINDOWS\system32\ext\A43\v2.45fr
C:\WINDOWS\system32\ext\AllSnap\allSnap.chm
C:\WINDOWS\system32\ext\AllSnap\allSnap.exe
C:\WINDOWS\system32\ext\AllSnap\auto_lineup.dll
C:\WINDOWS\system32\ext\AllSnap\snap_libW.dll
C:\WINDOWS\system32\ext\AllSnap\v1.31.5fr
C:\WINDOWS\system32\ext\Applications.htm
C:\WINDOWS\system32\ext\Applications\A43.gif
C:\WINDOWS\system32\ext\Applications\allsnap01.gif
C:\WINDOWS\system32\ext\Applications\allsnap02.gif
C:\WINDOWS\system32\ext\Applications\allsnap03.gif
C:\WINDOWS\system32\ext\Applications\allsnap04.gif
C:\WINDOWS\system32\ext\Applications\AsteriskLogger.gif
C:\WINDOWS\system32\ext\Applications\audio01.gif
C:\WINDOWS\system32\ext\Applications\audio02.gif
C:\WINDOWS\system32\ext\Applications\Autoruns.gif
C:\WINDOWS\system32\ext\Applications\CatAutres.gif
C:\WINDOWS\system32\ext\Applications\CatDemarrage.gif
C:\WINDOWS\system32\ext\Applications\CatMenuDemarrer.gif
C:\WINDOWS\system32\ext\Applications\CatMenuFichiersDossiers.gif
C:\WINDOWS\system32\ext\Applications\CatMenuPosteTravail.gif
C:\WINDOWS\system32\ext\Applications\CatProprietesFichiersDossiers.gif
C:\WINDOWS\system32\ext\Applications\cdbfshell.gif
C:\WINDOWS\system32\ext\Applications\cliptray01.gif
C:\WINDOWS\system32\ext\Applications\cliptray02.gif
C:\WINDOWS\system32\ext\Applications\cliptray03.gif
C:\WINDOWS\system32\ext\Applications\cliptray04.gif
C:\WINDOWS\system32\ext\Applications\cliptray05.gif
C:\WINDOWS\system32\ext\Applications\clocx01.gif
C:\WINDOWS\system32\ext\Applications\clocx02.gif
C:\WINDOWS\system32\ext\Applications\clocx03.gif
C:\WINDOWS\system32\ext\Applications\clocx04.gif
C:\WINDOWS\system32\ext\Applications\coccinelle.gif
C:\WINDOWS\system32\ext\Applications\contextviewer1.gif
C:\WINDOWS\system32\ext\Applications\contextviewer2.gif
C:\WINDOWS\system32\ext\Applications\CopyURL.gif
C:\WINDOWS\system32\ext\Applications\CurrentPorts.gif
C:\WINDOWS\system32\ext\Applications\demineur.gif
C:\WINDOWS\system32\ext\Applications\dialog01.gif
C:\WINDOWS\system32\ext\Applications\dialog02.gif
C:\WINDOWS\system32\ext\Applications\dialog03.gif
C:\WINDOWS\system32\ext\Applications\disasteroids.gif
C:\WINDOWS\system32\ext\Applications\divx.gif
C:\WINDOWS\system32\ext\Applications\dmex01.gif
C:\WINDOWS\system32\ext\Applications\dmex02.gif
C:\WINDOWS\system32\ext\Applications\dmexcol.gif
C:\WINDOWS\system32\ext\Applications\doubledriver.gif
C:\WINDOWS\system32\ext\Applications\edithexa.gif
C:\WINDOWS\system32\ext\Applications\everest.gif
C:\WINDOWS\system32\ext\Applications\exif.gif
C:\WINDOWS\system32\ext\Applications\favoritesview.gif
C:\WINDOWS\system32\ext\Applications\febooticase.gif
C:\WINDOWS\system32\ext\Applications\febootihex.gif
C:\WINDOWS\system32\ext\Applications\filenote01.gif
C:\WINDOWS\system32\ext\Applications\filenote02.gif
C:\WINDOWS\system32\ext\Applications\filenote03.gif
C:\WINDOWS\system32\ext\Applications\flexiblerenamer.gif
C:\WINDOWS\system32\ext\Applications\foldersize.gif
C:\WINDOWS\system32\ext\Applications\fond.jpg
C:\WINDOWS\system32\ext\Applications\getfilesize1.gif
C:\WINDOWS\system32\ext\Applications\getfilesize2.gif
C:\WINDOWS\system32\ext\Applications\gmail01.gif
C:\WINDOWS\system32\ext\Applications\gmail02.gif
C:\WINDOWS\system32\ext\Applications\gmail03.gif
C:\WINDOWS\system32\ext\Applications\gmail04.gif
C:\WINDOWS\system32\ext\Applications\gotoshared.gif
C:\WINDOWS\system32\ext\Applications\hash.gif
C:\WINDOWS\system32\ext\Applications\IECookiesView.gif
C:\WINDOWS\system32\ext\Applications\IEHistoryView.gif
C:\WINDOWS\system32\ext\Applications\IEPrivacyKeeper1.gif
C:\WINDOWS\system32\ext\Applications\IEPrivacyKeeper2.gif
C:\WINDOWS\system32\ext\Applications\invaders1.gif
C:\WINDOWS\system32\ext\Applications\invaders2.gif
C:\WINDOWS\system32\ext\Applications\LabelFonctions.gif
C:\WINDOWS\system32\ext\Applications\LabelRepertoire.gif
C:\WINDOWS\system32\ext\Applications\LabelType.gif
C:\WINDOWS\system32\ext\Applications\menupostetravail.gif
C:\WINDOWS\system32\ext\Applications\messenpass.gif
C:\WINDOWS\system32\ext\Applications\mitecexec01.gif
C:\WINDOWS\system32\ext\Applications\mitecexec02.gif
C:\WINDOWS\system32\ext\Applications\mitecexec03.gif
C:\WINDOWS\system32\ext\Applications\mitecexec04.gif
C:\WINDOWS\system32\ext\Applications\mitecimage01.gif
C:\WINDOWS\system32\ext\Applications\mitecimage02.gif
C:\WINDOWS\system32\ext\Applications\mpv.gif
C:\WINDOWS\system32\ext\Applications\netpass.gif
C:\WINDOWS\system32\ext\Applications\notepad++.gif
C:\WINDOWS\system32\ext\Applications\Othello.gif
C:\WINDOWS\system32\ext\Applications\pathcopy.gif
C:\WINDOWS\system32\ext\Applications\phmBootLogo.dll..gif
C:\WINDOWS\system32\ext\Applications\phmFolderAppearance.dll.gif
C:\WINDOWS\system32\ext\Applications\phmFolderAppearance02.dll.gif
C:\WINDOWS\system32\ext\Applications\ProcessViewer.gif
C:\WINDOWS\system32\ext\Applications\propplus01.gif
C:\WINDOWS\system32\ext\Applications\propplus02.gif
C:\WINDOWS\system32\ext\Applications\pspad.gif
C:\WINDOWS\system32\ext\Applications\pspv.gif
C:\WINDOWS\system32\ext\Applications\regalyzer.gif
C:\WINDOWS\system32\ext\Applications\regcompact.gif
C:\WINDOWS\system32\ext\Applications\regseeker.gif
C:\WINDOWS\system32\ext\Applications\Regshot.gif
C:\WINDOWS\system32\ext\Applications\restoredesktop.gif
C:\WINDOWS\system32\ext\Applications\runwithparameters.gif
C:\WINDOWS\system32\ext\Applications\shellmenuview.gif
C:\WINDOWS\system32\ext\Applications\sherlock.gif
C:\WINDOWS\system32\ext\Applications\shortcutsman.gif
C:\WINDOWS\system32\ext\Applications\sizer1.gif
C:\WINDOWS\system32\ext\Applications\sizer2.gif
C:\WINDOWS\system32\ext\Applications\sizer3.gif
C:\WINDOWS\system32\ext\Applications\starter.gif
C:\WINDOWS\system32\ext\Applications\statbar01.gif
C:\WINDOWS\system32\ext\Applications\statbar02.gif
C:\WINDOWS\system32\ext\Applications\swf1.gif
C:\WINDOWS\system32\ext\Applications\swf2.gif
C:\WINDOWS\system32\ext\Applications\swf3.gif
C:\WINDOWS\system32\ext\Applications\swf4.gif
C:\WINDOWS\system32\ext\Applications\thumbview.gif
C:\WINDOWS\system32\ext\Applications\tri.gif
C:\WINDOWS\system32\ext\Applications\tugzip.gif
C:\WINDOWS\system32\ext\Applications\TypeDLL.gif
C:\WINDOWS\system32\ext\Applications\TypeEXE.gif
C:\WINDOWS\system32\ext\Applications\unlocker01.gif
C:\WINDOWS\system32\ext\Applications\unlocker02.gif
C:\WINDOWS\system32\ext\Applications\unlocker03.gif
C:\WINDOWS\system32\ext\Applications\whyreboot.gif
C:\WINDOWS\system32\ext\Applications\winroll.gif
C:\WINDOWS\system32\ext\Applications\winservices.gif
C:\WINDOWS\system32\ext\Applications\xnstop.gif
C:\WINDOWS\system32\ext\Applications\XPSP2+_Chrysalide_Widescreen.jpg
C:\WINDOWS\system32\ext\Applications\xvid.gif
C:\WINDOWS\system32\ext\Applications\yz01.gif
C:\WINDOWS\system32\ext\Applications\yz02.gif
C:\WINDOWS\system32\ext\Applications\yz02b.gif
C:\WINDOWS\system32\ext\Applications\yz03.gif
C:\WINDOWS\system32\ext\AsteriskLogger\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\AsteriskLogger\Asterisk Logger.url
C:\WINDOWS\system32\ext\AsteriskLogger\astlog.chm
C:\WINDOWS\system32\ext\AsteriskLogger\astlog_lng.ini
C:\WINDOWS\system32\ext\AsteriskLogger\ReadMe.txt
C:\WINDOWS\system32\ext\AsteriskLogger\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\AsteriskLogger\v1.02fr
C:\WINDOWS\system32\ext\Audioshellext\AudioShell.url
C:\WINDOWS\system32\ext\Audioshellext\AudioShellExt.dll
C:\WINDOWS\system32\ext\Audioshellext\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\Audioshellext\INSTALLER.cmd
C:\WINDOWS\system32\ext\Audioshellext\v1.0.1
C:\WINDOWS\system32\ext\Autoruns\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\Autoruns\autoruns.chm
C:\WINDOWS\system32\ext\Autoruns\autoruns.exe
C:\WINDOWS\system32\ext\Autoruns\Autoruns.url
C:\WINDOWS\system32\ext\Autoruns\autorunsc.exe
C:\WINDOWS\system32\ext\Autoruns\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\Autoruns\v8.42fr
C:\WINDOWS\system32\ext\CDBFShellExt\CDBF Shell Extension.url
C:\WINDOWS\system32\ext\CDBFShellExt\cdbfshell.dll
C:\WINDOWS\system32\ext\CDBFShellExt\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\CDBFShellExt\exemple.dbf
C:\WINDOWS\system32\ext\CDBFShellExt\INSTALLER.cmd
C:\WINDOWS\system32\ext\CDBFShellExt\readme.txt
C:\WINDOWS\system32\ext\CDBFShellExt\v1.0fr
C:\WINDOWS\system32\ext\ClipTray\ClipTray.chm
C:\WINDOWS\system32\ext\ClipTray\ClipTray.exe
C:\WINDOWS\system32\ext\ClipTray\ClipTray.ini
C:\WINDOWS\system32\ext\ClipTray\ClipTray.url
C:\WINDOWS\system32\ext\ClipTray\Personal.dat
C:\WINDOWS\system32\ext\ClipTray\v1.61fr
C:\WINDOWS\system32\ext\ClocX\ClocX.exe
C:\WINDOWS\system32\ext\ClocX\ClocX.url
C:\WINDOWS\system32\ext\ClocX\Lang\French.lng
C:\WINDOWS\system32\ext\ClocX\Presets\BlueSphere2.png
C:\WINDOWS\system32\ext\ClocX\Presets\CloQ.ini
C:\WINDOWS\system32\ext\ClocX\Presets\CloQ.png
C:\WINDOWS\system32\ext\ClocX\Presets\default.bmp
C:\WINDOWS\system32\ext\ClocX\Presets\default.ini
C:\WINDOWS\system32\ext\ClocX\Presets\GlowMarvilla.png
C:\WINDOWS\system32\ext\ClocX\Presets\Snowball Clock.png
C:\WINDOWS\system32\ext\ClocX\Presets\street.ini
C:\WINDOWS\system32\ext\ClocX\Presets\street.png
C:\WINDOWS\system32\ext\ClocX\Presets\streethour.hpng
C:\WINDOWS\system32\ext\ClocX\Presets\streetmin.hpng
C:\WINDOWS\system32\ext\ClocX\ReadMe.txt
C:\WINDOWS\system32\ext\ClocX\v1.5.1fr
C:\WINDOWS\system32\ext\ContextViewer\Context Viewer.url
C:\WINDOWS\system32\ext\ContextViewer\ContView.exe
C:\WINDOWS\system32\ext\ContextViewer\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\ContextViewer\INSTALLER.cmd
C:\WINDOWS\system32\ext\ContextViewer\plugins\AXZIP.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\AXZIP.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifDIB.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFGIF.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifgif.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFJPEG.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifjpeg.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFMAG.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFMAG.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPI.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPI.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC2.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC2.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifpict.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifSunRAS.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifTGA.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFTIFF.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\iftiff.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifTIFF6.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifWMF.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFXLD4.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFXLD4.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\LHASAD.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\LHASAD.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\LZR.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\LZRP.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.clw
C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.dsp
C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.dsw
C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.rc
C:\WINDOWS\system32\ext\ContextViewer\ReadMe.txt
C:\WINDOWS\system32\ext\ContextViewer\v1.41fr
C:\WINDOWS\system32\ext\CopyURL\CopyURL.dll
C:\WINDOWS\system32\ext\CopyURL\CopyURL.txt
C:\WINDOWS\system32\ext\CopyURL\CopyURL.url
C:\WINDOWS\system32\ext\CopyURL\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\CopyURL\INSTALLER.cmd
C:\WINDOWS\system32\ext\CopyURL\ReadMe.txt
C:\WINDOWS\system32\ext\CopyURL\v2.31fr
C:\WINDOWS\system32\ext\CurrentPorts\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\CurrentPorts\cports.chm
C:\WINDOWS\system32\ext\CurrentPorts\cports.exe
C:\WINDOWS\system32\ext\CurrentPorts\cports_lng.ini
C:\WINDOWS\system32\ext\CurrentPorts\CurrPorts.url
C:\WINDOWS\system32\ext\CurrentPorts\readme.txt
C:\WINDOWS\system32\ext\CurrentPorts\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\CurrentPorts\v1.07fr
