helpsiouplait

si quelqu un a une solution par avance merci

rien n y fait il veut pas ouvrir un compte utilisateur il ce met en defaut

toutes les keys je remets

Racine Clé du Registre Nom Données HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{F5346614-B7C4-4E94-826A-E2363155233D} InstallSource C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\bye8.tmp\Disk1\ HKEY_USERS S-1-5-21-1390067357-842925246-854245398-500\Software\Macromedia\FlashPlayerUpdate Path C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\FlashPlayerUpdate01.exe HKEY_CURRENT_USER Software\Macromedia\FlashPlayerUpdate Path C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\FlashPlayerUpdate01.exe HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} InstallSource C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\is-668VV.tmp\dotnetfx\ HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DDE7F2BCF1D91C3409CFF425AE1E271A\InstallProperties InstallSource C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\is-668VV.tmp\dotnetfx\ HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\DDE7F2BCF1D91C3409CFF425AE1E271A\SourceList\Net 1 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\is-668VV.tmp\dotnetfx\ HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{02479442-560D-46B4-884E-E7F902684539} InstallSource C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\ HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{02424FA0-40CA-440D-A1F6-B50CD8B64EB3} InstallSource C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\ HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\24497420D0654B6488E47E9F20865493\InstallProperties InstallSource C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\ HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0AF42420AC04D0441A6F5BC08D6BE43B\InstallProperties InstallSource C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\ HKEY_LOCAL_MACHINE Software\Microsoft\Money\11.0 InstalledFrom C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\ HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\24497420D0654B6488E47E9F20865493\SourceList\Net 1 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\ HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\0AF42420AC04D0441A6F5BC08D6BE43B\SourceList\Net 1 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\ HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\mupdate InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\KB870669.inf HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\oeupdate InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\Q823353.inf HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\vgxupdate InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\Q833989.inf HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\ieupdate InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\Q867801.inf HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\Q903235 InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\Q903235.inf HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE40.Comctl32 InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGI1.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IEContentAdvisor.Assoc InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGI11.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\mshtml.DllReg InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGI3.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE.HKLMZoneInfo InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGI3B.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\MSIEFTP InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGI3D.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE40.UserAgent InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGI4A.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\ConnectionConfiguration InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGI4B.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE.HKCUZoneInfo InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGI4C.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE40.BrowseUI InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGI4E.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE40.Controls InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGI6.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE40.Assoc InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGIB83.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE40.Browser InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGIB84.