Le virus Host

Bonjour,
J'ai un problème dans mon PC que je souhaite éxposer en souhaitant avoir une réponse ;mon problème consiste dans un virus que ne sais où je l'ai chopé ,quand je démare mon pc il écone qui s'affiche 'alios' qui ouvre des dossiers vides partout ,des images ,des musiques .......ect ,j'ai essaye plusieurs Anivir en vains !! ,merci de me répondre .
Configuration: Windows XP Internet Explorer 7.0

21 réponses

  1. Salut ,

    Pour y voir plus clair :

    Télécharge random's system information tool (RSIT) et sauvegarde-le sur le Bureau.

    Double-clique sur RSIT.exe afin de lancer RSIT.

    Lis le contenu de l'écran Disclaimer puis clique sur Continue (si tu acceptes les conditions).

    Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

    Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.

    Poste le contenu de log.txt
    1. bon j'ai suivie les indications ci-dessus ,et deux fichiers textes se sont ouverts ,que dois-je faire mainteant ?
  2. Contributeur sécurité
    bonjour , je retire mon intervention chiquitine a été plus rapide @+
    1. 1-:Le premier texte « info » :
      info.txt logfile of random's system information tool 1.06 2009-05-22 22:01:00

      ======Uninstall list======

      -->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
      -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
      Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
      Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
      AMD Processor Driver-->C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe -runfromtemp -l0x040c -removeonly
      Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
      Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
      Complément Office 2007 - Microsoft Enregistrer en tant que PDF ou XPS (Beta)-->MsiExec.exe /X{30120000-00B2-040C-0000-0000000FF1CE}
      Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
      DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
      DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
      Encyclopaedia Universalis-->"C:\Program Files\Encyclopaedia Universalis\Encyclopaedia Universalis\Uninstall_Encyclopaedia Universalis\Désinstaller Encyclopaedia Universalis 2009.exe"
      Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
      Internet Download Manager-->C:\Program Files\Internet Download Manager\Uninstall.exe
      Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
      Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
      Microsoft Encarta 2009 - Collection-->MsiExec.exe /I{09180081-2C94-4A67-8E55-8483C019C7D2}
      Microsoft Encarta Maths-->MsiExec.exe /I{07183840-959A-4B0D-8825-2C533F0DDB19}
      Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
      Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
      Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
      Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
      Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
      Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
      Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
      Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
      Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
      Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
      Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
      Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
      Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
      Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
      MSXML 6.0 Parser-->MsiExec.exe /I{AEB9948B-4FF2-47C9-990E-47014492A0FE}
      My Web Search (Smiley Central)-->rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsbar.dll,O
      NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
      Oxford Advanced Learner's Dictionary - 7th edition-->"C:\Program Files\Oxford\OALD7\uninstall.exe"
      QUICKfind-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{593AFFA4-D08E-4272-BABB-420949D32A10}\Setup.exe" -l0x9
      RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
      Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c -removeonly
      Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
      SuperCopier2-->"C:\Program Files\SuperCopier2\SC2Uninst.exe"
      Total Video Converter 3.11 070908-->"C:\Program Files\Total Video Converter\unins000.exe"
      VLC media player 0.9.6-->C:\Program Files\VideoLAN\VLC\uninstall.exe
      WBEncarta-->RunDll32.exe advpack.dll, LaunchINFSectionEx C:\Program Files\Learning Essentials\1.0\fr\FR\WBEncarta\Uninstall\Uninstall.inf,Uninstall,,,N
      Windows Live Messenger-->MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}
      Windows Live Sign-in Assistant-->MsiExec.exe /I{49672EC2-171B-47B4-8CE7-50D7806360D7}
      Your Uninstaller! 2008 Version 6.0-->"C:\Program Files\Your Uninstaller 2008\unins000.exe"

      ======Security center information======

      AV: Avira AntiVir PersonalEdition Classic

      ======System event log======

      Computer Name: POSTE06
      Event Code: 4377
      Message: Le correctif Windows XP KB915865 a été installé.

      Record Number: 5
      Source Name: NtServicePack
      Time Written: 20090518214318.000000+120
      Event Type: Informations
      User: AUTORITE NT\SYSTEM

      Computer Name: POSTE06
      Event Code: 15007
      Message: La réservation de l'espace de nom identifié par le préfixe d'URL http://*:2869/ a été correctement ajoutée.

      Record Number: 4
      Source Name: HTTP
      Time Written: 20090518214208.000000+120
      Event Type: Informations
      User:

      Computer Name: POSTE06
      Event Code: 6011
      Message: Le nom NetBIOS et le nom de l'hôte DNS de cet ordinateur ont été modifiés de MACHINENAME vers POSTE06.

      Record Number: 3
      Source Name: EventLog
      Time Written: 20090518213814.000000+120
      Event Type: Informations
      User:

      Computer Name: MACHINENAME
      Event Code: 6005
      Message: Le service d'Enregistrement d'événement a démarré.

      Record Number: 2
      Source Name: EventLog
      Time Written: 20090518232813.000000+120
      Event Type: Informations
      User:

      Computer Name: MACHINENAME
      Event Code: 6009
      Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Uniprocessor Free.

      Record Number: 1
      Source Name: EventLog
      Time Written: 20090518232813.000000+120
      Event Type: Informations
      User:

      =====Application event log=====

      Computer Name: POSTE06
      Event Code: 1000
      Message: Les compteurs de performances pour le service MSDTC (MSDTC) ont été chargés.
      Les données d'enregistrement contiennent les nouvelles valeurs d'index
      assignées à ce service.

      Record Number: 5
      Source Name: LoadPerf
      Time Written: 20090518214001.000000+120
      Event Type: Informations
      User:

      Computer Name: POSTE06
      Event Code: 1000
      Message: Les compteurs de performances pour le service TermService (Services Terminal Server) ont été chargés.
      Les données d'enregistrement contiennent les nouvelles valeurs d'index
      assignées à ce service.

      Record Number: 4
      Source Name: LoadPerf
      Time Written: 20090518213958.000000+120
      Event Type: Informations
      User:

      Computer Name: POSTE06
      Event Code: 1000
      Message: Les compteurs de performances pour le service RemoteAccess (Routage et accès distant) ont été chargés.
      Les données d'enregistrement contiennent les nouvelles valeurs d'index
      assignées à ce service.

      Record Number: 3
      Source Name: LoadPerf
      Time Written: 20090518213847.000000+120
      Event Type: Informations
      User:

      Computer Name: POSTE06
      Event Code: 1000
      Message: Les compteurs de performances pour le service PSched (PSched) ont été chargés.
      Les données d'enregistrement contiennent les nouvelles valeurs d'index
      assignées à ce service.

      Record Number: 2
      Source Name: LoadPerf
      Time Written: 20090518213823.000000+120
      Event Type: Informations
      User:

      Computer Name: POSTE06
      Event Code: 1000
      Message: Les compteurs de performances pour le service RSVP (QoS RSVP) ont été chargés.
      Les données d'enregistrement contiennent les nouvelles valeurs d'index
      assignées à ce service.

      Record Number: 1
      Source Name: LoadPerf
      Time Written: 20090518213822.000000+120
      Event Type: Informations
      User:

      ======Environment variables======

      "ComSpec"=%SystemRoot%\system32\cmd.exe
      "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
      "windir"=%SystemRoot%
      "FP_NO_HOST_CHECK"=NO
      "OS"=Windows_NT
      "PROCESSOR_ARCHITECTURE"=x86
      "PROCESSOR_LEVEL"=15
      "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 95 Stepping 3, AuthenticAMD
      "PROCESSOR_REVISION"=5f03
      "NUMBER_OF_PROCESSORS"=1
      "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
      "TEMP"=%SystemRoot%\TEMP
      "TMP"=%SystemRoot%\TEMP

      -----------------EOF-----------------
      2-deuxième texte "log"
      Logfile of random's system information tool 1.06 (written by random/random)
      Run by IMAD at 2009-05-22 21:58:23
      Microsoft Windows XP Professionnel Service Pack 3
      System drive C: has 34 GB (69%) free of 50 GB
      Total RAM: 894 MB (58% free)

      HijackThis download failed

      ======Scheduled tasks folder======

      C:\WINDOWS\tasks\WGASetup.job

      ======Registry dump======

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}]
      IDMIEHlprObj Class - C:\Program Files\Internet Download Manager\IDMIECC.dll [2008-02-18 99760]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}]
      MyWebSearch Search Assistant BHO - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL [2009-05-22 65536]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}]
      mwsBar BHO - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL [2009-05-22 434271]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
      Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
      Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-11-07 1088296]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
      RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-05-18 308832]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
      Windows Live Sign-in Helper - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-08-31 322368]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C08DF07A-3E49-4E25-9AB0-D3882835F153}]
      QUICKfind BHO Object - C:\PROGRA~1\IDM\QUICKF~1\PlugIns\IEHelp.dll [2003-06-30 337920]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
      Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-05-18 35840]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
      JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-05-18 73728]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
      {07B18EA9-A523-4961-B6BB-170DE4475CCA} - My Web Search - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL [2009-05-22 434271]

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
      "PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2008-04-13 455168]
      "Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
      "avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]
      "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
      "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-05-18 148888]
      "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-12-04 8523776]
      "nwiz"=nwiz.exe /install []
      "NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-12-04 81920]
      "TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-05-18 185872]
      "issat"=C:\WINDOWS\system32\issat.exe [2002-01-05 53248]
      "SystemInit"= []
      "Karen"= []
      "raVe"= []
      "Win32BaseServiceMOD"= []
      "startIE"= []
      "MyWebSearch Plugin"=rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL,UPF []
      "My Web Search Bar Search Scope Monitor"=C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe [2009-05-22 24688]
      "MyWebSearch Email Plugin"=C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe [2009-05-22 32838]

      [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
      "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]
      "DriverInstall"=F:\Drivers\QInstall.exe []
      "SuperCopier2.exe"=C:\Program Files\SuperCopier2\SuperCopier2.exe [2006-07-07 1052672]
      "IDMan"=C:\Program Files\Internet Download Manager\IDMan.exe [2009-05-18 2594224]
      "MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-13 1695232]
      "msnmsgr"=C:\Program Files\MSN Messenger\msnmsgr.exe [2007-01-19 5674352]
      "E09FXLRD_1170125"=C:\Program Files\Microsoft Encarta\Microsoft Encarta 2009 - Collection DVD\EDICT.EXE [2008-05-28 351000]
      "MyWebSearch Email Plugin"=C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe [2009-05-22 32838]
      "Search Protection"=C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe []

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
      C:\Program Files\MSN Messenger\MsnMsgr.Exe [2007-01-19 5674352]

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A]
      C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2008-04-13 455168]

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
      C:\WINDOWS\RTHDCPL.EXE [2008-03-04 16858112]

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
      C:\Program Files\Skype\Phone\Skype.exe [2008-11-07 21633320]

      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
      Démarrage.exe

      C:\Documents and Settings\IMAD\Menu Démarrer\Programmes\Démarrage
      Démarrage.exe
      Outil de notification Live Search.lnk - C:\Documents and Settings\IMAD\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
      WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-05-09 133632]
      UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-13 240128]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSEXESVC]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PSEXESVC]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

      [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
      "NoDispAppearancePage"=0
      "NoDispScrSavPage"=0
      "NoDispSettingsPage"=0
      "NoConfigPage"=0
      "NoDevMgrPage"=0
      "NoFileSysPage"=0
      "NoVirtMemPage"=0
      "DisableChangePassword"=0
      "NoFolderOptions"=0
      "DisableTaskMgr"=0

      [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
      "NoClose"=0
      "NoFind"=0
      "NoRun"=0
      "NoDesktop"=0
      "NoDrives"=0

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
      "NoDesktop"=

      [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
      "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
      "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
      "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
      "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
      "C:\Program Files\Encyclopaedia Universalis\Encyclopaedia Universalis\starter.exe"="C:\Program Files\Encyclopaedia Universalis\Encyclopaedia Universalis\starter.exe:*:Enabled:starter"
      "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

      [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
      "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
      "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
      "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
      "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6c85ea20-2752-11dd-a5e6-0018370a9689}]
      shell\AutoRun\command - G:\host232.exe
      shell\explore\command - G:\host232.exe
      shell\open\command - G:\host232.exe

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b5f43f12-e08b-11dc-a5e5-0018370a9689}]
      shell\AutoRun\command - G:\host232.exe
      shell\explore\command - G:\host232.exe
      shell\open\command - G:\host232.exe

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b5f43f16-e08b-11dc-a5e5-0018370a9689}]
      shell\AutoRun\command - G:\host232.exe
      shell\explore\command - G:\host232.exe
      shell\open\command - G:\host232.exe

      ======File associations======

      .reg - open - regedit.exe %1
      .scr - open - "%1" %*
      .txt - open - NOTEPAD %1
      .vbs - edit - C:\WINDOWS\Notepad.exe %1