C:\WINDOWS\system32\ext\DialogBoxAssistant\Dialog Box Assistant.url
C:\WINDOWS\system32\ext\DialogBoxAssistant\OSDEx.chm
C:\WINDOWS\system32\ext\DialogBoxAssistant\OSDEx.exe
C:\WINDOWS\system32\ext\DialogBoxAssistant\OSDExLib.dll
C:\WINDOWS\system32\ext\DialogBoxAssistant\ReadMe.txt
C:\WINDOWS\system32\ext\DialogBoxAssistant\v1.1fr
C:\WINDOWS\system32\ext\Disasteroids3D\Disasteroids 3D.url
C:\WINDOWS\system32\ext\Disasteroids3D\Disasteroids3D.cfg
C:\WINDOWS\system32\ext\Disasteroids3D\disasteroids3d.dat
C:\WINDOWS\system32\ext\Disasteroids3D\Disasteroids3D.exe
C:\WINDOWS\system32\ext\Divx\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\Divx\DivX.url
C:\WINDOWS\system32\ext\Divx\Divxconfig.exe
C:\WINDOWS\system32\ext\Divx\divxdec.ax
C:\WINDOWS\system32\ext\Divx\INSTALLER.cmd
C:\WINDOWS\system32\ext\Divx\v5.0.5 (dernière compatible VirtualDub)
C:\WINDOWS\system32\ext\DmexBar\allemand.lng
C:\WINDOWS\system32\ext\DmexBar\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\DmexBar\Deutsch.lng
C:\WINDOWS\system32\ext\DmexBar\dmexalign.exe
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange all horizontal.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange all vertical.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange two horizontal.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange two vertical.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Restore positions.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Save position and minimize.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Save position.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexbar.dll
C:\WINDOWS\system32\ext\DmexBar\dmexbar.dll.manifest
C:\WINDOWS\system32\ext\DmexBar\DMEXBAR.HLP
C:\WINDOWS\system32\ext\DmexBar\dmexbar.ini
C:\WINDOWS\system32\ext\DmexBar\DmexBar.url
C:\WINDOWS\system32\ext\DmexBar\INSTALLER.cmd
C:\WINDOWS\system32\ext\DmexBar\unsplit.exe
C:\WINDOWS\system32\ext\DmexBar\UnzDll.dll
C:\WINDOWS\system32\ext\DmexBar\v10
C:\WINDOWS\system32\ext\DmexBar\viewer.exe
C:\WINDOWS\system32\ext\DmexBar\viewer.ini
C:\WINDOWS\system32\ext\DmexBar\ZipDll.dll
C:\WINDOWS\system32\ext\DmexCol\DESINSTALLER.reg
C:\WINDOWS\system32\ext\DmexCol\DmexBar.url
C:\WINDOWS\system32\ext\DmexCol\dmexcol.dll
C:\WINDOWS\system32\ext\DmexCol\dmexcol.hlp
C:\WINDOWS\system32\ext\DmexCol\INSTALLER.cmd
C:\WINDOWS\system32\ext\DmexCol\v11fr
C:\WINDOWS\system32\ext\DoubleDriver\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\DoubleDriver\dd.chm
C:\WINDOWS\system32\ext\DoubleDriver\dd.exe
C:\WINDOWS\system32\ext\DoubleDriver\dd.ini
C:\WINDOWS\system32\ext\DoubleDriver\Double Driver.url
C:\WINDOWS\system32\ext\DoubleDriver\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\DoubleDriver\v1.0
C:\WINDOWS\system32\ext\EasyRead\AJOUTER A LA BARRE DE BOUTONS.cmd
C:\WINDOWS\system32\ext\EasyRead\EasyRead.cmd
C:\WINDOWS\system32\ext\EasyRead\EasyRead.gif
C:\WINDOWS\system32\ext\EasyRead\EasyRead.url
C:\WINDOWS\system32\ext\EasyRead\Iconico.ico
C:\WINDOWS\system32\ext\EasyRead\ShellExec.exe
C:\WINDOWS\system32\ext\EasyRead\SUPPRIMER DE LA BARRE DE BOUTONS.cmd
C:\WINDOWS\system32\ext\EasyRead\ZoomIn.ico
C:\WINDOWS\system32\ext\EasyRead\ZoomIn.js
C:\WINDOWS\system32\ext\EasyRead\ZoomOut.ico
C:\WINDOWS\system32\ext\EasyRead\ZoomOut.js
C:\WINDOWS\system32\ext\Everest\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\Everest\everest.bin
C:\WINDOWS\system32\ext\Everest\everest.chm
C:\WINDOWS\system32\ext\Everest\everest.dat
C:\WINDOWS\system32\ext\Everest\everest.exe
C:\WINDOWS\system32\ext\Everest\everest.mem
C:\WINDOWS\system32\ext\Everest\everest.web
C:\WINDOWS\system32\ext\Everest\everest_cpl.cpl
C:\WINDOWS\system32\ext\Everest\everest_icons.dll
C:\WINDOWS\system32\ext\Everest\everest_memlat.dll
C:\WINDOWS\system32\ext\Everest\everest_xpicons.dll
C:\WINDOWS\system32\ext\Everest\everest_zipdll.dll
C:\WINDOWS\system32\ext\Everest\kerneld.amd64
C:\WINDOWS\system32\ext\Everest\kerneld.ia64
C:\WINDOWS\system32\ext\Everest\kerneld.w9x
C:\WINDOWS\system32\ext\Everest\kerneld.wnt
C:\WINDOWS\system32\ext\Everest\Language\lang_fr.txt
C:\WINDOWS\system32\ext\Everest\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\Everest\v2.20fr
C:\WINDOWS\system32\ext\Exif\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\Exif\Exif Shell Extension.url
C:\WINDOWS\system32\ext\Exif\exif.dll
C:\WINDOWS\system32\ext\Exif\INSTALLER.cmd
C:\WINDOWS\system32\ext\Exif\v1.02
C:\WINDOWS\system32\ext\FavoritesView\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\FavoritesView\faview.chm
C:\WINDOWS\system32\ext\FavoritesView\faview.exe
C:\WINDOWS\system32\ext\FavoritesView\faview_lng.ini
C:\WINDOWS\system32\ext\FavoritesView\FavoritesView.url
C:\WINDOWS\system32\ext\FavoritesView\ReadMe.txt
C:\WINDOWS\system32\ext\FavoritesView\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\FavoritesView\v1.0fr
C:\WINDOWS\system32\ext\FebootiCase\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\FebootiCase\fCase.dll
C:\WINDOWS\system32\ext\FebootiCase\Febooti.url
C:\WINDOWS\system32\ext\FebootiCase\INSTALLER.cmd
C:\WINDOWS\system32\ext\FebootiCase\Traduction française par club83 du forum xpcoccinelle.free.fr
C:\WINDOWS\system32\ext\FebootiCase\V1.1fr
C:\WINDOWS\system32\ext\FebootiHex\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\FebootiHex\Febooti.url
C:\WINDOWS\system32\ext\FebootiHex\fHex.dll
C:\WINDOWS\system32\ext\FebootiHex\INSTALLER.cmd
C:\WINDOWS\system32\ext\FebootiHex\Traduction française par club83 du forum xpcoccinelle.free.fr
C:\WINDOWS\system32\ext\FebootiHex\V1.0fr
C:\WINDOWS\system32\ext\Filenote\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\Filenote\FileNote.dll
C:\WINDOWS\system32\ext\Filenote\FileNote.url
C:\WINDOWS\system32\ext\Filenote\INSTALLER.cmd
C:\WINDOWS\system32\ext\Filenote\ReadMe.txt
C:\WINDOWS\system32\ext\Filenote\v1.0
C:\WINDOWS\system32\ext\FlexibleRenamer\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.exe
C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.exe.manifest
C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.ini
C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.url
C:\WINDOWS\system32\ext\FlexibleRenamer\HistoryEN.txt
C:\WINDOWS\system32\ext\FlexibleRenamer\PresetEN.ini
C:\WINDOWS\system32\ext\FlexibleRenamer\ReadMeEN.txt
C:\WINDOWS\system32\ext\FlexibleRenamer\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\FlexibleRenamer\v7.3
C:\WINDOWS\system32\ext\FolderSize\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\FolderSize\Folder Size.url
C:\WINDOWS\system32\ext\FolderSize\FolderSize.msi
C:\WINDOWS\system32\ext\FolderSize\fr\FolderSizeColumn.dll
C:\WINDOWS\system32\ext\FolderSize\INSTALLER.cmd
C:\WINDOWS\system32\ext\FolderSize\v2.1fr
C:\WINDOWS\system32\ext\GetFileSize\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\GetFileSize\Get File Size.url
C:\WINDOWS\system32\ext\GetFileSize\GetFileSize.exe
C:\WINDOWS\system32\ext\GetFileSize\gfs.chm
C:\WINDOWS\system32\ext\GetFileSize\INSTALLER.cmd
C:\WINDOWS\system32\ext\GetFileSize\v2.2
C:\WINDOWS\system32\ext\Gmail\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\Gmail\Gmail Drive en francais.url
C:\WINDOWS\system32\ext\Gmail\GMail Drive shell extension.url
C:\WINDOWS\system32\ext\Gmail\GMailFS.cnt
C:\WINDOWS\system32\ext\Gmail\GMailFS.dll
C:\WINDOWS\system32\ext\Gmail\GMailFS.hlp
C:\WINDOWS\system32\ext\Gmail\INSTALLER.cmd
C:\WINDOWS\system32\ext\Gmail\v1.0.9fr
C:\WINDOWS\system32\ext\GotoShared\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\GotoShared\GoTo Shared.url
C:\WINDOWS\system32\ext\GotoShared\GotoShared.exe
C:\WINDOWS\system32\ext\GotoShared\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\GotoShared\v1.0fr
C:\WINDOWS\system32\ext\HashTab\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\HashTab\HashTab Shell Extension.url
C:\WINDOWS\system32\ext\HashTab\HashTab.dll
C:\WINDOWS\system32\ext\HashTab\INSTALLER.cmd
C:\WINDOWS\system32\ext\HashTab\v1.7fr
C:\WINDOWS\system32\ext\Icones_Cocci.cmd
C:\WINDOWS\system32\ext\Icones_Cocci.reg
C:\WINDOWS\system32\ext\Icones_XP.cmd
C:\WINDOWS\system32\ext\Icones_XP.reg
C:\WINDOWS\system32\ext\IECookiesView\ads.txt
C:\WINDOWS\system32\ext\IECookiesView\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\IECookiesView\IECookiesView.url
C:\WINDOWS\system32\ext\IECookiesView\iecv.chm
C:\WINDOWS\system32\ext\IECookiesView\iecv.exe
C:\WINDOWS\system32\ext\IECookiesView\iecv_lng.ini
C:\WINDOWS\system32\ext\IECookiesView\ReadMe.txt
C:\WINDOWS\system32\ext\IECookiesView\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\IECookiesView\v1.70fr
C:\WINDOWS\system32\ext\IEHistoryView\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\IEHistoryView\IEHistoryView.url
C:\WINDOWS\system32\ext\IEHistoryView\iehv.chm
C:\WINDOWS\system32\ext\IEHistoryView\iehv.exe
C:\WINDOWS\system32\ext\IEHistoryView\iehv_lng.ini
C:\WINDOWS\system32\ext\IEHistoryView\ReadMe.txt
C:\WINDOWS\system32\ext\IEHistoryView\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\IEHistoryView\v1.30fr
C:\WINDOWS\system32\ext\IEPrivacyKeeper\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\IEPrivacyKeeper\dbghelp.dll
C:\WINDOWS\system32\ext\IEPrivacyKeeper\hgc.ani
C:\WINDOWS\system32\ext\IEPrivacyKeeper\IE Privacy Keeper.url
C:\WINDOWS\system32\ext\IEPrivacyKeeper\iepk.ico
C:\WINDOWS\system32\ext\IEPrivacyKeeper\iepk.wav
C:\WINDOWS\system32\ext\IEPrivacyKeeper\IEPrivacyKeeper.exe
C:\WINDOWS\system32\ext\IEPrivacyKeeper\Lang\French.lng
C:\WINDOWS\system32\ext\IEPrivacyKeeper\license_fr.txt
C:\WINDOWS\system32\ext\IEPrivacyKeeper\ntqsi.dll
C:\WINDOWS\system32\ext\IEPrivacyKeeper\SecureDelete.dll
C:\WINDOWS\system32\ext\IEPrivacyKeeper\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\IEPrivacyKeeper\UnHCrashReport.exe
C:\WINDOWS\system32\ext\IEPrivacyKeeper\v2.7.2fr
C:\WINDOWS\system32\ext\MailPassView\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\MailPassView\Lisez-moi.txt
C:\WINDOWS\system32\ext\MailPassView\mailpv.chm
C:\WINDOWS\system32\ext\MailPassView\mailpv_lng.ini
C:\WINDOWS\system32\ext\MailPassView\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\MailPassView\v1.32fr
C:\WINDOWS\system32\ext\MessenPass\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\MessenPass\mspass.chm
C:\WINDOWS\system32\ext\MessenPass\mspass_lng.ini
C:\WINDOWS\system32\ext\MessenPass\ReadMe.txt
C:\WINDOWS\system32\ext\MessenPass\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\MessenPass\v1.04fr
C:\WINDOWS\system32\ext\Minesweeper3D\docs\cubes-screenshot.png
C:\WINDOWS\system32\ext\Minesweeper3D\docs\dodeca-screenshot.png
C:\WINDOWS\system32\ext\Minesweeper3D\docs\index.html
C:\WINDOWS\system32\ext\Minesweeper3D\docs\mail.png
C:\WINDOWS\system32\ext\Minesweeper3D\docs\sprites-screenshot.png
C:\WINDOWS\system32\ext\Minesweeper3D\Minesweeper 3D.url
C:\WINDOWS\system32\ext\Minesweeper3D\Minesweeper3D.exe
C:\WINDOWS\system32\ext\Minesweeper3D\Minesweeper3D.ico
C:\WINDOWS\system32\ext\Minesweeper3D\mingwm10.dll
C:\WINDOWS\system32\ext\Minesweeper3D\saves\screenshot
C:\WINDOWS\system32\ext\Minesweeper3D\settings\default
C:\WINDOWS\system32\ext\Minesweeper3D\skins\default\fields.png
C:\WINDOWS\system32\ext\Minesweeper3D\skins\default\tiled.png
C:\WINDOWS\system32\ext\Minesweeper3D\skins\sprites\fields.png
C:\WINDOWS\system32\ext\Minesweeper3D\skins\sprites\tiled.png
C:\WINDOWS\system32\ext\Minesweeper3D\skins\transolid\fields.png
C:\WINDOWS\system32\ext\Minesweeper3D\skins\transolid\tiled.png
C:\WINDOWS\system32\ext\Minesweeper3D\v2005-01-10
C:\WINDOWS\system32\ext\MitecExec\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\MitecExec\INSTALLER.cmd
C:\WINDOWS\system32\ext\MitecExec\MiTeC Shell Extension Pack.url
C:\WINDOWS\system32\ext\MitecExec\MPEISE.dll
C:\WINDOWS\system32\ext\MitecExec\ReadMe.txt
C:\WINDOWS\system32\ext\MitecExec\v3.2
C:\WINDOWS\system32\ext\MitecImage\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\MitecImage\INSTALLER.cmd
C:\WINDOWS\system32\ext\MitecImage\MIPSE.dll
C:\WINDOWS\system32\ext\MitecImage\MiTeC Shell Extension Pack.url
C:\WINDOWS\system32\ext\MitecImage\ReadMe.txt
C:\WINDOWS\system32\ext\MitecImage\v3.2
C:\WINDOWS\system32\ext\MP3Lame\ACM codec version of Lame MP3 encoder.url