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE40.Shell InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGIB86.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Windows CE Services SetupLog C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wcesetup.log HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{F1535F4A-F1F9-4403-94F5-F6DD2D5315BC} InstallSource C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_is39F\{69647136-52F5-4A17-A73F-7A5FB4CF2B9C}\ HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1390067357-842925246-854245398-500\Products\A4F5351F9F1F3044495F6FDDD23551CB\InstallProperties InstallSource C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_is39F\{69647136-52F5-4A17-A73F-7A5FB4CF2B9C}\ HKEY_USERS S-1-5-21-1390067357-842925246-854245398-500\Software\Microsoft\Installer\Products\A4F5351F9F1F3044495F6FDDD23551CB\SourceList\Net 1 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_is39F\{69647136-52F5-4A17-A73F-7A5FB4CF2B9C}\ HKEY_CURRENT_USER Software\Microsoft\Installer\Products\A4F5351F9F1F3044495F6FDDD23551CB\SourceList\Net 1 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_is39F\{69647136-52F5-4A17-A73F-7A5FB4CF2B9C}\ HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Setup\EncInst DebugFile c:\encinst.log HKEY_LOCAL_MACHINE Software\TVTool8\Player Player 3 C:\progra~1\bsplayer\bplay.exe HKEY_LOCAL_MACHINE Software\Classes\CLSID\{AA874A26-EB80-11D2-9E74-0010AD28CFA8}\InprocServer32 C:\PROGRA~1\FICHIE~1\SYMANT~1\LIVEAD~1\IraVcMsg.dll HKEY_LOCAL_MACHINE Software\Classes\CLSID\{AA874A25-EB80-11D2-9E74-0010AD28CFA8}\InprocServer32 C:\PROGRA~1\FICHIE~1\SYMANT~1\LIVEAD~1\IraVcMsg.dll HKEY_LOCAL_MACHINE Software\Classes\CLSID\{AA874A24-EB80-11D2-9E74-0010AD28CFA8}\InprocServer32 C:\PROGRA~1\FICHIE~1\SYMANT~1\LIVEAD~1\IraVcMsg.dll HKEY_LOCAL_MACHINE Software\Classes\CLSID\{AA874A23-EB80-11D2-9E74-0010AD28CFA8}\InprocServer32 C:\PROGRA~1\FICHIE~1\SYMANT~1\LIVEAD~1\IraVcMsg.dll HKEY_LOCAL_MACHINE Software\Classes\CLSID\{AA874A22-EB80-11D2-9E74-0010AD28CFA8}\InprocServer32 C:\PROGRA~1\FICHIE~1\SYMANT~1\LIVEAD~1\IraVcMsg.dll HKEY_LOCAL_MACHINE Software\Classes\CLSID\{AA874A21-EB80-11D2-9E74-0010AD28CFA8}\InprocServer32 C:\PROGRA~1\FICHIE~1\SYMANT~1\LIVEAD~1\IraVcMsg.dll HKEY_LOCAL_MACHINE Software\Classes\CLSID\{AA874A20-EB80-11D2-9E74-0010AD28CFA8}\InprocServer32 C:\PROGRA~1\FICHIE~1\SYMANT~1\LIVEAD~1\IraVcMsg.dll HKEY_LOCAL_MACHINE Software\Microsoft\Office\10.0\Common\Migration\Outlook OldOutlookPath C:\PROGRA~1\MICROS~2\Office\OUTLOOK.EXE HKEY_LOCAL_MACHINE Software\Classes\CLSID\{E93AF720-6D36-11D0-8EA9-0020AFC894C7}\InProcServer32 C:\PROGRA~1\Psion\PsiWin\Agfsync.dll HKEY_LOCAL_MACHINE Software\Classes\CLSID\{EEC2F071-6940-11D0-9C60-0020AFE05042}\InProcServer32 C:\PROGRA~1\Psion\PsiWin\Pwconvrt.ocx HKEY_LOCAL_MACHINE Software\Classes\CLSID\{A675E602-3FC1-11D1-8D7D-006097D3555D}\LocalServer32 C:\PROGRA~1\Psion\PsiWin\Syncsvr.exe HKEY_LOCAL_MACHINE Software\Classes\CLSID\{9E385F0A-0BA2-430C-96AA-4399C5E40F6C}\LocalServer32 C:\PROGRA~1\Skype\Phone\Skype.exe HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\MPlayer2\Protocols\pnm RequiredFile C:\PROGRA~1\WINDOW~2\pnwrap.dll HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\MPlayer2\MIME Types\audio/x-pn-realaudio RequiredFile C:\PROGRA~1\WINDOW~2\pnwrap.dll HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\MPlayer2\Extensions\.rmm RequiredFile C:\PROGRA~1\WINDOW~2\pnwrap.dll HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\MPlayer2\Extensions\.rm RequiredFile C:\PROGRA~1\WINDOW~2\pnwrap.dll HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\MPlayer2\Extensions\.ram RequiredFile C:\PROGRA~1\WINDOW~2\pnwrap.dll HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\MPlayer2\Extensions\.ra RequiredFile C:\PROGRA~1\WINDOW~2\pnwrap.dll HKEY_USERS S-1-5-21-1390067357-842925246-854245398-500\Software\Gabest\vsfilter\DefTextPathes Path1 c:\subtitles HKEY_USERS S-1-5-21-1390067357-842925246-854245398-500\Software\Gabest\DirectVobSub\DefTextPathes Path1 c:\subtitles HKEY_CURRENT_USER Software\Gabest\vsfilter\DefTextPathes Path1 c:\subtitles HKEY_CURRENT_USER Software\Gabest\DirectVobSub\DefTextPathes Path1 c:\subtitles HKEY_LOCAL_MACHINE Software\Microsoft\Java VM LibsDirectory C:\WINNT\java\lib HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE5BAK InstallINFFile C:\WINNT\msdownld.tmp\AS402C77.tmp\iew2kuni.inf HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IEEX InstallINFFile C:\WINNT\msdownld.tmp\AS414940.tmp\IEEX\ieexinst.inf HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\OutlookExpress InstallINFFile C:\WINNT\msdownld.tmp\AS416D8D.tmp\oeexcep.inf HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IEREADME InstallINFFile C:\WINNT\msdownld.tmp\AS41E0D6.tmp\iereadme.inf HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Active Setup Temp Folders Folder C:\WINNT\msdownld.tmp|?:\msdownld.