fremenbleu
-
Compteur de contenus
18 -
Inscription
-
Dernière visite
Tout ce qui a été posté par fremenbleu
-
Désolé de vous importuner toujours avec mes petits soucis... J'ai fait une détection via PC Wizard 2009 et voilà le rapport correspondant à la catégorie "Bus USB". Est-ce que quelqu'un saurait me dire si on peut en tirer des informations quant à la nature de mon problème ?
-
Si cette simple manipulation dont je parle dans mon premier post avait résolu le problème je ne serais pas venu demander votre aide. Mais je vous remercie de votre attention. Lorsque j'ai essayé d'installer lesdit pilotes un message s'est affiché m'expliquant qu'il n'était pas nécessaire les installer à partir du moment ou l'on est passé au Service Pack 1.
-
Bonjour, Je ne savais pas trop s'il valait mieux classer ce sujet dans Software ou Hardware, dans le doute je me lance. Mon problème : Depuis un formatage et une installation de Windows XP mes ports usb ne reconnaissent plus les périphériques nécessitant l'usb2.0 (mais fonctionnent normalement pour le reste). Mon XP est pourtant au niveau du Service Pack 3 (et tous les drivers à jours) et même en tentant - à tout hasard - d'utiliser les pilotes fournis sur le site constructeur ceux-ci refusent de s'installer car n'étant pas nécessaires avec ma version de Windows. Dans le gestionnaire de matériel USBdevice et USB2.0 sont affichés avec un gros point d'interrogation jaune et un petit point d'exclamation de la même couleur. (j'utilise un pc portable à base d'une carte mère Asus Z96S) Des recherches sur le Net ne m'ayant pas aidé je viens quémander des idées, je suis à disposition pour des informations supplémentaires sur ma configuration mais ne sachant pas lesquelles peuvent êtres pertinentes dans ce cas précis... Merci par avance de votre attention.
-
Ordinateur infecté
fremenbleu a répondu à un(e) sujet de fremenbleu dans Analyses et éradication malwares
En fait je voulais parler d'une réinstallation via le CD de Windows XP mais sans formatage... (pas via le panneau de configuration ----> restaurer, etc) Mais bon je chipote le résultat étant dans ce cas précis sans doute le même... Ok c'est donc ce que je vais me résigner à faire... Merci d'avance ! (+) Je veillerai dorénavant à ce que mes parents aient régulièrement un système mis à jour... Ca m'évitera bien des prises de tête. -
Ordinateur infecté
fremenbleu a répondu à un(e) sujet de fremenbleu dans Analyses et éradication malwares
Merci beaucoup ! Je pense m'orienter vers la solution du formatage complet (mais est-ce bien certain que ça résolve le problême ?) etant donné que : - le problême du compte à rebours est justement apparu après une restauration partielle ! (sans aucune connection au net entre temps) Avant cette restauration le seul symptome était le redémarrage "instantané" sans aucun message d'erreur... Après c'est clair qu'il faut revoir la sécurisation de l'ordinateur puisque c'est clairement là ou le bat blesse. Mes parents avaient l'antivirus de leur FAI (Neuf Telecom) avant que quelqu'un ne leur conseille AVG... Seulement apparement (je n'étais pas là donc je suppose...) AVG était mal installé donc leur seule protection devait être un pare feu Windows très loin d'être à jour... (au moment des premiers plantages j'ai d'ailleurs pensé que ça pouvait simplement venir d'un conflit entre AVG et l'antivirus du FAI mal désinstallé ) -
Bonjour, L'ordi de mes parents à d'abord commencé à redémarrer sans arrêt (à chaque fois que Windows XP Edition familliale arrivait à l'écran "bienvenue" il redémarrait). (je précise que l'ordinateur doit avoir environ 3 ans, mes parents se sont récement mis à l'Internet et que par conséquent les correctif n'ont pas été installés...) En desespoir de cause on a tenté une "restauration partielle" Mais après restauration ce n'est pas mieux puisque tout laisse indiquer que l'ordi est infecté : Message du type : "Autorite NT/System arret critique du systeme" avec le compte à rebour d'une minute avant redémarrage Avant de poster ici je me suis bien sur penché sur les solutions proposées un peu partout (empêcher le redémarrage grâce à l'horloge ou à la fonction shutdown,...) mais sans succès puisque : - Mon menu démarrer est inaccesible (seul le haut de la barre apparait à l'écran et est figée, que ce soit en mode normal ou sans échec ! - J'ai tenté de désactiver les processus "suspects" mais sans arriver à empêcher le redémarrage intempestif Suis je bien infecté par un virus ? Un formatage complet peut-il me sauver ? Merci d'avance (j'aimerai bien présenter un rapport hijackthis, etc mais je ne vois pas comment le réaliser à l'heure actuelle...)
-
Problème pour installer Panda 2006
fremenbleu a répondu à un(e) sujet de fremenbleu dans Analyses et éradication malwares
Malheureusement ça ne marche pas... J'ai pourtant bien suivi toutes les procédures. Le programme d'installation m'affiche toujours le même problème... Je vais essayer de m'adresser à l'éditeur de Panda directement. -
Problème pour installer Panda 2006
fremenbleu a répondu à un(e) sujet de fremenbleu dans Analyses et éradication malwares
REGEDIT4 ; Registry Search by Bobbi Flekman ; Version: 1.0.2.1 ; Results at 07/12/2005 22:51:36 for strings: ; 'panda' ; Strings excluded from search: ; (None) ; Search in: ; Registry Keys Registry Values Registry Data ; HKEY_LOCAL_MACHINE HKEY_USERS [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ActiveScan] @="Panda ActiveScan" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ActiveScan.1] @="Panda ActiveScan" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{96567F65-E04C-4611-AF29-7CDEA6FA6A84}] @="Panda ActiveScan" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DA2BD42B-07E8-413A-9FEA-BB3B2E825340}\1.0] @="Panda PZ 1.0 Type Library" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DE61612C-D504-4284-A17E-2A695253B43C}\1.0] @="Panda ActiveScan 1.0 Type Library" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{9A9307A0-7DA4-4DAF-B042-5009F29E09E1}\DownloadInformation] "CODEBASE"="http://acs.pandasoftware.com/activescan/as5free/asinst.cab" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Panda ActiveScan] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Panda ActiveScan] "UninstallString"="C:\\WINDOWS\\system32\\ASUninst.exe Panda ActiveScan" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Panda ActiveScan] "Publisher"="Panda Software S.L." [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Panda ActiveScan] "DisplayName"="Panda ActiveScan" [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software] [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\ActiveScan] [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\PavShld] [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\PavShld] "InstallDir"="C:\\Program Files\\Fichiers communs\\Panda Software\\PavShld" [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\PavShld\Products] [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\PavShld\Products] "Panda Titanium Antivirus 2006"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_PAVPROC\0000] "DeviceDesc"="Panda Process Protection Driver" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_PAVPRSRV\0000] "DeviceDesc"="Panda Process Protection Service" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SHLDDRV\0000] "DeviceDesc"="Panda File Shield Driver" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PavProc] "DisplayName"="Panda Process Protection Driver" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PavPrSrv] "DisplayName"="Panda Process Protection Service" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PavPrSrv\Parameters\ProcList] "Panda Titanium Antivirus 