C:\WINDOWS\system32\ext\MP3Lame\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\MP3Lame\INSTALLER.cmd
C:\WINDOWS\system32\ext\MP3Lame\lame.exe
C:\WINDOWS\system32\ext\MP3Lame\lame_acm.xml
C:\WINDOWS\system32\ext\MP3Lame\lame_enc.dll
C:\WINDOWS\system32\ext\MP3Lame\lameACM.acm
C:\WINDOWS\system32\ext\MP3Lame\LameACM.inf
C:\WINDOWS\system32\ext\MP3Lame\v3.96
C:\WINDOWS\system32\ext\NetPass\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\NetPass\netpass.chm
C:\WINDOWS\system32\ext\NetPass\netpass.exe
C:\WINDOWS\system32\ext\NetPass\netpass_lng.ini
C:\WINDOWS\system32\ext\NetPass\Network Password Recovery.url
C:\WINDOWS\system32\ext\NetPass\ReadMe.txt
C:\WINDOWS\system32\ext\NetPass\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\NetPass\v1.02fr
C:\WINDOWS\system32\ext\Notepad++\config.xml
C:\WINDOWS\system32\ext\Notepad++\contextMenu.xml
C:\WINDOWS\system32\ext\Notepad++\doLocalConf.xml
C:\WINDOWS\system32\ext\Notepad++\Icons\blank.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\close_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\close_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\close_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\closeAll_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\closeAll_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\closeAll_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\copy_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\copy_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\copy_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\cut_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\cut_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\cut_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\fileopen_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\fileopen_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\find_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\find_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\indent_guideline_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\indent_guideline_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\invisible_char_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\invisible_char_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\new_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\new_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\paste_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\paste_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\paste_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\playback_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\playback_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\print_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\print_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\record_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\redo_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\redo_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\redo_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\replace_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\replace_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\replace_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\save_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\save_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\save_makro_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\save_makro_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\save_makro_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\save_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\saveAll_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\saveAll_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\saveAll_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\stop_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\stop_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\undo_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\undo_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\undo_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\viewDlg_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\viewDlg_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\wrap_text_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\wrap_text_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\zoomIn_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\zoomIn_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\zoomOut_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\zoomOut_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\close_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\close_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\close_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\closeAll_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\closeAll_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\closeAll_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\copy_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\copy_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\copy_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\cut_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\cut_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\cut_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\fileopen_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\fileopen_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\find_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\find_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\new_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\new_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\paste_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\paste_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\paste_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\print_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\print_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\readme.txt
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\redo_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\redo_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\redo_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\replace_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\replace_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\replace_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\save_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\save_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\save_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\saveAll_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\saveAll_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\saveAll_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\toolbarIcons.xml
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\undo_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\undo_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\undo_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\viewDlg_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\viewDlg_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomIn_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomIn_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomOut_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomOut_normal.ico
C:\WINDOWS\system32\ext\Notepad++\insertExt.ini
C:\WINDOWS\system32\ext\Notepad++\langs.xml
C:\WINDOWS\system32\ext\Notepad++\license.txt
C:\WINDOWS\system32\ext\Notepad++\LINEDRAW.TTF
C:\WINDOWS\system32\ext\Notepad++\nativeLang.xml
C:\WINDOWS\system32\ext\Notepad++\notepad++.exe
C:\WINDOWS\system32\ext\Notepad++\Notepad++.url
C:\WINDOWS\system32\ext\Notepad++\NppLauncher\1 - dllcache.lnk
C:\WINDOWS\system32\ext\Notepad++\NppLauncher\2 - system32.lnk
C:\WINDOWS\system32\ext\Notepad++\NppLauncher\3 - WINDOWS.lnk
C:\WINDOWS\system32\ext\Notepad++\NppLauncher\notepad.exe
C:\WINDOWS\system32\ext\Notepad++\NppLauncher\readme.txt
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\c.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\cpp.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\css.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\flash.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\java.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\javascript.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\lisp.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\perl.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\php.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\python.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\vb.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\vhdl.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\winbatch.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\xml.api
C:\WINDOWS\system32\ext\Notepad++\plugins\NppInsertPlugin.dll
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX.dll
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX.ini
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\AsciiToEBCDIC.bin
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\libTidy.dll
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\NPPTextFXdemo.TXT
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\TIDYCFG.INI
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\W3C-CSSValidator.htm
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\W3C-HTMLValidator.htm
C:\WINDOWS\system32\ext\Notepad++\plugins\XMLCheck.dll
C:\WINDOWS\system32\ext\Notepad++\ReadMe.txt
C:\WINDOWS\system32\ext\Notepad++\SciLexer.dll
C:\WINDOWS\system32\ext\Notepad++\shortcuts.xml
C:\WINDOWS\system32\ext\Notepad++\stylers.xml
C:\WINDOWS\system32\ext\Notepad++\toolbarIcons.xml
C:\WINDOWS\system32\ext\Notepad++\userDefineLang_ruby.xml
C:\WINDOWS\system32\ext\Notepad++\userDefineLang_winbatch.xml
C:\WINDOWS\system32\ext\Notepad++\v3.3fr
C:\WINDOWS\system32\ext\OGGVorbis\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\OGGVorbis\INSTALLER.cmd
C:\WINDOWS\system32\ext\OGGVorbis\ReadMe.txt
C:\WINDOWS\system32\ext\OGGVorbis\uninstall.inf
C:\WINDOWS\system32\ext\OGGVorbis\v1.0
C:\WINDOWS\system32\ext\OGGVorbis\Vorbis Ogg ACM Codec.url
C:\WINDOWS\system32\ext\OGGVorbis\vorbis.acm
C:\WINDOWS\system32\ext\OGGVorbis\vorbisacm.inf
C:\WINDOWS\system32\ext\Othello\Othello.exe
C:\WINDOWS\system32\ext\Othello\ReadMe.txt
C:\WINDOWS\system32\ext\Othello\v2.0
C:\WINDOWS\system32\ext\PathCopy\ -
Contributeur sécuritéok refais combofix et colle le rapport
entier cette fois
puis
Telecharge FindyKill sur ton bureau :
--> http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe
--> Lance l installation avec les parametres par default
--> Double clic sur le raccourci FindyKill sur ton bureau
--> Au menu principal,choisi l option 1 (Recherche)
--> Post le rapport FindyKill.txt
Note : le rapport FindyKill.txt est sauvegardé a la racine du disque -
Voila le rapport il est assez enorme :
ComboFix 08-10-05.06 - Jeremy 2008-10-06 12:56:00.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.331 [GMT 2:00]
Lancé depuis: C:\Documents and Settings\Jeremy\Bureau\ComboFix.exe
* Un nouveau point de restauration a été créé
[COLOR=RED][B]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/B][/COLOR]
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\miolu\Application Data\install.dat
C:\Documents and Settings\miolu\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
C:\WINDOWS\regedit.com
C:\WINDOWS\system32\ext
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Aut2Exe\Aut2Exe.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Aut2Exe\AutoItSC.bin
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Aut2Exe\Exe2Aut.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\AutoIt.chm
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\AutoIt.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\_Run_Me_First.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\_ReadMe_.txt