      ======List of files/folders created in the last 1 months======

      2009-05-22 21:58:24 ----D---- C:\Program Files\trend micro
      2009-05-22 21:58:23 ----D---- C:\rsit
      2009-05-22 21:34:06 ----D---- C:\Documents and Settings\IMAD\Application Data\URSoft
      2009-05-22 21:34:03 ----D---- C:\Program Files\Your Uninstaller 2008
      2009-05-22 21:22:48 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo!
      2009-05-22 21:22:38 ----D---- C:\Documents and Settings\IMAD\Application Data\Yahoo!
      2009-05-22 21:22:37 ----D---- C:\Program Files\Yahoo!
      2009-05-22 21:13:29 ----D---- C:\WINDOWS\LastGood
      2009-05-22 20:37:23 ----D---- C:\Program Files\MyWebSearch
      2009-05-22 20:29:45 ----D---- C:\Program Files\FunWebProducts
      2009-05-22 00:31:18 ----D---- C:\WINDOWS\system32\KB905474
      2009-05-21 19:47:19 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
      2009-05-21 19:46:54 ----A---- C:\WINDOWS\system32\wmpns.dll
      2009-05-21 19:46:49 ----HDC---- C:\WINDOWS\$NtUninstallKB959772_WM11$
      2009-05-21 19:46:43 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
      2009-05-21 16:35:57 ----D---- C:\WINDOWS\Sun
      2009-05-21 11:57:03 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
      2009-05-21 11:56:58 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
      2009-05-21 11:56:54 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
      2009-05-21 11:56:50 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
      2009-05-21 11:56:45 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
      2009-05-21 11:56:42 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
      2009-05-21 11:56:37 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
      2009-05-21 11:56:31 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
      2009-05-21 11:56:27 ----D---- C:\WINDOWS\ie7updates
      2009-05-21 11:56:22 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
      2009-05-21 11:56:14 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
      2009-05-21 11:56:08 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
      2009-05-21 11:56:03 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
      2009-05-21 11:55:59 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
      2009-05-21 11:55:52 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
      2009-05-21 11:55:48 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
      2009-05-21 11:55:44 ----HDC---- C:\WINDOWS\$NtUninstallKB960715$
      2009-05-21 11:55:40 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
      2009-05-21 11:55:36 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
      2009-05-21 11:55:29 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
      2009-05-21 11:55:24 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
      2009-05-21 11:55:11 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
      2009-05-21 11:55:07 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
      2009-05-21 11:55:03 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$
      2009-05-21 11:54:59 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
      2009-05-21 11:54:53 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
      2009-05-21 11:54:49 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
      2009-05-21 11:54:45 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
      2009-05-21 11:54:41 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
      2009-05-21 11:54:37 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
      2009-05-21 11:53:28 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
      2009-05-21 11:53:25 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
      2009-05-21 11:53:19 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
      2009-05-21 03:00:21 ----D---- C:\WINDOWS\system32\PreInstall
      2009-05-21 03:00:20 ----A---- C:\WINDOWS\system32\spupdsvc.exe
      2009-05-21 03:00:19 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
      2009-05-21 02:49:27 ----D---- C:\Program Files\AGI
      2009-05-21 00:13:43 ----SHD---- C:\found.000
      2009-05-20 20:41:45 ----A---- C:\WINDOWS\zip.exe
      2009-05-20 20:41:45 ----A---- C:\WINDOWS\vFind.exe
      2009-05-20 20:41:45 ----A---- C:\WINDOWS\SWXCACLS.exe
      2009-05-20 20:41:45 ----A---- C:\WINDOWS\SWSC.exe
      2009-05-20 20:41:45 ----A---- C:\WINDOWS\SWREG.exe
      2009-05-20 20:41:45 ----A---- C:\WINDOWS\sed.exe
      2009-05-20 20:41:45 ----A---- C:\WINDOWS\NIRCMD.exe
      2009-05-20 20:41:45 ----A---- C:\WINDOWS\grep.exe
      2009-05-20 20:40:56 ----D---- C:\WINDOWS\ERDNT
      2009-05-20 20:40:55 ----SD---- C:\ComboFix
      2009-05-20 20:40:54 ----A---- C:\WINDOWS\system32\CF29264.exe
      2009-05-20 20:40:05 ----D---- C:\Qoobox
      2009-05-19 00:38:39 ----D---- C:\Documents and Settings\IMAD\Application Data\Adobe
      2009-05-19 00:32:23 ----D---- C:\Program Files\MSECache
      2009-05-19 00:14:15 ----D---- C:\Documents and Settings\IMAD\Application Data\dvdcss
      2009-05-19 00:12:25 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
      2009-05-18 23:51:48 ----D---- C:\WINDOWS\pss
      2009-05-18 23:51:14 ----D---- C:\Documents and Settings\IMAD\Application Data\Skype
      2009-05-18 23:41:48 ----D---- C:\WINDOWS\SHELLNEW
      2009-05-18 23:41:35 ----D---- C:\Program Files\Microsoft Office
      2009-05-18 23:41:35 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
      2009-05-18 23:41:12 ----RHD---- C:\MSOCache
      2009-05-18 23:38:10 ----A---- C:\WINDOWS\system32\h323log.txt
      2009-05-18 23:37:24 ----D---- C:\Documents and Settings\IMAD\Application Data\IDM
      2009-05-18 23:37:24 ----D---- C:\Documents and Settings\IMAD\Application Data\DMCache
      2009-05-18 23:37:22 ----D---- C:\Program Files\Internet Download Manager
      2009-05-18 23:37:05 ----D---- C:\Documents and Settings\IMAD\Application Data\WinRAR
      2009-05-18 23:36:03 ----D---- C:\Program Files\Total Video Converter
      2009-05-18 23:34:27 ----A---- C:\WINDOWS\system32\uniime.dll
      2009-05-18 23:34:17 ----D---- C:\Program Files\Fichiers communs\xing shared
      2009-05-18 23:34:17 ----A---- C:\WINDOWS\system32\c_g18030.dll
      2009-05-18 23:34:15 ----A---- C:\WINDOWS\system32\kbdlk41j.dll
      2009-05-18 23:34:15 ----A---- C:\WINDOWS\system32\kbdlk41a.dll
      2009-05-18 23:34:15 ----A---- C:\WINDOWS\system32\kbdibm02.dll
      2009-05-18 23:34:15 ----A---- C:\WINDOWS\system32\kbdax2.dll
      2009-05-18 23:34:15 ----A---- C:\WINDOWS\system32\kbd106n.dll
      2009-05-18 23:34:15 ----A---- C:\WINDOWS\system32\kbd101.dll
      2009-05-18 23:34:15 ----A---- C:\WINDOWS\system32\f3ahvoas.dll
      2009-05-18 23:34:14 ----A---- C:\WINDOWS\system32\imjp81k.dll
      2009-05-18 23:34:11 ----A---- C:\WINDOWS\system32\rmoc3260.dll
      2009-05-18 23:34:08 ----A---- C:\WINDOWS\system32\pndx5032.dll
      2009-05-18 23:34:08 ----A---- C:\WINDOWS\system32\pndx5016.dll
      2009-05-18 23:34:08 ----A---- C:\WINDOWS\system32\pncrt.dll
      2009-05-18 23:34:08 ----A---- C:\WINDOWS\system32\msvcr71.dll
      2009-05-18 23:34:08 ----A---- C:\WINDOWS\system32\msvcp71.dll
      2009-05-18 23:34:08 ----A---- C:\WINDOWS\system32\chsbrkr.dll
      2009-05-18 23:34:07 ----D---- C:\Program Files\Fichiers communs\Real
      2009-05-18 23:34:07 ----A---- C:\WINDOWS\system32\chtbrkr.dll
      2009-05-18 23:34:06 ----A---- C:\WINDOWS\system32\msir3jp.dll
      2009-05-18 23:34:06 ----A---- C:\WINDOWS\system32\korwbrkr.dll
      2009-05-18 23:34:00 ----D---- C:\Program Files\Real
      2009-05-18 23:33:51 ----D---- C:\Documents and Settings\IMAD\Application Data\Real
      2009-05-18 23:33:48 ----A---- C:\WINDOWS\system32\kbd101a.dll
      2009-05-18 23:33:37 ----A---- C:\WINDOWS\system32\kbdnecNT.dll
      2009-05-18 23:33:37 ----A---- C:\WINDOWS\system32\kbdnecAT.dll
      2009-05-18 23:33:37 ----A---- C:\WINDOWS\system32\kbdnec95.dll
      2009-05-18 23:33:16 ----A---- C:\WINDOWS\system32\c_is2022.dll
      2009-05-18 23:33:14 ----A---- C:\WINDOWS\system32\kbdkor.dll
      2009-05-18 23:33:14 ----A---- C:\WINDOWS\system32\kbdjpn.dll
      2009-05-18 23:33:14 ----A---- C:\WINDOWS\system32\kbd106.dll
      2009-05-18 23:33:14 ----A---- C:\WINDOWS\system32\kbd103.dll
      2009-05-18 23:33:14 ----A---- C:\WINDOWS\system32\kbd101c.dll
      2009-05-18 23:33:14 ----A---- C:\WINDOWS\system32\kbd101b.dll
      2009-05-18 23:33:12 ----RA---- C:\WINDOWS\system32\kbdarmw.dll
      2009-05-18 23:33:12 ----RA---- C:\WINDOWS\system32\kbdarme.dll
      2009-05-18 23:33:12 ----A---- C:\WINDOWS\system32\Thawbrkr.dll
      2009-05-18 23:33:11 ----RA---- C:\WINDOWS\system32\kbdgeo.dll
      2009-05-18 23:33:10 ----RA---- C:\WINDOWS\system32\kbdintel.dll
      2009-05-18 23:33:10 ----RA---- C:\WINDOWS\system32\kbdintam.dll
      2009-05-18 23:33:10 ----RA---- C:\WINDOWS\system32\kbdinpun.dll
      2009-05-18 23:33:10 ----RA---- C:\WINDOWS\system32\kbdinmar.dll
      2009-05-18 23:33:10 ----RA---- C:\WINDOWS\system32\kbdinkan.dll
      2009-05-18 23:33:10 ----RA---- C:\WINDOWS\system32\kbdinhin.dll
      2009-05-18 23:33:10 ----RA---- C:\WINDOWS\system32\kbdinguj.dll
      2009-05-18 23:33:10 ----RA---- C:\WINDOWS\system32\kbdindev.dll
      2009-05-18 23:33:10 ----A---- C:\WINDOWS\system32\c_iscii.dll
      2009-05-18 23:33:09 ----RA---- C:\WINDOWS\system32\kbdvntc.dll
      2009-05-18 23:33:06 ----RA---- C:\WINDOWS\system32\kbdurdu.dll
      2009-05-18 23:33:06 ----RA---- C:\WINDOWS\system32\kbdsyr2.dll
      2009-05-18 23:33:06 ----RA---- C:\WINDOWS\system32\kbdsyr1.dll
      2009-05-18 23:33:06 ----RA---- C:\WINDOWS\system32\kbdfa.dll
      2009-05-18 23:33:06 ----RA---- C:\WINDOWS\system32\kbddiv2.dll
      2009-05-18 23:33:06 ----RA---- C:\WINDOWS\system32\kbddiv1.dll
      2009-05-18 23:33:06 ----RA---- C:\WINDOWS\system32\kbda3.dll
      2009-05-18 23:33:06 ----RA---- C:\WINDOWS\system32\kbda2.dll
      2009-05-18 23:33:06 ----RA---- C:\WINDOWS\system32\kbda1.dll
      2009-05-18 23:33:06 ----A---- C:\WINDOWS\system32\kbdusa.dll
      2009-05-18 23:33:02 ----RA---- C:\WINDOWS\system32\kbdheb.dll
      2009-05-18 23:32:55 ----RA---- C:\WINDOWS\system32\kbdth3.dll
      2009-05-18 23:32:55 ----RA---- C:\WINDOWS\system32\kbdth2.dll
      2009-05-18 23:32:55 ----RA---- C:\WINDOWS\system32\kbdth1.dll
      2009-05-18 23:32:55 ----RA---- C:\WINDOWS\system32\kbdth0.dll
      2009-05-18 23:32:55 ----A---- C:\WINDOWS\system32\ftlx041e.dll
      2009-05-18 23:30:15 ----A---- C:\WINDOWS\system32\usbui.dll
      2009-05-18 23:29:23 ----A---- C:\WINDOWS\imsins.BAK
      2009-05-18 23:29:21 ----SHD---- C:\WINDOWS\Installer
      2009-05-18 23:29:21 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
      2009-05-18 23:29:20 ----D---- C:\Program Files\Fichiers communs\ODBC
      2009-05-18 23:29:20 ----A---- C:\WINDOWS\ODBCINST.INI
      2009-05-18 23:29:17 ----RD---- C:\Program Files
      2009-05-18 23:29:17 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
      2009-05-18 23:29:17 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
      2009-05-18 23:29:17 ----D---- C:\Program Files\Fichiers communs
      2009-05-18 23:29:08 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
      2009-05-18 23:29:08 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
      2009-05-18 23:29:08 ----RA---- C:\WINDOWS\system32\kbdazel.dll
      2009-05-18 23:29:07 ----RA---- C:\WINDOWS\system32\kbdtat.dll
      2009-05-18 23:29:07 ----RA---- C:\WINDOWS\system32\kbdmon.dll
      2009-05-18 23:29:07 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
      2009-05-18 23:29:07 ----RA---- C:\WINDOWS\system32\kbdaze.dll
      2009-05-18 23:29:06 ----RA---- C:\WINDOWS\system32\kbdycc.dll
      2009-05-18 23:29:06 ----RA---- C:\WINDOWS\system32\kbduzb.dll
      2009-05-18 23:29:06 ----RA---- C:\WINDOWS\system32\kbdur.dll
      2009-05-18 23:29:06 ----RA---- C:\WINDOWS\system32\kbdru1.dll
      2009-05-18 23:29:06 ----RA---- C:\WINDOWS\system32\kbdru.dll
      2009-05-18 23:29:06 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
      2009-05-18 23:29:06 ----RA---- C:\WINDOWS\system32\kbdbu.dll
      2009-05-18 23:29:06 ----RA---- C:\WINDOWS\system32\kbdblr.dll
      2009-05-18 23:29:05 ----RA---- C:\WINDOWS\system32\kbdhept.dll
      2009-05-18 23:29:05 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
      2009-05-18 23:29:05 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
      2009-05-18 23:29:05 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
      2009-05-18 23:29:05 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
      2009-05-18 23:29:05 ----RA---- C:\WINDOWS\system32\kbdhe.dll
      2009-05-18 23:29:05 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
      2009-05-18 23:29:03 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
      2009-05-18 23:29:03 ----RA---- C:\WINDOWS\system32\kbdlv.dll
      2009-05-18 23:29:03 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
      2009-05-18 23:29:03 ----RA---- C:\WINDOWS\system32\kbdlt.dll
      2009-05-18 23:29:03 ----RA---- C:\WINDOWS\system32\kbdest.dll
      2009-05-18 23:29:02 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
      2009-05-18 23:29:02 ----RA---- C:\WINDOWS\system32\kbdsl.dll
      2009-05-18 23:29:02 ----RA---- C:\WINDOWS\system32\kbdro.dll
      2009-05-18 23:29:02 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
      2009-05-18 23:29:02 ----RA---- C:\WINDOWS\system32\kbdpl.dll
      2009-05-18 23:29:01 ----RA---- C:\WINDOWS\system32\kbdycl.dll
      2009-05-18 23:29:01 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
      2009-05-18 23:29:01 ----RA---- C:\WINDOWS\system32\kbdhu.dll
      2009-05-18 23:29:01 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
      2009-05-18 23:29:01 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
      2009-05-18 23:29:01 ----RA---- C:\WINDOWS\system32\kbdcz.dll
      2009-05-18 23:29:01 ----RA---- C:\WINDOWS\system32\kbdcr.dll
      2009-05-18 23:29:01 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
      2009-05-18 23:28:57 ----A---- C:\WINDOWS\system32\spxcoins.dll
      2009-05-18 23:28:57 ----A---- C:\WINDOWS\system32\irclass.dll
      2009-05-18 23:28:57 ----A---- C:\WINDOWS\system32\dgsetup.dll
      2009-05-18 23:28:57 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
      2009-05-18 23:28:56 ----A---- C:\WINDOWS\system32\EqnClass.Dll
      2009-05-18 23:28:54 ----N---- C:\WINDOWS\system32\CONFIG.TMP
      2009-05-18 23:28:54 ----A---- C:\WINDOWS\TASKMAN.EXE
      2009-05-18 23:28:54 ----A---- C:\WINDOWS\system32\batt.dll
      2009-05-18 23:28:53 ----A---- C:\WINDOWS\system32\storprop.dll
      2009-05-18 23:28:53 ----A---- C:\WINDOWS\NOTEPAD.EXE
      2009-05-18 23:28:46 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
      2009-05-18 23:28:42 ----RA---- C:\WINDOWS\SET8.tmp
      2009-05-18 23:28:40 ----RA---- C:\WINDOWS\SET4.tmp
      2009-05-18 23:28:39 ----RA---- C:\WINDOWS\SET3.tmp
      2009-05-18 23:28:34 ----D---- C:\WINDOWS\system32\CatRoot2
      2009-05-18 23:28:34 ----D---- C:\WINDOWS\system32\CatRoot
      2009-05-18 23:28:28 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
      2009-05-18 23:28:11 ----A---- C:\WINDOWS\setuplog.txt
      2009-05-18 23:28:07 ----SHD---- C:\System Volume Information
      2009-05-18 23:28:07 ----D---- C:\Documents and Settings
      2009-05-18 23:27:48 ----D---- C:\WINDOWS\nview
      2009-05-18 23:27:48 ----A---- C:\WINDOWS\system32\nvudisp.exe
      2009-05-18 23:27:35 ----SH---- C:\boot.ini
      2009-05-18 23:25:57 ----A---- C:\WINDOWS\system32\javaws.exe
      2009-05-18 23:25:57 ----A---- C:\WINDOWS\system32\javaw.exe
      2009-05-18 23:25:57 ----A---- C:\WINDOWS\system32\java.exe
      2009-05-18 23:25:48 ----D---- C:\Program Files\Java
      2009-05-18 23:24:37 ----A---- C:\WINDOWS\system32\deploytk.dll
      2009-05-18 23:23:46 ----D---- C:\Documents and Settings\IMAD\Application Data\Sun
      2009-05-18 23:23:27 ----D---- C:\Documents and Settings\IMAD\Application Data\vlc
      2009-05-18 23:23:07 ----D---- C:\Program Files\VideoLAN
      2009-05-18 23:23:03 ----SD---- C:\WINDOWS\Downloaded Program Files
      2009-05-18 23:23:03 ----RSHDC---- C:\WINDOWS\system32\dllcache
      2009-05-18 23:23:03 ----RSD---- C:\WINDOWS\Fonts
      2009-05-18 23:23:03 ----RD---- C:\WINDOWS\Web
      2009-05-18 23:23:03 ----HD---- C:\WINDOWS\inf
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\WinSxS
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\WBEM
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\twain_32
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\Temp
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\wins
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\wbem
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\usmt
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\spool
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\ShellExt
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\Setup
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\ras
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\oobe
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\npp
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\mui
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\inetsrv
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\IME
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\icsxml
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\ias
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\fr-fr
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\fr
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\export
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\drivers
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\dhcp
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\config
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\3com_dmi
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\3076
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\2052
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\1054
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\1042
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\1041
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\1037
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\1036
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\1033
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\1031
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\1028
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32\1025
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system32
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\system
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\security
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\Resources
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\repair
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\Provisioning
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\PeerNet
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\pchealth
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\Offline Web Pages
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\Network Diagnostic
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\mui
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\msapps
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\msagent
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\Media
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\L2Schemas
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\java
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\ime
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\Help
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\ehome
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\Driver Cache
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\Debug
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\Cursors
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\Connection Wizard
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\Config
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\AppPatch
      2009-05-18 23:23:03 ----D---- C:\WINDOWS\addins
      2009-05-18 23:23:03 ----D---- C:\WINDOWS
      2009-05-18 23:22:23 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
      2009-05-18 23:22:17 ----D---- C:\Program Files\Fichiers communs\Adobe
      2009-05-18 23:22:17 ----D---- C:\Program Files\Adobe
      2009-05-18 23:21:32 ----D---- C:\Program Files\SuperCopier2
      2009-05-18 23:20:56 ----D---- C:\Program Files\WinRAR
      2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\vxblock.dll
      2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\pxwave.dll
      2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\pxsfs.dll
      2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\pxmas.dll
      2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\pxinsi64.exe
      2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\pxinsa64.exe
      2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\pxhpinst.exe
      2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\pxdrv.dll
      2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\pxcpyi64.exe
      2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\pxcpya64.exe
      2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\pxafs.dll
      2009-05-18 23:19:01 ----N---- C:\WINDOWS\system32\px.dll
      2009-05-18 23:18:58 ----D---- C:\Program Files\DivX
      2009-05-18 23:17:06 ----D---- C:\Program Files\MSN Messenger
      2009-05-18 23:16:29 ----D---- C:\Program Files\Skype
      2009-05-18 23:16:29 ----D---- C:\Program Files\Fichiers communs\Skype
      2009-05-18 23:16:23 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
      2009-05-18 23:15:55 ----SHD---- C:\RECYCLER
      2009-05-18 23:15:13 ----D---- C:\Program Files\Avira
      2009-05-18 23:15:13 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
      2009-05-18 21:54:16 ----D---- C:\WINDOWS\system32\Lang
      2009-05-18 21:53:23 ----D---- C:\Temp
      2009-05-18 21:53:08 ----A---- C:\WINDOWS\system32\nvunrm.exe
      2009-05-18 21:52:37 ----A---- C:\WINDOWS\system32\nvusmb.exe
      2009-05-18 21:52:35 ----RA---- C:\WINDOWS\system32\NVUNINST.EXE
      2009-05-18 21:52:20 ----A---- C:\WINDOWS\system32\nvconrm.dll
      2009-05-18 21:52:20 ----A---- C:\WINDOWS\system32\fdco1ins.dll
      2009-05-18 21:52:20 ----A---- C:\WINDOWS\system32\fdco1.dll
      2009-05-18 21:52:20 ----A---- C:\WINDOWS\system32\bdco1ins.dll
      2009-05-18 21:52:20 ----A---- C:\WINDOWS\system32\bdco1.dll
      2009-05-18 21:52:11 ----D---- C:\WINDOWS\system32\ReinstallBackups
      2009-05-18 21:52:10 ----DC---- C:\WINDOWS\system32\DRVSTORE
      2009-05-18 21:51:31 ----D---- C:\Program Files\AMD
      2009-05-18 21:51:26 ----D---- C:\Documents and Settings\IMAD\Application Data\InstallShield
      2009-05-18 21:51:04 ----A---- C:\WINDOWS\system32\ChCfg.exe
      2009-05-18 21:50:43 ----D---- C:\WINDOWS\system32\RTCOM
      2009-05-18 21:50:42 ----A---- C:\WINDOWS\system32\ksuser.dll
      2009-05-18 21:50:38 ----A---- C:\WINDOWS\SoundMan.exe
      2009-05-18 21:50:38 ----A---- C:\WINDOWS\SkyTel.exe
      2009-05-18 21:50:38 ----A---- C:\WINDOWS\RtlUpd.exe
      2009-05-18 21:50:38 ----A---- C:\WINDOWS\RTLCPL.exe
      2009-05-18 21:50:36 ----HD---- C:\Program Files\InstallShield Installation Information
      2009-05-18 21:50:36 ----D---- C:\Program Files\Realtek
      2009-05-18 21:50:36 ----A---- C:\WINDOWS\RTHDCPL.exe
      2009-05-18 21:50:36 ----A---- C:\WINDOWS\MicCal.exe
      2009-05-18 21:50:36 ----A---- C:\WINDOWS\alcwzrd.exe
      2009-05-18 21:50:36 ----A---- C:\WINDOWS\Alcmtr.exe
      2009-05-18 21:50:35 ----A---- C:\WINDOWS\RtlExUpd.dll
      2009-05-18 21:50:35 ----A---- C:\WINDOWS\HideWin.exe
      2009-05-18 21:50:32 ----D---- C:\Program Files\Fichiers communs\InstallShield
      2009-05-18 21:47:13 ----D---- C:\Documents and Settings\IMAD\Application Data\Identities
      2009-05-18 21:47:11 ----HD---- C:\Program Files\Uninstall Information
      2009-05-18 21:47:09 ----ASH---- C:\Documents and Settings\IMAD\Application Data\desktop.ini
      2009-05-18 21:47:08 ----SD---- C:\Documents and Settings\IMAD\Application Data\Microsoft
      2009-05-18 21:46:02 ----D---- C:\WINDOWS\SoftwareDistribution
      2009-05-18 21:46:01 ----D---- C:\WINDOWS\Prefetch
      2009-05-18 21:46:00 ----SD---- C:\WINDOWS\system32\Microsoft
      2009-05-18 21:46:00 ----A---- C:\WINDOWS\SchedLgU.Txt
      2009-05-18 21:43:49 ----D---- C:\WINDOWS\system32\xircom
      2009-05-18 21:43:49 ----D---- C:\Program Files\xerox
      2009-05-18 21:43:49 ----D---- C:\Program Files\microsoft frontpage
      2009-05-18 21:43:17 ----N---- C:\WINDOWS\system32\spmsg.dll
      2009-05-18 21:43:16 ----HD---- C:\WINDOWS\$hf_mig$
      2009-05-18 21:43:09 ----A---- C:\WINDOWS\control.ini
      2009-05-18 21:43:09 ----A---- C:\AUTOEXEC.BAT
      2009-05-18 21:42:58 ----A---- C:\WINDOWS\OEWABLog.txt
      2009-05-18 21:42:55 ----A---- C:\WINDOWS\system32\mapi32.dll
      2009-05-18 21:42:15 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
      2009-05-18 21:42:12 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
      2009-05-18 21:42:09 ----HD---- C:\Program Files\WindowsUpdate
      2009-05-18 21:42:06 ----D---- C:\Program Files\Services en ligne
      2009-05-18 21:41:52 ----D---- C:\WINDOWS\system32\DirectX
      2009-05-18 21:41:44 ----A---- C:\WINDOWS\system32\atrace.dll
      2009-05-18 21:41:41 ----A---- C:\WINDOWS\system32\desktop.ini
      2009-05-18 21:41:41 ----A---- C:\WINDOWS\desktop.ini
      2009-05-18 21:41:35 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
      2009-05-18 21:41:34 ----A---- C:\WINDOWS\system32\acctres.dll
      2009-05-18 21:41:33 ----D---- C:\Program Files\Fichiers communs\Services
      2009-05-18 21:41:31 ----SD---- C:\WINDOWS\Tasks
      2009-05-18 21:41:31 ----A---- C:\WINDOWS\system32\icfgnt5.dll
      2009-05-18 21:41:30 ----D---- C:\Program Files\Fichiers communs\MSSoap
      2009-05-18 21:41:25 ----D---- C:\WINDOWS\srchasst
      2009-05-18 21:41:24 ----D---- C:\WINDOWS\system32\Macromed
      2009-05-18 21:41:22 ----A---- C:\WINDOWS\system32\wuweb.dll
      2009-05-18 21:41:22 ----A---- C:\WINDOWS\system32\wucltui.dll
      2009-05-18 21:41:22 ----A---- C:\WINDOWS\system32\wuauserv.dll
      2009-05-18 21:41:22 ----A---- C:\WINDOWS\system32\wuaueng1.dll
      2009-05-18 21:41:22 ----A---- C:\WINDOWS\system32\wuaueng.dll
      2009-05-18 21:41:21 ----A---- C:\WINDOWS\system32\wups.dll
      2009-05-18 21:41:21 ----A---- C:\WINDOWS\system32\wuauclt1.exe
      2009-05-18 21:41:21 ----A---- C:\WINDOWS\system32\wuauclt.exe
      2009-05-18 21:41:21 ----A---- C:\WINDOWS\system32\wuapi.dll
      2009-05-18 21:41:21 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
      2009-05-18 21:41:21 ----A---- C:\WINDOWS\system32\qmgr.dll
      2009-05-18 21:41:21 ----A---- C:\WINDOWS\system32\bitsprx4.dll
      2009-05-18 21:41:21 ----A---- C:\WINDOWS\system32\bitsprx3.dll
      2009-05-18 21:41:21 ----A---- C:\WINDOWS\system32\bitsprx2.dll
      2009-05-18 21:41:17 ----D---- C:\Program Files\Movie Maker
      2009-05-18 21:41:00 ----A---- C:\WINDOWS\system32\safrslv.dll
      2009-05-18 21:41:00 ----A---- C:\WINDOWS\system32\safrdm.dll
      2009-05-18 21:41:00 ----A---- C:\WINDOWS\system32\safrcdlg.dll
      2009-05-18 21:41:00 ----A---- C:\WINDOWS\system32\racpldlg.dll
      2009-05-18 21:40:56 ----A---- C:\WINDOWS\system32\fltMc.exe
      2009-05-18 21:40:56 ----A---- C:\WINDOWS\system32\fltlib.dll
      2009-05-18 21:40:55 ----D---- C:\WINDOWS\system32\Restore
      2009-05-18 21:40:55 ----A---- C:\WINDOWS\system32\srsvc.dll
      2009-05-18 21:40:55 ----A---- C:\WINDOWS\system32\srrstr.dll
      2009-05-18 21:40:55 ----A---- C:\WINDOWS\system32\srclient.dll
      2009-05-18 21:40:54 ----A---- C:\WINDOWS\system32\nmmkcert.dll
      2009-05-18 21:40:54 ----A---- C:\WINDOWS\system32\msconf.dll
      2009-05-18 21:40:54 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
      2009-05-18 21:40:54 ----A---- C:\WINDOWS\system32\mnmdd.dll
      2009-05-18 21:40:54 ----A---- C:\WINDOWS\system32\isrdbg32.dll
      2009-05-18 21:40:54 ----A---- C:\WINDOWS\system32\ils.dll
      2009-05-18 21:40:51 ----D---- C:\Program Files\NetMeeting
      2009-05-18 21:40:51 ----A---- C:\WINDOWS\system32\msoert2.dll
      2009-05-18 21:40:51 ----A---- C:\WINDOWS\system32\msoeacct.dll
      2009-05-18 21:40:50 ----A---- C:\WINDOWS\system32\inetres.dll
      2009-05-18 21:40:49 ----A---- C:\WINDOWS\system32\inetcomm.dll
      2009-05-18 21:40:48 ----D---- C:\Program Files\Outlook Express
      2009-05-18 21:40:48 ----A---- C:\WINDOWS\system32\schedsvc.dll
      2009-05-18 21:40:47 ----A---- C:\WINDOWS\system32\mstinit.exe
      2009-05-18 21:40:47 ----A---- C:\WINDOWS\system32\mstask.dll
      2009-05-18 21:40:47 ----A---- C:\WINDOWS\system32\isign32.dll
      2009-05-18 21:40:47 ----A---- C:\WINDOWS\system32\inetcfg.dll
      2009-05-18 21:40:47 ----A---- C:\WINDOWS\system32\icwphbk.dll
      2009-05-18 21:40:47 ----A---- C:\WINDOWS\system32\icwdial.dll
      2009-05-18 21:40:41 ----D---- C:\Program Files\Fichiers communs\System
      2009-05-18 21:40:40 ----D---- C:\Program Files\Internet Explorer
      2009-05-18 21:40:10 ----D---- C:\Program Files\ComPlus Applications
      2009-05-18 21:40:08 ----A---- C:\WINDOWS\vbaddin.ini
      2009-05-18 21:40:08 ----A---- C:\WINDOWS\vb.ini
      2009-05-18 21:40:04 ----D---- C:\WINDOWS\Registration
      2009-05-18 21:39:59 ----D---- C:\Program Files\Online Services
      2009-05-18 21:39:49 ----D---- C:\Program Files\Windows Media Connect 2
      2009-05-18 21:39:48 ----D---- C:\Program Files\Windows Media Player
      2009-05-18 21:39:47 ----D---- C:\Program Files\Messenger
      2009-05-18 21:39:43 ----D---- C:\Program Files\MSN Gaming Zone
      2009-05-18 21:39:43 ----A---- C:\WINDOWS\system32\write.exe
      2009-05-18 21:39:35 ----A---- C:\WINDOWS\system32\sndvol32.exe
      2009-05-18 21:39:35 ----A---- C:\WINDOWS\system32\hticons.dll
      2009-05-18 21:39:35 ----A---- C:\WINDOWS\system32\avwav.dll
      2009-05-18 21:39:35 ----A---- C:\WINDOWS\system32\avtapi.dll
      2009-05-18 21:39:35 ----A---- C:\WINDOWS\system32\avmeter.dll
      2009-05-18 21:39:34 ----A---- C:\WINDOWS\system32\winchat.exe
      2009-05-18 21:39:29 ----A---- C:\WINDOWS\system32\getuname.dll
      2009-05-18 21:39:28 ----A---- C:\WINDOWS\system32\sol.exe
      2009-05-18 21:39:28 ----A---- C:\WINDOWS\system32\charmap.exe
      2009-05-18 21:39:28 ----A---- C:\WINDOWS\system32\calc.exe
      2009-05-18 21:39:27 ----A---- C:\WINDOWS\system32\winmine.exe
      2009-05-18 21:39:27 ----A---- C:\WINDOWS\system32\usrlogon.cmd
      2009-05-18 21:39:27 ----A---- C:\WINDOWS\system32\tsshutdn.exe
      2009-05-18 21:39:27 ----A---- C:\WINDOWS\system32\tslabels.ini
      2009-05-18 21:39:27 ----A---- C:\WINDOWS\system32\tskill.exe
      2009-05-18 21:39:27 ----A---- C:\WINDOWS\system32\tsdiscon.exe
      2009-05-18 21:39:27 ----A---- C:\WINDOWS\system32\tscon.exe
      2009-05-18 21:39:27 ----A---- C:\WINDOWS\system32\reset.exe
      2009-05-18 21:39:27 ----A---- C:\WINDOWS\system32\mshearts.exe
      2009-05-18 21:39:27 ----A---- C:\WINDOWS\system32\freecell.exe
      2009-05-18 21:39:26 ----A---- C:\WINDOWS\system32\shadow.exe
      2009-05-18 21:39:26 ----A---- C:\WINDOWS\system32\rwinsta.exe
      2009-05-18 21:39:26 ----A---- C:\WINDOWS\system32\regini.exe
      2009-05-18 21:39:26 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
      2009-05-18 21:39:26 ----A---- C:\WINDOWS\system32\qwinsta.exe
      2009-05-18 21:39:26 ----A---- C:\WINDOWS\system32\qappsrv.exe
      2009-05-18 21:39:26 ----A---- C:\WINDOWS\system32\msg.exe
      2009-05-18 21:39:26 ----A---- C:\WINDOWS\system32\msdtcprf.ini
      2009-05-18 21:39:26 ----A---- C:\WINDOWS\system32\logoff.exe
      2009-05-18 21:39:26 ----A---- C:\WINDOWS\system32\cdmodem.dll
      2009-05-18 21:39:20 ----A---- C:\WINDOWS\system32\wmimgmt.msc
      2009-05-18 21:39:08 ----D---- C:\Program Files\MSN
      2009-05-18 21:39:07 ----A---- C:\WINDOWS\system32\sndrec32.exe
      2009-05-18 21:39:07 ----A---- C:\WINDOWS\system32\mplay32.exe
      2009-05-18 21:39:07 ----A---- C:\WINDOWS\system32\hypertrm.dll
      2009-05-18 21:39:07 ----A---- C:\WINDOWS\system32\accwiz.exe
      2009-05-18 21:39:06 ----D---- C:\Program Files\Windows NT
      2009-05-18 21:39:06 ----A---- C:\WINDOWS\system32\mspaint.exe
      2009-05-18 21:39:06 ----A---- C:\WINDOWS\system32\clipbrd.exe
      2009-05-18 21:39:05 ----A---- C:\WINDOWS\system32\spider.exe
      2009-05-18 21:39:04 ----A---- C:\WINDOWS\system32\tsgqec.dll
      2009-05-18 21:39:04 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
      2009-05-18 21:39:04 ----A---- C:\WINDOWS\system32\rhttpaa.dll
      2009-05-18 21:39:04 ----A---- C:\WINDOWS\system32\aaclient.dll
      2009-05-18 21:39:03 ----A---- C:\WINDOWS\system32\sessmgr.exe
      2009-05-18 21:39:03 ----A---- C:\WINDOWS\system32\remotepg.dll
      2009-05-18 21:39:03 ----A---- C:\WINDOWS\system32\rdshost.exe
      2009-05-18 21:39:03 ----A---- C:\WINDOWS\system32\rdsaddin.exe
      2009-05-18 21:39:03 ----A---- C:\WINDOWS\system32\mstscax.dll
      2009-05-18 21:39:03 ----A---- C:\WINDOWS\system32\mstsc.exe
      2009-05-18 21:39:02 ----A---- C:\WINDOWS\system32\termsrv.dll
      2009-05-18 21:39:02 ----A---- C:\WINDOWS\system32\rdpwsx.dll
      2009-05-18 21:39:02 ----A---- C:\WINDOWS\system32\rdpsnd.dll
      2009-05-18 21:39:02 ----A---- C:\WINDOWS\system32\rdpclip.exe
      2009-05-18 21:39:02 ----A---- C:\WINDOWS\system32\rdchost.dll
      2009-05-18 21:39:02 ----A---- C:\WINDOWS\system32\qprocess.exe
      2009-05-18 21:39:02 ----A---- C:\WINDOWS\system32\icaapi.dll
      2009-05-18 21:39:02 ----A---- C:\WINDOWS\system32\cfgbkend.dll
      2009-05-18 21:39:01 ----D---- C:\WINDOWS\system32\MsDtc
      2009-05-18 21:39:01 ----A---- C:\WINDOWS\system32\xolehlp.dll
      2009-05-18 21:39:01 ----A---- C:\WINDOWS\system32\mtxoci.dll
      2009-05-18 21:39:01 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
      2009-05-18 21:39:01 ----A---- C:\WINDOWS\system32\msdtctm.dll
      2009-05-18 21:39:01 ----A---- C:\WINDOWS\system32\msdtcprx.dll
      2009-05-18 21:39:01 ----A---- C:\WINDOWS\system32\msdtclog.dll
      2009-05-18 21:39:00 ----A---- C:\WINDOWS\system32\msdtc.exe
      2009-05-18 21:39:00 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
      2009-05-18 21:38:59 ----D---- C:\WINDOWS\system32\Com
      2009-05-18 21:38:59 ----A---- C:\WINDOWS\system32\stclient.dll
      2009-05-18 21:38:59 ----A---- C:\WINDOWS\system32\mtxlegih.dll
      2009-05-18 21:38:59 ----A---- C:\WINDOWS\system32\mtxex.dll
      2009-05-18 21:38:59 ----A---- C:\WINDOWS\system32\mtxdm.dll
      2009-05-18 21:38:59 ----A---- C:\WINDOWS\system32\comrepl.dll
      2009-05-18 21:38:59 ----A---- C:\WINDOWS\system32\comaddin.dll
      2009-05-18 21:38:59 ----A---- C:\WINDOWS\system32\colbact.dll
      2009-05-18 21:38:59 ----A---- C:\WINDOWS\system32\clbcatex.dll
      2009-05-18 21:38:59 ----A---- C:\WINDOWS\system32\catsrvps.dll
      2009-05-18 21:38:58 ----A---- C:\WINDOWS\system32\comsvcs.dll
      2009-05-18 21:38:58 ----A---- C:\WINDOWS\system32\catsrvut.dll
      2009-05-18 21:38:58 ----A---- C:\WINDOWS\system32\catsrv.dll
      2009-05-18 21:38:57 ----A---- C:\WINDOWS\system32\comuid.dll
      2009-05-18 21:38:57 ----A---- C:\WINDOWS\system32\comsnap.dll
      2009-05-18 21:38:57 ----A---- C:\WINDOWS\system32\clbcatq.dll
      2009-05-18 21:38:51 ----A---- C:\WINDOWS\system32\servdeps.dll
      2009-05-18 21:38:51 ----A---- C:\WINDOWS\system32\mmfutil.dll
      2009-05-18 21:38:51 ----A---- C:\WINDOWS\system32\licwmi.dll
      2009-05-18 21:38:51 ----A---- C:\WINDOWS\system32\cmprops.dll

      ======List of files/folders modified in the last 1 months======

      2009-05-22 20:00:42 ----A---- C:\WINDOWS\cdplayer.ini
      2009-05-22 18:55:51 ----D---- C:\z0120
      2009-05-22 10:43:35 ----D---- C:\Documents and Settings\IMAD\Application Data\skypePM
      2009-05-18 23:52:16 ----A---- C:\WINDOWS\win.ini
      2009-05-18 23:52:16 ----A---- C:\WINDOWS\system.ini

      ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

      R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520]
      R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys []
      R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-10-30 75072]
      R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-11-08 21248]
      R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
      R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
      R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-03-04 4738560]
      R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-12-04 7435392]
      R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2007-07-30 54400]
      R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2007-07-30 22016]
      R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
      R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
      R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
      S3 ALLOW-IO;ALLOW-IO; \??\F:\ALLOW-IO.sys []
      S3 catchme;catchme; \??\C:\DOCUME~1\IMAD\LOCALS~1\Temp\catchme.sys []
      S3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
      S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-28 12288]
      S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
      S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-05-09 77568]
      S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-05-09 82944]
      S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
      S4 mchInjDrv;mchInjDrv; \??\C:\DOCUME~1\IMAD\LOCALS~1\Temp\mc23.tmp []

      ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

      R2 AntiVirScheduler;Planificateur Avira AntiVir Personal - Free Antivirus; C:\Program Files\Avira\Anti
      1. Telecharge malwarebytes
        https://www.malwarebytes.com/

        Tu l´instale; le programme va se mettre automatiquement a jour.

        Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression".

        Click maintenant sur l´onglet recherche et coche la case : "executer un examen rapide".

        Puis click sur "rechercher".

        Laisse le scanner le pc...

        Si des elements on ete trouvés > click sur supprimer la selection.

        si il t´es demandé de redemarrer > click sur "yes".

        A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum.

        Copie et colle le rapport stp.