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Setup ServicePackCachePath c:\winnt\ServicePackFiles\ServicePackCache HKEY_LOCAL_MACHINE Software\Microsoft\Windows NT\CurrentVersion\SeCEdit TemplateUsed c:\winnt\softwaredistribution\download\934a44480e0d68e7a8d4d8fc6f177f12\\hfsecupd.inf HKEY_USERS .DEFAULT\Software\Microsoft\Internet Explorer\Main Local Page C:\WINNT\system32\blank.htm HKEY_LOCAL_MACHINE Software\Classes\CLSID\{82CCD3E0-F71A-11D0-9FE5-00609778AAAA}\InprocServer32 C:\WINNT\system32\DivX_c32.ax HKEY_LOCAL_MACHINE Software\Classes\CLSID\{598EBA02-B49A-11D2-A1C1-00609778AAAA}\InprocServer32 C:\WINNT\system32\DivX_c32.ax HKEY_LOCAL_MACHINE Software\Classes\CLSID\{075BB8A1-B7D8-11D2-A1C6-00609778AAAA}\InprocServer32 C:\WINNT\system32\DivX_c32.ax HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Setup\EncInst path C:\WINNT\System32\export\updencin.exe HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 5.0\{009541A3-3B81-101C-92F3-040224009C02}#2.1 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 5.0\{009541A3-3B81-101C-92F3-040224009C02}#2.0 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 5.0\{009541A3-3B81-101C-92F3-040224009C02}#1.0 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 4.0\{009541A3-3B81-101C-92F3-040224009C02}#2.1 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 4.0\{009541A3-3B81-101C-92F3-040224009C02}#2.0 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 4.0\{009541A3-3B81-101C-92F3-040224009C02}#1.0 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\6.0\{009541A3-3B81-101C-92F3-040224009C02}#2.1 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\6.0\{009541A3-3B81-101C-92F3-040224009C02}#2.0 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\6.0\{009541A3-3B81-101C-92F3-040224009C02}#1.0 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\5.0\{009541A3-3B81-101C-92F3-040224009C02}#2.1 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\5.0\{009541A3-3B81-101C-92F3-040224009C02}#2.0 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\5.0\{009541A3-3B81-101C-92F3-040224009C02}#1.0 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 5.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#2.2 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 5.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#2.1 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 5.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#2.0 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 5.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#1.0 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 4.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#2.2 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 4.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#2.1 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 4.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#2.0 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 4.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#1.0 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\6.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#2.1 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\6.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#2.0 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\6.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#1.0 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\5.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#2.1 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\5.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#2.0 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\5.