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Adlib.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Calc.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Comspec.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\CPanel.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\DialUpNetworking.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Gosub.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\IfEqual.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Notepad.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Shutdown98.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\AutoIt_2.64\Examples\English\Snapshot.aut
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\BKRenamer\bkren.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\BKRenamer\bkren.txt
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\choice.com
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\choice.txt
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\deltree.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\NirCmd - Freeware command-line tool for Windows.mht
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\nircmd.chm
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\nircmd.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\NirCmd v1.80 - Freeware command-line tool\nircmdc.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\RegCmd\readme.txt
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\RegCmd\regcmd.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\RegCmd\regcmd.ini
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\sleep.exe
C:\WINDOWS\system32\ext\+BONUS\+ UTILS EN LIGNE DE COMMANDE\sleep.txt
C:\WINDOWS\system32\ext\+BONUS\BONUS_Lisez.moi.txt
C:\WINDOWS\system32\ext\+BONUS\CustomStart\CustomStart.exe
C:\WINDOWS\system32\ext\+BONUS\DeskProjection\DProj.exe
C:\WINDOWS\system32\ext\+BONUS\DeskProjection\Readme.txt
C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\dd.exe
C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\DoubleDesktop.url
C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\Readme.txt
C:\WINDOWS\system32\ext\+BONUS\DoubleDesktop\v2.0
C:\WINDOWS\system32\ext\+BONUS\ExpiredCookiesCleaner\Expired Cookies Cleaner.url
C:\WINDOWS\system32\ext\+BONUS\ExpiredCookiesCleaner\ExpiredCookiesCleaner.exe
C:\WINDOWS\system32\ext\+BONUS\ExpiredCookiesCleaner\ReadMe.txt
C:\WINDOWS\system32\ext\+BONUS\FileCHK\FileCHK.exe
C:\WINDOWS\system32\ext\+BONUS\FileCHK\readme.txt
C:\WINDOWS\system32\ext\+BONUS\FileCHK\Recover CHK Files.url
C:\WINDOWS\system32\ext\+BONUS\FileCHK\source.zip
C:\WINDOWS\system32\ext\+BONUS\FileCHK\v1.1.03
C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\Changes.txt
C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\Excludes.dat
C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\FocusAlpha.exe
C:\WINDOWS\system32\ext\+BONUS\FocusAlpha\License.txt
C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.CNT
C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.exe
C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.hlp
C:\WINDOWS\system32\ext\+BONUS\InCtrl5\InCtrl5.INI
C:\WINDOWS\system32\ext\+BONUS\InCtrl5\v1.0fr
C:\WINDOWS\system32\ext\+BONUS\MatroskaShellExtension\Matroska.url
C:\WINDOWS\system32\ext\+BONUS\MatroskaShellExtension\MatroskaShellExtension_2.8.exe
C:\WINDOWS\system32\ext\+BONUS\MIMEView\MIMEView.chm
C:\WINDOWS\system32\ext\+BONUS\MIMEView\MIMEView.exe
C:\WINDOWS\system32\ext\+BONUS\MIMEView\MIMEView.url
C:\WINDOWS\system32\ext\+BONUS\MIMEView\v1.10
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\about.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\about1.PNG
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\compatibilityissues.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusions.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusions1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusions2.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings2.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings3.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\exclusionsettings4.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\features.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\frequentlyaskedquestions.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\generalsettings.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\generalsettings1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\gettingsupport.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\hotkeys.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\hotkeys1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\icon1.gif
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\icon2.gif
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\index.html
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\introduction.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\introduction1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\knownissues.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\left.html
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\settings.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thanks.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize2.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize3.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thepartsofminimize4.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thumbnailsettings.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\thumbnailsettings1.jpg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Help\what'snew.htm
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Images\about.png
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Images\splash.png
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\miniMIZE.dll
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\miniMIZE.exe
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\miniMIZE.url
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\Minimize_Settings.reg
C:\WINDOWS\system32\ext\+BONUS\miniMIZE\v1.0.34
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\buy.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\copyright.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\failed.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\faq.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\getplus.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\header.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\InTray.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\MemUsage.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\MmmCfg.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\NoMmmBar.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj103title20shd2pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj104geo247shd19pg5p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj105geo248pg5p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj107geo260shd20pg5p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj10geo29pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj110geo267shd21pg6p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj112geo105pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj113geo272shd22pg6p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj114geo273pg6p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj115geo114pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj116geo77pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj117geo107pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj124geo109shd27pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj127geo159shd26pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj139geo126shd28pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj143geo139shd29pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj190geo163pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj198geo172shd36pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj205geo187pg9p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj206geo188shd35pg9p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj208geo189pg10p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj208geo189pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj208geo189pg9p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj209geo190pg9p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj210geo168shd52pg10p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj212geo165shd46pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj216geo171pg10p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj217geo177pg10p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj218geo178pg10p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj219geo180shd38pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj220geo184pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj222geo185shd56pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj223geo183shd56pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj224geo182shd53pg10p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj225geo197shd37pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj22geo56shd7pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj231geo203shd39pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj232geo194pg9p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj236geo205shd54pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj243geo303shd40pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj247geo308shd41pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj258geo232pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj259geo235pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj261geo237pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj262geo249shd48pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj263geo236shd44pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj265geo238pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj269geo202shd45pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj274geo227shd47pg9p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj278geo246pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj281geo252shd58pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj314geo230pg12p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj315geo231shd59pg12p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj316geo287pg12p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj319geo292shd50pg13p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj321geo289shd60pg12p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj322geo290pg12p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj324geo233shd51pg13p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj325geo234pg13p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj327geo296pg13p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj330geo298pg13p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj331geo299shd61pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj332geo241pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj367title279pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj375title70pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj37geo72shd9pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj39geo73shd10pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj3geo19shd4pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj410geo264shd64pg11p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj431title126pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj521geo433shd6pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj61geo62shd8pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj63geo33shd12pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj64geo34pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj66geo82shd13pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj73geo104pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj75geo127pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj76geo128pg3p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj77geo129pg1p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj7geo24pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj80geo80shd11pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj82geo57pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj83geo61shd24pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj84geo63pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj85title92pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj88geo103shd25pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj91title91pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj92geo216shd15pg4p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj93geo226pg4p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj94geo229shd16pg4p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj95title96pg7p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\obj9geo28shd5pg2p13.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\pluscfg.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PlusOptions'.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PlusOptions.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_BarColor.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_BeforeWildMenu.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_Folders.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_iecontext.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_iemenubar.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_IntroCfg.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_IntroMenu.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_MmmTaskbar.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_StartMenu.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_WildCfg.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\PNG_WildMenu.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\top.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\topleft.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\verify.png