        PS : les rapport sont aussi rangé dans l onglet rapport/log
        1. Bonjour et désolé pour tout ce temps que j'ai mis pour répondre parce que ça très dificil pour moi à télécharger ce programe,j'ai visité "https://www.malwarebytes.com/ " mais j'ai trouvé deux logicièl à télécharger l'un "AROTrial_bd (advenced registry optimizer) et l'autre " so&o advenced Registry optimizer ",j'ai les ai télécharger tout les deux mais quand je l'ai instale ils ne se mette pas automatiquement à jour et en plus ils ne présente pas les les caractiristiques que vous m'avez indiquer ci-dessus ! Merci pour votre aide .
          1. telecharge le ici : http://www.malwarebytes.org/mbam/program/mbam-setup.exe
            1. Bonsoir, j’ai exécuté le l’Anti-malware et voici ce que j’ai obtenu :
              Malwarebytes' Anti-Malware 1.36
              Version de la base de données: 2169
              Windows 5.1.2600 Service Pack 3

              23/05/2009 23:32:19
              mbam-log-2009-05-23 (23-32-19).txt

              Type de recherche: Examen rapide
              Eléments examinés: 79442
              Temps écoulé: 5 minute(s), 52 second(s)

              Processus mémoire infecté(s): 0
              Module(s) mémoire infecté(s): 0
              Clé(s) du Registre infectée(s): 0
              Valeur(s) du Registre infectée(s): 0
              Elément(s) de données du Registre infecté(s): 0
              Dossier(s) infecté(s): 0
              Fichier(s) infecté(s): 13

              Processus mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Module(s) mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Clé(s) du Registre infectée(s):
              (Aucun élément nuisible détecté)

              Valeur(s) du Registre infectée(s):
              (Aucun élément nuisible détecté)

              Elément(s) de données du Registre infecté(s):
              (Aucun élément nuisible détecté)

              Dossier(s) infecté(s):
              (Aucun élément nuisible détecté)

              Fichier(s) infecté(s):
              C:\WINDOWS\WINDOWS.exe (Trojan.Agent) -> Quarantined and deleted successfully.
              C:\Documents and Settings\LocalService\Application Data\Application Data.exe (Trojan.Lop.H) -> Quarantined and deleted successfully.
              C:\Documents and Settings\NetworkService\Application Data\Application Data.exe (Trojan.Lop.H) -> Quarantined and deleted successfully.
              C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\.exe (Trojan.Agent) -> Quarantined and deleted successfully.
              C:\Documents and Settings\IMAD\Local Settings\Temporary Internet Files\.exe (Trojan.Agent) -> Quarantined and deleted successfully.
              C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\.exe (Trojan.Agent) -> Quarantined and deleted successfully.
              C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\.exe (Trojan.Agent) -> Quarantined and deleted successfully.
              C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\Dr Watson.exe (Trojan.Agent) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\system32.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
              C:\RECYCLER\.exe (Heuristics.Malware) -> Quarantined and deleted successfully.
              C:\WINDOWS\Fonts\.exe (Worm.Archive) -> Quarantined and deleted successfully.
              C:\WINDOWS\system\system.exe (Trojan.Banker) -> Quarantined and deleted successfully.
              C:\WINDOWS\pchealth\UploadLB\UploadLB.exe (Worm.Archive) -> Quarantined and deleted successfully.
              Que dois-je faire maintenant ?,et merci pour vos précieux conseils .
          2. Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe

            -> Double clique sur combofix.exe.
            -> Tape sur la touche 1 (Yes) pour démarrer le scan.
            -> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

            NOTE : Le rapport se trouve également ici : C:\Combofix.txt

            Avant d'utiliser ComboFix :

            -> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

            -> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil.

            Une fois fait, sur ton bureau double-clic sur Combofix.exe.

            - Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

            /!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

            - En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

            - Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

            -> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

            -> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.
            1. bonsoir et désolé pour le retard ,j'ai suivi vos indication et j'ai scané mon PC avec ce logiciel mais la rapport a été telement long que j'ai pas pu le copier içi ,j'ai essayer plusieurs fois sans succès .
              1. Première partie du rapport :

                AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
                .

                (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                .

                c:\documents and settings\All Users\Application Data\Microsoft\Dr Watson\Dr Watson.exe
                c:\documents and settings\All Users\Favoris\Favoris.exe
                c:\documents and settings\IMAD\Cookies\.exe
                c:\documents and settings\IMAD\Favoris\Favoris.exe
                c:\documents and settings\IMAD\Favoris\Liens\Liens.exe
                c:\documents and settings\IMAD\Favoris\Sites Web Microsoft\Sites Web Microsoft.exe
                c:\documents and settings\IMAD\IMAD.exe
                c:\documents and settings\LocalService\Cookies\.exe
                c:\documents and settings\LocalService\Local Settings\Temporary Internet Files\.exe
                c:\documents and settings\NetworkService\Cookies\.exe
                c:\documents and settings\NetworkService\Local Settings\Temporary Internet Files\.exe
                C:\host232.exe
                c:\windows\system\system.exe
                c:\windows\system32\issat.exe
                c:\windows\system32\restore\restore.exe
                c:\windows\system32\system32.exe
                c:\windows\Tasks\.exe
                c:\windows\windows.exe
                D:\host232.exe
                E:\host232.exe