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#1.0 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Keyring\Parameters\AddOnServices SMTP C:\WINNT\system32\inetsrv\smtpkey.dll HKEY_LOCAL_MACHINE Software\Microsoft\Shared Tools\MSInfo\ToolSets\MSInfo\netmon command C:\WINNT\System32\netmon\netmon.exe HKEY_LOCAL_MACHINE Software\Microsoft\Shared Tools\MSInfo\ToolSets\MSInfo\scandisk command C:\WINNT\System32\scandisk.exe HKEY_LOCAL_MACHINE Software\Microsoft\Shared Tools\MSInfo\ToolSets\MSInfo\sysmon param C:\WINNT\System32\sysmon.msc HKEY_LOCAL_MACHINE Software\Classes\CLSID\{CC2C83A6-9BE4-11D0-98E7-00C04FC2CAF5}\InprocServer32 SystemDB C:\WINNT\System32\system.mdw HKEY_USERS .DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run tetriz3 C:\WINNT\system32\tetriz3.exe HKEY_LOCAL_MACHINE Software\Microsoft\Shared Tools\MSInfo\ToolSets\MSInfo\wbemperm command C:\WINNT\System32\wbem\wbemperm.exe HKEY_LOCAL_MACHINE Software\Classes\CLSID\{E07D3492-32B5-11D0-B724-00AA0062CBB7}\InprocServer32 C:\WINNT\System32\WBEM\WBEMSTUB.DLL HKEY_LOCAL_MACHINE Software\Classes\CLSID\{A4845882-333F-11D0-B724-00AA0062CBB7}\InprocServer32 C:\WINNT\System32\WBEM\WBEMSTUB.DLL HKEY_LOCAL_MACHINE Software\Microsoft\Windows Media Device Manager Log.Filename C:\WINNT\system32\Wmdm.log HKEY_LOCAL_MACHINE Software\Micrografx\Shared Tools\Bitmap Filters\8.0 C:\WINNT\SYSTEM\MGXBM30.DLL HKEY_LOCAL_MACHINE Software\Micrografx\Shared Tools\Frame Library\8.0 C:\WINNT\SYSTEM\MGXFRM30.DLL HKEY_LOCAL_MACHINE Software\Micrografx\Shared Tools\Rendering Engine\8.0 C:\WINNT\SYSTEM\Mgxrdr80.dll HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE6SETUP InstallINFFile C:\WINNT\TEMP\IXP000.TMP\IESetup.inf HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE5SETUP InstallINFFile C:\WINNT\TEMP\IXP000.TMP\IESetup.inf HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Acrobat 4.0 InstallSource C:\WINNT\Temp\pft8F~tmp\ HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Acrobat 4.0 ModifyPath C:\WINNT\Temp\pft8F~tmp\Setup.exe HKEY_USERS S-1-5-21-1390067357-842925246-854245398-500\Software\Arcsoft\Panorama Maker 3.0\USER FILELASTDIR D:\photos\Img0002 HKEY_CURRENT_USER Software\Arcsoft\Panorama Maker 3.0\USER FILELASTDIR D:\photos\Img0002 HKEY_USERS S-1-5-21-1390067357-842925246-854245398-500\Software\Nikon\NikonViewEditor\6.0\Recent File List File1 D:\photos\meuble\alix00016.jpg HKEY_CURRENT_USER Software\Nikon\NikonViewEditor\6.0\Recent File List File1 D:\photos\meuble\alix00016.jpg HKEY_USERS S-1-5-21-1390067357-842925246-854245398-500\Software\Nikon\NikonViewEditor\6.0\Recent File List File2 D:\photos\voiture\DSCN0020.JPG HKEY_CURRENT_USER Software\Nikon\NikonViewEditor\6.0\Recent File List File2 D:\photos\voiture\DSCN0020.JPG HKEY_USERS S-1-5-21-1390067357-842925246-854245398-500\Software\Nikon\NikonViewEditor\6.0\Recent File List File3 D:\photos\VOITURE\DSCN0306.JPG HKEY_CURRENT_USER Software\Nikon\NikonViewEditor\6.0\Recent File List File3 D:\photos\VOITURE\DSCN0306.JPG HKEY_USERS S-1-5-21-1390067357-842925246-854245398-500\Software\SWiSHzone.com\SWiSH_FRA\InsertImageOnly Folder D:\RESTAURANT\CARTE\ HKEY_CURRENT_USER Software\SWiSHzone.com\SWiSH_FRA\InsertImageOnly Folder D:\RESTAURANT\CARTE\ HKEY_USERS S-1-5-21-1390067357-842925246-854245398-500\Software\WinRAR\DialogEditHistory\ExtrPath 12 D:\Telechargement\al HKEY_CURRENT_USER Software\WinRAR\DialogEditHistory\ExtrPath 12 D:\Telechargement\al HKEY_USERS S-1-5-21-1390067357-842925246-854245398-500\Software\Andrei Jefremov\AVIPreview by Andrei Jefremov, visit www.avipreview.com for more\Recent File List File3 D:\Telechargement\temp\003.part HKEY_CURRENT_USER Software\Andrei Jefremov\AVIPreview by Andrei Jefremov, visit www.avipreview.com for more\Recent File List File3 D:\Telechargement\temp\003.part HKEY_USERS S-1-5-21-1390067357-842925246-854245398-500\Software\Andrei Jefremov\AVIPreview by Andrei Jefremov, visit www.avipreview.com for more\Recent File List File1 D:\Telechargement\temp\004.part HKEY_CURRENT_USER Software\Andrei Jefremov\AVIPreview by Andrei Jefremov, visit www.avipreview.com for more\Recent File List File1 D:\Telechargement\temp\004.part HKEY_USERS S-1-5-21-1390067357-842925246-854245398-500\Software\Andrei Jefremov\AVIPreview by Andrei Jefremov, visit www.avipreview.com for more\Recent File List File2 D:\Telechargement\temp\005.part HKEY_CURRENT_USER Software\Andrei Jefremov\AVIPreview by Andrei Jefremov, visit www.avipreview.com for more\Recent File List File2 D:\Telechargement\temp\005.part HKEY_USERS S-1-5-21-1390067357-842925246-854245398-500\Software\Andrei Jefremov\AVIPreview by Andrei Jefremov, visit www.avipreview.com for more\Recent File List File4 D:\Telechargement\temp\006.part HKEY_CURRENT_USER Software\Andrei Jefremov\AVIPreview by Andrei Jefremov, visit www.avipreview.com for more\Recent File List File4 D:\Telechargement\temp\006.part

easycleaner pour la derniere manip a effacé 136 keys de registre ca vient de la?