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\Images\x-click-but23.gif
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\index.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\licenses.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\mmmplus.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\new.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\screenshots.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\sending.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\success.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\Help\whatsmmmplus.html
C:\WINDOWS\system32\ext\+BONUS\Mmm\LANCER AU DEMARRAGE.cmd
C:\WINDOWS\system32\ext\+BONUS\Mmm\Mmm.dll
C:\WINDOWS\system32\ext\+BONUS\Mmm\Mmm.exe
C:\WINDOWS\system32\ext\+BONUS\Mmm\Mmm.url
C:\WINDOWS\system32\ext\+BONUS\Mmm\SUPPRIMER DU DEMARRAGE.cmd
C:\WINDOWS\system32\ext\+BONUS\Mmm\v2.02
C:\WINDOWS\system32\ext\+BONUS\OriMado\Demo JAVA\Concept originel Fold n' Drop.url
C:\WINDOWS\system32\ext\+BONUS\OriMado\Demo JAVA\foldndrop2.jar
C:\WINDOWS\system32\ext\+BONUS\OriMado\Demo JAVA\foldndrop2.txt
C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\background.png
C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado - kMonos.NET.url
C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado.dll
C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado.exe
C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\OriMado.ini
C:\WINDOWS\system32\ext\+BONUS\OriMado\Executable Windows\ReadMe.txt
C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\data.clp
C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\data.qrp
C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\mclip.cnt
C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\mclip.exe
C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\MCLIP.HLP
C:\WINDOWS\system32\ext\+BONUS\Oscar's MiniCLIP\mclip.url
C:\WINDOWS\system32\ext\+BONUS\ProduKey\ProduKey.chm
C:\WINDOWS\system32\ext\+BONUS\ProduKey\ProduKey.url
C:\WINDOWS\system32\ext\+BONUS\ProduKey\ProduKey_lng.ini
C:\WINDOWS\system32\ext\+BONUS\ProduKey\readme.txt
C:\WINDOWS\system32\ext\+BONUS\ProduKey\v1.03fr
C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\INSTALLER.cmd
C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\Registry Explorer.url
C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\regxplor.dll
C:\WINDOWS\system32\ext\+BONUS\RegistryExplorer\v1.4.4
C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\Resize Enable.url
C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\ResizeEnable.dll
C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\ResizeEnable.txt
C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\ResizeEnableRunner.exe
C:\WINDOWS\system32\ext\+BONUS\ResizeEnable\v1.4
C:\WINDOWS\system32\ext\+BONUS\RickDangerous\ReadMe.html
C:\WINDOWS\system32\ext\+BONUS\RickDangerous\RICK DANGEROUS Forever.url
C:\WINDOWS\system32\ext\+BONUS\RickDangerous\rick32kb.exe
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\actions.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\actions2.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\index.html
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\menu.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\menu2.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\menuc.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\options.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\sdesk.html
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\task.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\toolwin1.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\Doc\toolwin2.png
C:\WINDOWS\system32\ext\+BONUS\SDesk\sdesk.dll
C:\WINDOWS\system32\ext\+BONUS\SDesk\sdesk.exe
C:\WINDOWS\system32\ext\+BONUS\SDesk\sdesk.ini
C:\WINDOWS\system32\ext\+BONUS\SDesk\v1.66s
C:\WINDOWS\system32\ext\+BONUS\SDesk\WINDOWS (copier sdesk.ini ici).lnk
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Empty.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Full.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Full2.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\led.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Default\Skin.ini
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Empty.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Full.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Full2.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\led.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Digital\Skin.ini
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\frReadme.txt
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Language\English.ini
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\Language\French.ini
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Empty.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Full.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Full2.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\led.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\NeXT\Skin.ini
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\SkinTrash.exe
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\SkinTrash.ini
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Empty.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Full.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Full2.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\led.bmp
C:\WINDOWS\system32\ext\+BONUS\SkinTrash\XP\Skin.ini
C:\WINDOWS\system32\ext\+BONUS\SMPSeesaw (pour bi-proc)\readme.rtf
C:\WINDOWS\system32\ext\+BONUS\SMPSeesaw (pour bi-proc)\SMP Seesaw.exe
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\ApiHooks.dll
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\lisezmoi.txt
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\Psapi.Dll
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\SCConfig.exe
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\SCHook.dll
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\SuperCopier.exe
C:\WINDOWS\system32\ext\+BONUS\SuperCopier\v1.35fr stable
C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\ConfigTsXP.exe
C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\lang\_Translation.txt
C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\lang\Français.lng
C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\TaskSwitchXP.exe
C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\TaskSwitchXP.url
C:\WINDOWS\system32\ext\+BONUS\TaskSwitchXP\v2.0.8fr
C:\WINDOWS\system32\ext\+BONUS\TextGrabber\Lisez_moi.txt
C:\WINDOWS\system32\ext\+BONUS\TextGrabber\TextGrab.dll
C:\WINDOWS\system32\ext\+BONUS\TextGrabber\TextGrabber.exe
C:\WINDOWS\system32\ext\+BONUS\TextGrabber\TextGrabber.hlp
C:\WINDOWS\system32\ext\+BONUS\TextGrabber\v1.0
C:\WINDOWS\system32\ext\+BONUS\UberIcon\Data\About\About.ini
C:\WINDOWS\system32\ext\+BONUS\UberIcon\Data\About\About.png
C:\WINDOWS\system32\ext\+BONUS\UberIcon\Languages\1036.ini
C:\WINDOWS\system32\ext\+BONUS\UberIcon\Languages\LanguageID Finder.exe
C:\WINDOWS\system32\ext\+BONUS\UberIcon\Plugins\iBounce\fx.dll
C:\WINDOWS\system32\ext\+BONUS\UberIcon\Plugins\iZoom\fx.dll
C:\WINDOWS\system32\ext\+BONUS\UberIcon\UberIcon.dll
C:\WINDOWS\system32\ext\+BONUS\UberIcon\UberIcon.url
C:\WINDOWS\system32\ext\+BONUS\UberIcon\UberIconManager.exe
C:\WINDOWS\system32\ext\+BONUS\UberIcon\v1.0fr
C:\WINDOWS\system32\ext\+BONUS\xCap\README.txt
C:\WINDOWS\system32\ext\+BONUS\xCap\settings.ini
C:\WINDOWS\system32\ext\+BONUS\xCap\xCapV109.exe
C:\WINDOWS\system32\ext\A43\a43.dat
C:\WINDOWS\system32\ext\A43\A43.exe
C:\WINDOWS\system32\ext\A43\A43.ini
C:\WINDOWS\system32\ext\A43\A43.url
C:\WINDOWS\system32\ext\A43\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\A43\language.ini
C:\WINDOWS\system32\ext\A43\ReadMe.txt
C:\WINDOWS\system32\ext\A43\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\A43\unrar.dll
C:\WINDOWS\system32\ext\A43\v2.45fr
C:\WINDOWS\system32\ext\AllSnap\allSnap.chm
C:\WINDOWS\system32\ext\AllSnap\allSnap.exe
C:\WINDOWS\system32\ext\AllSnap\auto_lineup.dll
C:\WINDOWS\system32\ext\AllSnap\snap_libW.dll
C:\WINDOWS\system32\ext\AllSnap\v1.31.5fr
C:\WINDOWS\system32\ext\Applications.htm
C:\WINDOWS\system32\ext\Applications\A43.gif
C:\WINDOWS\system32\ext\Applications\allsnap01.gif
C:\WINDOWS\system32\ext\Applications\allsnap02.gif
C:\WINDOWS\system32\ext\Applications\allsnap03.gif
C:\WINDOWS\system32\ext\Applications\allsnap04.gif
C:\WINDOWS\system32\ext\Applications\AsteriskLogger.gif
C:\WINDOWS\system32\ext\Applications\audio01.gif
C:\WINDOWS\system32\ext\Applications\audio02.gif
C:\WINDOWS\system32\ext\Applications\Autoruns.gif
C:\WINDOWS\system32\ext\Applications\CatAutres.gif
C:\WINDOWS\system32\ext\Applications\CatDemarrage.gif
C:\WINDOWS\system32\ext\Applications\CatMenuDemarrer.gif
C:\WINDOWS\system32\ext\Applications\CatMenuFichiersDossiers.gif
C:\WINDOWS\system32\ext\Applications\CatMenuPosteTravail.gif
C:\WINDOWS\system32\ext\Applications\CatProprietesFichiersDossiers.gif
C:\WINDOWS\system32\ext\Applications\cdbfshell.gif
C:\WINDOWS\system32\ext\Applications\cliptray01.gif
C:\WINDOWS\system32\ext\Applications\cliptray02.gif
C:\WINDOWS\system32\ext\Applications\cliptray03.gif
C:\WINDOWS\system32\ext\Applications\cliptray04.gif
C:\WINDOWS\system32\ext\Applications\cliptray05.gif
C:\WINDOWS\system32\ext\Applications\clocx01.gif
C:\WINDOWS\system32\ext\Applications\clocx02.gif
C:\WINDOWS\system32\ext\Applications\clocx03.gif
C:\WINDOWS\system32\ext\Applications\clocx04.gif
C:\WINDOWS\system32\ext\Applications\coccinelle.gif
C:\WINDOWS\system32\ext\Applications\contextviewer1.gif
C:\WINDOWS\system32\ext\Applications\contextviewer2.gif
C:\WINDOWS\system32\ext\Applications\CopyURL.gif
C:\WINDOWS\system32\ext\Applications\CurrentPorts.gif
C:\WINDOWS\system32\ext\Applications\demineur.gif
C:\WINDOWS\system32\ext\Applications\dialog01.gif
C:\WINDOWS\system32\ext\Applications\dialog02.gif
C:\WINDOWS\system32\ext\Applications\dialog03.gif
C:\WINDOWS\system32\ext\Applications\disasteroids.gif
C:\WINDOWS\system32\ext\Applications\divx.gif
C:\WINDOWS\system32\ext\Applications\dmex01.gif
C:\WINDOWS\system32\ext\Applications\dmex02.gif
C:\WINDOWS\system32\ext\Applications\dmexcol.gif
C:\WINDOWS\system32\ext\Applications\doubledriver.gif
C:\WINDOWS\system32\ext\Applications\edithexa.gif
C:\WINDOWS\system32\ext\Applications\everest.gif
C:\WINDOWS\system32\ext\Applications\exif.gif
C:\WINDOWS\system32\ext\Applications\favoritesview.gif
C:\WINDOWS\system32\ext\Applications\febooticase.gif
C:\WINDOWS\system32\ext\Applications\febootihex.gif
C:\WINDOWS\system32\ext\Applications\filenote01.gif
C:\WINDOWS\system32\ext\Applications\filenote02.gif