                ----- Cloneurs de fichier -----

                c:\documents and settings\All Users\All Users.exe
                c:\documents and settings\All Users\Application Data\.exe
                c:\documents and settings\All Users\Application Data\Adobe\Acrobat\9.0\9.0.exe
                c:\documents and settings\All Users\Application Data\Adobe\Acrobat\9.0\Replicate\Replicate.exe
                c:\documents and settings\All Users\Application Data\Adobe\Acrobat\9.0\Replicate\Security\Security.exe
                c:\documents and settings\All Users\Application Data\Adobe\Acrobat\Acrobat.exe
                c:\documents and settings\All Users\Application Data\Adobe\Adobe.exe
                c:\documents and settings\All Users\Application Data\Adobe\Updater6\Updater6.exe
                c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\AntiVir PersonalEdition Classic.exe
                c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\BACKUP\BACKUP.exe
                c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\EVENTDB\EVENTDB.exe
                c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\EVENTS\EVENTS.exe
                c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\FAILSAVE\FAILSAVE.exe
                c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\IDX\IDX.exe
                c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\INFECTED\INFECTED.exe
                c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\JOBS\JOBS.exe
                c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\LOGFILES\LOGFILES.exe
                c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\PROFILES\PROFILES.exe
                c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\REPORTS\REPORTS.exe
                c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\SYSSAFE\SYSSAFE.exe
                c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\TEMP\AVCENTER_4834552e\AVCENTER_4834552e.exe
                c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\TEMP\TEMP.exe
                c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\UPDATE\AVUPDATE_48345537\AVUPDATE_48345537.exe
                c:\documents and settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\UPDATE\AVUPDATE_48345537\idx\idx.exe
                c:\documents and settings\All Users\Application Data\Avira\Avira.exe
                c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes.exe
                c:\documents and settings\All Users\Application Data\Microsoft Help\Microsoft Help.exe
                c:\documents and settings\All Users\Application Data\Microsoft\.exe
                c:\documents and settings\All Users\Application Data\Microsoft\Crypto\.exe
                c:\documents and settings\All Users\Application Data\Microsoft\Crypto\DSS\.exe
                c:\documents and settings\All Users\Application Data\Microsoft\Crypto\DSS\MachineKeys\.exe
                c:\documents and settings\All Users\Application Data\Microsoft\Crypto\RSA\.exe
                c:\documents and settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\.exe
                c:\documents and settings\All Users\Application Data\Microsoft\Crypto\RSA\S-1-5-18\.exe
                c:\documents and settings\All Users\Application Data\Microsoft\Encarta Reference Library\2009\2009.exe
                c:\documents and settings\All Users\Application Data\Microsoft\Encarta Reference Library\2009\F\F.exe
                c:\documents and settings\All Users\Application Data\Microsoft\Encarta Reference Library\2009\F\Updates\Updates.exe
                c:\documents and settings\All Users\Application Data\Microsoft\Encarta Reference Library\Encarta Reference Library.exe
                c:\documents and settings\All Users\Application Data\Microsoft\HTML Help\HTML Help.exe
                c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\IdentityCRL.exe
                c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\production.exe
                c:\documents and settings\All Users\Application Data\Microsoft\Media Index\Media Index.exe
                c:\documents and settings\All Users\Application Data\Microsoft\Media Player\Media Player.exe
                c:\documents and settings\All Users\Application Data\Microsoft\MSDAIPP\MSDAIPP.exe
                c:\documents and settings\All Users\Application Data\Microsoft\MSDAIPP\OFFLINE\OFFLINE.exe
                c:\documents and settings\All Users\Application Data\Microsoft\Network\Connections\Cm\Cm.exe
                c:\documents and settings\All Users\Application Data\Microsoft\Network\Connections\Connections.exe
                c:\documents and settings\All Users\Application Data\Microsoft\Network\Connections\Pbk\Pbk.exe
                c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\Downloader.exe
                c:\documents and settings\All Users\Application Data\Microsoft\Network\Network.exe
                c:\documents and settings\All Users\Application Data\Microsoft\OFFICE\DATA\DATA.exe
                c:\documents and settings\All Users\Application Data\Microsoft\OFFICE\OFFICE.exe
                1. --2 -deuxième partie du rapport :
                  c:\documents and settings\All Users\Application Data\Microsoft\User Account Pictures\Default Pictures\Default Pictures.exe
                  c:\documents and settings\All Users\Application Data\Microsoft\User Account Pictures\User Account Pictures.exe
                  c:\documents and settings\All Users\Application Data\Microsoft\WLSetup\Logs\Logs.exe
                  c:\documents and settings\All Users\Application Data\Microsoft\WLSetup\WLSetup.exe
                  c:\documents and settings\All Users\Application Data\Skype\{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}\{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}.exe
                  c:\documents and settings\All Users\Application Data\Skype\Pictures\Pictures.exe
                  c:\documents and settings\All Users\Application Data\Skype\Plugins\Local Cache\Categories\Categories.exe
                  c:\documents and settings\All Users\Application Data\Skype\Plugins\Local Cache\Local Cache.exe
                  c:\documents and settings\All Users\Application Data\Skype\Plugins\Plugins.exe
                  c:\documents and settings\All Users\Application Data\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\F57B48ADF2224F088EDD1A2B9BAD84E8.exe
                  c:\documents and settings\All Users\Application Data\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\Games.exe
                  c:\documents and settings\All Users\Application Data\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Local Cache\Local Cache.exe
                  c:\documents and settings\All Users\Application Data\Skype\Plugins\Plugins\Plugins.exe
                  c:\documents and settings\All Users\Application Data\Skype\Skype.exe
                  c:\documents and settings\All Users\Application Data\Skype\Wallpapers\Wallpapers.exe
                  c:\documents and settings\All Users\Application Data\TEMP\TEMP.exe
                  c:\documents and settings\All Users\Application Data\Windows Genuine Advantage\Data\Data.exe
                  c:\documents and settings\All Users\Application Data\Windows Genuine Advantage\Windows Genuine Advantage.exe
                  c:\documents and settings\All Users\Application Data\Yahoo!\Yahoo!.exe
                  c:\documents and settings\All Users\Documents\Documents.exe
                  c:\documents and settings\All Users\Documents\Ma musique\Ma musique.exe
                  c:\documents and settings\All Users\Documents\Ma musique\Playlists\Playlists.exe
                  c:\documents and settings\All Users\Documents\Ma musique\Sample Playlists\[u]0/u00DE782\[u]0/u00DE782.exe
                  c:\documents and settings\All Users\Documents\Ma musique\Sample Playlists\Sample Playlists.exe
                  c:\documents and settings\All Users\Documents\Ma musique\Sync Playlists\Sync Playlists.exe
                  c:\documents and settings\All Users\Documents\Mes images\IMAGE\IMAGE.exe
                  c:\documents and settings\All Users\Documents\Mes images\Mes images.exe
                  c:\documents and settings\All Users\Documents\Nouveau dossier\Nouveau dossier.exe
                  c:\documents and settings\All Users\DRM\.exe
                  c:\documents and settings\Default User\.exe
                  c:\documents and settings\Default User\Application Data\.exe
                  c:\documents and settings\Default User\Application Data\Microsoft\.exe
                  c:\documents and settings\Default User\Application Data\Microsoft\Media Player\Media Player.exe
                  c:\documents and settings\Default User\Application Data\Microsoft\SystemCertificates\.exe
                  c:\documents and settings\Default User\Application Data\Microsoft\SystemCertificates\My\.exe
                  c:\documents and settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\.exe
                  c:\documents and settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\.exe
                  c:\documents and settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\.exe
                  c:\documents and settings\Default User\Bureau\Bureau.exe
                  c:\documents and settings\Default User\Cookies\.exe
                  c:\documents and settings\Default User\Favoris\Favoris.exe
                  c:\documents and settings\Default User\Local Settings\.exe
                  c:\documents and settings\Default User\Local Settings\Application Data\.exe
                  c:\documents and settings\Default User\Local Settings\Application Data\Microsoft\.exe
                  c:\documents and settings\Default User\Local Settings\Application Data\Microsoft\Internet Explorer\Internet Explorer.exe
                  c:\documents and settings\Default User\Local Settings\Application Data\Microsoft\Media Player\Media Player.exe
                  c:\documents and settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\11.0\11.0.exe
                  c:\documents and settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\Windows Media.exe
                  c:\documents and settings\Default User\Local Settings\Historique\.exe
                  c:\documents and settings\Default User\Local Settings\Historique\History.IE5\.exe
                  c:\documents and settings\Default User\Local Settings\Temp\Temp.exe
                  c:\documents and settings\Default User\Local Settings\Temporary Internet Files\.exe
                  c:\documents and settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\.exe
                  c:\documents and settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\9B5SW32J\.exe
                  c:\documents and settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\AU5JND7L\.exe
                  c:\documents and settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\B2WY1TR6\.exe
                  c:\documents and settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\S6FIYPCO\.exe
                  c:\documents and settings\Default User\Mes documents\Mes documents.exe
                  c:\documents and settings\Default User\Recent\.exe
                  c:\documents and settings\Default User\SendTo\.exe
                  c:\documents and settings\Documents and Settings.exe
                  c:\documents and settings\IMAD\Application Data\.exe
                  c:\documents and settings\IMAD\Application Data\Adobe\Acrobat\9.0\9.0.exe
                  c:\documents and settings\IMAD\Application Data\Adobe\Acrobat\9.0\Collab\Collab.exe
                  c:\documents and settings\IMAD\Application Data\Adobe\Acrobat\9.0\Forms\Forms.exe
                  c:\documents and settings\IMAD\Application Data\Adobe\Acrobat\9.0\JavaScripts\JavaScripts.exe
                  c:\documents and settings\IMAD\Application Data\Adobe\Acrobat\9.0\Preferences\Preferences.exe
                  c:\documents and settings\IMAD\Application Data\Adobe\Acrobat\9.0\Preferences\Redaction\FRA\FRA.exe
                  c:\documents and settings\IMAD\Application Data\Adobe\Acrobat\9.0\Preferences\Redaction\Redaction.exe
                  c:\documents and settings\IMAD\Application Data\Adobe\Acrobat\Acrobat.exe
                  c:\documents and settings\IMAD\Application Data\Adobe\Adobe.exe
                  c:\documents and settings\IMAD\Application Data\Adobe\Flash Player\AssetCache\AssetCache.exe
                  c:\documents and settings\IMAD\Application Data\Adobe\Flash Player\AssetCache\NKQYKY6N\NKQYKY6N.exe
                  c:\documents and settings\IMAD\Application Data\Adobe\Flash Player\Flash Player.exe
                  c:\documents and settings\IMAD\Application Data\DivX\DivX Codec\DivX Codec.exe
                  c:\documents and settings\IMAD\Application Data\DivX\DivX.exe
                  c:\documents and settings\IMAD\Application Data\DMCache\DMCache.exe
                  c:\documents and settings\IMAD\Application Data\dvdcss\-0000000000000000-0000000000\-0000000000000000-0000000000.exe
                  c:\documents and settings\IMAD\Application Data\dvdcss\dvdcss.exe
                  c:\documents and settings\IMAD\Application Data\Identities\{53E35C27-4735-4E8F-B431-5B8ED2F47E83}\{53E35C27-4735-4E8F-B431-5B8ED2F47E83}.exe
                  c:\documents and settings\IMAD\Application Data\Identities\Identities.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\DwnlData.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\-5Bfxm-5D-Nyl-bahia_2_197\-5Bfxm-5D-Nyl-bahia_2_197.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\[u]0/u0600045_90\[u]0/u0600045_90.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\[u]0/u12508ar_111\[u]0/u12508ar_111.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\[u]0/u5P21_114\[u]0/u5P21_114.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\[u]0/u5P25_116\[u]0/u5P25_116.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\1-MSS-Fiches-radio_174\1-MSS-Fiches-radio_174.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\1_142\1_142.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\1_206\1_206.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\10021993_168\10021993_168.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\1208095251466709_88\1208095251466709_88.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\1468847_169\1468847_169.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\1468847_170\1468847_170.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\2002-083e_74\2002-083e_74.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\2004EIAA0136_98\2004EIAA0136_98.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-142320-edfda3d5_21\20090520-142320-edfda3d5_21.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-142326-43c3126d_22\20090520-142326-43c3126d_22.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-142634-e231e636_23\20090520-142634-e231e636_23.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-142653-cfac7824_24\20090520-142653-cfac7824_24.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-142944-47a5c1c3_28\20090520-142944-47a5c1c3_28.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-144058-8b0121bd_38\20090520-144058-8b0121bd_38.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-145030-f97a407d_39\20090520-145030-f97a407d_39.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-150321-ce79b54_42\20090520-150321-ce79b54_42.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-150321-ce79b54_43\20090520-150321-ce79b54_43.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-151004-3437843f_45\20090520-151004-3437843f_45.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-151004-a684581f_44\20090520-151004-a684581f_44.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-151216-792eaf0_46\20090520-151216-792eaf0_46.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-151612-dd360306_47\20090520-151612-dd360306_47.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-180859-9ef0a405_102\20090520-180859-9ef0a405_102.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-180925-e38c2fc7_103\20090520-180925-e38c2fc7_103.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-181056-fd0db487_104\20090520-181056-fd0db487_104.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\20090520-181632-1344f7c0_108\20090520-181632-1344f7c0_108.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\21-004-XIF2006001_76\21-004-XIF2006001_76.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\21052009_129\21052009_129.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\23052009_203\23052009_203.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\2700_65\2700_65.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\5_110\5_110.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\858_Bernard_152\858_Bernard_152.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\93_167\93_167.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\97_165\97_165.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\9p-com6_55\9p-com6_55.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\9p-pos6_79\9p-pos6_79.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\a1249e_100\a1249e_100.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\A17_112\A17_112.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\abi_133\abi_133.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Abstract_3-1_52\Abstract_3-1_52.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Actes_SAR_GP3A_Tunis_2006-jv08_153\Actes_SAR_GP3A_Tunis_2006-jv08_153.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Actes_SAR_GP3A_Tunis_2006-jv08_97\Actes_SAR_GP3A_Tunis_2006-jv08_97.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\AROTrial_bd_194\AROTrial_bd_194.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\AROTrial_bd_198\AROTrial_bd_198.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Art11-4_5_86\Art11-4_5_86.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Art11-4_5_95\Art11-4_5_95.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Art11-4_5_96\Art11-4_5_96.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Art4-1_5_63\Art4-1_5_63.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\B_Tech_13_64\B_Tech_13_64.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\B_Tech_26_91\B_Tech_26_91.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\B_Tech_4_72\B_Tech_4_72.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\c0339abstract_73\c0339abstract_73.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\catalogue_masters_2005-2008_164\catalogue_masters_2005-2008_164.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\centre-20biotechn-202007_117\centre-20biotechn-202007_117.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Chateaubriand-20--20M-C3-A9moi_210\Chateaubriand-20--20M-C3-A9moi_210.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\CI011066_113\CI011066_113.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\ComboFix_48\ComboFix_48.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Contrat_social_208\Contrat_social_208.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\csu_dry_vegetables_136\csu_dry_vegetables_136.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\ctcpa_confiture_fabrication_in_61\ctcpa_confiture_fabrication_in_61.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\ctcpa_confiture_fabrication_in_94\ctcpa_confiture_fabrication_in_94.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\descartes_methode_209\descartes_methode_209.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\deshydra-20osmotique_51\deshydra-20osmotique_51.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\deshydratation_77\deshydratation_77.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\DFX2BETA_1736_9\DFX2BETA_1736_9.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\digsby_setup_193\digsby_setup_193.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\edition_126\edition_126.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Enhs25f_56\Enhs25f_56.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\ESCoFetL-Chapitre2-OK_143\ESCoFetL-Chapitre2-OK_143.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\F3000_Schage_des_produits_alim_25\F3000_Schage_des_produits_alim_25.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\Fiche-20Chips_60\Fiche-20Chips_60.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\FLYER_Mediterra_2007_162\FLYER_Mediterra_2007_162.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\fullxmovies_1\fullxmovies_1.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\ia00p063_140\ia00p063_140.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\ia00p067_139\ia00p067_139.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\ia00p522_137\ia00p522_137.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\ia00p522_138\ia00p522_138.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\ika_rct_basic_173\ika_rct_basic_173.exe
                  c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\IMAD.exe
                  1. --3- troisième :
                    D\Application Data\Sammsoft\Sammsoft.exe
                    c:\documents and settings\IMAD\Application Data\SecuROM\SecuROM.exe
                    c:\documents and settings\IMAD\Application Data\SecuROM\UserData\.exe
                    c:\documents and settings\IMAD\Application Data\Skype\Content\Content.exe
                    c:\documents and settings\IMAD\Application Data\Skype\milou_hm\dyncontent\dyncontent.exe
                    c:\documents and settings\IMAD\Application Data\Skype\milou_hm\httpfe\httpfe.exe
                    c:\documents and settings\IMAD\Application Data\Skype\milou_hm\milou_hm.exe
                    c:\documents and settings\IMAD\Application Data\Skype\milou_hm\voicemail\voicemail.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\[u]0/u7\[u]0/u7.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\17\17.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\27\27.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\2a\2a.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\32\32.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\39\39.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\3b\3b.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\3e\3e.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\4e\4e.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\60\60.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\61\61.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\64\64.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\68\68.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\6d\6d.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\79\79.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\9c\9c.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\a0\a0.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\b5\b5.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\b9\b9.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\c7\c7.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\chatsync.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\d2\d2.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\e8\e8.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\dyncontent\dyncontent.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\httpfe\httpfe.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\nadine-douce.exe
                    c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\voicemail\voicemail.exe
                    c:\documents and settings\IMAD\Application Data\Skype\Pictures\Pictures.exe
                    c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\15\15.exe
                    c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\1a\1a.exe
                    c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\62\62.exe
                    c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\7b\7b.exe
                    c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\chatsync.exe
                    c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\e8\e8.exe
                    c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\dyncontent\dyncontent.exe
                    c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\httpfe\httpfe.exe
                    c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\rahma.wafa1.exe
                    c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\voicemail\voicemail.exe
                    c:\documents and settings\IMAD\Application Data\Skype\Skype.exe
                    c:\documents and settings\IMAD\Application Data\Skype\toubitoubi\toubitoubi.exe
                    c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\chatsync\34\34.exe
                    c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\chatsync\77\77.exe
                    c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\chatsync\9d\9d.exe
                    c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\chatsync\b8\b8.exe
                    c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\chatsync\chatsync.exe
                    c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\dyncontent\dyncontent.exe
                    c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\httpfe\httpfe.exe
                    c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\toubitoubi7.exe
                    c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\voicemail\voicemail.exe
                    c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\chatsync\1a\1a.exe
                    c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\chatsync\97\97.exe
                    c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\chatsync\af\af.exe
                    c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\chatsync\chatsync.exe
                    c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\dyncontent\dyncontent.exe
                    c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\httpfe\httpfe.exe
                    c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\voicemail\voicemail.exe
                    c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\zino_albi06.exe
                    c:\documents and settings\IMAD\Application Data\skypePM\skypePM.exe
                    c:\documents and settings\IMAD\Application Data\SolwaySoftware\SolwaySoftware.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\[u]0/u\[u]0/u.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\1\1.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\10\10.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\11\11.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\12\12.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\13\13.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\14\14.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\15\15.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\15\4e09eacf-46b51e4f-n\4e09eacf-46b51e4f-n.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\16\16.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\17\17.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\18\18.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\19\19.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\2\2.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\20\20.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\21\21.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\22\22.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\23\23.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\24\24.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\25\25.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\26\26.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\27\27.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\28\28.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\29\29.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\3\3.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\30\30.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\31\31.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\32\32.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\33\258cea61-4647c794-n\258cea61-4647c794-n.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\33\33.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\34\34.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\35\35.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\36\36.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\37\37.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\38\38.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\39\39.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\4\4.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\40\40.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\41\41.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\42\42.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\43\43.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\44\44.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\45\45.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\45\4f710eed-601542d3-n\4f710eed-601542d3-n.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\46\46.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\47\47.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\48\48.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\49\49.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\5\5.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\50\50.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\50\5b902232-55694a9f-n\5b902232-55694a9f-n.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\51\51.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\52\52.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\53\53.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\54\54.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\55\55.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\56\56.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\57\57.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\58\58.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\59\59.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\6.0.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\6\6.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\60\60.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\61\61.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\62\62.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-329123bb-n\6baea4fe-329123bb-n.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\63\63.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\7\7.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\8\8.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\9\9.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\host\host.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\muffin\muffin.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\tmp\tmp.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\cache.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\Deployment.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\ext\ext.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\log\log.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\security\security.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\Java.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Java\jre1.6.0_13\jre1.6.0_13.exe
                    c:\documents and settings\IMAD\Application Data\Sun\Sun.exe
                    c:\documents and settings\IMAD\Application Data\URSoft\URSoft.exe
                    c:\documents and settings\IMAD\Application Data\URSoft\Your Uninstaller 2008\Your Uninstaller 2008.exe
                    c:\documents and settings\IMAD\Application Data\vlc\vlc.exe
                    c:\documents and settings\IMAD\Application Data\WinRAR\WinRAR.exe
                    c:\documents and settings\IMAD\Application Data\Yahoo!\Companion\Buttons\Buttons.exe
                    c:\documents and settings\IMAD\Application Data\Yahoo!\Companion\Companion.exe
                    c:\documents and settings\IMAD\Application Data\Yahoo!\Yahoo!.exe
                    c:\documents and settings\IMAD\Contacts\Contacts.exe
                    c:\documents and settings\IMAD\Contacts\eglant_umm@hotmail.com\.exe
                    c:\documents and settings\IMAD\Contacts\imad_kais@hotmail.com\.exe
                    c:\documents and settings\IMAD\Contacts\milou_hm@hotmail.com\.exe
                    c:\documents and settings\IMAD\Contacts\toubi.1992@.live\.exe
                    c:\documents and settings\IMAD\Contacts\toubi.1992@live.fr\.exe
                    c:\documents and settings\IMAD\InstallAnywhere\.exe
                    c:\documents and settings\IMAD\Local Settings\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Acrobat\9.0\9.0.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Acrobat\9.0\Cache\Cache.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Acrobat\9.0\Cache\Search\Search.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Acrobat\9.0\Updater\Updater.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Acrobat\Acrobat.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Adobe.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Color\Color.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\ESD\ESD.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\crl\crl.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\Data\Data.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\Install\AdobeUpdater\AdobeUpdater.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\Install\Install.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\Install\reader9rdr-fr_FR\reader9rdr-fr_FR.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\Updater6.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Help\Help.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Identities\{53E35C27-4735-4E8F-B431-5B8ED2F47E83}\{53E35C27-4735-4E8F-B431-5B8ED2F47E83}.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Identities\{53E35C27-4735-4E8F-B431-5B8ED2F47E83}\Microsoft\Microsoft.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Identities\{53E35C27-4735-4E8F-B431-5B8ED2F47E83}\Microsoft\Outlook Express\Outlook Express.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Identities\Identities.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft Help\Microsoft Help.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\CD Burning\CD Burning.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Credentials\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1482476501-920026266-1801674531-1003\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds Cache\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds Cache\[u]0/u0INEPVK\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds Cache\1ILVKDSJ\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds Cache\29R8M69C\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds Cache\LG06HWHT\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds\Feeds.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\HelpCtr\HelpCtr.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Internet Explorer\Internet Explorer.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\LocalMLS.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Media Player\Media Player.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Media Player\Transcoded Files Cache\Transcoded Files Cache.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\eglant_umm@hotmail.com.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\Backgrounds\Backgrounds.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\CustomEmoticons\CustomEmoticons.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\DynamicBackgrounds\DynamicBackgrounds.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\ObjectStore.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\UserTile\UserTile.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\Winks3\Winks3.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\Sharing Folders\Sharing Folders.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\SharingMetadata\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\SharingMetadata\Logs\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\SharingMetadata\Working\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\SharingMetadata\Working\database_1088_D048_88D0_2DCA\database_1088_D048_88D0_2DCA.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\imad_kais@hotmail.com.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\Backgrounds\Backgrounds.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\CustomEmoticons\CustomEmoticons.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\DynamicBackgrounds\DynamicBackgrounds.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\ObjectStore.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\UserTile\UserTile.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\Winks3\Winks3.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\Sharing Folders\Sharing Folders.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\SharingMetadata\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\SharingMetadata\Logs\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\SharingMetadata\Working\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\SharingMetadata\Working\database_1088_D048_88D0_2DCA\database_1088_D048_88D0_2DCA.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\Messenger.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\ObjectStore\Backgrounds\Backgrounds.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\ObjectStore\DynamicBackgrounds\DynamicBackgrounds.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\ObjectStore\ObjectStore.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\ObjectStore\UserTile\UserTile.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\ObjectStore\Winks3\Winks3.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\Sharing Folders\Sharing Folders.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\SharingMetadata\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\SharingMetadata\Logs\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\SharingMetadata\Working\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\SharingMetadata\Working\database_1088_D048_88D0_2DCA\database_1088_D048_88D0_2DCA.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\toubi.1992@live.fr.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Office\12.0\12.0.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Office\Office.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Portable Devices\Portable Devices.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\eglant_umm@hotmail.com\eglant_umm@hotmail.com.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\eglant_umm@hotmail.com\real\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\eglant_umm@hotmail.com\shadow\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\imad_kais@hotmail.com\imad_kais@hotmail.com.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\imad_kais@hotmail.com\real\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\imad_kais@hotmail.com\shadow\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\milou_hm@hotmail.com\milou_hm@hotmail.com.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\milou_hm@hotmail.com\real\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\toubi.1992@.live\real\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\toubi.1992@.live\toubi.1992@.live.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\toubi.1992@live.fr\real\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\toubi.1992@live.fr\shadow\.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\toubi.1992@live.fr\toubi.1992@live.fr.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\Windows Live Contacts.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live\SqmApi\SqmApi.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live\Windows Live.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Media\11.0\11.0.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Media\Windows Media.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows\Windows.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\The Weather Channel\Framework\Framework.exe
                    c:\documents and settings\IMAD\Local Settings\Application Data\The Weather Channel\The Weather Channel.exe
                    c:\documents and settings\IMAD\Local Settings\Apps\2.0\2.0.exe
                    c:\documents and settings\IMAD\Local Settings\Apps\2.0\782OHZ30.XW4\782OHZ30.XW4.exe
                    c:\documents and settings\IMAD\Local Settings\Apps\2.0\782OHZ30.XW4\NXEMDN4C.BX4\manifests\manifests.exe
                    c:\documents and settings\IMAD\Local Settings\Apps\2.0\782OHZ30.XW4\NXEMDN4C.BX4\NXEMDN4C.BX4.exe
                    c:\documents and settings\IMAD\Local Settings\Apps\Apps.exe
                    c:\documents and settings\IMAD\Local Settings\Historique\.exe
                    c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\.exe
                    c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012008022020080221\.exe
                    c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012008022120080222\.exe
                    c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012008052120080522\.exe
                    c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012009052020090521\.exe
                    c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012009052120090522\.exe
                    c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012009052220090523\.exe
                    c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012009052320090524\.exe
                    c:\documents and settings\IMAD\Mes documents\Downloads\Compressed\Compressed.exe
                    c:\documents and settings\IMAD\Mes documents\Downloads\Documents\Documents.exe
                    c:\documents and settings\IMAD\Mes documents\Downloads\Downloads.exe
                    c:\documents and settings\IMAD\Mes documents\Downloads\Music\Music.exe
                    c:\documents and settings\IMAD\Mes documents\Downloads\Programs\Programs.exe
                    c:\documents and settings\IMAD\Mes documents\Downloads\Video\Video.exe
                    c:\documents and settings\IMAD\Mes documents\Ma musique\Ma musique.exe
                    c:\documents and settings\IMAD\Mes documents\Mes documents.exe
                    c:\documents and settings\IMAD\Mes documents\Mes images\Mes images.exe
                    1. --3- troisième :
                      D\Application Data\Sammsoft\Sammsoft.exe
                      c:\documents and settings\IMAD\Application Data\SecuROM\SecuROM.exe
                      c:\documents and settings\IMAD\Application Data\SecuROM\UserData\.exe
                      c:\documents and settings\IMAD\Application Data\Skype\Content\Content.exe
                      c:\documents and settings\IMAD\Application Data\Skype\milou_hm\dyncontent\dyncontent.exe
                      c:\documents and settings\IMAD\Application Data\Skype\milou_hm\httpfe\httpfe.exe
                      c:\documents and settings\IMAD\Application Data\Skype\milou_hm\milou_hm.exe
                      c:\documents and settings\IMAD\Application Data\Skype\milou_hm\voicemail\voicemail.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\[u]0/u7\[u]0/u7.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\17\17.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\27\27.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\2a\2a.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\32\32.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\39\39.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\3b\3b.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\3e\3e.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\4e\4e.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\60\60.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\61\61.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\64\64.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\68\68.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\6d\6d.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\79\79.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\9c\9c.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\a0\a0.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\b5\b5.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\b9\b9.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\c7\c7.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\chatsync.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\d2\d2.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\chatsync\e8\e8.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\dyncontent\dyncontent.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\httpfe\httpfe.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\nadine-douce.exe
                      c:\documents and settings\IMAD\Application Data\Skype\nadine-douce\voicemail\voicemail.exe
                      c:\documents and settings\IMAD\Application Data\Skype\Pictures\Pictures.exe
                      c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\15\15.exe
                      c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\1a\1a.exe
                      c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\62\62.exe
                      c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\7b\7b.exe
                      c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\chatsync.exe
                      c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\chatsync\e8\e8.exe
                      c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\dyncontent\dyncontent.exe
                      c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\httpfe\httpfe.exe
                      c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\rahma.wafa1.exe
                      c:\documents and settings\IMAD\Application Data\Skype\rahma.wafa1\voicemail\voicemail.exe
                      c:\documents and settings\IMAD\Application Data\Skype\Skype.exe
                      c:\documents and settings\IMAD\Application Data\Skype\toubitoubi\toubitoubi.exe
                      c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\chatsync\34\34.exe
                      c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\chatsync\77\77.exe
                      c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\chatsync\9d\9d.exe
                      c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\chatsync\b8\b8.exe
                      c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\chatsync\chatsync.exe
                      c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\dyncontent\dyncontent.exe
                      c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\httpfe\httpfe.exe
                      c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\toubitoubi7.exe
                      c:\documents and settings\IMAD\Application Data\Skype\toubitoubi7\voicemail\voicemail.exe