2006"="apvxdwin.exe;avlite.exe;avltmain.exe;avtask.exe;liteupg.exe;lupgconf.exe;webproxy.exe;pavcl.com;qremove.com;safedisk.exe;upgtest.exe;PavFnSvr.exe;Prevsrv.exe;PsImSvc.exe;Wizsos.exe;PAVSCRIP.EXE;PPFW.EXE;FwAct.exe;PNMSRV.exe;pavprsrv.exe;avengine.exe;pavsrv40.exe;pavsrv50.exe;pavsrv51.exe;avciman.exe;TPSrv.exe;" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ShldDrv] "DisplayName"="Panda File Shield Driver" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_PAVPROC\0000] "DeviceDesc"="Panda Process Protection Driver" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_PAVPRSRV\0000] "DeviceDesc"="Panda Process Protection Service" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SHLDDRV\0000] "DeviceDesc"="Panda File Shield Driver" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\PavProc] "DisplayName"="Panda Process Protection Driver" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\PavPrSrv] "DisplayName"="Panda Process Protection Service" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\PavPrSrv\Parameters\ProcList] "Panda Titanium Antivirus 2006"="apvxdwin.exe;avlite.exe;avltmain.exe;avtask.exe;liteupg.exe;lupgconf.exe;webproxy.exe;pavcl.com;qremove.com;safedisk.exe;upgtest.exe;PavFnSvr.exe;Prevsrv.exe;PsImSvc.exe;Wizsos.exe;PAVSCRIP.EXE;PPFW.EXE;FwAct.exe;PNMSRV.exe;pavprsrv.exe;avengine.exe;pavsrv40.exe;pavsrv50.exe;pavsrv51.exe;avciman.exe;TPSrv.exe;" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\ShldDrv] "DisplayName"="Panda File Shield Driver" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PAVPROC\0000] "DeviceDesc"="Panda Process Protection Driver" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PAVPRSRV\0000] "DeviceDesc"="Panda Process Protection Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SHLDDRV\0000] "DeviceDesc"="Panda File Shield Driver" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PavProc] "DisplayName"="Panda Process Protection Driver" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PavPrSrv] "DisplayName"="Panda Process Protection Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PavPrSrv\Parameters\ProcList] "Panda Titanium Antivirus 2006"="apvxdwin.exe;avlite.exe;avltmain.exe;avtask.exe;liteupg.exe;lupgconf.exe;webproxy.exe;pavcl.com;qremove.com;safedisk.exe;upgtest.exe;PavFnSvr.exe;Prevsrv.exe;PsImSvc.exe;Wizsos.exe;PAVSCRIP.EXE;PPFW.EXE;FwAct.exe;PNMSRV.exe;pavprsrv.exe;avengine.exe;pavsrv40.exe;pavsrv50.exe;pavsrv51.exe;avciman.exe;TPSrv.exe;" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ShldDrv] "DisplayName"="Panda File Shield Driver" [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\RAS Phonebook] "ExpandAutoDialQuery"=dword:00000000 ; End Of The Log... ------------------------------------------------------------ Bon voilà pour Panda (qui pourtant n'est toujours pas installé...), je précise que je n'ai pas trouvé de dossier Panda dans Programme Files ou Fichier communs... -
Problème pour installer Panda 2006
fremenbleu a répondu à un(e) sujet de fremenbleu dans Analyses et éradication malwares
Ok, ça s'explique par le démarrage de l'installation de Panda que je n'ai jamais pu terminer... (par contre comment transformer le fichier en .reg ?) Bon ben c'est pas gagné... Ok merci pour les explications, vais voir sur leur site -
Problème pour installer Panda 2006
fremenbleu a répondu à un(e) sujet de fremenbleu dans Analyses et éradication malwares
Il semblerait que pour ENWI je retrouve exactement (?) le même résultat que posté précédemment... (les autres n'ont rien donné) J'essaye encore antivirus... REGEDIT4 ; Registry Search by Bobbi Flekman ; Version: 1.0.2.1 ; Results at 07/12/2005 21:28:21 for strings: ; 'antivirus' ; Strings excluded from search: ; (None) ; Search in: ; Registry Keys Registry Values Registry Data ; HKEY_LOCAL_MACHINE HKEY_USERS [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "AntiVirusDisableNotify"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "AntiVirusOverride"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\PavShld\Products] "Panda Titanium Antivirus 2006"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PavPrSrv\Parameters\ProcList] "Panda Titanium Antivirus 2006"="apvxdwin.exe;avlite.exe;avltmain.exe;avtask.exe;liteupg.exe;lupgconf.exe;webproxy.exe;pavcl.com;qremove.com;safedisk.exe;upgtest.exe;PavFnSvr.exe;Prevsrv.exe;PsImSvc.exe;Wizsos.exe;PAVSCRIP.EXE;PPFW.EXE;FwAct.exe;PNMSRV.exe;pavprsrv.exe;avengine.exe;pavsrv40.exe;pavsrv50.exe;pavsrv51.exe;avciman.exe;TPSrv.exe;" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\PavPrSrv\Parameters\ProcList] "Panda Titanium Antivirus 2006"="apvxdwin.exe;avlite.exe;avltmain.exe;avtask.exe;liteupg.exe;lupgconf.exe;webproxy.exe;pavcl.com;qremove.com;safedisk.exe;upgtest.exe;PavFnSvr.exe;Prevsrv.exe;PsImSvc.exe;Wizsos.exe;PAVSCRIP.EXE;PPFW.EXE;FwAct.exe;PNMSRV.exe;pavprsrv.exe;avengine.exe;pavsrv40.exe;pavsrv50.exe;pavsrv51.exe;avciman.exe;TPSrv.exe;" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PavPrSrv\Parameters\ProcList] "Panda Titanium Antivirus 2006"="apvxdwin.exe;avlite.exe;avltmain.exe;avtask.exe;liteupg.exe;lupgconf.exe;webproxy.exe;pavcl.com;qremove.com;safedisk.exe;upgtest.exe;PavFnSvr.exe;Prevsrv.exe;PsImSvc.exe;Wizsos.exe;PAVSCRIP.EXE;PPFW.EXE;FwAct.exe;PNMSRV.exe;pavprsrv.exe;avengine.exe;pavsrv40.exe;pavsrv50.exe;pavsrv51.exe;avciman.exe;TPSrv.exe;" ; End Of The Log... -
Problème pour installer Panda 2006
fremenbleu a répondu à un(e) sujet de fremenbleu dans Analyses et éradication malwares
Nettoyé normalement. Je vais réessayer avec regsearch... Voilà ce que j'obtient avec NWI ! ----------------------------------------------------------------------- REGEDIT4 ; Registry Search by Bobbi Flekman ; Version: 1.0.2.1 ; Results at 07/12/2005 21:11:38 for strings: ; 'nwi' ; Strings excluded from search: ; (None) ; Search in: ; Registry Keys Registry Values Registry Data ; HKEY_LOCAL_MACHINE HKEY_USERS [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\OpenWithList\Excel.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\OpenWithList\IExplore.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\OpenWithList\MSPaint.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\OpenWithList\Notepad.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\OpenWithList\Winword.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\OpenWithList\WordPad.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.3gp\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aac\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.ac3\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aif\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aif\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aif\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aifc\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aifc\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aifc\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aiff\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aiff\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aiff\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.albw\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.ape\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asf\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asf\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asf\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asx\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asx\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asx\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.au\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.au\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.au\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.avi\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.avi\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.avi\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.avs\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.b4s\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.bmp\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.bmp\OpenWithList\MSPaint.