justement il n y a rien par contre en mode sans echec je retrouve toutes mes donnees il n y a quand mode normal ou il n arrive pas a ouvrir ma session et ce met en administrateur par defaut

voila le rapport executer en mode sans echec --- Search result list --- --- System information --- Windows 2000 (Build: 2195) Service Pack 4 / DataAccess: Microsoft Data Access Components KB870669 / DataAccess: Security update for Microsoft Data Access Components / DataAccess: Security Update for Microsoft Data Access Components / DirectX: DirectX Update 819696 / DirectX / DX9 / SP1: Correctif pour DirectX 9 - KB839643 / Internet Explorer 6 / SP1: Correctif Windows 2000 - Article Base de Connaissances 834707 / Internet Explorer 6 / SP1: Correctif Windows 2000 - KB867282 / Internet Explorer 6 / SP1: Correctif Windows 2000 - KB883939 / Internet Explorer 6 / SP1: Correctif Windows 2000 - KB889293 / Internet Explorer 6 / SP1: Correctif Windows 2000 - KB890923 / Internet Explorer 6 / SP1: Correctif Windows 2000 - KB896688 / Internet Explorer 6 / SP1: Correctif Windows 2000 - KB896727 / Internet Explorer 6 / SP1: Correctif Windows 2000 - KB905495 / Internet Explorer 6 / SP1: Correctif Windows 2000 - KB905915 / Outlook Express 6 / SP1: Correctif Windows 2000 - KB897715 / Windows 2000 / SP4: Windows 2000 Service Pack 4 / Windows 2000 / SP5: Correctif Windows 2000 - KB823182 / Windows 2000 / SP5: Correctif Windows 2000 - KB823559 / Windows 2000 / SP5: Correctif Windows 2000 - KB824105 / Windows 2000 / SP5: Correctif Windows 2000 - KB824141 / Windows 2000 / SP5: Correctif Windows 2000 - KB824146 / Windows 2000 / SP5: Correctif Windows 2000 - KB824151 / Windows 2000 / SP5: Correctif Windows 2000 - KB825119 / Windows 2000 / SP5: Correctif Windows 2000 - KB826232 / Windows 2000 / SP5: Correctif Windows 2000 - KB828028 / Windows 2000 / SP5: Correctif Windows 2000 - KB828035 / Windows 2000 / SP5: Correctif Windows 2000 - KB828741 / Windows 2000 / SP5: Correctif Windows 2000 - KB828749 / Windows 2000 / SP5: Correctif Windows 2000 - KB835732 / Windows 2000 / SP5: Correctif Windows 2000 - KB837001 / Windows 2000 / SP5: Correctif Windows 2000 - KB839645 / Windows 2000 / SP5: Correctif Windows 2000 - KB840315 / Windows 2000 / SP5: Correctif Windows 2000 - KB840987 / Windows 2000 / SP5: Correctif Windows 2000 - KB841356 / Windows 2000 / SP5: Correctif Windows 2000 - KB841533 / Windows 2000 / SP5: Correctif Windows 2000 - KB841872 / Windows 2000 / SP5: Correctif Windows 2000 - KB841873 / Windows 2000 / SP5: Correctif Windows 2000 - KB842526 / Windows 2000 / SP5: Correctif Windows 2000 - KB842773 / Windows 2000 / SP5: Correctif Windows 2000 - KB871250 / Windows 2000 / SP5: Correctif Windows 2000 - KB873333 / Windows 2000 / SP5: Correctif Windows 2000 - KB873339 / Windows 2000 / SP5: Correctif Windows 2000 - KB885250 / Windows 2000 / SP5: Correctif Windows 2000 - KB885835 / Windows 2000 / SP5: Correctif Windows 2000 - KB885836 / Windows 2000 / SP5: Correctif Windows 2000 - KB888113 / Windows 2000 / SP5: Correctif Windows 2000 - KB890046 / Windows 2000 / SP5: Correctif Windows 2000 - KB890047 / Windows 2000 / SP5: Correctif Windows 2000 - KB890175 / Windows 2000 / SP5: Correctif Windows 2000 - KB890859 / Windows 2000 / SP5: Correctif Windows 2000 - KB891711 / Windows 2000 / SP5: Correctif Windows 2000 - KB891781 / Windows 2000 / SP5: Correctif Windows 2000 - KB892944 / Windows 2000 / SP5: Correctif Windows 2000 - KB893066 / Windows 2000 / SP5: Correctif Windows 2000 - KB893086 / Windows 2000 / SP5: Correctif Windows 2000 - KB893756 / Windows 2000 / SP5: Windows Installer 