                      c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\chatsync\1a\1a.exe
                      c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\chatsync\97\97.exe
                      c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\chatsync\af\af.exe
                      c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\chatsync\chatsync.exe
                      c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\dyncontent\dyncontent.exe
                      c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\httpfe\httpfe.exe
                      c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\voicemail\voicemail.exe
                      c:\documents and settings\IMAD\Application Data\Skype\zino_albi06\zino_albi06.exe
                      c:\documents and settings\IMAD\Application Data\skypePM\skypePM.exe
                      c:\documents and settings\IMAD\Application Data\SolwaySoftware\SolwaySoftware.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\[u]0/u\[u]0/u.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\1\1.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\10\10.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\11\11.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\12\12.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\13\13.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\14\14.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\15\15.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\15\4e09eacf-46b51e4f-n\4e09eacf-46b51e4f-n.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\16\16.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\17\17.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\18\18.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\19\19.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\2\2.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\20\20.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\21\21.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\22\22.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\23\23.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\24\24.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\25\25.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\26\26.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\27\27.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\28\28.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\29\29.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\3\3.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\30\30.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\31\31.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\32\32.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\33\258cea61-4647c794-n\258cea61-4647c794-n.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\33\33.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\34\34.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\35\35.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\36\36.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\37\37.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\38\38.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\39\39.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\4\4.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\40\40.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\41\41.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\42\42.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\43\43.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\44\44.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\45\45.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\45\4f710eed-601542d3-n\4f710eed-601542d3-n.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\46\46.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\47\47.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\48\48.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\49\49.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\5\5.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\50\50.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\50\5b902232-55694a9f-n\5b902232-55694a9f-n.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\51\51.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\52\52.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\53\53.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\54\54.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\55\55.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\56\56.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\57\57.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\58\58.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\59\59.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\6.0.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\6\6.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\60\60.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\61\61.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\62\62.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-329123bb-n\6baea4fe-329123bb-n.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\63\63.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\7\7.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\8\8.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\9\9.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\host\host.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\muffin\muffin.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\tmp\tmp.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\cache.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\Deployment.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\ext\ext.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\log\log.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\security\security.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\Java.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Java\jre1.6.0_13\jre1.6.0_13.exe
                      c:\documents and settings\IMAD\Application Data\Sun\Sun.exe
                      c:\documents and settings\IMAD\Application Data\URSoft\URSoft.exe
                      c:\documents and settings\IMAD\Application Data\URSoft\Your Uninstaller 2008\Your Uninstaller 2008.exe
                      c:\documents and settings\IMAD\Application Data\vlc\vlc.exe
                      c:\documents and settings\IMAD\Application Data\WinRAR\WinRAR.exe
                      c:\documents and settings\IMAD\Application Data\Yahoo!\Companion\Buttons\Buttons.exe
                      c:\documents and settings\IMAD\Application Data\Yahoo!\Companion\Companion.exe
                      c:\documents and settings\IMAD\Application Data\Yahoo!\Yahoo!.exe
                      c:\documents and settings\IMAD\Contacts\Contacts.exe
                      c:\documents and settings\IMAD\Contacts\eglant_umm@hotmail.com\.exe
                      c:\documents and settings\IMAD\Contacts\imad_kais@hotmail.com\.exe
                      c:\documents and settings\IMAD\Contacts\milou_hm@hotmail.com\.exe
                      c:\documents and settings\IMAD\Contacts\toubi.1992@.live\.exe
                      c:\documents and settings\IMAD\Contacts\toubi.1992@live.fr\.exe
                      c:\documents and settings\IMAD\InstallAnywhere\.exe
                      c:\documents and settings\IMAD\Local Settings\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Acrobat\9.0\9.0.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Acrobat\9.0\Cache\Cache.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Acrobat\9.0\Cache\Search\Search.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Acrobat\9.0\Updater\Updater.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Acrobat\Acrobat.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Adobe.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Color\Color.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\ESD\ESD.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\crl\crl.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\Data\Data.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\Install\AdobeUpdater\AdobeUpdater.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\Install\Install.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\Install\reader9rdr-fr_FR\reader9rdr-fr_FR.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Adobe\Updater6\Updater6.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Help\Help.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Identities\{53E35C27-4735-4E8F-B431-5B8ED2F47E83}\{53E35C27-4735-4E8F-B431-5B8ED2F47E83}.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Identities\{53E35C27-4735-4E8F-B431-5B8ED2F47E83}\Microsoft\Microsoft.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Identities\{53E35C27-4735-4E8F-B431-5B8ED2F47E83}\Microsoft\Outlook Express\Outlook Express.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Identities\Identities.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft Help\Microsoft Help.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\CD Burning\CD Burning.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Credentials\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1482476501-920026266-1801674531-1003\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds Cache\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds Cache\[u]0/u0INEPVK\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds Cache\1ILVKDSJ\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds Cache\29R8M69C\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds Cache\LG06HWHT\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Feeds\Feeds.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\HelpCtr\HelpCtr.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Internet Explorer\Internet Explorer.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\LocalMLS.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Media Player\Media Player.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Media Player\Transcoded Files Cache\Transcoded Files Cache.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\eglant_umm@hotmail.com.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\Backgrounds\Backgrounds.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\CustomEmoticons\CustomEmoticons.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\DynamicBackgrounds\DynamicBackgrounds.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\ObjectStore.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\UserTile\UserTile.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\ObjectStore\Winks3\Winks3.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\Sharing Folders\Sharing Folders.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\SharingMetadata\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\SharingMetadata\Logs\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\SharingMetadata\Working\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\eglant_umm@hotmail.com\SharingMetadata\Working\database_1088_D048_88D0_2DCA\database_1088_D048_88D0_2DCA.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\imad_kais@hotmail.com.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\Backgrounds\Backgrounds.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\CustomEmoticons\CustomEmoticons.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\DynamicBackgrounds\DynamicBackgrounds.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\ObjectStore.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\UserTile\UserTile.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\ObjectStore\Winks3\Winks3.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\Sharing Folders\Sharing Folders.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\SharingMetadata\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\SharingMetadata\Logs\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\SharingMetadata\Working\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\imad_kais@hotmail.com\SharingMetadata\Working\database_1088_D048_88D0_2DCA\database_1088_D048_88D0_2DCA.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\Messenger.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\ObjectStore\Backgrounds\Backgrounds.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\ObjectStore\DynamicBackgrounds\DynamicBackgrounds.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\ObjectStore\ObjectStore.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\ObjectStore\UserTile\UserTile.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\ObjectStore\Winks3\Winks3.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\Sharing Folders\Sharing Folders.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\SharingMetadata\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\SharingMetadata\Logs\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\SharingMetadata\Working\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\SharingMetadata\Working\database_1088_D048_88D0_2DCA\database_1088_D048_88D0_2DCA.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Messenger\toubi.1992@live.fr\toubi.1992@live.fr.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Office\12.0\12.0.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Office\Office.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Portable Devices\Portable Devices.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\eglant_umm@hotmail.com\eglant_umm@hotmail.com.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\eglant_umm@hotmail.com\real\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\eglant_umm@hotmail.com\shadow\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\imad_kais@hotmail.com\imad_kais@hotmail.com.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\imad_kais@hotmail.com\real\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\imad_kais@hotmail.com\shadow\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\milou_hm@hotmail.com\milou_hm@hotmail.com.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\milou_hm@hotmail.com\real\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\toubi.1992@.live\real\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\toubi.1992@.live\toubi.1992@.live.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\toubi.1992@live.fr\real\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\toubi.1992@live.fr\shadow\.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\toubi.1992@live.fr\toubi.1992@live.fr.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live Contacts\Windows Live Contacts.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live\SqmApi\SqmApi.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Live\Windows Live.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Media\11.0\11.0.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows Media\Windows Media.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\Microsoft\Windows\Windows.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\The Weather Channel\Framework\Framework.exe
                      c:\documents and settings\IMAD\Local Settings\Application Data\The Weather Channel\The Weather Channel.exe
                      c:\documents and settings\IMAD\Local Settings\Apps\2.0\2.0.exe
                      c:\documents and settings\IMAD\Local Settings\Apps\2.0\782OHZ30.XW4\782OHZ30.XW4.exe
                      c:\documents and settings\IMAD\Local Settings\Apps\2.0\782OHZ30.XW4\NXEMDN4C.BX4\manifests\manifests.exe
                      c:\documents and settings\IMAD\Local Settings\Apps\2.0\782OHZ30.XW4\NXEMDN4C.BX4\NXEMDN4C.BX4.exe
                      c:\documents and settings\IMAD\Local Settings\Apps\Apps.exe
                      c:\documents and settings\IMAD\Local Settings\Historique\.exe
                      1. --4 -quatrième partie:
                        D\Local Settings\Historique\History.IE5\.exe
                        c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012008022020080221\.exe
                        c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012008022120080222\.exe
                        c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012008052120080522\.exe
                        c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012009052020090521\.exe
                        c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012009052120090522\.exe
                        c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012009052220090523\.exe
                        c:\documents and settings\IMAD\Local Settings\Historique\History.IE5\MSHist012009052320090524\.exe
                        c:\documents and settings\IMAD\Mes documents\Downloads\Compressed\Compressed.exe
                        c:\documents and settings\IMAD\Mes documents\Downloads\Documents\Documents.exe
                        c:\documents and settings\IMAD\Mes documents\Downloads\Downloads.exe
                        c:\documents and settings\IMAD\Mes documents\Downloads\Music\Music.exe
                        c:\documents and settings\IMAD\Mes documents\Downloads\Programs\Programs.exe
                        c:\documents and settings\IMAD\Mes documents\Downloads\Video\Video.exe
                        c:\documents and settings\IMAD\Mes documents\Ma musique\Ma musique.exe
                        c:\documents and settings\IMAD\Mes documents\Mes documents.exe
                        c:\documents and settings\IMAD\Mes documents\Mes images\Mes images.exe
                        c:\documents and settings\IMAD\Recent\.exe
                        c:\documents and settings\IMAD\SendTo\.exe
                        c:\documents and settings\LocalService\.exe
                        c:\documents and settings\LocalService\Application Data\Application Data.exe
                        c:\documents and settings\LocalService\Application Data\Microsoft\.exe
                        c:\documents and settings\LocalService\Application Data\Microsoft\Credentials\.exe
                        c:\documents and settings\LocalService\Application Data\Microsoft\Credentials\S-1-5-19\.exe
                        c:\documents and settings\LocalService\Application Data\Microsoft\Media Player\Media Player.exe
                        c:\documents and settings\LocalService\Application Data\Microsoft\SystemCertificates\.exe
                        c:\documents and settings\LocalService\Application Data\Microsoft\SystemCertificates\My\.exe
                        c:\documents and settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Certificates\.exe
                        c:\documents and settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CRLs\.exe
                        c:\documents and settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CTLs\.exe
                        c:\documents and settings\LocalService\Application Data\Microsoft\UPnP Device Host\UPnP Device Host.exe
                        c:\documents and settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\upnphost.exe
                        c:\documents and settings\LocalService\Local Settings\.exe
                        c:\documents and settings\LocalService\Local Settings\Application Data\.exe
                        c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\.exe
                        c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\.exe
                        c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-19\.exe
                        c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Internet Explorer\Internet Explorer.exe
                        c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Media Player\Media Player.exe
                        c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Windows Media\11.0\11.0.exe
                        c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Windows Media\Windows Media.exe
                        c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Windows\Windows.exe
                        c:\documents and settings\LocalService\Local Settings\Historique\.exe
                        c:\documents and settings\LocalService\Local Settings\Historique\History.IE5\.exe
                        c:\documents and settings\LocalService\Local Settings\Temp\Temp.exe
                        c:\documents and settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\.exe
                        c:\documents and settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\9B5SW32J\.exe
                        c:\documents and settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\AU5JND7L\.exe
                        c:\documents and settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\B2WY1TR6\.exe
                        c:\documents and settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\S6FIYPCO\.exe
                        c:\documents and settings\NetworkService\.exe
                        c:\documents and settings\NetworkService\Application Data\Application Data.exe
                        c:\documents and settings\NetworkService\Application Data\Microsoft\.exe
                        c:\documents and settings\NetworkService\Application Data\Microsoft\Credentials\.exe
                        c:\documents and settings\NetworkService\Application Data\Microsoft\Credentials\S-1-5-20\.exe
                        c:\documents and settings\NetworkService\Application Data\Microsoft\Media Player\Media Player.exe
                        c:\documents and settings\NetworkService\Application Data\Microsoft\SystemCertificates\.exe
                        c:\documents and settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\.exe
                        c:\documents and settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Certificates\.exe
                        c:\documents and settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CRLs\.exe
                        c:\documents and settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CTLs\.exe
                        c:\documents and settings\NetworkService\Local Settings\.exe
                        c:\documents and settings\NetworkService\Local Settings\Application Data\.exe
                        c:\documents and settings\NetworkService\Local Settings\Application Data\Microsoft\.exe
                        c:\documents and settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\.exe
                        c:\documents and settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-20\.exe
                        c:\documents and settings\NetworkService\Local Settings\Application Data\Microsoft\Internet Explorer\Internet Explorer.exe
                        c:\documents and settings\NetworkService\Local Settings\Application Data\Microsoft\Media Player\Media Player.exe
                        c:\documents and settings\NetworkService\Local Settings\Application Data\Microsoft\Windows Media\11.0\11.0.exe
                        c:\documents and settings\NetworkService\Local Settings\Application Data\Microsoft\Windows Media\Windows Media.exe
                        c:\documents and settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\Windows.exe
                        c:\documents and settings\NetworkService\Local Settings\Historique\.exe
                        c:\documents and settings\NetworkService\Local Settings\Historique\History.IE5\.exe
                        c:\documents and settings\NetworkService\Local Settings\Temp\Temp.exe
                        c:\documents and settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\.exe
                        c:\documents and settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\9B5SW32J\.exe
                        c:\documents and settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\AU5JND7L\.exe
                        c:\documents and settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\B2WY1TR6\.exe
                        c:\documents and settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\S6FIYPCO\.exe
                        c:\drivekey\DriveKey.exe
                        c:\found.000\.exe
                        c:\msocache\.exe
                        1. --7- septième partie :
                          ldb\day_in_history_html\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\day_in_history_html\lobs\lobs.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\formula_assets\formula_assets.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\formula_assets\indices\FORMULA_ID\FORMULA_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\formula_assets\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\formula_assets\lobs\lobs.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_documents\index_documents.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_documents\indices\INDEX_DOCS_NAPP\INDEX_DOCS_NAPP.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_documents\indices\INDEX_DOCS_SORT\INDEX_DOCS_SORT.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_documents\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_entry\index_entry.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_entry\indices\INDEX_ENTRY_NAPP\INDEX_ENTRY_NAPP.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_entry\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_entry_article\index_entry_article.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_entry_article\indices\INDEX_ENTRY_ARTICLE_NAPP\INDEX_ENTRY_ARTICLE_NAPP.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_entry_article\indices\INDEX_ENTRY_ARTICLE_NREF\INDEX_ENTRY_ARTICLE_NREF.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_entry_article\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_ref_article\index_ref_article.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_ref_article\indices\INDEX_REF_ARTICLE_NAPP\INDEX_REF_ARTICLE_NAPP.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_ref_article\indices\INDEX_REF_ARTICLE_NREF\INDEX_REF_ARTICLE_NREF.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\index_ref_article\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\installdb.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media\indices\MEDIA_ID\MEDIA_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media\lobs\lobs.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media\media.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_hotspot_articles\indices\HOTSPOT_ARTICLE_ID\HOTSPOT_ARTICLE_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_hotspot_articles\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_hotspot_articles\media_hotspot_articles.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_hotspot_media\indices\HOTSPOT_MEDIA_ID\HOTSPOT_MEDIA_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_hotspot_media\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_hotspot_media\media_hotspot_media.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_hotspots\indices\HOTSPOT_ID\HOTSPOT_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_hotspots\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_hotspots\media_hotspots.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_lookup\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_lookup\indices\MEDIA_LOOKUP_ID\MEDIA_LOOKUP_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_lookup\media_lookup.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_minithumbs\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_minithumbs\indices\MEDIA_MINITHUMB_ID\MEDIA_MINITHUMB_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_minithumbs\lobs\lobs.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_minithumbs\media_minithumbs.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_thumbnails\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_thumbnails\indices\MEDIA_THUMBNAIL_ID\MEDIA_THUMBNAIL_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_thumbnails\lobs\lobs.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\media_thumbnails\media_thumbnails.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\related_articles\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\related_articles\indices\RELATED_ARTICLES_NREF\RELATED_ARTICLES_NREF.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\related_articles\indices\RELATED_ARTICLES_RELATED_NREF\RELATED_ARTICLES_RELATED_NREF.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\related_articles\related_articles.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_content\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_content\indices\TOPIC_CONTENT_ID\TOPIC_CONTENT_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_content\indices\TOPIC_CONTENT_ORDER_ALPHA\TOPIC_CONTENT_ORDER_ALPHA.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_content\indices\TOPIC_CONTENT_ORDER_NUM\TOPIC_CONTENT_ORDER_NUM.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_content\topic_content.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_content_dossiers\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_content_dossiers\indices\TOPIC_CONTENT_DOSSIER_ID\TOPIC_CONTENT_DOSSIER_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_content_dossiers\indices\TOPIC_CONTENT_DOSSIER_ORDER\TOPIC_CONTENT_DOSSIER_ORDER.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_content_dossiers\topic_content_dossiers.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_entry\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_entry\indices\TOPIC_ENTRY_ID\TOPIC_ENTRY_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_entry\lobs\lobs.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_entry\topic_entry.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_subtopics\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_subtopics\indices\TOPIC_SUBTOPICS_ID\TOPIC_SUBTOPICS_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_subtopics\indices\TOPIC_SUBTOPICS_LEAF\TOPIC_SUBTOPICS_LEAF.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_subtopics\indices\TOPIC_SUBTOPICS_ORDER\TOPIC_SUBTOPICS_ORDER.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\topic_subtopics\topic_subtopics.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_entries\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_entries\indices\TCE_END_MONTH\TCE_END_MONTH.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_entries\indices\TCE_END_YEAR\TCE_END_YEAR.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_entries\indices\TCE_ENTRY\TCE_ENTRY.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_entries\indices\TCE_START_DAY\TCE_START_DAY.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_entries\indices\TCE_START_MONTH\TCE_START_MONTH.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_entries\indices\TCE_START_YEAR\TCE_START_YEAR.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_entries\twentyfirst_century_entries.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_html\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_html\indices\TCH_ID\TCH_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_html\lobs\lobs.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_html\twentyfirst_century_html.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_location_entries\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_location_entries\indices\TCLE_DIRECT_ASSOC\TCLE_DIRECT_ASSOC.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_location_entries\indices\TCLE_ENTRY\TCLE_ENTRY.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_location_entries\indices\TCLE_LOCATION\TCLE_LOCATION.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_location_entries\twentyfirst_century_location_entries.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_locations\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_locations\twentyfirst_century_locations.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_year_entries\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_year_entries\indices\TCYE_DAY\TCYE_DAY.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_year_entries\indices\TCYE_ENTRY\TCYE_ENTRY.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_year_entries\indices\TCYE_MONTH\TCYE_MONTH.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_year_entries\indices\TCYE_YEAR\TCYE_YEAR.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\twentyfirst_century_year_entries\twentyfirst_century_year_entries.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\world_data\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\world_data\indices\WORLD_DATA_FLAG\WORLD_DATA_FLAG.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\world_data\indices\WORLD_DATA_MAP\WORLD_DATA_MAP.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\world_data\indices\WORLD_DATA_SORT\WORLD_DATA_SORT.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\INSTALL_DATA\installdb\world_data\world_data.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA1_DATA\MEDIA1_DATA.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA1_DATA\mediadb\media_asset\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA1_DATA\mediadb\media_asset\indices\MEDIA_ASSET_ID\MEDIA_ASSET_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA1_DATA\mediadb\media_asset\lobs\lobs.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA1_DATA\mediadb\media_asset\media_asset.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA1_DATA\mediadb\mediadb.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA2_DATA\MEDIA2_DATA.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA2_DATA\mediadb\media_asset\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA2_DATA\mediadb\media_asset\indices\MEDIA_ASSET_ID\MEDIA_ASSET_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA2_DATA\mediadb\media_asset\lobs\lobs.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA2_DATA\mediadb\media_asset\media_asset.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA2_DATA\mediadb\mediadb.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA3_DATA\MEDIA3_DATA.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA3_DATA\mediadb\media_asset\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA3_DATA\mediadb\media_asset\indices\MEDIA_ASSET_ID\MEDIA_ASSET_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA3_DATA\mediadb\media_asset\lobs\lobs.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA3_DATA\mediadb\media_asset\media_asset.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA3_DATA\mediadb\mediadb.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA4_DATA\MEDIA4_DATA.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA4_DATA\mediadb\media_asset\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA4_DATA\mediadb\media_asset\indices\MEDIA_ASSET_ID\MEDIA_ASSET_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA4_DATA\mediadb\media_asset\lobs\lobs.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA4_DATA\mediadb\media_asset\media_asset.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA4_DATA\mediadb\mediadb.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA5_DATA\MEDIA5_DATA.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA5_DATA\mediadb\media_asset\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA5_DATA\mediadb\media_asset\indices\MEDIA_ASSET_ID\MEDIA_ASSET_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA5_DATA\mediadb\media_asset\lobs\lobs.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA5_DATA\mediadb\media_asset\media_asset.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA5_DATA\mediadb\mediadb.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA6_DATA\MEDIA6_DATA.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA6_DATA\mediadb\media_asset\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA6_DATA\mediadb\media_asset\indices\MEDIA_ASSET_ID\MEDIA_ASSET_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA6_DATA\mediadb\media_asset\lobs\lobs.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA6_DATA\mediadb\media_asset\media_asset.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA6_DATA\mediadb\mediadb.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA7_DATA\MEDIA7_DATA.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA7_DATA\mediadb\media_asset\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA7_DATA\mediadb\media_asset\indices\MEDIA_ASSET_ID\MEDIA_ASSET_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA7_DATA\mediadb\media_asset\lobs\lobs.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA7_DATA\mediadb\media_asset\media_asset.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA7_DATA\mediadb\mediadb.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA8_DATA\MEDIA8_DATA.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA8_DATA\mediadb\media_asset\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA8_DATA\mediadb\media_asset\indices\MEDIA_ASSET_ID\MEDIA_ASSET_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA8_DATA\mediadb\media_asset\lobs\lobs.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA8_DATA\mediadb\media_asset\media_asset.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\MEDIA8_DATA\mediadb\mediadb.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\NOTES_DATA.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\notesdb.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\saved_notes\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\saved_notes\indices\MYDOCS_SAVED_NOTE_ID\MYDOCS_SAVED_NOTE_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\saved_notes\saved_notes.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_documents\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_documents\indices\MYDOCS_DOCUMENT_ASSET_ID\MYDOCS_DOCUMENT_ASSET_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_documents\indices\MYDOCS_DOCUMENTS_ID\MYDOCS_DOCUMENTS_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_documents\user_documents.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_folders\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_folders\indices\MYDOCS_FOLDERS_ID\MYDOCS_FOLDERS_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_folders\user_folders.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_notes\indices\indices.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_notes\indices\MYDOCS_NOTE_ASSET_ID\MYDOCS_NOTE_ASSET_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_notes\indices\MYDOCS_NOTE_DOC_ID\MYDOCS_NOTE_DOC_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_notes\indices\MYDOCS_NOTES_ID\MYDOCS_NOTES_ID.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\data\NOTES_DATA\notesdb\user_notes\user_notes.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\Encyclopaedia Universalis.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\atlas\atlas.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\atlas\WD_comp\drapeaux\drapeaux.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\atlas\WD_comp\familles\familles.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\atlas\WD_comp\WD_comp.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\chronology\chronology.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\chronology\Media\assets\assets.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\chronology\Media\chronologie_media\chronologie_media.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\chronology\Media\Media.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\css\css.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\aviation\aviation.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\aviation\images\accueil\accueil.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\aviation\images\icon_media\icon_media.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\aviation\images\images.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\aviation\images\medias\medias.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\aviation\images\medias\page01\page01.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\aviation\images\medias\page02\page02.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\aviation\images\medias\page03\page03.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\aviation\images\medias\page04\page04.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\aviation\images\pages\pages.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\besoins_et_echanges\besoins_et_echanges.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\besoins_et_echanges\images\accueil\accueil.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\besoins_et_echanges\images\icon_media\icon_media.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\besoins_et_echanges\images\images.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\besoins_et_echanges\images\medias\medias.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\besoins_et_echanges\images\medias\page01\page01.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\besoins_et_echanges\images\medias\page02\page02.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\besoins_et_echanges\images\medias\page03\page03.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\besoins_et_echanges\images\medias\page04\page04.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\besoins_et_echanges\images\pages\pages.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\biotechnologies\biotechnologies.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\biotechnologies\images\accueil\accueil.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\biotechnologies\images\icon_media\icon_media.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\biotechnologies\images\images.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\biotechnologies\images\medias\medias.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\biotechnologies\images\medias\page01\page01.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\biotechnologies\images\medias\page02\page02.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\biotechnologies\images\medias\page03\page03.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\biotechnologies\images\medias\page04\page04.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\biotechnologies\images\pages\pages.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\catastrophes\catastrophes.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\catastrophes\images\accueil\accueil.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\catastrophes\images\icon_media\icon_media.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\catastrophes\images\images.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\catastrophes\images\medias\medias.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\catastrophes\images\medias\page01\page01.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\catastrophes\images\medias\page02\page02.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\catastrophes\images\medias\page03\page03.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\catastrophes\images\pages\pages.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_grecque\civilisation_grecque.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_grecque\images\accueil\accueil.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_grecque\images\icon_media\icon_media.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_grecque\images\images.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_grecque\images\medias\medias.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_grecque\images\medias\page01\page01.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_grecque\images\medias\page02\page02.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_grecque\images\medias\page03\page03.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_grecque\images\medias\page04\page04.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_grecque\images\pages\pages.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_mesopotamienne\civilisation_mesopotamienne.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_mesopotamienne\images\accueil\accueil.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_mesopotamienne\images\icon_media\icon_media.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_mesopotamienne\images\images.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_mesopotamienne\images\medias\medias.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_mesopotamienne\images\medias\page01\page01.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_mesopotamienne\images\medias\page02\page02.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_mesopotamienne\images\medias\page03\page03.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_mesopotamienne\images\medias\page04\page04.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_mesopotamienne\images\pages\pages.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_romaine\civilisation_romaine.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_romaine\images\accueil\accueil.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_romaine\images\icon_media\icon_media.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_romaine\images\images.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_romaine\images\medias\medias.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_romaine\images\medias\page01\page01.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_romaine\images\medias\page02\page02.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_romaine\images\medias\page03\page03.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\civilisation_romaine\images\pages\pages.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\climats\climats.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\climats\images\accueil\accueil.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\climats\images\icon_media\icon_media.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\climats\images\images.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\climats\images\medias\medias.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\climats\images\medias\page01\page01.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\climats\images\medias\page02\page02.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\climats\images\medias\page03\page03.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\climats\images\medias\page04\page04.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\climats\images\pages\pages.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\dossiers.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\eau_pour_tous\eau_pour_tous.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\eau_pour_tous\images\accueil\accueil.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\eau_pour_tous\images\icon_media\icon_media.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\eau_pour_tous\images\images.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\eau_pour_tous\images\medias\medias.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\eau_pour_tous\images\pages\pages.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecosysteme\ecosysteme.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecosysteme\images\accueil\accueil.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecosysteme\images\icon_media\icon_media.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecosysteme\images\images.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecosysteme\images\medias\medias.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecosysteme\images\medias\page01\page01.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecosysteme\images\medias\page02\page02.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecosysteme\images\medias\page03\page03.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecosysteme\images\pages\pages.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecriture\ecriture.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecriture\images\accueil\accueil.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecriture\images\icon_media\icon_media.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecriture\images\images.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecriture\images\medias\medias.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecriture\images\medias\page01\page01.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecriture\images\medias\page02\page02.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecriture\images\medias\page03\page03.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\ecriture\images\pages\pages.exe