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.bmp\OpenWithProgids] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.cda\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.cda\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.cda\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.dat\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.dib\OpenWithProgids] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.divx\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.doc\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.doc\OpenWithList\WordPad.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.dts\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.dvr-ms\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.dvr-ms\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.dvr-ms\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.emf\OpenWithProgids] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.flac\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.gif\OpenWithProgids] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.htm\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.htm\OpenWithList\notepad.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.htm\OpenWithList\WINWORD.EXE] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.ifo\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.jfif\OpenWithProgids] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.jpe\OpenWithProgids] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.jpeg\OpenWithProgids] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.jpg\OpenWithProgids] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m1v\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m1v\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m1v\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m2v\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m3u\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m3u\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m3u\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mid\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mid\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mid\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.midi\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.midi\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.midi\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mka\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mkv\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mov\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2v\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2v\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2v\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp3\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp3\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp3\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp4\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpa\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpa\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpa\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpc\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpe\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpe\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpe\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpeg\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpeg\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpeg\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpg\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpg\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpg\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpv2\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpv2\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpv2\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.ofr\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.ogg\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.ogm\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.part\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.pdf\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.pdf\OpenWithList\AcroRd32.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.pls\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.png\OpenWithProgids] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.ra \OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.ram\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.rm \OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.rmi\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.rmi\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.rmi\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.rmvb\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.rtf\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.rtf\OpenWithList\WordPad.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.rv \OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.snd\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.snd\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.snd\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.swf\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.swf\OpenWithList\IExplore.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.swf\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.tif\OpenWithProgids] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.tiff\OpenWithProgids] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.ts \OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.vob\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.vp6\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wav\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wav\OpenWithList\sndrec32.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wav\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wav\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wax\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wax\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wax\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wm\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wm\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wm\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wm \OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wma\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wma\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wma\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmd\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmd\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmd\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmf\OpenWithProgids] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wms\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wms\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wms\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmv\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmv\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmv\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmx\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmx\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmx\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmz\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmz\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmz\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wpl\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wpl\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wpl\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wri\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wri\OpenWithList\WordPad.