3.1 (KB893803) / Windows 2000 / SP5: Windows Installer 3.1 (KB893803) / Windows 2000 / SP5: Correctif Windows 2000 - KB894320 / Windows 2000 / SP5: Correctif Windows 2000 - KB896358 / Windows 2000 / SP5: Correctif Windows 2000 - KB896422 / Windows 2000 / SP5: Correctif Windows 2000 - KB896423 / Windows 2000 / SP5: Correctif Windows 2000 - KB896424 / Windows 2000 / SP5: Correctif Windows 2000 - KB899587 / Windows 2000 / SP5: Correctif Windows 2000 - KB899588 / Windows 2000 / SP5: Correctif Windows 2000 - KB899589 / Windows 2000 / SP5: Correctif Windows 2000 - KB900725 / Windows 2000 / SP5: Correctif Windows 2000 - KB901017 / Windows 2000 / SP5: Correctif Windows 2000 - KB901214 / Windows 2000 / SP5: Correctif Windows 2000 - KB902400 / Windows 2000 / SP5: Correctif Windows 2000 - KB905414 / Windows 2000 / SP5: Correctif Windows 2000 - KB905749 / Windows 2000 / SP5: Correctif Windows 2000 - KB908519 / Windows 2000 / SP5: Correctif Windows 2000 - KB908523 / Windows 2000 / SP5: Correctif Windows 2000 - KB912919 / Windows 2000 / SP5: Correctif cumulatif 1 pour Windows 2000 SP4 / Windows Media Player / SP0: Correctif pour le Lecteur Windows Media [Voir wm828026 pour plus d'informations] / Windows Media Player: Windows Media Update 819639 / Windows Media Player: Windows Media Update 828026 / Windows Media Player 9 / SP0: Correctif Lecteur Windows Media 9 [Voir KB885492 pour plus d'informations] --- Startup entries list --- Located: HK_LM:Run, avgnt command: "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min file: C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe size: 229416 MD5: 1d4a8b3ad408b0733605d16f340d1e2d Located: HK_LM:Run, C-Media Mixer command: Mixer.exe /startup file: C:\WINNT\Mixer.exe size: 1216512 MD5: fdf8a7450e23004213696a6f92f911b0 Located: HK_LM:Run, InCD command: C:\Program Files\Ahead\InCD\InCD.exe file: C:\Program Files\Ahead\InCD\InCD.exe size: 1155122 MD5: a000996432c5e59b7eff4fc3538be17a Located: HK_LM:Run, LoadQM command: loadqm.exe file: C:\WINNT\loadqm.exe size: 7536 MD5: 69d7217f9d7f49d6706baf90f52b472b Located: HK_LM:Run, Synchronization Manager command: mobsync.exe /logon file: C:\WINNT\system32\mobsync.exe size: 111888 MD5: 25927f36c86159f0d55288f4fed12d93 Located: HK_LM:Run, WebCam Go Sti Service Application command: wbcgosvc file: C:\WINNT\wbcgosvc.exe size: 28837 MD5: 670b52f372c721f518ae40992494c6a6 Located: HK_LM:Run, ccApp (DISABLED) command: "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" file: C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe size: 71304 MD5: fe787428df4e9691a9cc1daf10e9c0c0 Located: HK_LM:Run, NeroCheck (DISABLED) command: C:\WINNT\system32\NeroCheck.exe file: C:\WINNT\system32\NeroCheck.exe size: 155648 MD5: 3e4c03cefad8de135263236b61a49c90 Located: HK_LM:Run, NeroNETTrayIcon (DISABLED) command: C:\Program Files\Ahead\NeroNET\NNServiceCtrl.exe file: C:\Program Files\Ahead\NeroNET\NNServiceCtrl.exe size: 212992 MD5: af3844cecc25fc0bf18503c6e74a4d62 Located: HK_LM:Run, NvCplDaemon (DISABLED) command: RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup file: C:\WINNT\system32\RUNDLL32.EXE size: 10000 MD5: 61cf5b74a4b5fe430f87e9259b7e4f60 Located: HK_LM:Run, nwiz (DISABLED) command: nwiz.exe /install file: C:\WINNT\system32\nwiz.exe size: 323584 MD5: 99b4b415dd1be7325deda3b88df5938a Located: HK_LM:Run, Pando (DISABLED) command: C:\Program Files\Pando Networks\Pando\Pando.exe /Automation file: Located: HK_LM:Run, RemoteControl (DISABLED) command: C:\WINNT\system32\rmctrl.exe file: C:\WINNT\system32\rmctrl.exe size: 32768 MD5: 090095307fa4914386a34eb61946ce96 