                          c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\egypte\egypte.exe
                          1. --8 ----huitième partie :
                            iversalis\html\dossiers\egypte\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\egypte\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\egypte\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\egypte\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\egypte\images\medias\page01\page01.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\egypte\images\medias\page02\page02.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\egypte\images\medias\page03\page03.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\egypte\images\medias\page04\page04.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\egypte\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\europe\europe.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\europe\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\europe\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\europe\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\europe\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\europe\images\medias\page01\page01.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\europe\images\medias\page02\page02.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\europe\images\medias\page03\page03.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\europe\images\medias\page04\page04.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\europe\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\l_entre-deux-guerres\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\l_entre-deux-guerres\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\l_entre-deux-guerres\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\l_entre-deux-guerres\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\l_entre-deux-guerres\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\l_entre-deux-guerres\l_entre-deux-guerres.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_cellule\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_cellule\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_cellule\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_cellule\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_cellule\images\medias\page01\page01.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_cellule\images\medias\page02\page02.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_cellule\images\medias\page03\page03.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_cellule\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_cellule\la_cellule.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_conquete_de_espace\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_conquete_de_espace\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_conquete_de_espace\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_conquete_de_espace\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_conquete_de_espace\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_conquete_de_espace\la_conquete_de_espace.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_guerre_froide\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_guerre_froide\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_guerre_froide\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_guerre_froide\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_guerre_froide\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_guerre_froide\la_guerre_froide.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_mondialisation\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_mondialisation\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_mondialisation\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_mondialisation\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_mondialisation\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_mondialisation\la_mondialisation.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_premiere_guerre_mondiale\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_premiere_guerre_mondiale\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_premiere_guerre_mondiale\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_premiere_guerre_mondiale\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_premiere_guerre_mondiale\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_premiere_guerre_mondiale\la_premiere_guerre_mondiale.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_route_de_la_soie\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_route_de_la_soie\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_route_de_la_soie\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_route_de_la_soie\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_route_de_la_soie\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\la_route_de_la_soie\la_route_de_la_soie.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_nucleaire\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_nucleaire\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_nucleaire\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_nucleaire\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_nucleaire\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_nucleaire\le_nucleaire.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_petrole\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_petrole\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_petrole\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_petrole\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_petrole\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_petrole\le_petrole.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_systeme_nerveux\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_systeme_nerveux\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_systeme_nerveux\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_systeme_nerveux\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_systeme_nerveux\images\medias\page01\page01.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_systeme_nerveux\images\medias\page02\page02.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_systeme_nerveux\images\medias\page03\page03.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_systeme_nerveux\images\medias\page04\page04.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_systeme_nerveux\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\le_systeme_nerveux\le_systeme_nerveux.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_azteques\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_azteques\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_azteques\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_azteques\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_azteques\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_azteques\les_azteques.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_decolonisations\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_decolonisations\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_decolonisations\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_decolonisations\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_decolonisations\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_decolonisations\les_decolonisations.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_drogues\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_drogues\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_drogues\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_drogues\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_drogues\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_drogues\les_drogues.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_empires_coloniaux\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_empires_coloniaux\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_empires_coloniaux\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_empires_coloniaux\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_empires_coloniaux\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_empires_coloniaux\les_empires_coloniaux.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_vikings\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_vikings\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_vikings\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_vikings\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_vikings\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\les_vikings\les_vikings.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\medicaments\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\medicaments\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\medicaments\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\medicaments\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\medicaments\images\medias\page01\page01.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\medicaments\images\medias\page02\page02.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\medicaments\images\medias\page03\page03.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\medicaments\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\medicaments\medicaments.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\naissance_d_un_film\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\naissance_d_un_film\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\naissance_d_un_film\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\naissance_d_un_film\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\naissance_d_un_film\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\naissance_d_un_film\naissance_d_un_film.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\reproduction_animale_et_humaine\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\reproduction_animale_et_humaine\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\reproduction_animale_et_humaine\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\reproduction_animale_et_humaine\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\reproduction_animale_et_humaine\images\medias\page01\page01.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\reproduction_animale_et_humaine\images\medias\page02\page02.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\reproduction_animale_et_humaine\images\medias\page03\page03.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\reproduction_animale_et_humaine\images\medias\page04\page04.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\reproduction_animale_et_humaine\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\reproduction_animale_et_humaine\reproduction_animale_et_humaine.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\revolution_industrielle\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\revolution_industrielle\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\revolution_industrielle\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\revolution_industrielle\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\revolution_industrielle\images\medias\page01\page01.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\revolution_industrielle\images\medias\page02\page02.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\revolution_industrielle\images\medias\page03\page03.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\revolution_industrielle\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\revolution_industrielle\revolution_industrielle.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sang_et_circulation\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sang_et_circulation\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sang_et_circulation\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sang_et_circulation\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sang_et_circulation\images\medias\page01\page01.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sang_et_circulation\images\medias\page02\page02.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sang_et_circulation\images\medias\page03\page03.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sang_et_circulation\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sang_et_circulation\sang_et_circulation.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\seconde_GM\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\seconde_GM\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\seconde_GM\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\seconde_GM\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\seconde_GM\images\medias\page01\page01.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\seconde_GM\images\medias\page02\page02.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\seconde_GM\images\medias\page03\page03.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\seconde_GM\images\medias\page04\page04.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\seconde_GM\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\seconde_GM\seconde_GM.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sons_et_images\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sons_et_images\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sons_et_images\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sons_et_images\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sons_et_images\images\medias\page01\page01.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sons_et_images\images\medias\page02\page02.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sons_et_images\images\medias\page03\page03.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sons_et_images\images\medias\page04\page04.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sons_et_images\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\sons_et_images\sons_et_images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\squelette_et_muscles\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\squelette_et_muscles\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\squelette_et_muscles\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\squelette_et_muscles\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\squelette_et_muscles\images\medias\page01\page01.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\squelette_et_muscles\images\medias\page02\page02.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\squelette_et_muscles\images\medias\page03\page03.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\squelette_et_muscles\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\squelette_et_muscles\squelette_et_muscles.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\systeme_solaire\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\systeme_solaire\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\systeme_solaire\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\systeme_solaire\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\systeme_solaire\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\systeme_solaire\systeme_solaire.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\accueil\accueil.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\icon_media\icon_media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\medias\medias.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\medias\montage\montage.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\medias\page01\page01.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\medias\page02\page02.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\medias\page03\page03.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\medias\page04\page04.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\medias\page05\page05.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\images\pages\pages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\dossiers\univers\univers.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\help\help.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\homepages\homepages.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\html.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\article\article.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\buttons\buttons.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\cartes\cartes.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\dossiers\dossiers.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\drapeaux\drapeaux.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\help\help.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\help\mini\mini.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\home\home.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\icons\icons.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\salle\salle.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\shared\shared.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\thematic-browser\thematic-browser.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\thumbnails-browser\thumbnails-browser.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\images\world_data\world_data.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\js\atlas\atlas.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\js\help\help.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\js\js.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\js\notes\notes.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\js\scriptaculous\lib\lib.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\js\scriptaculous\scriptaculous.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\js\scriptaculous\src\src.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\js\thematicBrowser\thematicBrowser.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\js\thumbnailBrowser\thumbnailBrowser.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\js\toolbar\toolbar.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\maps\maps.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\maps\media\media.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\mediapopup\flash\flash.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\html\mediapopup\mediapopup.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\index\EUAlmanac\EUAlmanac.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\index\EUFullText\EUFullText.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\index\EUIndex\EUIndex.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\index\EUTwentyFirstCentury\EUTwentyFirstCentury.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\index\index.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jars\jars.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\bin\bin.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\bin\client\client.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\jre.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\audio\audio.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\cmm\cmm.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\deploy\deploy.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\ext\ext.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\fonts\fonts.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\i386\i386.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\im\im.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\images\cursors\cursors.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\images\images.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\javaws\javaws.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\lib.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\management\management.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\security\security.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\Africa\Africa.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\America\America.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\America\Argentina\Argentina.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\America\Indiana\Indiana.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\America\Kentucky\Kentucky.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\America\North_Dakota\North_Dakota.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\Antarctica\Antarctica.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\Asia\Asia.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\Atlantic\Atlantic.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\Australia\Australia.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\Etc\Etc.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\Europe\Europe.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\Indian\Indian.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\Pacific\Pacific.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\SystemV\SystemV.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\jre\lib\zi\zi.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\logs\.svn\.svn.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\logs\.svn\prop-base\prop-base.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\logs\.svn\props\props.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\logs\.svn\text-base\text-base.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\logs\.svn\tmp\prop-base\prop-base.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\logs\.svn\tmp\props\props.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\logs\.svn\tmp\text-base\text-base.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\logs\.svn\tmp\tmp.exe
                            c:\program files\Encyclopaedia Universalis\Encyclopaedia Universalis\logs\logs.exe
                            1. 12 partie:
                              windows\pchealth\helpctr\System\UpdateCtr\UpdateCtr.exe
                              c:\windows\pchealth\helpctr\System_OEM\System_OEM.exe
                              c:\windows\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US.exe
                              c:\windows\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\Common.exe
                              c:\windows\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\Css.exe
                              c:\windows\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Common.exe
                              c:\windows\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\Email.exe
                              c:\windows\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Escalation.exe
                              c:\windows\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\Unsolicited.exe
                              c:\windows\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Remote Assistance.exe
                              c:\windows\pchealth\helpctr\Vendors\Vendors.exe
                              c:\windows\pchealth\pchealth.exe
                              c:\windows\pchealth\UploadLB\Binaries\Binaries.exe
                              c:\windows\pchealth\UploadLB\Config\Config.exe
                              c:\windows\pchealth\UploadLB\UploadLB.exe
                              c:\windows\PeerNet\PeerNet.exe
                              c:\windows\Prefetch\Prefetch.exe
                              c:\windows\Provisioning\Provisioning.exe
                              c:\windows\Provisioning\Schemas\Schemas.exe
                              c:\windows\pss\pss.exe
                              c:\windows\Registration\CRMLog\CRMLog.exe
                              c:\windows\Registration\Registration.exe
                              c:\windows\repair\repair.exe
                              c:\windows\Resources\Resources.exe
                              c:\windows\Resources\Themes\Luna\Luna.exe
                              c:\windows\Resources\Themes\Luna\Shell\Homestead\Homestead.exe
                              c:\windows\Resources\Themes\Luna\Shell\Metallic\Metallic.exe
                              c:\windows\Resources\Themes\Luna\Shell\NormalColor\NormalColor.exe
                              c:\windows\Resources\Themes\Luna\Shell\Shell.exe
                              c:\windows\Resources\Themes\Themes.exe
                              c:\windows\security\Database\Database.exe
                              c:\windows\security\logs\logs.exe
                              c:\windows\security\security.exe
                              c:\windows\security\templates\templates.exe
                              c:\windows\SHELLNEW\SHELLNEW.exe
                              c:\windows\SoftwareDistribution\AuthCabs\AuthCabs.exe
                              c:\windows\SoftwareDistribution\DataStore\DataStore.exe
                              c:\windows\SoftwareDistribution\DataStore\Logs\Logs.exe
                              c:\windows\SoftwareDistribution\Download\[u]0/u21631b8b7a9f5e0082704ea30b771c0\[u]0/u21631b8b7a9f5e0082704ea30b771c0.exe
                              c:\windows\SoftwareDistribution\Download\[u]0/u21631b8b7a9f5e0082704ea30b771c0\350d802525eccf5ca49543df1838e24e.exe
                              c:\windows\SoftwareDistribution\Download\[u]0/u21631b8b7a9f5e0082704ea30b771c0\wm11\wm11.exe
                              c:\windows\SoftwareDistribution\Download\149dffda614674463c33ccf79c4404f3\149dffda614674463c33ccf79c4404f3.exe
                              c:\windows\SoftwareDistribution\Download\149dffda614674463c33ccf79c4404f3\200133c1eb583103226f7693d34231ff.exe
                              c:\windows\SoftwareDistribution\Download\149dffda614674463c33ccf79c4404f3\backup\backup.exe
                              c:\windows\SoftwareDistribution\Download\149dffda614674463c33ccf79c4404f3\sp3gdr\sp3gdr.exe
                              c:\windows\SoftwareDistribution\Download\149dffda614674463c33ccf79c4404f3\sp3qfe\sp3qfe.exe
                              c:\windows\SoftwareDistribution\Download\20b79cb341971b9a1c4b09d155a8fbfc\20b79cb341971b9a1c4b09d155a8fbfc.exe
                              c:\windows\SoftwareDistribution\Download\20b79cb341971b9a1c4b09d155a8fbfc\60102ca8d49bef61c61212965ef6dbcb.exe
                              c:\windows\SoftwareDistribution\Download\20b79cb341971b9a1c4b09d155a8fbfc\backup\backup.exe
                              c:\windows\SoftwareDistribution\Download\20b79cb341971b9a1c4b09d155a8fbfc\sp3gdr\sp3gdr.exe
                              c:\windows\SoftwareDistribution\Download\20b79cb341971b9a1c4b09d155a8fbfc\sp3qfe\sp3qfe.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\25d2944aaaf33a4374138c46bc7ed2cd.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\5e4f2e76786e12fcb7b972dae96443a2.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP2QFE\asms\10\10.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP2QFE\asms\10\msft\msft.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP2QFE\asms\10\msft\windows\gdiplus\gdiplus.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP2QFE\asms\10\msft\windows\windows.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP2QFE\asms\10\policy\msft\msft.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP2QFE\asms\10\policy\msft\windows\gdiplus\gdiplus.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP2QFE\asms\10\policy\msft\windows\windows.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP2QFE\asms\10\policy\policy.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP2QFE\asms\asms.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP2QFE\SP2QFE.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP3QFE\asms\10\10.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP3QFE\asms\10\msft\msft.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP3QFE\asms\10\msft\windows\gdiplus\gdiplus.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP3QFE\asms\10\msft\windows\windows.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP3QFE\asms\10\policy\msft\msft.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP3QFE\asms\10\policy\msft\windows\gdiplus\gdiplus.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP3QFE\asms\10\policy\msft\windows\windows.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP3QFE\asms\10\policy\policy.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP3QFE\asms\asms.exe
                              c:\windows\SoftwareDistribution\Download\25d2944aaaf33a4374138c46bc7ed2cd\SP3QFE\SP3QFE.exe
                              c:\windows\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\284fbcf1e8e0b40c0953d6b85a551eae.exe
                              c:\windows\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\596b908e8d017befb53f853fe927f94a.exe
                              c:\windows\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP2GDR\SP2GDR.exe
                              c:\windows\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP2QFE\SP2QFE.exe
                              c:\windows\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP3GDR\SP3GDR.exe
                              c:\windows\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP3QFE\SP3QFE.exe
                              c:\windows\SoftwareDistribution\Download\2ae0551b81457e76c13969a941d90294\2ae0551b81457e76c13969a941d90294.exe
                              c:\windows\SoftwareDistribution\Download\2ae0551b81457e76c13969a941d90294\SP2GDR\SP2GDR.exe
                              c:\windows\SoftwareDistribution\Download\2ae0551b81457e76c13969a941d90294\SP2QFE\SP2QFE.exe
                              c:\windows\SoftwareDistribution\Download\2ae0551b81457e76c13969a941d90294\SP3GDR\SP3GDR.exe
                              c:\windows\SoftwareDistribution\Download\2ae0551b81457e76c13969a941d90294\SP3QFE\SP3QFE.exe
                              c:\windows\SoftwareDistribution\Download\4091197953a6a6587498ee1988262ad3\4091197953a6a6587498ee1988262ad3.exe
                              c:\windows\SoftwareDistribution\Download\4091197953a6a6587498ee1988262ad3\702a7c80c501a5b71048682e44a362b4.exe
                              c:\windows\SoftwareDistribution\Download\442c24b5f603da215f4cc19400b58b29\150c61e4a7f6ffd925a60156be3e1a5b.exe
                              c:\windows\SoftwareDistribution\Download\442c24b5f603da215f4cc19400b58b29\442c24b5f603da215f4cc19400b58b29.exe
                              c:\windows\SoftwareDistribution\Download\442c24b5f603da215f4cc19400b58b29\SP2GDR\SP2GDR.exe
                              c:\windows\SoftwareDistribution\Download\442c24b5f603da215f4cc19400b58b29\SP2QFE\SP2QFE.exe
                              c:\windows\SoftwareDistribution\Download\442c24b5f603da215f4cc19400b58b29\SP3GDR\SP3GDR.exe
                              c:\windows\SoftwareDistribution\Download\442c24b5f603da215f4cc19400b58b29\SP3QFE\SP3QFE.exe
                              c:\windows\SoftwareDistribution\Download\4850b6fbc0f970a015d08048e4dc3372\4850b6fbc0f970a015d08048e4dc3372.exe
                              c:\windows\SoftwareDistribution\Download\4850b6fbc0f970a015d08048e4dc3372\6d89a6842d56bdc1e9869626dde13fa3.exe
                              c:\windows\SoftwareDistribution\Download\4850b6fbc0f970a015d08048e4dc3372\mceur2\mceur2.exe
                              c:\windows\SoftwareDistribution\Download\4850b6fbc0f970a015d08048e4dc3372\wm10\wm10.exe
                              c:\windows\SoftwareDistribution\Download\4850b6fbc0f970a015d08048e4dc3372\wm10l\wm10l.exe
                              c:\windows\SoftwareDistribution\Download\4850b6fbc0f970a015d08048e4dc3372\wm10mix\wm10mix.exe
                              c:\windows\SoftwareDistribution\Download\4850b6fbc0f970a015d08048e4dc3372\wm11\wm11.exe
                              c:\windows\SoftwareDistribution\Download\4850b6fbc0f970a015d08048e4dc3372\wm9\wm9.exe
                              c:\windows\SoftwareDistribution\Download\48bc15015ad8cc55810ef9211c7dbec2\48bc15015ad8cc55810ef9211c7dbec2.exe
                              c:\windows\SoftwareDistribution\Download\48bc15015ad8cc55810ef9211c7dbec2\c46a8212705069a7604ff98b5b281a3e.exe
                              c:\windows\SoftwareDistribution\Download\48bc15015ad8cc55810ef9211c7dbec2\SP2GDR\SP2GDR.exe
                              c:\windows\SoftwareDistribution\Download\48bc15015ad8cc55810ef9211c7dbec2\SP2QFE\SP2QFE.exe
                              c:\windows\SoftwareDistribution\Download\48bc15015ad8cc55810ef9211c7dbec2\SP3GDR\SP3GDR.exe
                              c:\windows\SoftwareDistribution\Download\48bc15015ad8cc55810ef9211c7dbec2\SP3QFE\SP3QFE.exe
                              c:\windows\SoftwareDistribution\Download\58368cdf8599d63c6ec9fb51511f5c59\58368cdf8599d63c6ec9fb51511f5c59.exe
                              c:\windows\SoftwareDistribution\Download\58368cdf8599d63c6ec9fb51511f5c59\a12a9d4221e3bd01d702cb53a8160c1d.exe
                              c:\windows\SoftwareDistribution\Download\58368cdf8599d63c6ec9fb51511f5c59\SP2GDR\SP2GDR.exe
                              c:\windows\SoftwareDistribution\Download\58368cdf8599d63c6ec9fb51511f5c59\SP2QFE\SP2QFE.exe
                              c:\windows\SoftwareDistribution\Download\58368cdf8599d63c6ec9fb51511f5c59\SP3GDR\SP3GDR.exe
                              c:\windows\SoftwareDistribution\Download\58368cdf8599d63c6ec9fb51511f5c59\SP3QFE\SP3QFE.exe
                              c:\windows\SoftwareDistribution\Download\5e54181a2d7e767daf6e7f313d7dd20b\5e54181a2d7e767daf6e7f313d7dd20b.exe
                              c:\windows\SoftwareDistribution\Download\5e54181a2d7e767daf6e7f313d7dd20b\90278c5c0a95b94f1b4a73dda9853808.exe
                              c:\windows\SoftwareDistribution\Download\5e54181a2d7e767daf6e7f313d7dd20b\backup\backup.exe
                              c:\windows\SoftwareDistribution\Download\5e54181a2d7e767daf6e7f313d7dd20b\sp3gdr\sp3gdr.exe
                              c:\windows\SoftwareDistribution\Download\5e54181a2d7e767daf6e7f313d7dd20b\sp3qfe\sp3qfe.exe
                              c:\windows\SoftwareDistribution\Download\6896ed82e6aab6036fbd799d3fd4f042\6896ed82e6aab6036fbd799d3fd4f042.exe
                              c:\windows\SoftwareDistribution\Download\6f762e8545d817cb29f7f245b0c9358f\1ee8dd82f6739b9dc49cbfb31b1606bf.exe
                              c:\windows\SoftwareDistribution\Download\6f762e8545d817cb29f7f245b0c9358f\6f762e8545d817cb29f7f245b0c9358f.exe
                              c:\windows\SoftwareDistribution\Download\6f762e8545d817cb29f7f245b0c9358f\SP2GDR\SP2GDR.exe
                              c:\windows\SoftwareDistribution\Download\6f762e8545d817cb29f7f245b0c9358f\SP2QFE\SP2QFE.exe
                              c:\windows\SoftwareDistribution\Download\6f762e8545d817cb29f7f245b0c9358f\SP3GDR\SP3GDR.exe
                              c:\windows\SoftwareDistribution\Download\6f762e8545d817cb29f7f245b0c9358f\SP3QFE\SP3QFE.exe
                              c:\windows\SoftwareDistribution\Download\71f03b7f4784c42683bd24e8149d6671\71f03b7f4784c42683bd24e8149d6671.exe
                              c:\windows\SoftwareDistribution\Download\71f03b7f4784c42683bd24e8149d6671\wm11\wm11.exe
                              c:\windows\SoftwareDistribution\Download\72a4049f1baa204daaa90904a1d02845\191c12c131f075e05b15e1e035903121.exe
                              c:\windows\SoftwareDistribution\Download\72a4049f1baa204daaa90904a1d02845\72a4049f1baa204daaa90904a1d02845.exe
                              c:\windows\SoftwareDistribution\Download\72a4049f1baa204daaa90904a1d02845\backup\backup.exe
                              c:\windows\SoftwareDistribution\Download\72a4049f1baa204daaa90904a1d02845\sp3gdr\sp3gdr.exe
                              c:\windows\SoftwareDistribution\Download\72a4049f1baa204daaa90904a1d02845\sp3qfe\sp3qfe.exe
                              c:\windows\SoftwareDistribution\Download\74e2550346bb1cbd58026ecc5d972da8\74e2550346bb1cbd58026ecc5d972da8.exe
                              c:\windows\SoftwareDistribution\Download\74e2550346bb1cbd58026ecc5d972da8\backup\backup.exe
                              c:\windows\SoftwareDistribution\Download\74e2550346bb1cbd58026ecc5d972da8\cbc1b829918070e9cdead53865e03be6.exe
                              c:\windows\SoftwareDistribution\Download\74e2550346bb1cbd58026ecc5d972da8\sp3gdr\sp3gdr.exe
                              c:\windows\SoftwareDistribution\Download\74e2550346bb1cbd58026ecc5d972da8\sp3qfe\sp3qfe.exe
                              c:\windows\SoftwareDistribution\Download\77d1300960fdd2ff28f4891cec784cb7\77d1300960fdd2ff28f4891cec784cb7.exe
                              c:\windows\SoftwareDistribution\Download\77d1300960fdd2ff28f4891cec784cb7\91aaf2e2995eb1abdaa3e996b347e975.exe
                              c:\windows\SoftwareDistribution\Download\77d1300960fdd2ff28f4891cec784cb7\backup\backup.exe
                              c:\windows\SoftwareDistribution\Download\77d1300960fdd2ff28f4891cec784cb7\backup\sp3gdr\sp3gdr.exe
                              c:\windows\SoftwareDistribution\Download\77d1300960fdd2ff28f4891cec784cb7\backup\sp3qfe\sp3qfe.exe
                              c:\windows\SoftwareDistribution\Download\77d1300960fdd2ff28f4891cec784cb7\download\download.exe
                              c:\windows\SoftwareDistribution\Download\77d1300960fdd2ff28f4891cec784cb7\sp3gdr\sp3gdr.exe
                              c:\windows\SoftwareDistribution\Download\77d1300960fdd2ff28f4891cec784cb7\sp3qfe\sp3qfe.exe
                              c:\windows\SoftwareDistribution\Download\7b6e084e897a416dad6204fec54d1e00\4b869f18ffa23590ab9b302aa268b77f.exe
                              c:\windows\SoftwareDistribution\Download\7b6e084e897a416dad6204fec54d1e00\7b6e084e897a416dad6204fec54d1e00.exe
                              c:\windows\SoftwareDistribution\Download\7b6e084e897a416dad6204fec54d1e00\backup\backup.exe
                              c:\windows\SoftwareDistribution\Download\7b6e084e897a416dad6204fec54d1e00\backup\sp3gdr\sp3gdr.exe
                              c:\windows\SoftwareDistribution\Download\7b6e084e897a416dad6204fec54d1e00\backup\sp3qfe\sp3qfe.exe
                              c:\windows\SoftwareDistribution\Download\7b6e084e897a416dad6204fec54d1e00\download\download.exe
                              c:\windows\SoftwareDistribution\Download\7b6e084e897a416dad6204fec54d1e00\sp3gdr\sp3gdr.exe
                              c:\windows\SoftwareDistribution\Download\7b6e084e897a416dad6204fec54d1e00\sp3qfe\sp3qfe.exe
                              c:\windows\SoftwareDistribution\Download\8d17487b466e9059513420ef8f573de1\3b73491c13abb6c3560cf1164277b928.exe
                              c:\windows\SoftwareDistribution\Download\8d17487b466e9059513420ef8f573de1\8d17487b466e9059513420ef8f573de1.exe
                              c:\windows\SoftwareDistribution\Download\8d17487b466e9059513420ef8f573de1\SP2GDR\SP2GDR.exe
                              c:\windows\SoftwareDistribution\Download\8d17487b466e9059513420ef8f573de1\SP2QFE\SP2QFE.exe
                              c:\windows\SoftwareDistribution\Download\8d17487b466e9059513420ef8f573de1\SP3GDR\SP3GDR.exe
                              c:\windows\SoftwareDistribution\Download\8d17487b466e9059513420ef8f573de1\SP3QFE\SP3QFE.exe
                              c:\windows\SoftwareDistribution\Download\9c06474eecd82d62769df810138d093c\669d0b1faeda9d349046c1685c871e7d.exe
                              c:\windows\SoftwareDistribution\Download\9c06474eecd82d62769df810138d093c\9c06474eecd82d62769df810138d093c.exe
                              c:\windows\SoftwareDistribution\Download\9c06474eecd82d62769df810138d093c\backup\backup.exe
                              c:\windows\SoftwareDistribution\Download\9c06474eecd82d62769df810138d093c\backup\sp3gdr\sp3gdr.exe
                              c:\windows\SoftwareDistribution\Download\9c06474eecd82d62769df810138d093c\backup\sp3qfe\sp3qfe.exe
                              c:\windows\SoftwareDistribution\Download\9c06474eecd82d62769df810138d093c\download\download.exe
                              c:\windows\SoftwareDistribution\Download\9c06474eecd82d62769df810138d093c\sp3gdr\sp3gdr.exe
                              c:\windows\SoftwareDistribution\Download\9c06474eecd82d62769df810138d093c\sp3qfe\sp3qfe.exe
                              c:\windows\SoftwareDistribution\Download\aa575248fa2fd745643e306ccaa52cf2\aa575248fa2fd745643e306ccaa52cf2.exe
                              c:\windows\SoftwareDistribution\Download\aa575248fa2fd745643e306ccaa52cf2\backup\backup.exe
                              c:\windows\SoftwareDistribution\Download\aa575248fa2fd745643e306ccaa52cf2\c379bab7b72a5a3477ef6b8fa934fb77.exe
                              c:\windows\SoftwareDistribution\Download\aa575248fa2fd745643e306ccaa52cf2\sp3gdr\sp3gdr.exe
                              c:\windows\SoftwareDistribution\Download\aa575248fa2fd745643e306ccaa52cf2\sp3qfe\sp3qfe.exe
                              c:\windows\SoftwareDistribution\Download\b36c7ee8fdde6b71de76c51647bccbb6\75268bc24bd5ec747ac183eeadb761f8.exe
                              c:\windows\SoftwareDistribution\Download\b36c7ee8fdde6b71de76c51647bccbb6\b36c7ee8fdde6b71de76c51647bccbb6.exe
                              c:\windows\SoftwareDistribution\Download\b36c7ee8fdde6b71de76c51647bccbb6\SP2GDR\SP2GDR.exe
                              c:\windows\SoftwareDistribution\Download\b36c7ee8fdde6b71de76c51647bccbb6\SP2QFE\SP2QFE.exe
                              c:\windows\SoftwareDistribution\Download\b36c7ee8fdde6b71de76c51647bccbb6\SP3GDR\SP3GDR.exe
                              c:\windows\SoftwareDistribution\Download\b36c7ee8fdde6b71de76c51647bccbb6\SP3QFE\SP3QFE.exe
                              c:\windows\SoftwareDistribution\Download\b4ee48f88dd9a2d8b18d0f229604ffc3\b4ee48f88dd9a2d8b18d0f229604ffc3.exe
                              c:\windows\SoftwareDistribution\Download\b4ee48f88dd9a2d8b18d0f229604ffc3\backup\backup.exe
                              c:\windows\SoftwareDistribution\Download\b4ee48f88dd9a2d8b18d0f229604ffc3\fb7e4e3914021d8e9d80ac8f418fa4bb.exe
                              c:\windows\SoftwareDistribution\Download\b4ee48f88dd9a2d8b18d0f229604ffc3\sp3gdr\sp3gdr.exe
                              c:\windows\SoftwareDistribution\Download\b4ee48f88dd9a2d8b18d0f229604ffc3\sp3qfe\sp3qfe.exe
                              c:\windows\SoftwareDistribution\Download\bcc75bbd6d803d1a0d93a2bbd1f88841\b024880fe56b3ff50f74fc334213eb78.exe
                              c:\windows\SoftwareDistribution\Download\bcc75bbd6d803d1a0d93a2bbd1f88841\backup\backup.exe
                              c:\windows\SoftwareDistribution\Download\bcc75bbd6d803d1a0d93a2bbd1f88841\bcc75bbd6d803d1a0d93a2bbd1f88841.exe
                              c:\windows\SoftwareDistribution\Download\bcc75bbd6d803d1a0d93a2bbd1f88841\sp3gdr\sp3gdr.exe
                              c:\windows\SoftwareDistribution\Download\bcc75bbd6d803d1a0d93a2bbd1f88841\sp3qfe\sp3qfe.exe
                              c:\windows\SoftwareDistribution\Download\c9128c5b4ff1c4014ea6d97f7646bf8b\4724ea0e197f99f5dc110621c05f3367.exe
                              c:\windows\SoftwareDistribution\Download\c9128c5b4ff1c4014ea6d97f7646bf8b\c9128c5b4ff1c4014ea6d97f7646bf8b.exe
                              c:\windows\SoftwareDistribution\Download\c9128c5b4ff1c4014ea6d97f7646bf8b\emerald\emerald.exe
                              c:\windows\SoftwareDistribution\Download\c9128c5b4ff1c4014ea6d97f7646bf8b\wmp10\wmp10.exe
                              c:\windows\SoftwareDistribution\Download\c9128c5b4ff1c4014ea6d97f7646bf8b\wmp11\wmp11.exe
                              c:\windows\SoftwareDistribution\Download\c9128c5b4ff1c4014ea6d97f7646bf8b\wmp9l\wmp9l.exe
                              c:\windows\SoftwareDistribution\Download\c9128c5b4ff1c4014ea6d97f7646bf8b\wmp9nl\wmp9nl.exe
                              c:\windows\SoftwareDistribution\Download\c962147e4dae17cf1ccf121c9ee6bae1\56f5f114cbf05223e7ecb0794869b844.exe
                              c:\windows\SoftwareDistribution\Download\c962147e4dae17cf1ccf121c9ee6bae1\c962147e4dae17cf1ccf121c9ee6bae1.exe
                              c:\windows\SoftwareDistribution\Download\ce5be003a2bf8d73308ed1db60259a46\ce5be003a2bf8d73308ed1db60259a46.exe
                              c:\windows\SoftwareDistribution\Download\ce5be003a2bf8d73308ed1db60259a46\d97470629edff63ec76e2509ea7f9222.exe
                              c:\windows\SoftwareDistribution\Download\ce5be003a2bf8d73308ed1db60259a46\SP2GDR\SP2GDR.exe
                              c:\windows\SoftwareDistribution\Download\ce5be003a2bf8d73308ed1db60259a46\SP2QFE\SP2QFE.exe
                              c:\windows\SoftwareDistribution\Download\ce5be003a2bf8d73308ed1db60259a46\SP3GDR\SP3GDR.exe
                              c:\windows\SoftwareDistribution\Download\ce5be003a2bf8d73308ed1db60259a46\SP3QFE\SP3QFE.exe
                              c:\windows\SoftwareDistribution\Download\dbfcce58315289d3290962ce468b167d\699bfc4e107af4dd60cba5e3ca037019.exe
                              c:\windows\SoftwareDistribution\Download\dbfcce58315289d3290962ce468b167d\dbfcce58315289d3290962ce468b167d.exe
                              c:\windows\SoftwareDistribution\Download\dbfcce58315289d3290962ce468b167d\SP2GDR\SP2GDR.exe
                              c:\windows\SoftwareDistribution\Download\dbfcce58315289d3290962ce468b167d\SP2QFE\SP2QFE.exe
                              c:\windows\SoftwareDistribution\Download\dbfcce58315289d3290962ce468b167d\SP3GDR\SP3GDR.exe
                              c:\windows\SoftwareDistribution\Download\dbfcce58315289d3290962ce468b167d\SP3QFE\SP3QFE.exe
                              c:\windows\SoftwareDistribution\Download\ddec8f7d123cd4e907c458df2b73ea48\1d502d785af08faeec25c9a802b3f870.exe
                              c:\windows\SoftwareDistribution\Download\ddec8f7d123cd4e907c458df2b73ea48\ddec8f7d123cd4e907c458df2b73ea48.exe
                              c:\windows\SoftwareDistribution\Download\ddec8f7d123cd4e907c458df2b73ea48\SP2GDR\SP2GDR.exe
                              c:\windows\SoftwareDistribution\Download\ddec8f7d123cd4e907c458df2b73ea48\SP2QFE\SP2QFE.exe
                              c:\windows\SoftwareDistribution\Download\ddec8f7d123cd4e907c458df2b73ea48\SP3GDR\SP3GDR.exe
                              c:\windows\SoftwareDistribution\Download\ddec8f7d123cd4e907c458df2b73ea48\SP3QFE\SP3QFE.exe
                              c:\windows\SoftwareDistribution\Download\Download.exe