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wvx\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wvx\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wvx\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.xvid\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.zip\OpenWithProgids] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.ZPL\OpenWithProgIds] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\accwiz.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\ARTGALRY.EXE] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\awdvstub.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\cag.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\CChat.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\cdfview.dll] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\clipbrd.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\CMMGR32.EXE] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\cryptext.dll] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\datainst.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\depends.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\drwatson.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\dsquery.dll] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\explorer.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\faxcover.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\finder.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\fontview.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\fpidcwiz.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\graflink.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\grpconv.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\helpctr.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\hh.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\HYPERTRM.EXE] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\inetcpl.cpl] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\ISIGNUP.EXE] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\kodakprv.EXE] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\MMC.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\mnyimprt.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\mplayer.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\msconf.dll] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\msdxm.ocx] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\mshta.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\msiexec.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\msimn.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\MSInfo32.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\msrating.dll] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\netshell.dll] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\ntbackup.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\oledb32.dll] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\ORGCHART.EXE] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\OSA.EXE] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\Outlook.EXE] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\perfmon.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\Piolch.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\rasphone.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\regedit.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\rnaui.dll] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\shdocvw.dll] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\shell32.dll] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\shscrap.dll] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\snapview.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\themes.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\Ttxmpc97.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\url.dll] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\wab.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\WB32.EXE] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\winhlp32.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\wltmime.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\wmplayer.exe] "OpenWithExclude"="QT:MOV" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\wpnpinst.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\WScript.exe] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\zipfldr.dll] "NoOpenWith"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{334857cc-f934-11d2-ba96-00c04fb6d0d1}\ProgID] @="DNWithString" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{67331D85-BE17-42f6-8D3F-47B8E8B26637}\ProgID] @="MigrationWizard.OOBE.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{67331D85-BE17-42f6-8D3F-47B8E8B26637}\VersionIndependentProgID] @="MigrationWizard.OOBE" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD90EF-1C20-11d1-8801-00C04FC29D46}\ProgID] @="DirectAnimation.DirectAnimationWindowedIntegratedMediaControl.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AD90EF-1C20-11d1-8801-00C04FC29D46}\VersionIndependentProgID] @="DirectAnimation.DirectAnimationWindowedIntegratedMediaControl" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7e99c0a3-f935-11d2-ba96-00c04fb6d0d1}\ProgID] @="DNWithBinary" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\DirectAnimation.DirectAnimationWindowedIntegratedMediaControl] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\DirectAnimation.DirectAnimationWindowedIntegratedMediaControl\CurVer] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\DirectAnimation.DirectAnimationWindowedIntegratedMediaControl\CurVer] @="DirectAnimation.DirectAnimationWindowedIntegratedMediaControl.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\DirectAnimation.DirectAnimationWindowedIntegratedMediaControl.1] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\DirectAnimation.DirectAnimationWindowedIntegratedMediaControl.1\CLSID] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\DNWithBinary] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\DNWithBinary\Clsid] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\DNWithString] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\DNWithString\Clsid] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Components\71CE92CC2CB71D119A12000A9CE1A22A] "1036\\nwindcs9.hlp"=hex(7):35,36,2c,21,21,67,78,73,66,28,4e,67,5d,71,46,60,48,\ [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Components\71CE92CC2CB71D119A12000A9CE1A22A] "1036\\nwind9.hlp"=hex(7):35,36,2c,21,21,67,78,73,66,28,4e,67,5d,71,46,60,48,\ [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Components\B7BE92CC2CB71D119A12000A9CE1A22A] "nwind.mdb"=hex(7):35,36,2c,21,21,67,78,73,66,28,4e,67,5d,71,46,60,48,7b,4c,73,\ [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Components\B7BE92CC2CB71D119A12000A9CE1A22A] "nwindcs.adp"=hex(7):35,36,2c,21,21,67,78,73,66,28,4e,67,5d,71,46,60,48,7b,4c,\ [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1E512A8C-7375-4F79-9260-11B1F476F3A8}] @="ISetupMainWindow4" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{26E576DC-0B41-4EFB-9E0A-E8AE42CFA47D}] @="ISetupMainWindow4" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3B5653FD-8F68-47D4-BB7D-239AAC9897C6}] @="ISetupMainWindow2" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3D8B6332-D8B1-11D2-80C5-00104B1F6CEA}] @="ISetupMainWindow" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4E26CAD5-1B59-4D1D-9063-2D91314C9E45}] @="ISetupMainWindow4" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5F30DF5D-CBFB-4D28-8B54-7CFFE0B67C6C}] @="ISetupMainWindow" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6E7D9436-492E-4290-A935-7D1A6B0D8BEA}] @="ISetupMainWindow3" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{777C8A0C-5C36-11D5-ABAF-00B0D02332EB}] @="ISetupMainWindow" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{777C8A0D-5C36-11D5-ABAF-00B0D02332EB}] @="ISetupMainWindow2" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{777C8A0E-5C36-11D5-ABAF-00B0D02332EB}] @="ISetupMainWindow3" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{777C8A0F-5C36-11D5-ABAF-00B0D02332EB}] @="ISetupMainWindow4" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{787D0980-F63F-462C-86BC-FC23847C70F4}] @="ISetupMainWindow3" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7D5B2A59-6F06-422B-93D2-F52C944A44DD}] @="ISetupMainWindow3" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{94F4A332-A2AE-11D3-8378-00C04F59FBE9}] @="ISetupMainWindow2" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9E561C6B-425D-4E3D-95CA-A2D289D7C3FB}] @="ISetupMainWindow4" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DB3E9637-17D2-4E12-8F5C-A9D94E8703C2}] @="ISetupMainWindow" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E5A1C1F1-4493-41D6-BB44-1C050E702381}] @="ISetupMainWindow2" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MigrationWizard.OOBE] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MigrationWizard.OOBE\CLSID] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MigrationWizard.OOBE\CurVer] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MigrationWizard.OOBE\CurVer] @="MigrationWizard.OOBE.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MigrationWizard.OOBE.1] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MigrationWizard.OOBE.1\CLSID] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Record\{B30FD15E-CED6-3977-8151-0D50E79CD703}\1.0.5000.0] "Class"="System.Security.Permissions.UIPermissionWindow" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\RealNetworks\RealPlayer\6.0\Preferences\PluginHandlerData\PluginInfo2] @="~Shttp://ns.real.com/gemini.v1:viewportwindowactor~PluginFilename~Srpgu3260.dll~ComponentCLSID~XVYQkLOcBFEiTghoKOG2JMQ==}{PluginFilename~Srpgu3260.dll~ComponentCLSID~XK7jUcv+oFEKADaWSakhqAA==}{ComponentName~Shttp://ns.real.com/gemini.v1:rpfindactor~PluginFilename~Srpgu3260.dll~ComponentCLSID~XK8ioeCmmkk6ONeACkFWvww==}{PluginFilename~Srpgu3260.dll~ComponentCLSID~X3gQ5xsf90U+W4cCJ+TgOwQ==}{ComponentName~Shttp://ns.real.com/gemini.v1:rpcontrolbarsactor~PluginFilename~Srpgu3260.dll~ComponentCLSID~X5il6Uschek2mEH5XYQz7Kg==}{ComponentName~Shttp://ns.real.com/gemini.v1:rpseektopositionactor~PluginFilename~Srpgu3260.dll~ComponentCLSID~XL9X5X3SJVUW1fIaiMWqEkw==}{ComponentName~Shttp://ns.real.com/gemini.v1:rppreviewplaybackactor~PluginFilename~Srpgu3260.dll~ComponentCLSID~XzxwQ/+T5MkGC1Ms6tPvc0g==}{PluginFilename~Srpgu3260.dll~ComponentCLSID~Xsh/iP2RR9kKeT5PvpzY1Aw==}{PluginFilename~Srpho3260.dll~ComponentCLSID~XSerXClIa5UGgfJWMjfN48A==}{ComponentName~Shttp://ns.real.com/gemini.v1:rpskinswitchactor~PluginFilename~Srpme3260.dll~ComponentCLSID~XJtkgJU9ya0uxPG4VURcpzA==}{PluginFilename~Srpme3260.dll~ComponentCLSID~XW0BEsXnccU+EPVTdSrIu/g==}{PluginFilename~Srpme3260.dll~ComponentCLSID~X7EeHKHE7u0WI+Xqu2l1c2Q==}{PluginFilename~Srpme3260.dll~ComponentCLSID~XQAMgPJRQakGWwe33tXz/ug==}{ComponentName~Shttp://ns.real.com/gemini.v1:RPVideoControlsActor~PluginFilename~Srpme3260.dll~ComponentCLSID~XyehRS0klDUCz5Utwf6zI+A==}{ComponentName~Shttp://ns.real.com/gemini.v1:rpcustomstatuscontrol~PluginFilename~Srpmn3260.dll~ComponentCLSID~XjMxyV2os/0iAyRis9hf/RQ==}{ComponentName~Shttp://ns.real.com/gemini.v1:rpzoomcontrolsactor~PluginFilename~Srpmn3260.dll~ComponentCLSID~XYmSugngKy0a+TumKQiurvQ==}{PluginFilename~Srpmn3260.dll~ComponentCLSID~XxG2tXdTZ6Em+aKDXssS7zw==}{ComponentName~Shttp://ns.real.com/gemini.v1:viewtrackinfoactor~PluginFilename~Srpmn3260.dll~ComponentCLSID~XUHa5RdOoi0+HlcH2ilSXUQ==}{ComponentName~Shttp://ns.real.com/gemini.v1:rpstatuscontrolsactor~PluginFilename~Srpmn3260.dll~ComponentCLSID~X47ho0ajr0hG+ggDAT6MwTQ==}{ComponentName~Shttp://ns.real.com/gemini.v1:rppreswinactor~PluginFilename~Srpmn3260.dll~ComponentCLSID~X1YksW3RcwUOt2DaHji+K+Q==}{ComponentName~Shttp://ns.real.com/gemini.v1:visualizationcontrolactor~PluginFilename~Srpmn3260.dll~ComponentCLSID~XJpZAm/6YuE6BAfaLHDlzUQ==}{ComponentName~Shttp://ns.real.com/gemini.v1:rpvideowindow~PluginFilename~Srpmn3260.dll~ComponentCLSID~XupjUR5UPr0O0CB30jQMo5g==}{ComponentName~Shttp://ns.real.com/gemini.v1:rpvideoresizerwindow~PluginFilename~Srpmn3260.dll~ComponentCLSID~XHL7W4qblBkiPePKPSDLXwg==}{ComponentName~Shttp://ns.real.com/gemini.v1:rpcontentwindowlayout~PluginFilename~Srpmn3260.dll~ComponentCLSID~XUNUn2AwMzkO3b2Gel1TQtg==}{ComponentName~Shttp://ns.real.com/gemini.v1:RPPlayControlsActor~PluginFilename~Srpmn3260.dll~ComponentCLSID~XNBuKyY7eCkO3ZYUW1tsBWA==}{ComponentName~Shttp://ns.real.com/gemini.v1:RPMessageActor~PluginFilename~Srpmn3260.dll~ComponentCLSID~XcLqkH1AQvEiyzeR+VwgVCg==}{ComponentName~Shttp://ns.real.com/gemini.v1:rpvisuicomponent~PluginFilename~Srpmn3260.dll~ComponentCLSID~Xuo5pR5mcGkOURpLZzTHtYw==}{PluginFilename~Srpmn3260.dll~ComponentCLSID~XMLQxPP8/4U2E5MvxvwtqLQ==}{ComponentName~Shttp://ns.real.com/gemini.v1:rppositioncontrolnavigator~PluginFilename~Srpmn3260.dll~ComponentCLSID~Xh8538rSAPkKgrfznUDw/Rw==}{ComponentName~Shttp://ns.real.com/gemini.v1:superbufferthumblayouthandler~PluginFilename~Srpmn3260.dll~ComponentCLSID~XBgmTXYhFEES9w4mQQyJeyw==}{ComponentName~Shttp://ns.real.com/gemini.v1:trackanimator~PluginFilename~Srpmn3260.dll~ComponentCLSID~XuIythkSgwkS6bBTKtr9hPQ==}{ComponentName~Shttp://ns.real.com/gemini.v1:metadatamarkeractor~PluginFilename~Srpmn3260.dll~ComponentCLSID~Xb3szZzqsak2hciYjFpoG1g==}{ComponentName~Shttp://ns.real.com/gemini.v1:rploginstatechangedactor~PluginFilename~Srpmn3260.dll~ComponentCLSID~XwVv76usDtkqGlLl2p+14tA==}{PluginFilename~Srpms3260.dll~ComponentCLSID~XGshHOl6rs0yOPnVG7oPpBA==}{PluginFilename~Srpms3260.dll~ComponentCLSID~XILF0DZUxzU+l2cbNjFlzbg==}{ComponentName~Shttp://ns.real.com/gemini.v1:RJBPlaylistActor~PluginFilename~Srppl3260.dll~ComponentCLSID~XO19MMixh10ObpXgEei+IqQ==}{ComponentName~Shttp://ns.real.com/gemini.v1:nativeplaylist~PluginFilename~Srppl3260.dll~ComponentCLSID~Xo3jnH+NZtEmSvDqQzvUmyQ==}{PluginFilename~Srpqt3260.dll~rpplayersupportedextensions~Smov|qt|m4p~rpplayersupportedmimetypes~Svideo/quicktime~rpplayersupportedprotocols~Sfile~rpplayersupportedtracktypes~S~ComponentCLSID~XtRwGcXOwFk6w6gu0DVQIlg==}{PluginFilename~Srpqt3260.dll~ComponentCLSID~XO+gp1VyqI06uG3mNYan8qg==}{IRCAPreferencable~SPrefPage~PluginFilename~Srput3260.dll~ComponentCLSID~X5vxVOzgNcUqpoyl7Q7e0sw==}{IRCAPreferencable~SPrefPage~PluginFilename~Srput3260.dll~ComponentCLSID~XLhowymlOkUO/leM+ZNYDBg==}{IRCAPreferencable~SPrefPage~PluginFilename~Srput3260.dll~ComponentCLSID~XCDDv6eb43EevaeRqMzs4cg==}{IRCAPreferencable~SPrefPage~PluginFilename~Srput3260.dll~ComponentCLSID~X5RNh5lFrkUuwvVv3j6kayA==}{IRCAPreferencable~SPrefPage~PluginFilename~Srput3260.dll~ComponentCLSID~X1+Ptp0tU+ESxTIvEQynMcg==}{IRCAPreferencable~SPrefPage~PluginFilename~Srput3260.dll~ComponentCLSID~Xg/DDX94p2U6LKMuuDjbFRw==}{IRCAPreferencable~SPrefPage~PluginFilename~Srput3260.dll~ComponentCLSID~XwahR37unTUGktUnlFpYBqg==}{IRCAPreferencable~SPrefPage~PluginFilename~Srput3260.dll~ComponentCLSID~XJUngz8UC10i3u+p68xDosg==}{IRCAPreferencable~SPrefPage~PluginFilename~Srput3260.dll~ComponentCLSID~Xt+SFQz/Bt0ajeaWzxN28Pw==}{IRCAPreferencable~SPrefPage~PluginFilename~Srput3260.dll~ComponentCLSID~XPsT956LGwECRvLYogoMblA==}{IRCAPreferencable~SPrefPage~PluginFilename~Srput3260.dll~ComponentCLSID~XsBhB/KkYDEO1rxLKpRCsgQ==}{ComponentName~Shttp://ns.real.com/gemini.v1:RPPrefsDlgActor~PluginFilename~Srput3260.dll~ComponentCLSID~Xuf7Gi0Q4AESxtEeaQT5Pfw==}{ComponentName~Shttp://ns.real.com/gemini.v1:RPBrokenLinkDialog~PluginFilename~Srput3260.dll~ComponentCLSID~X+T2E6JierkSC+