C:\WINDOWS\system32\ext\Applications\filenote03.gif
C:\WINDOWS\system32\ext\Applications\flexiblerenamer.gif
C:\WINDOWS\system32\ext\Applications\foldersize.gif
C:\WINDOWS\system32\ext\Applications\fond.jpg
C:\WINDOWS\system32\ext\Applications\getfilesize1.gif
C:\WINDOWS\system32\ext\Applications\getfilesize2.gif
C:\WINDOWS\system32\ext\Applications\gmail01.gif
C:\WINDOWS\system32\ext\Applications\gmail02.gif
C:\WINDOWS\system32\ext\Applications\gmail03.gif
C:\WINDOWS\system32\ext\Applications\gmail04.gif
C:\WINDOWS\system32\ext\Applications\gotoshared.gif
C:\WINDOWS\system32\ext\Applications\hash.gif
C:\WINDOWS\system32\ext\Applications\IECookiesView.gif
C:\WINDOWS\system32\ext\Applications\IEHistoryView.gif
C:\WINDOWS\system32\ext\Applications\IEPrivacyKeeper1.gif
C:\WINDOWS\system32\ext\Applications\IEPrivacyKeeper2.gif
C:\WINDOWS\system32\ext\Applications\invaders1.gif
C:\WINDOWS\system32\ext\Applications\invaders2.gif
C:\WINDOWS\system32\ext\Applications\LabelFonctions.gif
C:\WINDOWS\system32\ext\Applications\LabelRepertoire.gif
C:\WINDOWS\system32\ext\Applications\LabelType.gif
C:\WINDOWS\system32\ext\Applications\menupostetravail.gif
C:\WINDOWS\system32\ext\Applications\messenpass.gif
C:\WINDOWS\system32\ext\Applications\mitecexec01.gif
C:\WINDOWS\system32\ext\Applications\mitecexec02.gif
C:\WINDOWS\system32\ext\Applications\mitecexec03.gif
C:\WINDOWS\system32\ext\Applications\mitecexec04.gif
C:\WINDOWS\system32\ext\Applications\mitecimage01.gif
C:\WINDOWS\system32\ext\Applications\mitecimage02.gif
C:\WINDOWS\system32\ext\Applications\mpv.gif
C:\WINDOWS\system32\ext\Applications\netpass.gif
C:\WINDOWS\system32\ext\Applications\notepad++.gif
C:\WINDOWS\system32\ext\Applications\Othello.gif
C:\WINDOWS\system32\ext\Applications\pathcopy.gif
C:\WINDOWS\system32\ext\Applications\phmBootLogo.dll..gif
C:\WINDOWS\system32\ext\Applications\phmFolderAppearance.dll.gif
C:\WINDOWS\system32\ext\Applications\phmFolderAppearance02.dll.gif
C:\WINDOWS\system32\ext\Applications\ProcessViewer.gif
C:\WINDOWS\system32\ext\Applications\propplus01.gif
C:\WINDOWS\system32\ext\Applications\propplus02.gif
C:\WINDOWS\system32\ext\Applications\pspad.gif
C:\WINDOWS\system32\ext\Applications\pspv.gif
C:\WINDOWS\system32\ext\Applications\regalyzer.gif
C:\WINDOWS\system32\ext\Applications\regcompact.gif
C:\WINDOWS\system32\ext\Applications\regseeker.gif
C:\WINDOWS\system32\ext\Applications\Regshot.gif
C:\WINDOWS\system32\ext\Applications\restoredesktop.gif
C:\WINDOWS\system32\ext\Applications\runwithparameters.gif
C:\WINDOWS\system32\ext\Applications\shellmenuview.gif
C:\WINDOWS\system32\ext\Applications\sherlock.gif
C:\WINDOWS\system32\ext\Applications\shortcutsman.gif
C:\WINDOWS\system32\ext\Applications\sizer1.gif
C:\WINDOWS\system32\ext\Applications\sizer2.gif
C:\WINDOWS\system32\ext\Applications\sizer3.gif
C:\WINDOWS\system32\ext\Applications\starter.gif
C:\WINDOWS\system32\ext\Applications\statbar01.gif
C:\WINDOWS\system32\ext\Applications\statbar02.gif
C:\WINDOWS\system32\ext\Applications\swf1.gif
C:\WINDOWS\system32\ext\Applications\swf2.gif
C:\WINDOWS\system32\ext\Applications\swf3.gif
C:\WINDOWS\system32\ext\Applications\swf4.gif
C:\WINDOWS\system32\ext\Applications\thumbview.gif
C:\WINDOWS\system32\ext\Applications\tri.gif
C:\WINDOWS\system32\ext\Applications\tugzip.gif
C:\WINDOWS\system32\ext\Applications\TypeDLL.gif
C:\WINDOWS\system32\ext\Applications\TypeEXE.gif
C:\WINDOWS\system32\ext\Applications\unlocker01.gif
C:\WINDOWS\system32\ext\Applications\unlocker02.gif
C:\WINDOWS\system32\ext\Applications\unlocker03.gif
C:\WINDOWS\system32\ext\Applications\whyreboot.gif
C:\WINDOWS\system32\ext\Applications\winroll.gif
C:\WINDOWS\system32\ext\Applications\winservices.gif
C:\WINDOWS\system32\ext\Applications\xnstop.gif
C:\WINDOWS\system32\ext\Applications\XPSP2+_Chrysalide_Widescreen.jpg
C:\WINDOWS\system32\ext\Applications\xvid.gif
C:\WINDOWS\system32\ext\Applications\yz01.gif
C:\WINDOWS\system32\ext\Applications\yz02.gif
C:\WINDOWS\system32\ext\Applications\yz02b.gif
C:\WINDOWS\system32\ext\Applications\yz03.gif
C:\WINDOWS\system32\ext\AsteriskLogger\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\AsteriskLogger\Asterisk Logger.url
C:\WINDOWS\system32\ext\AsteriskLogger\astlog.chm
C:\WINDOWS\system32\ext\AsteriskLogger\astlog_lng.ini
C:\WINDOWS\system32\ext\AsteriskLogger\ReadMe.txt
C:\WINDOWS\system32\ext\AsteriskLogger\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\AsteriskLogger\v1.02fr
C:\WINDOWS\system32\ext\Audioshellext\AudioShell.url
C:\WINDOWS\system32\ext\Audioshellext\AudioShellExt.dll
C:\WINDOWS\system32\ext\Audioshellext\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\Audioshellext\INSTALLER.cmd
C:\WINDOWS\system32\ext\Audioshellext\v1.0.1
C:\WINDOWS\system32\ext\Autoruns\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\Autoruns\autoruns.chm
C:\WINDOWS\system32\ext\Autoruns\autoruns.exe
C:\WINDOWS\system32\ext\Autoruns\Autoruns.url
C:\WINDOWS\system32\ext\Autoruns\autorunsc.exe
C:\WINDOWS\system32\ext\Autoruns\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\Autoruns\v8.42fr
C:\WINDOWS\system32\ext\CDBFShellExt\CDBF Shell Extension.url
C:\WINDOWS\system32\ext\CDBFShellExt\cdbfshell.dll
C:\WINDOWS\system32\ext\CDBFShellExt\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\CDBFShellExt\exemple.dbf
C:\WINDOWS\system32\ext\CDBFShellExt\INSTALLER.cmd
C:\WINDOWS\system32\ext\CDBFShellExt\readme.txt
C:\WINDOWS\system32\ext\CDBFShellExt\v1.0fr
C:\WINDOWS\system32\ext\ClipTray\ClipTray.chm
C:\WINDOWS\system32\ext\ClipTray\ClipTray.exe
C:\WINDOWS\system32\ext\ClipTray\ClipTray.ini
C:\WINDOWS\system32\ext\ClipTray\ClipTray.url
C:\WINDOWS\system32\ext\ClipTray\Personal.dat
C:\WINDOWS\system32\ext\ClipTray\v1.61fr
C:\WINDOWS\system32\ext\ClocX\ClocX.exe
C:\WINDOWS\system32\ext\ClocX\ClocX.url
C:\WINDOWS\system32\ext\ClocX\Lang\French.lng
C:\WINDOWS\system32\ext\ClocX\Presets\BlueSphere2.png
C:\WINDOWS\system32\ext\ClocX\Presets\CloQ.ini
C:\WINDOWS\system32\ext\ClocX\Presets\CloQ.png
C:\WINDOWS\system32\ext\ClocX\Presets\default.bmp
C:\WINDOWS\system32\ext\ClocX\Presets\default.ini
C:\WINDOWS\system32\ext\ClocX\Presets\GlowMarvilla.png
C:\WINDOWS\system32\ext\ClocX\Presets\Snowball Clock.png
C:\WINDOWS\system32\ext\ClocX\Presets\street.ini
C:\WINDOWS\system32\ext\ClocX\Presets\street.png
C:\WINDOWS\system32\ext\ClocX\Presets\streethour.hpng
C:\WINDOWS\system32\ext\ClocX\Presets\streetmin.hpng
C:\WINDOWS\system32\ext\ClocX\ReadMe.txt
C:\WINDOWS\system32\ext\ClocX\v1.5.1fr
C:\WINDOWS\system32\ext\ContextViewer\Context Viewer.url
C:\WINDOWS\system32\ext\ContextViewer\ContView.exe
C:\WINDOWS\system32\ext\ContextViewer\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\ContextViewer\INSTALLER.cmd
C:\WINDOWS\system32\ext\ContextViewer\plugins\AXZIP.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\AXZIP.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifDIB.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFGIF.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifgif.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFJPEG.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifjpeg.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFMAG.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFMAG.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPI.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPI.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC2.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFPIC2.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifpict.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifSunRAS.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifTGA.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFTIFF.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\iftiff.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifTIFF6.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\ifWMF.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFXLD4.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\IFXLD4.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\LHASAD.PLG
C:\WINDOWS\system32\ext\ContextViewer\plugins\LHASAD.SPI
C:\WINDOWS\system32\ext\ContextViewer\plugins\LZR.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\LZRP.spi
C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.clw
C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.dsp
C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.dsw
C:\WINDOWS\system32\ext\ContextViewer\plugins\UseSPI.rc
C:\WINDOWS\system32\ext\ContextViewer\ReadMe.txt
C:\WINDOWS\system32\ext\ContextViewer\v1.41fr
C:\WINDOWS\system32\ext\CopyURL\CopyURL.dll
C:\WINDOWS\system32\ext\CopyURL\CopyURL.txt
C:\WINDOWS\system32\ext\CopyURL\CopyURL.url
C:\WINDOWS\system32\ext\CopyURL\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\CopyURL\INSTALLER.cmd
C:\WINDOWS\system32\ext\CopyURL\ReadMe.txt
C:\WINDOWS\system32\ext\CopyURL\v2.31fr
C:\WINDOWS\system32\ext\CurrentPorts\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\CurrentPorts\cports.chm
C:\WINDOWS\system32\ext\CurrentPorts\cports.exe
C:\WINDOWS\system32\ext\CurrentPorts\cports_lng.ini
C:\WINDOWS\system32\ext\CurrentPorts\CurrPorts.url
C:\WINDOWS\system32\ext\CurrentPorts\readme.txt
C:\WINDOWS\system32\ext\CurrentPorts\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\CurrentPorts\v1.07fr
C:\WINDOWS\system32\ext\DialogBoxAssistant\Dialog Box Assistant.url
C:\WINDOWS\system32\ext\DialogBoxAssistant\OSDEx.chm
C:\WINDOWS\system32\ext\DialogBoxAssistant\OSDEx.exe
C:\WINDOWS\system32\ext\DialogBoxAssistant\OSDExLib.dll
C:\WINDOWS\system32\ext\DialogBoxAssistant\ReadMe.txt
C:\WINDOWS\system32\ext\DialogBoxAssistant\v1.1fr
C:\WINDOWS\system32\ext\Disasteroids3D\Disasteroids 3D.url
C:\WINDOWS\system32\ext\Disasteroids3D\Disasteroids3D.cfg
C:\WINDOWS\system32\ext\Disasteroids3D\disasteroids3d.dat
C:\WINDOWS\system32\ext\Disasteroids3D\Disasteroids3D.exe
C:\WINDOWS\system32\ext\Divx\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\Divx\DivX.url
C:\WINDOWS\system32\ext\Divx\Divxconfig.exe
C:\WINDOWS\system32\ext\Divx\divxdec.ax
C:\WINDOWS\system32\ext\Divx\INSTALLER.cmd
C:\WINDOWS\system32\ext\Divx\v5.0.5 (dernière compatible VirtualDub)
C:\WINDOWS\system32\ext\DmexBar\allemand.lng
C:\WINDOWS\system32\ext\DmexBar\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\DmexBar\Deutsch.lng
C:\WINDOWS\system32\ext\DmexBar\dmexalign.exe
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange all horizontal.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange all vertical.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange two horizontal.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Arrange two vertical.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Restore positions.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Save position and minimize.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexalign\Save position.lnk
C:\WINDOWS\system32\ext\DmexBar\dmexbar.dll
C:\WINDOWS\system32\ext\DmexBar\dmexbar.dll.manifest
C:\WINDOWS\system32\ext\DmexBar\DMEXBAR.HLP
C:\WINDOWS\system32\ext\DmexBar\dmexbar.ini
C:\WINDOWS\system32\ext\DmexBar\DmexBar.url
C:\WINDOWS\system32\ext\DmexBar\INSTALLER.cmd
C:\WINDOWS\system32\ext\DmexBar\unsplit.exe
C:\WINDOWS\system32\ext\DmexBar\UnzDll.dll
C:\WINDOWS\system32\ext\DmexBar\v10
C:\WINDOWS\system32\ext\DmexBar\viewer.exe
C:\WINDOWS\system32\ext\DmexBar\viewer.ini
C:\WINDOWS\system32\ext\DmexBar\ZipDll.dll
C:\WINDOWS\system32\ext\DmexCol\DESINSTALLER.reg
C:\WINDOWS\system32\ext\DmexCol\DmexBar.url
C:\WINDOWS\system32\ext\DmexCol\dmexcol.dll
C:\WINDOWS\system32\ext\DmexCol\dmexcol.hlp
C:\WINDOWS\system32\ext\DmexCol\INSTALLER.cmd
C:\WINDOWS\system32\ext\DmexCol\v11fr
C:\WINDOWS\system32\ext\DoubleDriver\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\DoubleDriver\dd.chm
C:\WINDOWS\system32\ext\DoubleDriver\dd.exe
C:\WINDOWS\system32\ext\DoubleDriver\dd.ini
C:\WINDOWS\system32\ext\DoubleDriver\Double Driver.url
C:\WINDOWS\system32\ext\DoubleDriver\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\DoubleDriver\v1.0
C:\WINDOWS\system32\ext\EasyRead\AJOUTER A LA BARRE DE BOUTONS.cmd
C:\WINDOWS\system32\ext\EasyRead\EasyRead.cmd