                              c:\windows\SoftwareDistribution\Download\e327b8ca99bcc79887eb783061b30a46\6d3285ea07e02e844a1e46dffef593cf.exe
                              c:\windows\SoftwareDistribution\Download\e327b8ca99bcc79887eb783061b30a46\e327b8ca99bcc79887eb783061b30a46.exe
                              c:\windows\SoftwareDistribution\Download\e327b8ca99bcc79887eb783061b30a46\SP2GDR\SP2GDR.exe
                              c:\windows\SoftwareDistribution\Download\e327b8ca99bcc79887eb783061b30a46\SP2QFE\SP2QFE.exe
                              c:\windows\SoftwareDistribution\Download\e327b8ca99bcc79887eb783061b30a46\SP3GDR\SP3GDR.exe
                              c:\windows\SoftwareDistribution\Download\e327b8ca99bcc79887eb783061b30a46\SP3QFE\SP3QFE.exe
                              c:\windows\SoftwareDistribution\Download\e4432b4388f0c801748823e67356ba62\1d65a7b6a7894379a2ee74e5e5b96a5e.exe
                              c:\windows\SoftwareDistribution\Download\e4432b4388f0c801748823e67356ba62\e4432b4388f0c801748823e67356ba62.exe
                              c:\windows\SoftwareDistribution\Download\eb84f97221f3377515f23c379375ad66\33e2c0b2e0a5331aa370a5e8ce5ad191.exe
                              c:\windows\SoftwareDistribution\Download\eb84f97221f3377515f23c379375ad66\eb84f97221f3377515f23c379375ad66.exe
                              c:\windows\SoftwareDistribution\Download\eb84f97221f3377515f23c379375ad66\SP2GDR\SP2GDR.exe
                              c:\windows\SoftwareDistribution\Download\eb84f97221f3377515f23c379375ad66\SP2QFE\SP2QFE.exe
                              c:\windows\SoftwareDistribution\Download\eb84f97221f3377515f23c379375ad66\SP3GDR\SP3GDR.exe
                              c:\windows\SoftwareDistribution\Download\eb84f97221f3377515f23c379375ad66\SP3QFE\SP3QFE.exe
                              c:\windows\SoftwareDistribution\Download\ed4e4c18ec270094317e690595451c9c\47c4bdf626b189d93918e8924a659af7.exe
                              c:\windows\SoftwareDistribution\Download\ed4e4c18ec270094317e690595451c9c\backup\backup.exe
                              c:\windows\SoftwareDistribution\Download\ed4e4c18ec270094317e690595451c9c\ed4e4c18ec270094317e690595451c9c.exe
                              c:\windows\SoftwareDistribution\Download\ed4e4c18ec270094317e690595451c9c\sp3gdr\sp3gdr.exe
                              c:\windows\SoftwareDistribution\Download\ed4e4c18ec270094317e690595451c9c\sp3qfe\sp3qfe.exe
                              c:\windows\SoftwareDistribution\Download\ee674415c440815df9dbd79e20f94525\ee674415c440815df9dbd79e20f94525.exe
                              c:\windows\SoftwareDistribution\Download\ee674415c440815df9dbd79e20f94525\f34e0e2448fa949fda32b9e9477dc7ce.exe
                              c:\windows\SoftwareDistribution\Download\ee674415c440815df9dbd79e20f94525\SP2GDR\SP2GDR.exe
                              c:\windows\SoftwareDistribution\Download\ee674415c440815df9dbd79e20f94525\SP2QFE\SP2QFE.exe
                              c:\windows\SoftwareDistribution\Download\f36593f13584dc8b311cfbaab602e80f\backup\backup.exe
                              c:\windows\SoftwareDistribution\Download\f36593f13584dc8b311cfbaab602e80f\backup\sp3gdr\sp3gdr.exe
                              c:\windows\SoftwareDistribution\Download\f36593f13584dc8b311cfbaab602e80f\backup\sp3qfe\sp3qfe.exe
                              c:\windows\SoftwareDistribution\Download\f36593f13584dc8b311cfbaab602e80f\download\download.exe
                              c:\windows\SoftwareDistribution\Download\f36593f13584dc8b311cfbaab602e80f\f36593f13584dc8b311cfbaab602e80f.exe
                              c:\windows\SoftwareDistribution\Download\f36593f13584dc8b311cfbaab602e80f\fa15702b8a9d8787d3246995b9c1bb67.exe
                              c:\windows\SoftwareDistribution\Download\f36593f13584dc8b311cfbaab602e80f\sp3gdr\sp3gdr.exe
                              c:\windows\SoftwareDistribution\Download\f36593f13584dc8b311cfbaab602e80f\sp3qfe\sp3qfe.exe
                              c:\windows\SoftwareDistribution\Download\f4a2c0aaa24852247df21c71c0eb238d\67065d13b396b687cc8834f4c1ac8407.exe
                              c:\windows\SoftwareDistribution\Download\f4a2c0aaa24852247df21c71c0eb238d\backup\backup.exe
                              c:\windows\SoftwareDistribution\Download\f4a2c0aaa24852247df21c71c0eb238d\backup\sp3gdr\sp3gdr.exe
                              c:\windows\SoftwareDistribution\Download\f4a2c0aaa24852247df21c71c0eb238d\backup\sp3qfe\sp3qfe.exe
                              c:\windows\SoftwareDistribution\Download\f4a2c0aaa24852247df21c71c0eb238d\download\download.exe
                              c:\windows\SoftwareDistribution\Download\f4a2c0aaa24852247df21c71c0eb238d\f4a2c0aaa24852247df21c71c0eb238d.exe
                              c:\windows\SoftwareDistribution\Download\f4a2c0aaa24852247df21c71c0eb238d\sp3gdr\sp3gdr.exe
                              c:\windows\SoftwareDistribution\Download\f4a2c0aaa24852247df21c71c0eb238d\sp3qfe\sp3qfe.exe
                              c:\windows\SoftwareDistribution\Download\fb0faa128362fdadcb1300a59dbc6dc9\fb0faa128362fdadcb1300a59dbc6dc9.exe
                              c:\windows\SoftwareDistribution\Download\fb0faa128362fdadcb1300a59dbc6dc9\SP2GDR\SP2GDR.exe
                              c:\windows\SoftwareDistribution\Download\fb0faa128362fdadcb1300a59dbc6dc9\SP2QFE\SP2QFE.exe
                              c:\windows\SoftwareDistribution\Download\fb0faa128362fdadcb1300a59dbc6dc9\SP3GDR\SP3GDR.exe
                              c:\windows\SoftwareDistribution\Download\fb0faa128362fdadcb1300a59dbc6dc9\SP3QFE\SP3QFE.exe
                              c:\windows\SoftwareDistribution\EventCache\EventCache.exe
                              c:\windows\SoftwareDistribution\SelfUpdate\Default\Default.exe
                              c:\windows\SoftwareDistribution\SelfUpdate\Registered\Registered.exe
                              c:\windows\SoftwareDistribution\SelfUpdate\SelfUpdate.exe
                              c:\windows\SoftwareDistribution\SoftwareDistribution.exe
                              c:\windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\9482F4B4-E343-43B6-B170-9A65BC822C77.exe
                              c:\windows\SoftwareDistribution\WuRedir\WuRedir.exe
                              c:\windows\srchasst\chars\chars.exe
                              c:\windows\srchasst\mui\[u]0/u40C\[u]0/u40C.exe
                              c:\windows\srchasst\mui\mui.exe
                              c:\windows\srchasst\srchasst.exe
                              c:\windows\Sun\Java\Deployment\Deployment.exe
                              c:\windows\Sun\Java\Java.exe
                              c:\windows\Sun\Sun.exe
                              c:\windows\system32\1025\1025.exe
                              c:\windows\system32\1028\1028.exe
                              c:\windows\system32\1031\1031.exe
                              c:\windows\system32\1033\1033.exe
                              c:\windows\system32\1036\1036.exe
                              c:\windows\system32\1037\1037.exe
                              c:\windows\system32\1041\1041.exe
                              c:\windows\system32\1042\1042.exe
                              c:\windows\system32\1054\1054.exe
                              c:\windows\system32\2052\2052.exe
                              c:\windows\system32\3076\3076.exe
                              c:\windows\system32\3com_dmi\3com_dmi.exe
                              c:\windows\system32\appmgmt\appmgmt.exe
                              c:\windows\system32\appmgmt\MACHINE\MACHINE.exe
                              c:\windows\system32\appmgmt\S-1-5-21-1482476501-920026266-1801674531-1003\S-1-5-21-1482476501-920026266-1801674531-1003.exe
                              c:\windows\system32\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}.exe
                              c:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}.exe
                              c:\windows\system32\CatRoot\CatRoot.exe
                              c:\windows\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}.exe
                              c:\windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}.exe
                              c:\windows\system32\CatRoot2\CatRoot2.exe
                              c:\windows\system32\Com\Com.exe
                              1. 13 partie :
                                :\windows\system32\config\config.exe
                                c:\windows\system32\config\systemprofile\Application Data\.exe
                                c:\windows\system32\config\systemprofile\Application Data\Microsoft\.exe
                                c:\windows\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\.exe
                                c:\windows\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\.exe
                                c:\windows\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\.exe
                                c:\windows\system32\config\systemprofile\Application Data\Microsoft\Media Player\Media Player.exe
                                c:\windows\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\.exe
                                c:\windows\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\.exe
                                c:\windows\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\Certificates\.exe
                                c:\windows\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\CRLs\.exe
                                c:\windows\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\CTLs\.exe
                                c:\windows\system32\config\systemprofile\Bureau\Bureau.exe
                                c:\windows\system32\config\systemprofile\Cookies\.exe
                                c:\windows\system32\config\systemprofile\Favoris\Favoris.exe
                                c:\windows\system32\config\systemprofile\Local Settings\.exe
                                c:\windows\system32\config\systemprofile\Local Settings\Application Data\.exe
                                c:\windows\system32\config\systemprofile\Local Settings\Application Data\Microsoft\.exe
                                c:\windows\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Internet Explorer\Internet Explorer.exe
                                c:\windows\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Media Player\Media Player.exe
                                c:\windows\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\11.0\11.0.exe
                                c:\windows\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\Windows Media.exe
                                c:\windows\system32\config\systemprofile\Local Settings\Historique\.exe
                                c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\.exe
                                c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012009051820090519\.exe
                                c:\windows\system32\config\systemprofile\Local Settings\Temp\Temp.exe
                                c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\.exe
                                c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\.exe
                                c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\9B12ER53\.exe
                                c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\RR12M4XU\.exe
                                c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\RZKSJ534\.exe
                                c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\TMG7LOBS\.exe
                                c:\windows\system32\config\systemprofile\Mes documents\Mes documents.exe
                                c:\windows\system32\config\systemprofile\Recent\.exe
                                c:\windows\system32\config\systemprofile\SendTo\.exe
                                c:\windows\system32\config\systemprofile\systemprofile.exe
                                c:\windows\system32\dhcp\dhcp.exe
                                c:\windows\system32\DirectX\Dinput\Dinput.exe
                                c:\windows\system32\DirectX\DirectX.exe
                                c:\windows\system32\dllcache\.exe
                                c:\windows\system32\drivers\disdn\disdn.exe
                                c:\windows\system32\drivers\drivers.exe
                                c:\windows\system32\drivers\etc\etc.exe
                                c:\windows\system32\drivers\UMDF\UMDF.exe
                                c:\windows\system32\DRVSTORE\amdk8_1F9DE4E49C97F59EE9F75C34E0E91E568FC9EEB2\amdk8_1F9DE4E49C97F59EE9F75C34E0E91E568FC9EEB2.exe
                                c:\windows\system32\DRVSTORE\amdppm_C66586B319F61C772BA2DAB141D0FE08F299F411\amdppm_C66586B319F61C772BA2DAB141D0FE08F299F411.exe
                                c:\windows\system32\DRVSTORE\DRVSTORE.exe
                                c:\windows\system32\DRVSTORE\wlphonecv_8800C151E3BB9442F62327FF05F053BF5567B318\wlphonecv_8800C151E3BB9442F62327FF05F053BF5567B318.exe
                                c:\windows\system32\export\export.exe
                                c:\windows\system32\fr-fr\fr-fr.exe
                                c:\windows\system32\fr\fr.exe
                                c:\windows\system32\ias\ias.exe
                                c:\windows\system32\icsxml\icsxml.exe
                                c:\windows\system32\IME\CINTLGNT\CINTLGNT.exe
                                c:\windows\system32\IME\IME.exe
                                c:\windows\system32\IME\PINTLGNT\PINTLGNT.exe
                                c:\windows\system32\IME\TINTLGNT\TINTLGNT.exe
                                c:\windows\system32\inetsrv\inetsrv.exe
                                c:\windows\system32\Lang\Lang.exe
                                c:\windows\system32\Macromed\Flash\Flash.exe
                                c:\windows\system32\Macromed\Macromed.exe
                                c:\windows\system32\Microsoft\.exe
                                c:\windows\system32\Microsoft\Protect\.exe
                                c:\windows\system32\Microsoft\Protect\S-1-5-18\.exe
                                c:\windows\system32\Microsoft\Protect\S-1-5-18\User\.exe
                                c:\windows\system32\MsDtc\MsDtc.exe
                                c:\windows\system32\MsDtc\Trace\Trace.exe
                                c:\windows\system32\mui\[u]0/u00C\[u]0/u00C.exe
                                c:\windows\system32\mui\[u]0/u409\[u]0/u409.exe
                                c:\windows\system32\mui\[u]0/u40C\[u]0/u40C.exe
                                c:\windows\system32\mui\dispspec\dispspec.exe
                                c:\windows\system32\mui\mui.exe
                                c:\windows\system32\npp\npp.exe
                                c:\windows\system32\oobe\actsetup\actsetup.exe
                                c:\windows\system32\oobe\error\error.exe
                                c:\windows\system32\oobe\html\dslmain\dslmain.exe
                                c:\windows\system32\oobe\html\html.exe
                                c:\windows\system32\oobe\html\iconnect\iconnect.exe
                                c:\windows\system32\oobe\html\ispsgnup\ispsgnup.exe
                                c:\windows\system32\oobe\html\isptype\isptype.exe
                                c:\windows\system32\oobe\html\mouse\images\images.exe
                                c:\windows\system32\oobe\html\mouse\mouse.exe
                                c:\windows\system32\oobe\html\oemcust\oemcust.exe
                                c:\windows\system32\oobe\html\oemhw\oemhw.exe
                                c:\windows\system32\oobe\html\oemreg\oemreg.exe
                                c:\windows\system32\oobe\html\sconnect\sconnect.exe
                                c:\windows\system32\oobe\icserror\icserror.exe
                                c:\windows\system32\oobe\images\images.exe
                                c:\windows\system32\oobe\isperror\isperror.exe
                                c:\windows\system32\oobe\oobe.exe
                                c:\windows\system32\oobe\regerror\regerror.exe
                                c:\windows\system32\oobe\sample\sample.exe
                                c:\windows\system32\oobe\setup\setup.exe
                                c:\windows\system32\PreInstall\PreInstall.exe
                                c:\windows\system32\PreInstall\WinSE\WinSE.exe
                                c:\windows\system32\PreInstall\WinSE\wxp_x86_040C_v1\wxp_x86_040C_v1.exe
                                c:\windows\system32\ras\ras.exe
                                c:\windows\system32\ReinstallBackups\[u]0/u000\[u]0/u000.exe
                                c:\windows\system32\ReinstallBackups\[u]0/u000\DriverFiles\DriverFiles.exe
                                c:\windows\system32\ReinstallBackups\[u]0/u000\DriverFiles\i386\i386.exe
                                c:\windows\system32\ReinstallBackups\ReinstallBackups.exe
                                c:\windows\system32\RTCOM\RTCOM.exe
                                c:\windows\system32\Setup\Setup.exe
                                c:\windows\system32\ShellExt\ShellExt.exe
                                c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\ServiceStartup.exe
                                c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.788\7.2.6001.788.exe
                                c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\wups.dll.exe
                                c:\windows\system32\SoftwareDistribution\Setup\Setup.exe
                                c:\windows\system32\SoftwareDistribution\SoftwareDistribution.exe
                                c:\windows\system32\spool\drivers\color\color.exe
                                c:\windows\system32\spool\drivers\drivers.exe
                                c:\windows\system32\spool\drivers\w32x86\3\3.exe
                                c:\windows\system32\spool\drivers\w32x86\w32x86.exe
                                c:\windows\system32\spool\PRINTERS\PRINTERS.exe
                                c:\windows\system32\spool\prtprocs\prtprocs.exe
                                c:\windows\system32\spool\prtprocs\w32x86\w32x86.exe
                                c:\windows\system32\spool\spool.exe
                                c:\windows\system32\usmt\usmt.exe
                                c:\windows\system32\wbem\AutoRecover\AutoRecover.exe
                                c:\windows\system32\wbem\Logs\Logs.exe
                                c:\windows\system32\wbem\mof\bad\bad.exe
                                c:\windows\system32\wbem\mof\bad\mof.exe
                                c:\windows\system32\wbem\mof\good\good.exe
                                c:\windows\system32\wbem\Performance\Performance.exe
                                c:\windows\system32\wbem\Repository\FS\FS.exe
                                c:\windows\system32\wbem\Repository\Repository.exe
                                c:\windows\system32\wbem\snmp\snmp.exe
                                c:\windows\system32\wbem\wbem.exe
                                c:\windows\system32\wbem\xml\xml.exe
                                c:\windows\system32\wins\wins.exe
                                c:\windows\system32\xircom\xircom.exe
                                c:\windows\twain_32\twain_32.exe
                                c:\windows\WBEM\WBEM.exe
                                c:\windows\Web\printers\images\images.exe
                                c:\windows\Web\printers\printers.exe
                                c:\windows\Web\Wallpaper\Wallpaper.exe
                                c:\windows\Web\Web.exe
                                c:\z0120\z0120.exe
                                d:\28415f1df6ae63685e\28415f1df6ae63685e.exe
                                d:\502181150af01f733d\502181150af01f733d.exe
                                d:\km ply-mpc-rp\codek\codek.exe
                                d:\km ply-mpc-rp\km ply-mpc-rp.exe
                                d:\km ply-mpc-rp\PowerDVD\PowerDVD.exe
                                d:\mp3 player utilities 4.00\MP3 Player Utilities 4.00.exe
                                d:\mp3 player utilities 4.00\rm to mp3\rm to mp3.exe
                                d:\photoshop speedup 1.0\Photoshop SpeedUp 1.0.exe
                                d:\program files\Microsoft Etudes\2007 Encarta Contents\2007 Encarta Contents.exe
                                d:\program files\Microsoft Etudes\2007 Encarta Contents\L07FXLRD\DSV\DSV.exe
                                d:\program files\Microsoft Etudes\2007 Encarta Contents\L07FXLRD\L07FXLRD.exe
                                d:\program files\Microsoft Etudes\2007 Encarta Contents\L07FXLRD\MAD\MAD.exe
                                d:\program files\Microsoft Etudes\2007 Encarta Contents\L07FXLRD\world\7015\7015.exe
                                d:\program files\Microsoft Etudes\2007 Encarta Contents\L07FXLRD\world\world.exe
                                d:\program files\Microsoft Etudes\Microsoft Encarta Junior 2007\Content\Content.exe
                                d:\program files\Microsoft Etudes\Microsoft Encarta Junior 2007\Content\DSV\DSV.exe
                                d:\program files\Microsoft Etudes\Microsoft Encarta Junior 2007\Microsoft Encarta Junior 2007.exe
                                d:\program files\Microsoft Etudes\Microsoft Encarta Junior 2007\Pushpins\Pushpins.exe
                                d:\program files\Microsoft Etudes\Microsoft Etudes.exe
                                d:\program files\PDF Password Remover v3.0\help\help.exe
                                d:\program files\PDF Password Remover v3.0\PDF Password Remover v3.0.exe
                                d:\program files\Program Files.exe
                                d:\programes\+creatorpdf\+creatorpdf.exe
                                d:\programes\2movies.net-HP USB Disk Storage Format Tool 2.1.8-R@A\2movies.net-HP USB Disk Storage Format Tool 2.1.8-R@A.exe
                                d:\programes\Internet Download Manager 5.14 Build 5\crack\crack.exe
                                d:\programes\Internet Download Manager 5.14 Build 5\Internet Download Manager 5.14 Build 5.exe
                                d:\programes\LingvoSoft Talking Dictionary 2006 (English-Arabic) for Windows\LingvoSoft Talking Dictionary 2006 (English-Arabic) for Windows.exe
                                d:\programes\LingvoSoft Talking Dictionary 2006 (English-Arabic) for Windows\TTSDATA\TTSDATA.exe
                                d:\programes\LingvoSoft Talking Dictionary 2006 (French-Arabic) for Windows\LingvoSoft Talking Dictionary 2006 (French-Arabic) for Windows.exe
                                d:\programes\LingvoSoft Talking Dictionary 2006 (French-Arabic) for Windows\TTSDATA\TTSDATA.exe
                                d:\programes\NEO GEO _2\DirectX7\DirectX7.exe
                                d:\programes\NEO GEO _2\Install\Install.exe
                                d:\programes\NEO GEO _2\NEO GEO _2.exe
                                d:\programes\NEO GEO _2\NeoRAGEx\GAMES\GAMES.exe
                                d:\programes\NEO GEO _2\NeoRAGEx\HISCORES\HISCORES.exe
                                d:\programes\NEO GEO _2\NeoRAGEx\PREVIEW\PREVIEW.exe
                                d:\programes\NEO GEO _2\NeoRAGEx\Shots\Shots.exe
                                d:\programes\NEO GEO _2\NeoRAGEx\States\States.exe
                                d:\programes\NEO GEO _2\NeoRAGEx\WAVES\WAVES.exe
                                d:\programes\NEO GEO _2\NeoRAGEx\Zip\Zip.exe
                                d:\programes\Nouveau dossier\Nouveau dossier.exe
                                d:\programes\Nouveau dossier\Tunup Utilities 2009\Tunup Utilities 2009.exe
                                d:\programes\Nouveau dossier\ultra iso\Magic Iso 5.3b221 + Crack\Crack\Crack.exe
                                d:\programes\Nouveau dossier\ultra iso\Magic Iso 5.3b221 + Crack\Magic Iso 5.3b221 + Crack.exe
                                d:\programes\Nouveau dossier\ultra iso\ultra iso.exe
                                d:\programes\Nouveau dossier\ultra iso\UltraISO Premium Edition v8.5.1.1860\UltraISO Premium Edition v8.5.1.1860.exe
                                d:\programes\Nouveau dossier\Vitesse Copy\Vitesse Copy.exe
                                d:\programes\Nouveau dossier\Your Uninstaller! 2008 PRO 6.1.1233\Register\Register.exe
                                d:\programes\Nouveau dossier\Your Uninstaller! 2008 PRO 6.1.1233\Your Uninstaller! 2008 PRO 6.1.1233.exe
                                d:\programes\pdf 2 word\MyEgy.com.PDFZilla_v1.0.7.By.vibration\MyEgy.com.PDFZilla_v1.0.7.By.vibration.exe
                                d:\programes\pdf 2 word\pdf 2 word.exe
                                d:\programes\PDF Password Remover v3.0\PDF Password Remover v3.0.exe
                                d:\programes\Photoshop SpeedUp 1.0\Photoshop SpeedUp 1.0.exe
                                d:\programes\PROGRAMES.exe
                                d:\quick zip 4.60.017 beta\Quick Zip 4.60.017 Beta.exe
                                d:\quran\qoran flash\qoran flash.exe
                                d:\quran\qoran flash\quran\quran.exe
                                d:\quran\QURAN.exe
                                d:\recover my files 3.98.60.81\Recover My Files 3.98.60.81.exe
                                d:\tttttttt\Advanced Search (ACS Publications)_fichiers\Advanced Search (ACS Publications)_fichiers.exe
                                d:\tttttttt\archimed\archimed.exe
                                d:\tttttttt\divers\divers.exe
                                d:\tttttttt\divers\internet\internet.exe
                                d:\tttttttt\divers\microbioligie\microbioligie.exe
                                d:\tttttttt\divers\theses\theses.exe
                                d:\tttttttt\divers\utilisables\utilisables.exe
                                d:\tttttttt\GARLIC PHOTO\GARLIC PHOTO.exe
                                d:\tttttttt\Garlic quality properties during constant convective drying - Google Scholar_fichiers\Garlic quality properties during constant convective drying - Google Scholar_fichiers.exe
                                d:\tttttttt\Garlic quality properties during constant convective drying - Recherche Google_fichiers\Garlic quality properties during constant convective drying - Recherche Google_fichiers.exe
                                d:\tttttttt\garlic++++++\antioxydant\antioxydant.exe
                                d:\tttttttt\garlic++++++\drying garlic\drying garlic.exe
                                d:\tttttttt\garlic++++++\format html\Biological and Chemical Stability of Garlic-Derived Allicin - Journal of Agricultural and Food Chemis\Biological and Chemical Stability of Garlic-Derived Allicin - Journal of Agricultural and Food Chemis.exe
                                d:\tttttttt\garlic++++++\format html\EJPAU2~1\EJPAU2~1.exe
                                d:\tttttttt\garlic++++++\format html\format html.exe
                                d:\tttttttt\garlic++++++\garlic++++++.exe
                                d:\tttttttt\garlic++++++\storage\storage.exe
                                d:\tttttttt\garlic2\garlic2.exe
                                d:\tttttttt\garlic2\rats\Changes In Serum Lipid Profiles And Heart Rate In Rats Treated With Aqueous Garlic Extract_fichiers\Changes In Serum Lipid Profiles And Heart Rate In Rats Treated With Aqueous Garlic Extract_fichiers.exe
                                d:\tttttttt\garlic2\rats\rats.exe
                                d:\tttttttt\garlic2\reference\reference.exe
                                d:\tttttttt\garlic2\tomato_piment papaya\tomato_piment papaya.exe
                                d:\tttttttt\garlic2\wflllllllllllllllllllllllll\garlic - Recherche Google_fichiers\garlic - Recherche Google_fichiers.exe
                                d:\tttttttt\garlic2\wflllllllllllllllllllllllll\journal of food agriculture and environment - Recherche Google_fichiers\journal of food agriculture and environment - Recherche Google_fichiers.exe
                                d:\tttttttt\garlic2\wflllllllllllllllllllllllll\wflllllllllllllllllllllllll.exe
                                d:\tttttttt\Journals - Elsevier_fichiers\Journals - Elsevier_fichiers.exe
                                d:\tttttttt\Nouveau dossier\Advanced Search (ACS Publications)_fichiers\Advanced Search (ACS Publications)_fichiers.exe
                                d:\tttttttt\Nouveau dossier\Advanced Search (ACS Publications)f_fichiers\Advanced Search (ACS Publications)f_fichiers.exe
                                d:\tttttttt\Nouveau dossier\fourel95a.ps~\fourel95a.ps~.exe
                                d:\tttttttt\Nouveau dossier\Giat J[Author] - PubMed Results_fichiers\Giat J[Author] - PubMed Results_fichiers.exe
                                d:\tttttttt\Nouveau dossier\Giat J_, Miron T_, Rabinkov A_, garlic pdf - Recherche Google_fichiers\Giat J_, Miron T_, Rabinkov A_, garlic pdf - Recherche Google_fichiers.exe
                                d:\tttttttt\Nouveau dossier\Internet Download Manager 5.14 Build 5\crack\crack.exe
                                d:\tttttttt\Nouveau dossier\Internet Download Manager 5.14 Build 5\Internet Download Manager 5.14 Build 5.exe
                                d:\tttttttt\Nouveau dossier\Journals - Elsevier_fichiers\Journals - Elsevier_fichiers.exe
                                d:\tttttttt\Nouveau dossier\Nouveau dossier.exe
                                d:\tttttttt\SAMIR FLASH\CARDOON (CYNARA CARDUNCULUS L_) USED AS VEGETABLE RENNET IN AN ALGERIAN TRADITIONAL CHEESE MAKING DJBEN_fichiers\CARDOON (CYNARA CARDUNCULUS L_) USED AS VEGETABLE RENNET IN AN ALGERIAN TRADITIONAL CHEESE MAKING DJBEN_fichiers.exe
                                d:\tttttttt\SAMIR FLASH\ED17~1\ED17~1.exe
                                d:\tttttttt\SAMIR FLASH\food journal\food journal.exe
                                d:\tttttttt\SAMIR FLASH\google\google.exe
                                d:\tttttttt\SAMIR FLASH\google\Nouveau dossier\Nouveau dossier.exe
                                d:\tttttttt\SAMIR FLASH\livres\livres.exe
                                d:\tttttttt\SAMIR FLASH\SAMIR FLASH.exe
                                d:\tttttttt\tttttttt.exe
                                d:\tttttttt\vertus\vertus.exe
                                d:\tttttttt\web page3\AGRIS Records Search_fichiers\AGRIS Records Search_fichiers.exe
                                d:\tttttttt\web page3\Garlic - Thread_fichiers\Garlic - Thread_fichiers.exe
                                d:\tttttttt\web page3\PAKISSAN_com_fichiers\PAKISSAN_com_fichiers.exe
                                d:\tttttttt\web page3\The Internet Journal of Nutrition and Wellness TM\Fresh Garlic Extract Protects The Liver Against Acetaminophen-Induced Toxicity_fichiers\Fresh Garlic Extract Protects The Liver Against Acetaminophen-Induced Toxicity_fichiers.exe
                                d:\tttttttt\web page3\The Internet Journal of Nutrition and Wellness TM\garlic - Google Search_fichiers\garlic - Google Search_fichiers.exe
                                d:\tttttttt\web page3\The Internet Journal of Nutrition and Wellness TM\Herbal Medications and their Anaesthetic Implications_fichiers\Herbal Medications and their Anaesthetic Implications_fichiers.exe
                                d:\tttttttt\web page3\The Internet Journal of Nutrition and Wellness TM\Internet Scientific Publications_fichiers\Internet Scientific Publications_fichiers.exe
                                d:\tttttttt\web page3\The Internet Journal of Nutrition and Wellness TM\Spices In Cancer Prevention_fichiers\Spices In Cancer Prevention_fichiers.exe
                                d:\tttttttt\web page3\The Internet Journal of Nutrition and Wellness TM\The Internet Journal of Nutrition and Wellness TM.exe
                                d:\tttttttt\web page3\web page3.exe
                                d:\tttttttt\web page3\web pages\Ail_fichiers\Ail_fichiers.exe
                                d:\tttttttt\web page3\web pages\web pages.exe
                                d:\tttttttt\web pages\Ail_fichiers\Ail_fichiers.exe
                                d:\tttttttt\web pages\classification\classification.exe
                                d:\tttttttt\web pages\classification\Post-harvest compendium - Main content_fichiers\Post-harvest compendium - Main content_fichiers.exe
                                d:\tttttttt\web pages\classification\POST-HARVEST COMPENDIUM CHAPTER 35 Garlic Post-harvest Operations - Introduction_fichiers\POST-HARVEST COMPENDIUM CHAPTER 35 Garlic Post-harvest Operations - Introduction_fichiers.exe
                                d:\tttttttt\web pages\web pages.exe
                                e:\alhan w chbeb\alhan w chbeb.exe
                                e:\anti vir\anti vir.exe
                                e:\anti vir\usb scan\Cure\Cure.exe
                                e:\anti vir\usb scan\usb scan.exe
                                e:\anti vir\USB.Safely.Remove.v3.3.0\Cracked\Cracked.exe
                                e:\anti vir\USB.Safely.Remove.v3.3.0\USB.Safely.Remove.v3.3.0.exe
                                e:\coures informatique karim\coures informatique karim.exe
                                e:\films\films.exe
                                e:\music\BARZOTTI\BARZOTTI.exe
                                e:\music\bilal\bilal.exe
                                e:\music\CD 1000% francais\CD 1000% francais.exe
                                e:\music\CELINE DION\CELINE DION.exe
                                e:\music\CHAABI\Cha3bi\Cha3bi.exe
                                e:\music\CHAABI\CHAABI.exe
                                e:\music\charki\[u]0/u-1amro\[u]0/u-1amro.exe
                                e:\music\charki\[u]0/u0nancy2006\[u]0/u0nancy2006.exe
                                e:\music\charki\3\3.exe
                                e:\music\charki\741986hb\741986hb.exe
                                e:\music\charki\8\8.exe
                                e:\music\charki\charki.exe
                                e:\music\charki\elisa\elisa.exe
                                e:\music\charki\FADHIL CHAKER 2008\FADHIL CHAKER 2008.exe
                                e:\music\charki\jesmi\jesmi.exe
                                e:\music\charki\melody4arab.com_Military Air Forces Concert\melody4arab.com_Military Air Forces Concert.exe
                                e:\music\charki\Nouveau dossier (2)\Nouveau dossier (2).exe
                                e:\music\charki\WAEIL K\WAEIL K.exe
                                e:\music\charki\wail jesar\wail jesar.exe
                                e:\music\COCKTAIL FRANCAIS\COCKTAIL FRANCAIS.exe
                                e:\music\cokctail englais\cokctail englais.exe
                                e:\music\DOUBLE CANNON\DOUBLE CANNON.exe
                                e:\music\eminem\eminem.exe
                                e:\music\ENRICO\ENRICO.exe
                                e:\music\fairouse\fairouse.exe
                                e:\music\FRANCIS CABREL\FRANCIS CABREL.exe
                                e:\music\INOUBLIABLES\INOUBLIABLES.exe
                                e:\music\khaled\khaled.exe
                                e:\music\khaled\khaled\khaled.exe
                                e:\music\MASSARI\MASSARI.exe
                                e:\music\MICHEL SARDOU\MICHEL SARDOU.exe
                                e:\music\mp3 francais\mp3 francais.exe
                                e:\music\music.exe
                                e:\music\nelly furtado\nelly furtado.exe
                                e:\music\PIERRE BACHELET\PIERRE BACHELET.exe
                                e:\music\radouane\radouane.exe
                                e:\music\rerer\rerer.exe
                                e:\music\tchaikovsky\tchaikovsky.exe
                                e:\photo\darna darna\darna darna.exe
                                e:\photo\darna darna\darna darna\darna darna.exe
                                e:\photo\darna darna\darna darna\MISC\MISC.exe
                                e:\photo\DOUAR\DOUAR.exe
                                e:\photo\imade\102CANON\102CANON.exe
                                e:\photo\imade\imade.exe
                                e:\photo\image\image.exe
                                e:\photo\Nouveau dossier\Nouveau dossier.exe
                                e:\photo\photo.exe
                                e:\photo\photos de kais\photos de kais.exe
                                e:\photo\Rahma photos\Rahma photos.exe
                                e:\photo\Taha ,hassen et houcine\Taha ,hassen et houcine.exe
                                e:\titi\divers\divers.exe
                                e:\titi\divers\internet\internet.exe
                                e:\titi\divers\microbioligie\microbioligie.exe
                                e:\titi\divers\theses\theses.exe
                                e:\titi\divers\utilisables\utilisables.exe
                                e:\titi\GARLIC PHOTO\GARLIC PHOTO.exe
                                e:\titi\garlic++++++\antioxydant\antioxydant.exe
                                e:\titi\garlic++++++\format html\EJPAU2~1\EJPAU2~1.exe
                                e:\titi\garlic++++++\format html\format html.exe
                                e:\titi\garlic++++++\garlic++++++.exe
                                e:\titi\garlic++++++\storage\storage.exe
                                e:\titi\garlic2\garlic2.exe
                                e:\titi\garlic2\rats\Changes In Serum Lipid Profiles And Heart Rate In Rats Treated With Aqueous Garlic Extract_fichiers\Changes In Serum Lipid Profiles And Heart Rate In Rats Treated With Aqueous Garlic Extract_fichiers.exe
                                e:\titi\garlic2\rats\rats.exe
                                e:\titi\garlic2\reference\@ Food Technology Information Service @_fichiers\@ Food Technology Information Service @_fichiers.exe
                                e:\titi\garlic2\reference\reference.exe
                                e:\titi\garlic2\wflllllllllllllllllllllllll\garlic - Recherche Google_fichiers\garlic - Recherche Google_fichiers.exe
                                e:\titi\garlic2\wflllllllllllllllllllllllll\journal of food agriculture and environment - Recherche Google_fichiers\journal of food agriculture and environment - Recherche Google_fichiers.exe
                                e:\titi\garlic2\wflllllllllllllllllllllllll\wflllllllllllllllllllllllll.exe
                                e:\titi\general garlic\general garlic.exe
                                e:\titi\general garlic\Nouveau dossier\bra j\bra j.exe
                                e:\titi\general garlic\Nouveau dossier\Nouveau dossier.exe
                                e:\titi\histaurique\histaurique.exe
                                e:\titi\livres\livres.exe
                                e:\titi\osmo+vacuum\--osmo\--osmo.exe
                                e:\titi\osmo+vacuum\- osmo\- osmo.exe
                                e:\titi\osmo+vacuum\+osmo\+osmo.exe
                                e:\titi\osmo+vacuum\microwave-vaccum1\microwave-vaccum1.exe
                                e:\titi\osmo+vacuum\osmo+vacuum.exe
                                e:\titi\osmo+vacuum\vaccum cooling and osmo frozen\vaccum cooling and osmo frozen.exe
                                e:\titi\osmo+vacuum\vaccum\vaccum.exe
                                e:\titi\recherche\Advanced Search (ACS Publications)_fichiers\Advanced Search (ACS Publications)_fichiers.exe
                                e:\titi\recherche\Advanced Search (ACS Publications)f_fichiers\Advanced Search (ACS Publications)f_fichiers.exe
                                e:\titi\recherche\azzouz s 1999 chaleur these tunis - Recherche Google_files\azzouz s 1999 chaleur these tunis - Recherche Google_files.exe
                                e:\titi\recherche\CARDOON (CYNARA CARDUNCULUS L_) USED AS VEGETABLE RENNET IN AN ALGERIAN TRADITIONAL CHEESE MAKING DJBEN_fichiers\CARDOON (CYNARA CARDUNCULUS L_) USED AS VEGETABLE RENNET IN AN ALGERIAN TRADITIONAL CHEESE MAKING DJBEN_fichiers.exe
                                e:\titi\recherche\Garlic quality properties during constant convective drying - Recherche Google_fichiers\Garlic quality properties during constant convective drying - Recherche Google_fichiers.exe
                                e:\titi\recherche\Giat J[Author] - PubMed Results_fichiers\Giat J[Author] - PubMed Results_fichiers.exe
                                e:\titi\recherche\Giat J_, Miron T_, Rabinkov A_, garlic pdf - Recherche Google_fichiers\Giat J_, Miron T_, Rabinkov A_, garlic pdf - Recherche Google_fichiers.exe
                                e:\titi\recherche\Journals - Elsevier_fichiers\Journals - Elsevier_fichiers.exe
                                e:\titi\recherche\recherche.exe
                                e:\titi\recherche\Search all HighWire-based Journals_fichiers\Search all HighWire-based Journals_fichiers.exe
                                e:\titi\SAMIR FLASH\food journal\food journal.exe
                                e:\titi\SAMIR FLASH\SAMIR FLASH.exe
                                e:\titi\sources osmo vaccum\@ Food Technology Information Service @_fichiers\@ Food Technology Information Service @_fichiers.exe
                                e:\titi\sources osmo vaccum\@ Food Technology Information Service @1_fichiers\@ Food Technology Information Service @1_fichiers.exe
                                e:\titi\sources osmo vaccum\@ Food Technology Information Service @121_fichiers\@ Food Technology Information Service @121_fichiers.exe
                                e:\titi\sources osmo vaccum\@ Food Technology Information Service @3_fichiers\@ Food Technology Information Service @3_fichiers.exe
                                e:\titi\sources osmo vaccum\@ Food Technology Information Service @4_fichiers\@ Food Technology Information Service @4_fichiers.exe
                                e:\titi\sources osmo vaccum\source22\ResultbyKeyword.asp_fichiers\ResultbyKeyword.asp_fichiers.exe
                                e:\titi\sources osmo vaccum\source22\ResultbyKeyword.asp11111_fichiers\ResultbyKeyword.asp11111_fichiers.exe
                                e:\titi\sources osmo vaccum\source22\ResultbyKeyword.asp11111_fichiers\tree_menu_data\tree_menu_data.exe
                                e:\titi\sources osmo vaccum\source22\ResultBykeyword.asp2_fichiers\ResultBykeyword.asp2_fichiers.exe
                                e:\titi\sources osmo vaccum\source22\ResultByKeyword.asp21_fichiers\ResultByKeyword.asp21_fichiers.exe
                                e:\titi\sources osmo vaccum\source22\ResultByKeyword.asp21_fichiers\tree_menu_data\tree_menu_data.exe
                                e:\titi\sources osmo vaccum\source22\ResultByKeyword.asp22_fichiers\ResultByKeyword.asp22_fichiers.exe
                                e:\titi\sources osmo vaccum\source22\ResultByKeyword.asp22_fichiers\tree_menu_data\tree_menu_data.exe
                                e:\titi\sources osmo vaccum\source22\ResultBykeyword.asp3_fichiers\ResultBykeyword.asp3_fichiers.exe
                                e:\titi\sources osmo vaccum\source22\ResultBykeyword.asp4_fichiers\ResultBykeyword.asp4_fichiers.exe
                                e:\titi\sources osmo vaccum\source22\ResultBykeyword.asp5_fichiers\ResultBykeyword.asp5_fichiers.exe
                                e:\titi\sources osmo vaccum\source22\source22.exe
                                e:\titi\sources osmo vaccum\sources osmo vaccum.exe
                                e:\titi\sources osmo vaccum\sources\sources.exe
                                e:\titi\theses\theses.exe
                                e:\titi\titi.exe
                                e:\titi\vertus\ail2_1_fichiers\ail2_1_fichiers.exe
                                e:\titi\vertus\vertus.exe
                                e:\titi\web page3\AGRIS Records Search_fichiers\AGRIS Records Search_fichiers.exe
                                e:\titi\web page3\Garlic - Thread_fichiers\Garlic - Thread_fichiers.exe
                                e:\titi\web page3\PAKISSAN_com_fichiers\PAKISSAN_com_fichiers.exe
                                e:\titi\web page3\The Internet Journal of Nutrition and Wellness TM\Fresh Garlic Extract Protects The Liver Against Acetaminophen-Induced Toxicity_fichiers\Fresh Garlic Extract Protects The Liver Against Acetaminophen-Induced Toxicity_fichiers.exe
                                e:\titi\web page3\The Internet Journal of Nutrition and Wellness TM\garlic - Google Search_fichiers\garlic - Google Search_fichiers.exe
                                e:\titi\web page3\The Internet Journal of Nutrition and Wellness TM\Herbal Medications and their Anaesthetic Implications_fichiers\Herbal Medications and their Anaesthetic Implications_fichiers.exe
                                e:\titi\web page3\The Internet Journal of Nutrition and Wellness TM\Internet Scientific Publications_fichiers\Internet Scientific Publications_fichiers.exe
                                e:\titi\web page3\The Internet Journal of Nutrition and Wellness TM\Spices In Cancer Prevention_fichiers\Spices In Cancer Prevention_fichiers.exe
                                e:\titi\web page3\The Internet Journal of Nutrition and Wellness TM\The Internet Journal of Nutrition and Wellness TM.exe
                                e:\titi\web page3\web page3.exe
                                e:\titi\web page3\web pages\Ail_fichiers\Ail_fichiers.exe
                                e:\titi\web page3\web pages\classification\classification.exe
                                e:\titi\web page3\web pages\classification\Post-harvest compendium - Main content_fichiers\Post-harvest compendium - Main content_fichiers.exe
                                e:\titi\web page3\web pages\classification\POST-HARVEST COMPENDIUM CHAPTER 35 Garlic Post-harvest Operations - Introduction_fichiers\POST-HARVEST COMPENDIUM CHAPTER 35 Garlic Post-harvest Operations - Introduction_fichiers.exe
                                e:\titi\web page3\web pages\web pages.exe
                                .
                                .
                                ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
                                .