HWwZakp5A==}{ComponentName~Shttp://ns.real.com/gemini.v1:RPExpiredTrackDialog~PluginFilename~Srput3260.dll~ComponentCLSID~XccK4Ax6N1RGtvwDA8ECmGg==}{ComponentName~Shttp://ns.real.com/gemini.v1:RPExpiredLicenseDialog~PluginFilename~Srput3260.dll~ComponentCLSID~XK9Ugkb97rkybfsXDJ47MRA==}{ComponentName~Shttp://ns.real.com/gemini.v1:RPActivateOfflineDialog~PluginFilename~Srput3260.dll~ComponentCLSID~XfGb5vcYBvUmm/OwwScZufg==}{PluginFilename~Srput3260.dll~ComponentCLSID~Xv1pmZVWVxk6gxbtfEsO3cw==}{PluginFilename~Srput3260.dll~ComponentCLSID~XxluxbMl4kkyfpgkcgyX2Zw==}{PluginFilename~Srput3260.dll~ComponentCLSID~Xs8tdAIibNkyNJqUEgH9P6w==}{PluginFilename~Srput3260.dll~ComponentCLSID~XWZMlMEhe0U6hvd3KvjYchA==}{PluginFilename~Srput3260.dll~ComponentCLSID~XzTigFguAlEG2Ds3IG7VONQ==}{PluginFilename~Srput3260.dll~ComponentCLSID~X1j1AfirEbkmxjw4Y89IJoA==}{PluginFilename~Srput3260.dll~ComponentCLSID~X66z+5aHb+0mvxbIzLJAaHg==}{PluginFilename~Srput3260.dll~ComponentCLSID~XhFiqIL+6iUWZctgF/K/Keg==}{PluginFilename~Srput3260.dll~ComponentCLSID~XscQ1qEZdxUaFEGxLfCi6IA==}{ComponentName~Shttp://ns.real.com/gemini.v1:RPConnectionChangedDlg~PluginFilename~Srput3260.dll~ComponentCLSID~X2myp1NnXTUW49+ytC5pr+A==}{ComponentName~Shttp://ns.real.com/gemini.v1:RPViewingTimeExpiredDialog~PluginFilename~Srput3260.dll~ComponentCLSID~XX0P3FD62Uk+wG3gSA21LAw==}{ComponentName~Shttp://ns.real.com/gemini.v1:rpnavigablebrowser~PluginFilename~Srpwe3260.dll~ComponentCLSID~XAQO8BEbF1BG1fADQt0wtXA==}{ComponentName~Shttp://ns.real.com/gemini.v1:rpbrowseractor~PluginFilename~Srpwe3260.dll~ComponentCLSID~XOM+ZE3QLhUqyrFK6F8e3Tg==}{PluginFilename~Srpwe3260.dll~ComponentCLSID~XGGW8hodC1UCNbDGV2tJyYg==}{PluginFilename~Srpwe3260.dll~ComponentCLSID~XATFzc7sL0UOZquKNwItebQ==}{PluginFilename~Srpwe3260.dll~ComponentCLSID~Xry7oYutEkU+w7/Sg9MOziQ==}{PluginFilename~Srpwe3260.dll~ComponentCLSID~X8KCvv9eA60mL4cJ5nL5rtg==}{PluginFilename~Srpwe3260.dll~ComponentCLSID~XDoCfxTdaI0qRIv3YYdL+Pg==}{ComponentName~Shttp://ns.real.com/gemini.v1:RPShowHtmlActor~PluginFilename~Srpwe3260.dll~ComponentCLSID~Xu5+52VQM+0aGpWpRyiZriQ==}{ComponentName~Shttp://ns.real.com/gemini.v1:RPUrlMenuActor~PluginFilename~Srpwe3260.dll~ComponentCLSID~Xg8R9cJP+1UmNKStS9f02/w==}{PluginFilename~Srpwe3260.dll~ComponentCLSID~X0Qi6pmWoy0yrEt3JZ5gPug==}{PluginFilename~Srpwe3260.dll~ComponentCLSID~X4D7ttnuqUkCXx/FwBGG4yA==}{PluginFilename~Srpwe3260.dll~ComponentCLSID~XMUk8AWCpHk2ZG3jFtfjG1A==}{PluginFilename~Srpwm3260.dll~rpplayersupportedextensions~Sasf|wma|wmv|asx|wm|wax|wvx|wmx~rpplayersupportedmimetypes~Svideo/x-ms-asf|audio/x-ms-wma|audio/x-ms-wax|video/x-ms-wmv|video/x-ms-wm|video/x-ms-wmx|video/x-ms-wvx|application/x-mplayer2~rpplayersupportedprotocols~Sfile|http|mms~ComponentCLSID~X+dDoLF3uxUuiqoBLgyzS0A==}{PluginFilename~Srpwm3260.dll~ComponentCLSID~Xwmd4yQR9bkSHntMCOe50sg==}{ComponentName~Shttp://ns.real.com/gemini.v1:tmdeditactor~PluginFilename~Stmde3210.dll~ComponentCLSID~X7wzpc6PgGUWPL+qkGUWdTw==}{PluginFilename~Stmde3210.dll~ComponentCLSID~XcvLfKM+peki4cfa2G6uLpQ==}{PluginFilename~Stmde3210.dll~ComponentCLSID~Xf+jSozDPlU6YtoxZJn2ZWg==}{ComponentName~Shttp://ns.real.com/gemini.v1:nativetmdeditorlistcontrol~PluginFilename~Stmde3210.dll~ComponentCLSID~X+0t3o3xr0EW9RsNkyrFfdw==}29150" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\RealNetworks\Update\6.0\Preferences\Components\Playerfiles:6.0\Features\openwin] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\audio\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\audio\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\image\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\image\OpenWithList\MSPaint.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\image\OpenWithList\shimgvw.dll] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\text\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\text\OpenWithList\Notepad.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\text\OpenWithList\WordPad.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\video\OpenWithList] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\video\OpenWithList\wmplayer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\video\OpenWithList\wmplayer.exe] "OpenWithExclude"="QT:MOV" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URL Compatibility\~/CONNWIZ.HTM] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\9.0\Access\Wizards\Control Wizards\CommandButton\MSCommandButtonWizard] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileAssociation] "AddRemoveApps"="SETUP.EXE;INSTALL.EXE;ISUNINST.EXE;UNWISE.EXE;UNWISE32.EXE;ST5UNST.EXE;RUNDLL32.EXE;MSOOBE.EXE;LNKSTUB.EXE" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1C3447A0A9E62D11AA2A000A9CF0750B] "C04010001E872D116BF00006799C897E"="C:\\Program Files\\Fichiers communs\\Microsoft Shared\\Web Server Extensions\\40\\bin\\FP4ANWI.DLL" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1C3447A0A9E62D11AA2A000A9CF0750B] "00000000000000000000000000000000"="C:\\Program Files\\Fichiers communs\\Microsoft Shared\\Web Server Extensions\\40\\bin\\FP4ANWI.DLL" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1C3447A0A9E62D11AA2A000A9CF0750B] "C04040001E872D116BF00006799C897E"="C:\\Program Files\\Fichiers communs\\Microsoft Shared\\Web Server Extensions\\40\\bin\\FP4ANWI.DLL" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] "shutdownwithoutlogon"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "nwiz"="nwiz.exe /install" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AOL Toolbar] "UninstallString"="\"C:\\Program Files\\AOL Toolbar\\UNWISE.EXE\" /u \"C:\\Program Files\\AOL Toolbar\\INSTALL.LOG\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Shockwave] "UninstallString"="C:\\WINDOWS\\system32\\Macromed\\SHOCKW~1\\UNWISE.EXE C:\\WINDOWS\\system32\\Macromed\\SHOCKW~1\\INSTALL.LOG" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wolfenstein - Enemy Territory] "UninstallString"="C:\\PROGRA~1\\WOLFEN~1\\Uninstall\\Unwise.exe /u C:\\PROGRA~1\\WOLFEN~1\\Uninstall\\Install.log" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\system.ini] "NonWindowsApp"="SYS:Microsoft\\Windows NT\\CurrentVersion\\WOW\\NonWindowsApp" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SeCEdit\Reg Values\MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/ShutdownWithoutLogon] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\GMT Standard Time] "Display"="(GMT) Heure de Greenwich : Dublin, Édimbourg, Lisbonne, Londres" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Greenwich Standard Time] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Greenwich Standard Time] "Dlt"="Greenwich (heure d'été)" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Greenwich Standard Time] "Std"="Greenwich" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "ShutdownWithoutLogon"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WOW\NonWindowsApp] [HKEY_LOCAL_MACHINE\SOFTWARE\Soeperman Enterprises Ltd.