C:\WINDOWS\system32\ext\EasyRead\EasyRead.gif
C:\WINDOWS\system32\ext\EasyRead\EasyRead.url
C:\WINDOWS\system32\ext\EasyRead\Iconico.ico
C:\WINDOWS\system32\ext\EasyRead\ShellExec.exe
C:\WINDOWS\system32\ext\EasyRead\SUPPRIMER DE LA BARRE DE BOUTONS.cmd
C:\WINDOWS\system32\ext\EasyRead\ZoomIn.ico
C:\WINDOWS\system32\ext\EasyRead\ZoomIn.js
C:\WINDOWS\system32\ext\EasyRead\ZoomOut.ico
C:\WINDOWS\system32\ext\EasyRead\ZoomOut.js
C:\WINDOWS\system32\ext\Everest\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\Everest\everest.bin
C:\WINDOWS\system32\ext\Everest\everest.chm
C:\WINDOWS\system32\ext\Everest\everest.dat
C:\WINDOWS\system32\ext\Everest\everest.exe
C:\WINDOWS\system32\ext\Everest\everest.mem
C:\WINDOWS\system32\ext\Everest\everest.web
C:\WINDOWS\system32\ext\Everest\everest_cpl.cpl
C:\WINDOWS\system32\ext\Everest\everest_icons.dll
C:\WINDOWS\system32\ext\Everest\everest_memlat.dll
C:\WINDOWS\system32\ext\Everest\everest_xpicons.dll
C:\WINDOWS\system32\ext\Everest\everest_zipdll.dll
C:\WINDOWS\system32\ext\Everest\kerneld.amd64
C:\WINDOWS\system32\ext\Everest\kerneld.ia64
C:\WINDOWS\system32\ext\Everest\kerneld.w9x
C:\WINDOWS\system32\ext\Everest\kerneld.wnt
C:\WINDOWS\system32\ext\Everest\Language\lang_fr.txt
C:\WINDOWS\system32\ext\Everest\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\Everest\v2.20fr
C:\WINDOWS\system32\ext\Exif\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\Exif\Exif Shell Extension.url
C:\WINDOWS\system32\ext\Exif\exif.dll
C:\WINDOWS\system32\ext\Exif\INSTALLER.cmd
C:\WINDOWS\system32\ext\Exif\v1.02
C:\WINDOWS\system32\ext\FavoritesView\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\FavoritesView\faview.chm
C:\WINDOWS\system32\ext\FavoritesView\faview.exe
C:\WINDOWS\system32\ext\FavoritesView\faview_lng.ini
C:\WINDOWS\system32\ext\FavoritesView\FavoritesView.url
C:\WINDOWS\system32\ext\FavoritesView\ReadMe.txt
C:\WINDOWS\system32\ext\FavoritesView\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\FavoritesView\v1.0fr
C:\WINDOWS\system32\ext\FebootiCase\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\FebootiCase\fCase.dll
C:\WINDOWS\system32\ext\FebootiCase\Febooti.url
C:\WINDOWS\system32\ext\FebootiCase\INSTALLER.cmd
C:\WINDOWS\system32\ext\FebootiCase\Traduction française par club83 du forum xpcoccinelle.free.fr
C:\WINDOWS\system32\ext\FebootiCase\V1.1fr
C:\WINDOWS\system32\ext\FebootiHex\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\FebootiHex\Febooti.url
C:\WINDOWS\system32\ext\FebootiHex\fHex.dll
C:\WINDOWS\system32\ext\FebootiHex\INSTALLER.cmd
C:\WINDOWS\system32\ext\FebootiHex\Traduction française par club83 du forum xpcoccinelle.free.fr
C:\WINDOWS\system32\ext\FebootiHex\V1.0fr
C:\WINDOWS\system32\ext\Filenote\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\Filenote\FileNote.dll
C:\WINDOWS\system32\ext\Filenote\FileNote.url
C:\WINDOWS\system32\ext\Filenote\INSTALLER.cmd
C:\WINDOWS\system32\ext\Filenote\ReadMe.txt
C:\WINDOWS\system32\ext\Filenote\v1.0
C:\WINDOWS\system32\ext\FlexibleRenamer\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.exe
C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.exe.manifest
C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.ini
C:\WINDOWS\system32\ext\FlexibleRenamer\Flexible Renamer.url
C:\WINDOWS\system32\ext\FlexibleRenamer\HistoryEN.txt
C:\WINDOWS\system32\ext\FlexibleRenamer\PresetEN.ini
C:\WINDOWS\system32\ext\FlexibleRenamer\ReadMeEN.txt
C:\WINDOWS\system32\ext\FlexibleRenamer\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\FlexibleRenamer\v7.3
C:\WINDOWS\system32\ext\FolderSize\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\FolderSize\Folder Size.url
C:\WINDOWS\system32\ext\FolderSize\FolderSize.msi
C:\WINDOWS\system32\ext\FolderSize\fr\FolderSizeColumn.dll
C:\WINDOWS\system32\ext\FolderSize\INSTALLER.cmd
C:\WINDOWS\system32\ext\FolderSize\v2.1fr
C:\WINDOWS\system32\ext\GetFileSize\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\GetFileSize\Get File Size.url
C:\WINDOWS\system32\ext\GetFileSize\GetFileSize.exe
C:\WINDOWS\system32\ext\GetFileSize\gfs.chm
C:\WINDOWS\system32\ext\GetFileSize\INSTALLER.cmd
C:\WINDOWS\system32\ext\GetFileSize\v2.2
C:\WINDOWS\system32\ext\Gmail\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\Gmail\Gmail Drive en francais.url
C:\WINDOWS\system32\ext\Gmail\GMail Drive shell extension.url
C:\WINDOWS\system32\ext\Gmail\GMailFS.cnt
C:\WINDOWS\system32\ext\Gmail\GMailFS.dll
C:\WINDOWS\system32\ext\Gmail\GMailFS.hlp
C:\WINDOWS\system32\ext\Gmail\INSTALLER.cmd
C:\WINDOWS\system32\ext\Gmail\v1.0.9fr
C:\WINDOWS\system32\ext\GotoShared\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\GotoShared\GoTo Shared.url
C:\WINDOWS\system32\ext\GotoShared\GotoShared.exe
C:\WINDOWS\system32\ext\GotoShared\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\GotoShared\v1.0fr
C:\WINDOWS\system32\ext\HashTab\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\HashTab\HashTab Shell Extension.url
C:\WINDOWS\system32\ext\HashTab\HashTab.dll
C:\WINDOWS\system32\ext\HashTab\INSTALLER.cmd
C:\WINDOWS\system32\ext\HashTab\v1.7fr
C:\WINDOWS\system32\ext\Icones_Cocci.cmd
C:\WINDOWS\system32\ext\Icones_Cocci.reg
C:\WINDOWS\system32\ext\Icones_XP.cmd
C:\WINDOWS\system32\ext\Icones_XP.reg
C:\WINDOWS\system32\ext\IECookiesView\ads.txt
C:\WINDOWS\system32\ext\IECookiesView\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\IECookiesView\IECookiesView.url
C:\WINDOWS\system32\ext\IECookiesView\iecv.chm
C:\WINDOWS\system32\ext\IECookiesView\iecv.exe
C:\WINDOWS\system32\ext\IECookiesView\iecv_lng.ini
C:\WINDOWS\system32\ext\IECookiesView\ReadMe.txt
C:\WINDOWS\system32\ext\IECookiesView\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\IECookiesView\v1.70fr
C:\WINDOWS\system32\ext\IEHistoryView\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\IEHistoryView\IEHistoryView.url
C:\WINDOWS\system32\ext\IEHistoryView\iehv.chm
C:\WINDOWS\system32\ext\IEHistoryView\iehv.exe
C:\WINDOWS\system32\ext\IEHistoryView\iehv_lng.ini
C:\WINDOWS\system32\ext\IEHistoryView\ReadMe.txt
C:\WINDOWS\system32\ext\IEHistoryView\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\IEHistoryView\v1.30fr
C:\WINDOWS\system32\ext\IEPrivacyKeeper\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\IEPrivacyKeeper\dbghelp.dll
C:\WINDOWS\system32\ext\IEPrivacyKeeper\hgc.ani
C:\WINDOWS\system32\ext\IEPrivacyKeeper\IE Privacy Keeper.url
C:\WINDOWS\system32\ext\IEPrivacyKeeper\iepk.ico
C:\WINDOWS\system32\ext\IEPrivacyKeeper\iepk.wav
C:\WINDOWS\system32\ext\IEPrivacyKeeper\IEPrivacyKeeper.exe
C:\WINDOWS\system32\ext\IEPrivacyKeeper\Lang\French.lng
C:\WINDOWS\system32\ext\IEPrivacyKeeper\license_fr.txt
C:\WINDOWS\system32\ext\IEPrivacyKeeper\ntqsi.dll
C:\WINDOWS\system32\ext\IEPrivacyKeeper\SecureDelete.dll
C:\WINDOWS\system32\ext\IEPrivacyKeeper\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\IEPrivacyKeeper\UnHCrashReport.exe
C:\WINDOWS\system32\ext\IEPrivacyKeeper\v2.7.2fr
C:\WINDOWS\system32\ext\MailPassView\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\MailPassView\Lisez-moi.txt
C:\WINDOWS\system32\ext\MailPassView\mailpv.chm
C:\WINDOWS\system32\ext\MailPassView\mailpv_lng.ini
C:\WINDOWS\system32\ext\MailPassView\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\MailPassView\v1.32fr
C:\WINDOWS\system32\ext\MessenPass\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\MessenPass\mspass.chm
C:\WINDOWS\system32\ext\MessenPass\mspass_lng.ini
C:\WINDOWS\system32\ext\MessenPass\ReadMe.txt
C:\WINDOWS\system32\ext\MessenPass\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\MessenPass\v1.04fr
C:\WINDOWS\system32\ext\Minesweeper3D\docs\cubes-screenshot.png
C:\WINDOWS\system32\ext\Minesweeper3D\docs\dodeca-screenshot.png
C:\WINDOWS\system32\ext\Minesweeper3D\docs\index.html
C:\WINDOWS\system32\ext\Minesweeper3D\docs\mail.png
C:\WINDOWS\system32\ext\Minesweeper3D\docs\sprites-screenshot.png
C:\WINDOWS\system32\ext\Minesweeper3D\Minesweeper 3D.url
C:\WINDOWS\system32\ext\Minesweeper3D\Minesweeper3D.exe
C:\WINDOWS\system32\ext\Minesweeper3D\Minesweeper3D.ico
C:\WINDOWS\system32\ext\Minesweeper3D\mingwm10.dll
C:\WINDOWS\system32\ext\Minesweeper3D\saves\screenshot
C:\WINDOWS\system32\ext\Minesweeper3D\settings\default
C:\WINDOWS\system32\ext\Minesweeper3D\skins\default\fields.png
C:\WINDOWS\system32\ext\Minesweeper3D\skins\default\tiled.png
C:\WINDOWS\system32\ext\Minesweeper3D\skins\sprites\fields.png
C:\WINDOWS\system32\ext\Minesweeper3D\skins\sprites\tiled.png
C:\WINDOWS\system32\ext\Minesweeper3D\skins\transolid\fields.png
C:\WINDOWS\system32\ext\Minesweeper3D\skins\transolid\tiled.png
C:\WINDOWS\system32\ext\Minesweeper3D\v2005-01-10
C:\WINDOWS\system32\ext\MitecExec\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\MitecExec\INSTALLER.cmd
C:\WINDOWS\system32\ext\MitecExec\MiTeC Shell Extension Pack.url
C:\WINDOWS\system32\ext\MitecExec\MPEISE.dll
C:\WINDOWS\system32\ext\MitecExec\ReadMe.txt
C:\WINDOWS\system32\ext\MitecExec\v3.2
C:\WINDOWS\system32\ext\MitecImage\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\MitecImage\INSTALLER.cmd
C:\WINDOWS\system32\ext\MitecImage\MIPSE.dll
C:\WINDOWS\system32\ext\MitecImage\MiTeC Shell Extension Pack.url
C:\WINDOWS\system32\ext\MitecImage\ReadMe.txt
C:\WINDOWS\system32\ext\MitecImage\v3.2
C:\WINDOWS\system32\ext\MP3Lame\ACM codec version of Lame MP3 encoder.url
C:\WINDOWS\system32\ext\MP3Lame\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\MP3Lame\INSTALLER.cmd
C:\WINDOWS\system32\ext\MP3Lame\lame.exe
C:\WINDOWS\system32\ext\MP3Lame\lame_acm.xml
C:\WINDOWS\system32\ext\MP3Lame\lame_enc.dll
C:\WINDOWS\system32\ext\MP3Lame\lameACM.acm
C:\WINDOWS\system32\ext\MP3Lame\LameACM.inf
C:\WINDOWS\system32\ext\MP3Lame\v3.96
C:\WINDOWS\system32\ext\NetPass\AJOUTER AU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\NetPass\netpass.chm
C:\WINDOWS\system32\ext\NetPass\netpass.exe
C:\WINDOWS\system32\ext\NetPass\netpass_lng.ini
C:\WINDOWS\system32\ext\NetPass\Network Password Recovery.url
C:\WINDOWS\system32\ext\NetPass\ReadMe.txt
C:\WINDOWS\system32\ext\NetPass\SUPPRIMER DU MENU CONTEXTUEL.cmd
C:\WINDOWS\system32\ext\NetPass\v1.02fr
C:\WINDOWS\system32\ext\Notepad++\config.xml
C:\WINDOWS\system32\ext\Notepad++\contextMenu.xml
C:\WINDOWS\system32\ext\Notepad++\doLocalConf.xml
C:\WINDOWS\system32\ext\Notepad++\Icons\blank.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\close_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\close_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\close_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\closeAll_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\closeAll_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\closeAll_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\copy_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\copy_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\copy_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\cut_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\cut_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\cut_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\fileopen_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\fileopen_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\find_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\find_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\indent_guideline_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\indent_guideline_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\invisible_char_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\invisible_char_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\new_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\new_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\paste_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\paste_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\paste_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\playback_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\playback_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\print_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\print_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