                                -------\Legacy_MYWEBSEARCHSERVICE

                                ((((((((((((((((((((((((((((( Fichiers créés du 2008-01-20 au 2008-02-20 ))))))))))))))))))))))))))))))))))))
                                .
                                1. 2009-05-24 11:02 . 2009-05-24 11:02 -------- d-----w c:\documents and settings\All Users\Application Data\1CEA
                                  2009-05-24 10:45 . 2009-05-24 10:45 -------- d-----w c:\documents and settings\All Users\Application Data\Bandoo
                                  2009-05-24 10:45 . 2009-05-24 12:03 -------- d-----w c:\program files\Bandoo
                                  2009-05-23 22:43 . 2009-05-24 11:27 -------- d-----w c:\documents and settings\IMAD\Local Settings\Application Data\BearShare
                                  2009-05-23 22:43 . 2009-05-24 11:49 -------- d-----w c:\program files\BearShare Applications
                                  2009-05-23 22:13 . 2009-05-24 11:52 -------- d-----w c:\documents and settings\IMAD\Local Settings\Application Data\Screamer Radio
                                  2009-05-23 21:46 . 2009-05-23 21:59 -------- d-----w c:\program files\adslTV
                                  2009-05-23 16:46 . 2009-05-24 12:43 -------- d-----w c:\program files\Fichiers communs\Windows Live
                                  2009-05-23 09:42 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\IMAD\Application Data\Malwarebytes
                                  2009-05-23 09:42 . 2009-04-06 13:32 15504 ----a-w c:\windows\system32\drivers\mbam.sys
                                  2009-05-23 09:42 . 2009-04-06 13:32 38496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
                                  2009-05-23 09:42 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\All Users\Application Data\Malwarebytes
                                  2009-05-23 09:42 . 2009-05-23 11:53 -------- d-----w c:\program files\Malwarebytes' Anti-Malware
                                  2009-05-23 07:49 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\IMAD\Local Settings\Application Data\The Weather Channel
                                  2009-05-22 23:23 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\IMAD\Application Data\Sammsoft
                                  2009-05-22 23:23 . 2009-05-24 12:43 -------- d-----w c:\program files\AskBarDis
                                  2009-05-22 23:23 . 2009-05-24 12:43 -------- d-----w c:\program files\Advanced Registry Optimizer
                                  2009-05-22 21:30 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\IMAD\Application Data\SolwaySoftware
                                  2009-05-22 21:21 . 2009-05-24 12:43 -------- d-----w C:\DriveKey
                                  2009-05-22 19:58 . 2009-05-24 12:43 -------- d-----w c:\program files\trend micro
                                  2009-05-22 19:58 . 2009-05-24 12:43 -------- d-----w C:\rsit
                                  2009-05-22 19:34 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\IMAD\Application Data\URSoft
                                  2009-05-22 19:34 . 2009-05-24 12:43 -------- d-----w c:\program files\Your Uninstaller 2008
                                  2009-05-22 19:22 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\All Users\Application Data\Yahoo!
                                  2009-05-22 19:22 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\IMAD\Application Data\Yahoo!
                                  2009-05-22 19:22 . 2009-05-24 12:43 -------- d-----w c:\program files\Yahoo!
                                  2009-05-21 17:46 . 2008-04-13 17:33 221184 ----a-w c:\windows\system32\wmpns.dll
                                  2009-05-21 14:35 . 2009-05-24 12:43 -------- d-----w c:\windows\Sun
                                  2009-05-21 09:05 . 2009-02-09 11:24 2191104 -c----w c:\windows\system32\dllcache\ntoskrnl.exe
                                  2009-05-21 09:05 . 2009-02-09 11:23 2147328 -c----w c:\windows\system32\dllcache\ntkrnlmp.exe
                                  2009-05-21 09:05 . 2009-02-09 11:23 2025984 -c----w c:\windows\system32\dllcache\ntkrpamp.exe
                                  2009-05-21 08:11 . 2008-06-14 17:33 272768 -c----w c:\windows\system32\dllcache\bthport.sys
                                  2009-05-21 08:11 . 2008-06-14 17:33 272768 ------w c:\windows\system32\drivers\bthport.sys
                                  2009-05-21 07:16 . 2008-10-24 11:21 455296 -c----w c:\windows\system32\dllcache\mrxsmb.sys
                                  2009-05-21 01:00 . 2007-07-27 07:41 26488 ----a-w c:\windows\system32\spupdsvc.exe
                                  2009-05-21 00:49 . 2009-05-24 12:43 -------- d-----w c:\program files\AGI
                                  2009-05-21 00:16 . 2009-05-21 01:04 86576 ----a-w c:\documents and settings\IMAD\Application Data\Microsoft\Services Windows Live\Raccourci Galerie de Photos Windows Live.exe
                                  2009-05-21 00:16 . 2009-05-21 01:04 392728 ----a-w c:\documents and settings\IMAD\Application Data\Microsoft\Services Windows Live\Services Windows Live.dll
                                  2009-05-21 00:16 . 2009-05-21 01:04 132672 ----a-w c:\documents and settings\IMAD\Application Data\Microsoft\Services Windows Live\Raccourci Windows Live Messenger.exe
                                  2009-05-20 23:28 . 2009-05-21 01:10 143360 ----a-w c:\documents and settings\IMAD\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
                                  2009-05-20 23:28 . 2009-05-21 01:10 132096 ----a-w c:\documents and settings\IMAD\Application Data\Microsoft\Live Search\Suppression-Live-Search.exe
                                  2009-05-20 23:28 . 2009-05-21 01:10 125440 ----a-w c:\documents and settings\IMAD\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
                                  2009-05-20 22:13 . 2009-05-24 12:43 -------- d-sh--w C:\found.000
                                  2009-05-18 22:42 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\IMAD\Local Settings\Application Data\Identities
                                  2009-05-18 22:38 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\IMAD\Local Settings\Application Data\Adobe
                                  2009-05-18 22:32 . 2009-05-24 12:43 -------- d-----w c:\program files\MSECache
                                  2009-05-18 22:14 . 2009-05-24 12:43 -------- d-----w c:\documents and settings\IMAD\Application Data\dvdcss
                                  2009-05-18 22:12 . 2009-05-24 12:43 -------- d---a-w c:\documents and settings\All Users\Application Data\TEMP

                                  .
                                  (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                                  .
                                  2009-05-24 12:45 . 2009-05-18 21:21 -------- d-----w c:\program files\SuperCopier2
                                  2009-05-23 13:54 . 2008-02-21 15:53 1761120 ----a-w c:\documents and settings\IMAD\Application Data\IDM\DwnlData\IMAD\DFX2BETA_1736_9\DFX2BETA_1736.exe
                                  2009-05-18 21:37 . 2009-05-18 21:37 120240 ----a-w c:\documents and settings\IMAD\Application Data\IDM\idmmzcc2\components\idmmzcc.dll
                                  2009-05-18 21:34 . 2009-05-18 21:34 499712 ----a-w c:\windows\system32\msvcp71.dll
                                  2009-05-18 21:34 . 2009-05-18 21:34 348160 ----a-w c:\windows\system32\msvcr71.dll
                                  2009-05-18 21:31 . 2009-05-18 21:31 57344 ----a-w c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\50\5b902232-55694a9f-n\Decora-SSE.dll
                                  2009-05-18 21:30 . 2009-05-18 21:30 24064 ----a-w c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\15\4e09eacf-46b51e4f-n\Decora-D3D.dll
                                  2009-05-18 21:30 . 2009-05-18 21:30 315392 ----a-w c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-329123bb-n\jogl.dll
                                  2009-05-18 21:30 . 2009-05-18 21:30 20480 ----a-w c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-329123bb-n\jogl_awt.dll
                                  2009-05-18 21:30 . 2009-05-18 21:30 114688 ----a-w c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-329123bb-n\jogl_cg.dll
                                  2009-05-18 21:30 . 2009-05-18 21:30 20480 ----a-w c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\45\4f710eed-601542d3-n\gluegen-rt.dll
                                  2009-05-18 21:30 . 2009-05-18 21:30 499712 ----a-w c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\33\258cea61-4647c794-n\msvcp71.dll
                                  2009-05-18 21:30 . 2009-05-18 21:30 499712 ----a-w c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\33\258cea61-4647c794-n\jmc.dll
                                  2009-05-18 21:30 . 2009-05-18 21:30 348160 ----a-w c:\documents and settings\IMAD\Application Data\Sun\Java\Deployment\cache\6.0\33\258cea61-4647c794-n\msvcr71.dll
                                  2009-05-18 21:25 . 2009-05-18 21:24 410984 ----a-w c:\windows\system32\deploytk.dll
                                  2009-05-18 19:50 . 2009-05-18 19:50 315392 ----a-w c:\windows\HideWin.exe
                                  2009-05-18 19:40 . 2009-05-18 19:40 21892 ----a-w c:\windows\system32\emptyregdb.dat
                                  2009-03-06 14:20 . 2008-04-13 17:33 286720 ----a-w c:\windows\system32\pdh.dll
                                  2009-03-03 00:13 . 2008-03-01 12:58 826368 ----a-w c:\windows\system32\wininet.dll
                                  2009-02-20 17:10 . 2008-05-09 21:28 78336 ----a-w c:\windows\system32\ieencode.dll
                                  2009-02-10 17:06 . 2008-04-13 19:07 2068096 ----a-w c:\windows\system32\ntkrnlpa.exe
                                  2009-02-09 14:05 . 2008-04-13 16:58 1846912 ----a-w c:\windows\system32\win32k.sys
                                  2009-02-09 11:24 . 2008-04-13 17:08 2191104 ----a-w c:\windows\system32\ntoskrnl.exe
                                  2009-02-09 11:23 . 2008-04-13 17:34 111104 ----a-w c:\windows\system32\services.exe
                                  2009-02-09 10:53 . 2008-04-13 17:33 735744 ----a-w c:\windows\system32\lsasrv.dll
                                  2009-02-09 10:53 . 2008-04-13 17:33 401408 ----a-w c:\windows\system32\rpcss.dll
                                  2009-02-09 10:53 . 2008-04-13 17:33 685568 ----a-w c:\windows\system32\advapi32.dll
                                  2009-02-09 10:53 . 2008-04-13 17:33 739840 ----a-w c:\windows\system32\ntdll.dll
                                  2009-02-06 10:39 . 2001-08-28 12:00 35328 ----a-w c:\windows\system32\sc.exe
                                  2009-02-03 19:58 . 2008-04-13 17:33 56832 ----a-w c:\windows\system32\secur32.dll
                                  2008-12-20 22:14 . 2008-04-13 17:33 1294336 ----a-w c:\windows\system32\quartz.dll
                                  2008-12-16 12:31 . 2008-04-13 17:33 354304 ----a-w c:\windows\system32\winhttp.dll
                                  2008-12-11 10:57 . 2008-04-13 10:15 333952 ----a-w c:\windows\system32\drivers\srv.sys
                                  2008-12-05 06:57 . 2008-04-13 17:33 144896 ----a-w c:\windows\system32\schannel.dll
                                  2008-10-30 08:21 . 2009-05-18 21:15 75072 ----a-w c:\windows\system32\drivers\avipbb.sys
                                  2008-10-24 11:21 . 2008-04-13 10:17 455296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
                                  2008-10-23 12:36 . 2008-04-13 17:33 286720 ----a-w c:\windows\system32\gdi32.dll
                                  2008-10-16 13:13 . 2009-05-18 19:41 202776 ----a-w c:\windows\system32\wuweb.dll
                                  2008-10-16 13:13 . 2009-05-18 19:41 1809944 ----a-w c:\windows\system32\wuaueng.dll
                                  2008-10-16 13:12 . 2009-05-18 19:41 323608 ----a-w c:\windows\system32\wucltui.dll
                                  2008-10-16 13:12 . 2009-05-18 19:41 561688 ----a-w c:\windows\system32\wuapi.dll
                                  2008-10-16 13:09 . 2009-05-18 19:41 51224 ----a-w c:\windows\system32\wuauclt.exe
                                  2008-10-16 13:09 . 2008-10-16 13:09 43544 ----a-w c:\windows\system32\wups2.dll
                                  2008-10-16 13:09 . 2008-04-13 17:33 92696 ----a-w c:\windows\system32\cdm.dll
                                  2008-10-16 13:08 . 2009-05-18 19:41 34328 ----a-w c:\windows\system32\wups.dll
                                  2008-10-03 10:03 . 2008-04-13 17:33 247326 ----a-w c:\windows\system32\strmdll.dll
                                  2008-09-10 01:15 . 2008-04-13 17:33 1307648 ----a-w c:\windows\system32\msxml6.dll
                                  2008-09-04 17:16 . 2008-04-13 17:33 1106944 ----a-w c:\windows\system32\msxml3.dll
                                  2008-08-14 10:04 . 2008-04-13 10:19 138496 ----a-w c:\windows\system32\drivers\afd.sys
                                  2008-07-07 20:28 . 2008-04-13 17:33 253952 ----a-w c:\windows\system32\es.dll
                                  2008-06-24 16:44 . 2008-04-13 17:33 74240 ----a-w c:\windows\system32\mscms.dll
                                  2008-06-24 16:12 . 2008-05-09 21:26 295936 ----a-w c:\windows\system32\wmpeffects.dll
                                  2008-06-20 17:47 . 2008-04-13 17:33 247808 ----a-w c:\windows\system32\mswsock.dll
                                  2008-06-20 11:51 . 2008-04-13 10:20 361600 ----a-w c:\windows\system32\drivers\tcpip.sys
                                  2008-06-20 11:08 . 2008-04-13 10:00 225856 ----a-w c:\windows\system32\drivers\tcpip6.sys
                                  2008-06-18 03:03 . 2008-05-09 21:27 938496 ----a-w c:\windows\system32\WMNetmgr.dll
                                  2008-06-17 23:09 . 2008-05-09 21:27 100864 ----a-w c:\windows\system32\logagent.exe
                                  2008-06-12 14:22 . 2009-05-18 19:39 956928 ----a-w c:\windows\system32\msdtctm.dll
                                  2008-06-12 14:22 . 2009-05-18 19:39 91648 ----a-w c:\windows\system32\mtxoci.dll
                                  2008-06-12 14:22 . 2009-05-18 19:39 428032 ----a-w c:\windows\system32\msdtcprx.dll
                                  2008-06-12 14:22 . 2009-05-18 19:39 161792 ----a-w c:\windows\system32\msdtcuiu.dll
                                  2008-06-12 14:22 . 2008-04-13 17:33 66560 ----a-w c:\windows\system32\mtxclu.dll
                                  2008-06-12 14:22 . 2009-05-18 19:39 58880 ----a-w c:\windows\system32\msdtclog.dll
                                  2008-05-21 17:00 . 2008-02-20 10:58 76432 ----a-w c:\documents and settings\IMAD\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
                                  2008-05-09 21:32 . 2008-05-09 21:32 1571840 ----a-w c:\windows\system32\sfcfiles.dll
                                  2008-05-09 21:32 . 2008-05-09 21:32 1013248 ----a-w c:\windows\system32\syssetup.dll
                                  2008-05-09 21:30 . 2008-05-09 21:30 211456 ----a-w c:\windows\system32\qasf.dll
                                  2008-05-09 21:30 . 2008-05-09 21:30 63488 ----a-w c:\windows\system32\wpdmtpus.dll
                                  2008-05-09 21:30 . 2008-05-09 21:30 229376 ----a-w c:\windows\system32\cewmdm.dll
                                  2008-05-09 21:30 . 2008-05-09 21:30 175616 ----a-w c:\windows\system32\mspmsp.dll
                                  2008-05-09 21:30 . 2008-05-09 21:30 1329152 ----a-w c:\windows\system32\wmspdmoe.dll
                                  2008-05-09 21:29 . 2008-05-09 21:29 1117696 ----a-w c:\windows\system32\wmadmoe.dll
                                  2008-05-09 21:29 . 2008-05-09 21:29 534528 ----a-w c:\windows\system32\wmdrmsdk.dll
                                  2008-05-09 21:29 . 2008-05-09 21:29 991744 ----a-w c:\windows\system32\drmv2clt.dll
                                  2008-05-09 21:29 . 2008-05-09 21:29 348672 ----a-w c:\windows\system32\wmdrmnet.dll
                                  2008-05-09 21:29 . 2008-05-09 21:29 24576 ----a-w c:\windows\system32\nlsdl.dll
                                  2008-05-09 21:29 . 2008-05-09 21:29 23552 ----a-w c:\windows\system32\normaliz.dll
                                  2008-05-09 21:29 . 2008-05-09 21:29 26112 ----a-w c:\windows\system32\idndl.dll
                                  2008-05-09 21:29 . 2008-05-09 21:29 48128 ----a-w c:\windows\system32\mshtmler.dll
                                  2008-05-09 21:29 . 2008-05-09 21:29 156160 ----a-w c:\windows\system32\msls31.dll
                                  2008-05-09 21:29 . 2008-05-09 21:29 45568 ----a-w c:\windows\system32\mshta.exe
                                  2008-05-09 21:29 . 2008-05-09 21:29 40960 ----a-w c:\windows\system32\licmgr10.dll
                                  2008-05-09 21:28 . 2008-05-09 21:28 36352 ----a-w c:\windows\system32\imgutil.dll
                                  2008-05-09 21:28 . 2008-05-09 21:28 55296 ----a-w c:\windows\system32\iesetup.dll
                                  2008-05-09 21:28 . 2008-05-09 21:28 71680 ----a-w c:\windows\system32\admparse.dll
                                  2008-05-09 21:28 . 2008-05-09 21:28 17408 ----a-w c:\windows\system32\corpol.dll
                                  2008-05-09 21:28 . 2008-05-09 21:28 4096 ----a-w c:\windows\system32\wmvdmoe2.dll
                                  2008-05-09 21:28 . 2008-05-09 21:28 4096 ----a-w c:\windows\system32\wmvdmod.dll
                                  2008-05-09 21:28 . 2008-05-09 21:28 603648 ----a-w c:\windows\system32\wmspdmod.dll
                                  2008-05-09 21:28 . 2008-05-09 21:28 99840 ----a-w c:\windows\system32\wmpshell.dll
                                  2008-05-09 21:28 . 2008-05-09 21:28 8292352 ----a-w c:\windows\system32\wmploc.dll
                                  2008-05-09 21:28 . 2008-05-09 21:28 4096 ----a-w c:\windows\system32\wmsdmoe2.dll
                                  2008-05-09 21:28 . 2008-05-09 21:28 4096 ----a-w c:\windows\system32\wmsdmod.dll
                                  2008-05-09 21:26 . 2008-05-09 21:26 4096 ----a-w c:\windows\system32\wmvadve.dll
                                  2008-05-09 10:55 . 2008-04-13 17:33 90112 ----a-w c:\windows\system32\wshext.dll
                                  2008-05-09 10:55 . 2008-04-13 17:33 430080 ----a-w c:\windows\system32\vbscript.dll
                                  2008-05-09 10:55 . 2008-04-13 17:33 180224 ----a-w c:\windows\system32\scrobj.dll
                                  2008-05-09 10:55 . 2008-04-13 17:33 172032 ----a-w c:\windows\system32\scrrun.dll
                                  2008-05-09 10:15 . 2009-05-18 21:15 45376 ----a-w c:\windows\system32\drivers\avgntdd.sys
                                  2008-05-08 14:02 . 2008-04-13 09:55 203136 ----a-w c:\windows\system32\drivers\rmcast.sys
                                  .

                                  ------- Sigcheck -------

                                  [-] 2008-05-09 21:32 1571840 33578A738C564B4F84D906EFD91025E5 c:\windows\system32\sfcfiles.dll
                                  .
                                  ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
                                  .
                                  .
                                  *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
                                  REGEDIT4

                                  [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
                                  2008-08-06 13:20 279944 ----a-w c:\program files\AskBarDis\bar\bin\askBar.dll

                                  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                                  "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
                                  "SuperCopier2.exe"="c:\program files\SuperCopier2\SuperCopier2.exe" [2006-07-07 1052672]
                                  "IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2009-05-18 2594224]
                                  "MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-13 1695232]
                                  "msnmsgr"="c:\program files\MSN Messenger\msnmsgr.exe" [2007-01-19 5674352]
                                  "E09FXLRD_1170125"="c:\program files\Microsoft Encarta\Microsoft Encarta 2009 - Collection DVD\EDICT.EXE" [2008-05-28 351000]

                                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                                  "PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-13 455168]
                                  "avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]
                                  "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
                                  "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-05-18 148888]
                                  "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-12-04 8523776]
                                  "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-12-04 81920]
                                  "TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2009-05-18 185872]
                                  "nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2007-12-04 1626112]

                                  [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
                                  "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360]

                                  [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
                                  "nltide_2"="shell32" [X]

                                  c:\windows\system32\config\systemprofile\Menu D‚marrer\Programmes\D‚marrage\
                                  D‚marrage.exe [2002-1-5 53248]

                                  c:\windows\system32\config\systemprofile\Menu D‚marrer\Programmes\D‚marrage\
                                  D‚marrage.exe [2002-1-5 53248]

                                  c:\documents and settings\IMAD\Menu D‚marrer\Programmes\D‚marrage\
                                  D‚marrage.exe [2002-1-5 53248]
                                  Outil de notification Live Search.lnk - c:\documents and settings\IMAD\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe [2009-5-21 143360]

                                  c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
                                  D‚marrage.exe [2002-1-5 53248]

                                  [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
                                  "NoConfigPage"= 0 (0x0)
                                  "NoDevMgrPage"= 0 (0x0)
                                  "NoFileSysPage"= 0 (0x0)
                                  "NoVirtMemPage"= 0 (0x0)

                                  [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\system]
                                  "NoConfigPage"= 0 (0x0)
                                  "NoDevMgrPage"= 0 (0x0)
                                  "NoFileSysPage"= 0 (0x0)
                                  "NoVirtMemPage"= 0 (0x0)

                                  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
                                  "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
                                  "%windir%\\system32\\sessmgr.exe"=
                                  "c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
                                  "c:\\Program Files\\MSN Messenger\\livecall.exe"=
                                  "c:\\Program Files\\Encyclopaedia Universalis\\Encyclopaedia Universalis\\starter.exe"=
                                  "c:\\Program Files\\BearShare Applications\\BearShare\\BearShare.exe"=
                                  "c:\\Program Files\\Skype\\Phone\\Skype.exe"=

                                  S3 ALLOW-IO;ALLOW-IO;\??\f:\allow-io.sys --> f:\ALLOW-IO.sys [?]

                                  --- Autres Services/Pilotes en mémoire ---

                                  *Deregistered* - mchInjDrv
                                  .
                                  - - - - ORPHELINS SUPPRIMES - - - -

                                  HKCU-Run-DriverInstall - f:\drivers\QInstall.exe
                                  HKCU-Run-Search Protection - c:\program files\Yahoo!\Search Protection\SearchProtection.exe
                                  HKLM-Run-issat - c:\windows\system32\issat.exe
                                  HKLM-Run-SystemInit - (no file)
                                  HKLM-Run-Karen - (no file)
                                  HKLM-Run-raVe - (no file)
                                  HKLM-Run-Win32BaseServiceMOD - (no file)
                                  HKLM-Run-startIE - (no file)
                                  SafeBoot-procexp90.Sys

                                  .
                                  ------- Examen supplémentaire -------
                                  .
                                  uStart Page = hxxp://www.google.dz/
                                  IE: &Search
                                  IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm
                                  IE: Download FLV video content with IDM - c:\program files\Internet Download Manager\IEGetVL.htm
                                  IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm
                                  IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
                                  TCP: {E25942F9-9B4E-4DA1-9A1F-AC7EAAAECFFB} = 192.168.0.1
                                  DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
                                  .
                                  .
                                  ------- Associations de fichier -------
                                  .
                                  txtfile=NOTEPAD %1
                                  vbefile\shell\edit\command=%SystemRoot%\System32\Notepad.exe %1
                                  vbsfile\shell\edit\command=c:\windows\Notepad.exe %1
                                  .

                                  **************************************************************************

                                  catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                                  Rootkit scan 2008-02-20 13:45
                                  Windows 5.1.2600 Service Pack 3 NTFS

                                  Recherche de processus cachés ...

                                  Recherche d'éléments en démarrage automatique cachés ...

                                  Recherche de fichiers cachés ...

                                  Scan terminé avec succès
                                  Fichiers cachés: 0

                                  **************************************************************************

                                  [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\mchInjDrv]
                                  "ImagePath"="\??\c:\docume~1\IMAD\LOCALS~1\Temp\mc2B.tmp"
                                  .
                                  --------------------- CLES DE REGISTRE BLOQUEES ---------------------

                                  [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
                                  @Denied: (Full) (Everyone)
                                  "scansk"=hex(0):45,28,94,3d,76,84,58,72,24,0a,08,89,91,1a,42,5b,a9,b6,2c,16,16,
                                  4f,7f,ce,a7,65,5c,99,58,e2,05,33,d4,e8,29,f1,ae,9e,7a,4f,00,00,00,00,00,00,\

                                  [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a87fede7-a80c-4eac-ac2e-1fb82af60de6}]
                                  @Denied: (Full) (Everyone)
                                  "Model"=dword:0000008b
                                  "Therad"=dword:00000016
                                  .
                                  --------------------- DLLs chargées dans les processus actifs ---------------------

                                  - - - - - - - > 'explorer.exe'(2936)
                                  c:\program files\SuperCopier2\SC2Hook.dll
                                  c:\windows\system32\wpdshserviceobj.dll
                                  c:\windows\system32\portabledevicetypes.dll
                                  c:\windows\system32\portabledeviceapi.dll
                                  c:\windows\system32\eappprxy.dll
                                  .
                                  ------------------------ Autres processus actifs ------------------------
                                  .
                                  c:\program files\Avira\AntiVir PersonalEdition Classic\sched.exe
                                  c:\program files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                                  c:\windows\system32\rundll32.exe
                                  c:\program files\Java\jre6\bin\jqs.exe
                                  c:\windows\system32\nvsvc32.exe
                                  c:\documents and settings\IMAD\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
                                  c:\windows\system32\UAService7.exe
                                  c:\progra~1\Bandoo\Bandoo.exe
                                  c:\windows\system32\wbem\wmiapsrv.exe
                                  .
                                  *************************************************************************
                                  • 1
                                  • 2