\HijackThis] "WinWidth"="9000" [HKEY_USERS\.DEFAULT\Control Panel\Desktop\WindowMetrics] "CaptionWidth"="-270" [HKEY_USERS\.DEFAULT\Control Panel\Desktop\WindowMetrics] "SmCaptionWidth"="-255" [HKEY_USERS\S-1-5-19\Control Panel\Desktop\WindowMetrics] "CaptionWidth"="-270" [HKEY_USERS\S-1-5-19\Control Panel\Desktop\WindowMetrics] "SmCaptionWidth"="-180" [HKEY_USERS\S-1-5-20\Control Panel\Desktop\WindowMetrics] "CaptionWidth"="-270" [HKEY_USERS\S-1-5-20\Control Panel\Desktop\WindowMetrics] "SmCaptionWidth"="-180" [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Control Panel\Desktop\WindowMetrics] "CaptionWidth"="-270" [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Control Panel\Desktop\WindowMetrics] "SmCaptionWidth"="-255" [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\MSNMessenger] "MainWindowRect"=hex:00,02,00,00,00,00,00,00,21,03,00,00,de,02,00,00 [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3g2\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aif\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aifc\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aiff\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amr\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asf\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asf\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asx\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.au\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avi\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avi\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.awb\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cab\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cab\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cat\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cat\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cda\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.chm\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.chm\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.css\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dat\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.divx\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dll\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dll\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dot\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dvr-ms\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erp\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erp\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hlp\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hlp\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ico\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ini\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ini\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ivf\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kmz\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lnk\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lnk\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.log\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.log\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1v\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2v\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m3u\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m3u\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4a\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4e\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mid\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.midi\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mov\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mov\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp1\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2v\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpa\OpenWithProgids] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpe\OpenWithList] [HKEY_USERS\S-1-5-21-583907252-1532298954-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpe\OpenWithPr -
Problème pour installer Panda 2006
fremenbleu a répondu à un(e) sujet de fremenbleu dans Analyses et éradication malwares
REGEDIT4 ; Registry Search by Bobbi Flekman ; Version: 1.0.2.1 ; Results at 07/12/2005 18:19:35 for strings: ; '« chaser » service ' ; Strings excluded from search: ; (None) ; Search in: ; Registry Keys Registry Values Registry Data ; HKEY_LOCAL_MACHINE HKEY_USERS ; End Of The Log... --------------------------------------------------------- (ça ne m'a pas l'air concluant... ) En tous cas merci pour votre aide ! -
Problème pour installer Panda 2006
fremenbleu a répondu à un(e) sujet de fremenbleu dans Analyses et éradication malwares
A priori oui... Mais n'ayant trouvé aucune trace de ce logiciel je suis bien en peine de le liquider... J'aimerai bien savoir comment il a finit par s'en débarasser lui... -
Problème pour installer Panda 2006
fremenbleu a répondu à un(e) sujet de fremenbleu dans Analyses et éradication malwares
"Silent Runners.vbs", revision 41, http://www.silentrunners.org/ Operating System: Windows XP SP2 Output limited to non-default values, except where indicated by "{++}" Startup items buried in registry: --------------------------------- HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++} "CTFMON.EXE" = "C:\WINDOWS\system32\ctfmon.exe" [MS] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++} "SoundMan" = "SOUNDMAN.EXE" ["Realtek Semiconductor Corp."] "NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup" [MS] "nwiz" = "nwiz.exe /install" ["NVIDIA Corporation"] "TkBellExe" = ""C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot" ["RealNetworks, Inc."] "AOLDialer" = "C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe" ["America Online, Inc"] "RemoteControl" = ""C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"" ["Cyberlink Corp."] "SunJavaUpdateSched" = "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe" ["Sun Microsystems, Inc."] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = "AcroIEHlprObj Class" [from CLSID] -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = "SSVHelper Class" [from CLSID] -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll" ["Sun Microsystems, Inc."] {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}\(Default) = "EpsonToolBandKicker Class" [from CLSID] -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll" ["SEIKO EPSON CORPORATION"] HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ "{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Extension Affichage Panorama du Panneau de configuration" -> {CLSID}\InProcServer32\(Default) = "deskpan.dll" [file not found] "{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Extension icône HyperTerminal" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."] "{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{640167b4-59b0-47a6-b335-a6b3c0695aea}" = "Portable Media Devices" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\Audiodev.dll" [MS] "{cc86590a-b60a-48e6-996b-41d25ed39a1e}" = "Portable Media Devices Menu" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\Audiodev.dll" [MS] "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] "{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}" = "Shell Extensions for RealOne Player" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Real\RealPlayer\rpshell.dll" ["RealNetworks, Inc."] "{e57ce731-33e8-4c51-8354-bb4de9d215d1}" = "Périphériques Plug and Play universels" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\upnpui.dll" [MS] "{0006F045-0000-0000-C000-000000000046}" = "Microsoft Outlook Custom Icon Handler" -> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office\OLKFSTUB.DLL" [MS] HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\ WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\ WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] Active Desktop and Wallpaper: ----------------------------- Active Desktop is disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState HKCU\Control Panel\Desktop\ "Wallpaper" = "C:\Documents and Settings\François\Application Data\Microsoft\Internet Explorer\Papier peint de Internet Explorer.bmp" Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] 000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS] 000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] Transport Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: %SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 25 %SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05 Toolbars, Explorer Bars, Extensions: ------------------------------------ Toolbars HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\ "{4982D40A-C53B-4615-B15B-B5B5E98D167C}" = "AOL Toolbar" [from CLSID] -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\AOL Toolbar\toolbar.dll" ["IE Toolbar"] "{EE5D279F-081B-4404-994D-C6B60AAEBA6D}" = "EPSON Web-To-Page" [from CLSID] -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll" ["SEIKO EPSON CORPORATION"] HKLM\Software\Microsoft\Internet Explorer\Toolbar\ "{4982D40A-C53B-4615-B15B-B5B5E98D167C}" = "AOL Toolbar" [from CLSID] -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\AOL Toolbar\toolbar.dll" ["IE Toolbar"] "{EE5D279F-081B-4404-994D-C6B60AAEBA6D}" = "EPSON Web-To-Page" [from CLSID] -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll" ["SEIKO EPSON CORPORATION"] Explorer Bars HKLM\Software\Microsoft\Internet Explorer\Explorer Bars\ {9455301C-CF6B-11D3-A266-00C04F689C50}\ = "&Organise-notes Encarta" [from CLSID] -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2001\EROProj.dll" [MS] Extensions (Tools menu items, main toolbar menu buttons) HKLM\Software\Microsoft\Internet Explorer\Extensions\ {08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ "MenuText" = "Console Java (Sun)" "CLSIDExtension" = "{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll" ["Sun Microsystems, Inc."] {4982D40A-C53B-4615-B15B-B5B5E98D167C}\ "ButtonText" = "AOL Toolbar" "MenuText" = "AOL Toolbar" {9455301C-CF6B-11D3-A266-00C04F689C50}\ "ButtonText" = "Organise-notes" {FB5F1910-F110-11D2-BB9E-00C04F795683}\ "ButtonText" = "Messenger" "MenuText" = "Windows Messenger" "Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS] Miscellaneous IE Hijack Points ------------------------------ C:\WINDOWS\INF\IERESET.INF (used to "Reset Web Settings") Added lines (compared with English-language version): [strings]: START_PAGE_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome [strings]: SAFESITE_VALUE="http://home.microsoft.com/intl/fr/" Missing lines (compared with English-language version): [strings]: 2 lines Running Services (Display Name, Service Name, Path {Service DLL}): ------------------------------------------------------------------ AOL Connectivity Service, AOL ACS, "C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe" ["America Online, Inc."] EPSON Printer Status Agent2, EPSONStatusAgent2, "C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe" ["SEIKO EPSON CORPORATION"] EpsonBidirectionalService, EpsonBidirectionalService, "C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe" [null data] HTTP SSL, HTTPFilter, "C:\WINDOWS\System32\svchost.exe -k HTTPFilter" {"C:\WINDOWS\System32\w3ssl.dll" [MS]} NVIDIA Display Driver Service, NVSvc, "C:\WINDOWS\system32\nvsvc32.exe" ["NVIDIA Corporation"] Panda Process Protection Service, PavPrSrv, ""C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe"" ["Panda Software"] SmartLinkService, SLService, "slserv.exe" [" "] Windows User Mode Driver Framework, UMWdf, "C:\WINDOWS\system32\wdfmgr.exe" [MS] Print Monitors: --------------- HKLM\System\CurrentControlSet\Control\Print\Monitors\ EPSON Stylus DX4200 Series 2KMonitor5E\Driver = "E_FLMAEE.DLL" ["SEIKO EPSON CORPORATION"] EPSON V5 2KMonitor\Driver = "EBPMON2.DLL" ["SEIKO EPSON CORPORATION"] ---------- + This report excludes default entries except where indicated. + To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter. + To search all directories of local fixed drives for DESKTOP.INI DLL launch points and all Registry CLSIDs for dormant Explorer Bars, use the -supp parameter or answer "No" at the first message box. ---------- (total run time: 27 seconds, including 8 seconds for message boxes) ----------------------------------------------------------------------------------------------------------------------------- Voilà le rapport de Silent Runner... Pour Svr32 : en mode sans échec j'obtient exactement le même résultat qu'en mode normal... - Avant de poster sur le forum j'ai recherché partout trace de ce programme, mais je ne l'ai pas trouvé... (pour tout dire je dois même avouer ne pas avoir souvenir d'avoir installé un programme de ce nom sur mon ordinateur ) -
Problème pour installer Panda 2006
fremenbleu a répondu à un(e) sujet de fremenbleu dans Analyses et éradication malwares
Aucun virus ou autre logiciel malveillant n'a été détecté ! Désolé de ne pas l'avoir posté -
Problème pour installer Panda 2006
fremenbleu a répondu à un(e) sujet de fremenbleu dans Analyses et éradication malwares
Logfile of HijackThis v1.99.1 Scan saved at 23:39:11, on 05/12/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\WINDOWS\system32\msiexec.exe C:\Hiajckthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2001\EROProj.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{71447897-0F07-4112-8834-1472B646DFE6}: NameServer = 80.118.192.110 80.118.196.40 O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe ---------------------------------------------------------------------------------------------------------------------------- Merci beaucoup J'ai du suivre toutes tes instructions sans prob. Par contre pour Panda j'ai toujours le problème décrit dans mon premier message... -
Problème pour installer Panda 2006
fremenbleu a répondu à un(e) sujet de fremenbleu dans Analyses et éradication malwares
Logfile of HijackThis v1.99.1 Scan saved at 22:42:22, on 04/12/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe C:\Program Files\CheckFlow\FlowProtector\5.0.0.3\FlowService.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE C:\WINDOWS\system32\ctfmon.exe C:\Program Files\CheckFlow\FlowProtector\FlowStarter.exe C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\CheckFlow\FlowProtector\5.0.0.3\Fp2006.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Hiajckthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: My Search BHO - {014DA6C1-189F-421a-88CD-07CFE51CFF10} - C:\Program Files\MySearch\bar\1.bin\S4BAR.DLL O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll (file missing) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll (file missing) O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll O3 - Toolbar: My &Search Bar - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - C:\Program Files\MySearch\bar\1.bin\S4BAR.DLL O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe O4 - HKLM\..\Run: [LanzarT2006] "C:\DOCUME~1\FRANOI~1\LOCALS~1\Temp\{CCBC4007-DF1F-40A0-B331-D71DAE1568ED}\{98032D6F-3EE6-4646-B68C-40BF012AC89B}\..\..\T2006tmp\Install.exe" /SETUP:"/l0x040c" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - Global Startup: FlowProtector2006.lnk = C:\Program Files\CheckFlow\FlowProtector\FlowStarter.exe O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2001\EROProj.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{71447897-0F07-4112-8834-1472B646DFE6}: NameServer = 80.118.196.42 80.118.192.112 O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe O23 - Service: FlowProtectorService - - C:\Program Files\CheckFlow\FlowProtector\5.0.0.3\FlowService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: OPFSVC - Unknown owner - C:\Program Files\Omniquad Total Security\OPF\OPFSVC.exe (file missing) O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe O23 - Service: Personal Firewall - Unknown owner - C:\Program Files\Omniquad Total Security\OPF\pfsvc.exe (file missing) O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe -
Problème pour installer Panda 2006
fremenbleu a posté un sujet dans Analyses et éradication malwares
Bonjour Je viens de télécharger Panda Titanium 2006 mais je n'arrive pas à l'installer, il m'affiche que je dois supprimer un antivirus appelé "Virus Chaser" avant d'installer panda, mais je n'arrive pas à trouver/désinstaller ce fameux "Virus Chaser"... Quelqu'un pourrait m'aider ? Merci d'avance