\record_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\redo_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\redo_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\redo_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\replace_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\replace_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\replace_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\save_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\save_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\save_makro_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\save_makro_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\save_makro_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\save_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\saveAll_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\saveAll_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\saveAll_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\stop_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\stop_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\undo_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\undo_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\undo_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\viewDlg_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\viewDlg_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\wrap_text_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\wrap_text_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\zoomIn_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\zoomIn_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\zoomOut_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons\zoomOut_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\close_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\close_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\close_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\closeAll_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\closeAll_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\closeAll_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\copy_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\copy_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\copy_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\cut_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\cut_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\cut_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\fileopen_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\fileopen_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\find_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\find_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\new_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\new_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\paste_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\paste_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\paste_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\print_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\print_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\readme.txt
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\redo_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\redo_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\redo_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\replace_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\replace_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\replace_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\save_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\save_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\save_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\saveAll_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\saveAll_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\saveAll_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\toolbarIcons.xml
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\undo_disabled.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\undo_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\undo_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\viewDlg_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\viewDlg_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomIn_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomIn_normal.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomOut_hover.ico
C:\WINDOWS\system32\ext\Notepad++\Icons_Npp\zoomOut_normal.ico
C:\WINDOWS\system32\ext\Notepad++\insertExt.ini
C:\WINDOWS\system32\ext\Notepad++\langs.xml
C:\WINDOWS\system32\ext\Notepad++\license.txt
C:\WINDOWS\system32\ext\Notepad++\LINEDRAW.TTF
C:\WINDOWS\system32\ext\Notepad++\nativeLang.xml
C:\WINDOWS\system32\ext\Notepad++\notepad++.exe
C:\WINDOWS\system32\ext\Notepad++\Notepad++.url
C:\WINDOWS\system32\ext\Notepad++\NppLauncher\1 - dllcache.lnk
C:\WINDOWS\system32\ext\Notepad++\NppLauncher\2 - system32.lnk
C:\WINDOWS\system32\ext\Notepad++\NppLauncher\3 - WINDOWS.lnk
C:\WINDOWS\system32\ext\Notepad++\NppLauncher\notepad.exe
C:\WINDOWS\system32\ext\Notepad++\NppLauncher\readme.txt
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\c.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\cpp.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\css.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\flash.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\java.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\javascript.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\lisp.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\perl.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\php.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\python.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\vb.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\vhdl.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\winbatch.api
C:\WINDOWS\system32\ext\Notepad++\plugins\APIs\xml.api
C:\WINDOWS\system32\ext\Notepad++\plugins\NppInsertPlugin.dll
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX.dll
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX.ini
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\AsciiToEBCDIC.bin
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\libTidy.dll
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\NPPTextFXdemo.TXT
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\TIDYCFG.INI
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\W3C-CSSValidator.htm
C:\WINDOWS\system32\ext\Notepad++\plugins\NPPTextFX\W3C-HTMLValidator.htm
C:\WINDOWS\system32\ext\Notepad++\plugins\XMLCheck.dll
C:\WINDOWS\system32\ext\Notepad++\ReadMe.txt
C:\WINDOWS\system32\ext\Notepad++\SciLexer.dll
C:\WINDOWS\system32\ext\Notepad++\shortcuts.xml
C:\WINDOWS\system32\ext\Notepad++\stylers.xml
C:\WINDOWS\system32\ext\Notepad++\toolbarIcons.xml
C:\WINDOWS\system32\ext\Notepad++\userDefineLang_ruby.xml
C:\WINDOWS\system32\ext\Notepad++\userDefineLang_winbatch.xml
C:\WINDOWS\system32\ext\Notepad++\v3.3fr
C:\WINDOWS\system32\ext\OGGVorbis\DESINSTALLER.cmd
C:\WINDOWS\system32\ext\OGGVorbis\INSTALLER.cmd
C:\WINDOWS\system32\ext\OGGVorbis\ReadMe.txt
C:\WINDOWS\system32\ext\OGGVorbis\uninstall.inf
C:\WINDOWS\system32\ext\OGGVorbis\v1.0
C:\WINDOWS\system32\ext\OGGVorbis\Vorbis Ogg ACM Codec.url
C:\WINDOWS\system32\ext\OGGVorbis\vorbis.acm
C:\WINDOWS\system32\ext\OGGVorbis\vorbisacm.inf
C:\WINDOWS\system32\ext\Othello\Othello.exe
C:\WINDOWS\system32\ext\Othello\ReadMe.txt
C:\WINDOWS\system32\ext\Othello\v2.0
C:\WINDOWS\system32\ext\PathCopy\DESI -
Contributeur sécuritéil faut virer tout ce qui a été trouvé !!!!!
puis
télécharge combofix (par sUBs) ici :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
et enregistre le sur le bureau.
déconnecte toi d'internet et ferme toutes tes applications.
désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)
double-clique sur combofix.exe et suis les instructions
à la fin, il va produire un rapport C:\ComboFix.txt
réactive ton parefeu, ton antivirus, la garde de ton antispyware
copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.
Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.
Tu as un tutoriel complet ici :
https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix -
Ok
Voici le rapport :
Malwarebytes' Anti-Malware 1.28
Version de la base de données: 1225
Windows 5.1.2600 Service Pack 2
06/10/2008 12:33:28
mbam-log-2008-10-06 (12-33-16).txt
Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 99543
Temps écoulé: 48 minute(s), 19 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 2
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 10
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\tdssdata (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\tdss (Trojan.Agent) -> No action taken.
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Malware.Trace) -> Data: c:\windows\system32\ -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Malware.Trace) -> Data: system32\ -> No action taken.
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
C:\WINDOWS\system32\ (Malware.Trace) -> No action taken.
C:\WINDOWS\system32\drivers\ (Trojan.Agent) -> No action taken.
C:\WINDOWS\rundll16.exe (Fake.Dropped.Malware) -> No action taken.
C:\WINDOWS\system32\vcmgcd32.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\logo1_.exe (Worm.Viking) -> No action taken.
C:\WINDOWS\system32\systems.txt (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\system32\tdssinit.dll (Rootkit.Agent) -> No action taken.
C:\WINDOWS\system32\tdssmain.dll (Rootkit.Agent) -> No action taken.
C:\WINDOWS\system32\tdssserf.dll (Rootkit.Agent) -> No action taken.
C:\WINDOWS\system32\drivers\tdssserv.sys (Rootkit.Agent) -> No action taken. -
Contributeur sécuritéok
pour ad aware la version 2008 est sortie depuis un an :)
sinon:
scan avec
MalwareByte's Anti-Malware et vire ce qui est trouvé et colle le rapport
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/ -
Tout d'abord merci pour ta réponse voici le rapport :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:36:49, on 06/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Creative\Shared Files\CTSched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\Ext\RestoreDesktop\RestoreDesktop.exe
C:\Documents and Settings\Jeremy\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\PROGRA~1\Crawler\Toolbar\CToolbar.exe
C:\Documents and Settings\Jeremy\Bureau\SmitfraudFix\Policies.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: Dme&x Toolbar - {3F756BC4-26CB-497E-9409-8F09C1850C80} - C:\WINDOWS\system32\Ext\DmexBar\dmexbar.dll
O3 - Toolbar: Barre d'outils &Crawler - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CreativeTaskScheduler] "C:\Program Files\Creative\Shared Files\CTSched.exe" /logon
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKCU\..\Run: [RestoreDesktop] C:\WINDOWS\System32\Ext\RestoreDesktop\RestoreDesktop.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Jeremy\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: Get File Size - res://C:\WINDOWS\System32\Ext\GetFileSize\GetFileSize.exe/130
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Diminuer la taille de la page - {A0E6D3BD-A661-447D-8634-0751467857F3} - C:\WINDOWS\system32\Ext\EasyRead\ZoomOut.js
O9 - Extra button: Agrandir la taille de la page - {AEBB571B-4C48-438D-808D-999F168CDECE} - C:\WINDOWS\system32\Ext\EasyRead\ZoomIn.js
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase5036.cab
O16 - DPF: {DFB5BCF1-06AE-4ABB-BFA8-1E228F41C50A} - https://www.bobtv.fr/download/cfweb_www.bobtv.fr-download_instmodule.exe
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
-
Contributeur sécuritéslt,
colle un rapport hijackthis
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download
manuel :
https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html
Je conseille de renomer Hijackthis, pour contrer une éventuelle infection de Vundo.
ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste
Ensuite avec Explorer créer un dossier c:\hijackthis
Décompresser Hijackthis dans ce dossier.
C'est important pour les sauvegardes."