Located: HK_LM:Run, Symantec NetDriver Monitor (DISABLED) command: C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer file: C:\PROGRA~1\SYMNET~1\SNDMon.exe size: 100056 MD5: f9418981ee4d7e995d359833adab59d5 Located: HK_LM:Run, Synchronization Manager (DISABLED) command: mobsync.exe /logon file: C:\WINNT\system32\mobsync.exe size: 111888 MD5: 25927f36c86159f0d55288f4fed12d93 Located: HK_LM:Run, URLLSTCK.exe (DISABLED) command: C:\Program Files\Norton Internet Security\UrlLstCk.exe file: C:\Program Files\Norton Internet Security\UrlLstCk.exe size: 70760 MD5: 740d3c0d44dd2197b435ddfdb3271b8b Located: HK_CU:Run, internat.exe command: internat.exe file: Located: HK_CU:Run, Shell command: "C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\ibm00005.exe" file: Located: Démarrage (tous utilisateurs), Adobe Gamma Loader.exe.lnk command: C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe file: C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe size: 110592 MD5: 5cd0cd0ec4dc5df459b3ac016764f5aa Located: Démarrage (tous utilisateurs), Adobe Gamma Loader.lnk command: C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe file: C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe size: 110592 MD5: 5cd0cd0ec4dc5df459b3ac016764f5aa Located: Démarrage (tous utilisateurs), DSLMON.lnk (DISABLED) command: C:\Program Files\SAGEM\SAGEM F@st800\dslmon.exe file: Located: Démarrage (tous utilisateurs), Microsoft Office.lnk command: C:\Program Files\Microsoft Office\Office10\OSA.EXE file: C:\Program Files\Microsoft Office\Office10\OSA.EXE size: 83360 MD5: 5bc65464354a9fd3beaa28e18839734a Located: Démarrage (tous utilisateurs), Post-it® Software Notes Lite.lnk (DISABLED) command: C:\Program Files\3M\PSNLite\PsnLite.exe file: Located: Démarrage (tous utilisateurs), Serveur de connexion PsiWin 2.3.lnk (DISABLED) command: C:\Program Files\Psion\PsiWin\Psconsv.exe file: Located: Démarrage (tous utilisateurs), Watch.lnk (DISABLED) command: C:\Program Files\DV Series\Console\Watch.exe file: C:\Program Files\DV Series\Console\Watch.exe size: 217088 MD5: d65cb58957de9a549296e99722280f74 Located: Démarrage (utilisateur), RegFreeze.lnk command: C:\Program Files\RegFreeze\regfreeze.exe file: C:\Program Files\RegFreeze\regfreeze.exe size: 3103776 MD5: 27c14c91bebdd0e2c0e48d37543b3ad6 Located: Démarrage (utilisateur), RegFreeze.lnk (DISABLED) command: C:\Program Files\RegFreeze\regfreeze.exe file: C:\Program Files\RegFreeze\regfreeze.exe size: 3103776 MD5: 27c14c91bebdd0e2c0e48d37543b3ad6 Located: WinLogon, crypt32chain command: crypt32.dll file: crypt32.dll Located: WinLogon, cryptnet command: cryptnet.dll file: cryptnet.dll Located: WinLogon, cscdll command: cscdll.dll file: cscdll.dll Located: WinLogon, sclgntfy command: sclgntfy.dll file: sclgntfy.dll Located: WinLogon, SensLogn command: WlNotify.dll file: WlNotify.dll Located: WinLogon, wzcnotif command: wzcdlg.dll file: wzcdlg.dll --- Browser helper object list --- {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class) BHO name: CLSID name: AcroIEHlprObj Class description: Adobe Acrobat reader classification: Legitimate known filename: AcroIEhelper.ocx<br>AcroIEhelper.dll info link: http://www.adobe.com/products/acrobat/readstep2.html info source: TonyKlein Path: C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\ Long name: AcroIEHelper.ocx Short name: ACROIE~1.OCX Date (created): 13/11/2003 16:57:42 Date (last access): 08/04/2006 Date (last write): 16/04/2001 16:39:02 Filesize: 37808 Attributes: archive MD5: 8394ABFC1BE196A62C9F532511936DF7 CRC32: 71D6E350 Version: 1.0.0.1 {243B17DE-77C7-46BF-B94B-0B5F309A0E64} () BHO name: CLSID name: description: Microsoft Money classification: Open for discussion known filename: mnyside.dll info link: http://www.microsoft.com/money/default.asp info source: TonyKlein Path: C:\Program Files\Microsoft Money\System\ Long name: mnyside.dll Short name: Date (created): 17/07/2002 11:00:00 Date (last access): 08/04/2006 Date (last write): 17/07/2002 11:00:00 Filesize: 163906 Attributes: archive MD5: 285985410852E9DE0520081D91034C28 CRC32: 19ED9E66 Version: 11.0.0.716 {53707962-6F74-2D53-2644-206D7942484F} () BHO name: CLSID name: description: Spybot-S&D IE Browser plugin classification: Legitimate known filename: SDhelper.dll info link: http://spybot.eon.net.au/ info source: Patrick M. Kolla Path: C:\Program Files\Spybot - Search & Destroy\ Long name: SDHelper.dll Short name: SDHELPER.DLL Date (created): 03/02/2006 18:04:40 Date (last access): 08/04/2006 Date (last write): 31/05/2005 01:04:00 Filesize: 853672 Attributes: archive MD5: 250D787A5712D7768DDC133B3E477759 CRC32: D4589A41 Version: 1.4.0.0 {9ECB9560-04F9-4bbc-943D-298DDF1699E1} (Web assistant) BHO name: Web assistant CLSID name: CNisExtBho Class description: NIS 2004, classification: Legitimate known filename: NISShExt.dll info link: http://www.symantec.com/sabu/nis/nis_pe/ info source: TonyKlein Path: C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\ Long name: NISShExt.dll Short name: NISSHEXT.DLL Date (created): 08/09/2003 05:07:40 Date (last access): 08/04/2006 Date (last write): 08/09/2003 05:07:40 Filesize: 131072 Attributes: archive MD5: 8566143E76605CD322EF9EDA02170409 CRC32: 9F75B8F9 Version: 7.0.0.177 --- ActiveX list --- DirectAnimation Java Classes (DirectAnimation Java Classes) DPF name: DirectAnimation Java Classes CLSID name: Installer: Codebase: file://C:\WINNT\Java\classes\dajava.cab description: classification: Legitimate known filename: %WINDIR%\Java\classes\dajava.cab info link: info source: Patrick M. Kolla Microsoft XML Parser for Java (Microsoft XML Parser for Java) DPF name: Microsoft XML Parser for Java CLSID name: Installer: Codebase: file://C:\WINNT\Java\classes\xmldso.cab description: classification: Legitimate known filename: %WINDIR%\Java\classes\xmldso.cab info link: info source: Patrick M. Kolla {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) DPF name: CLSID name: France Telecom MDM ActiveX Control Installer: C:\WINNT\Downloaded Program Files\MDM.inf Codebase: http://minitelweb.minitel.com/imin_data/ocx/MDM.cab Path: C:\WINNT\ Long name: MDM.ocx Short name: Date (created): 17/08/2004 14:53:40 Date (last access): 08/04/2006 Date (last write): 17/08/2004 14:53:40 Filesize: 385024 Attributes: archive MD5: 0A66F16BAF2B59001DC9F40943263184 CRC32: 02FF3975 Version: 1.3.0.1 {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) DPF name: CLSID name: Shockwave ActiveX Control Installer: C:\WINNT\Downloaded Program Files\erma.inf Codebase: http://download.macromedia.com/pub/shockwa...director/sw.cab description: Macromedia ShockWave Flash Player 7 classification: Unknown known filename: SWDIR.DLL info link: info source: Patrick M. Kolla Path: C:\WINNT\system32\Macromed\Director\ Long name: SwDir.dll Short name: SWDIR.DLL Date (created): 17/02/2004 17:58:48 Date (last access): 08/04/2006 Date (last write): 11/02/2003 06:02:58 Filesize: 32768 Attributes: archive MD5: 92FA0AE21D3A08B65D291724AA7D0E43 CRC32: 7B63A9DB Version: 8.5.1.102 {31564D57-0000-0010-8000-00AA00389B71} () DPF name: CLSID name: Installer: C:\WINNT\Downloaded Program Files\wmvax.inf Codebase: http://codecs.microsoft.com/codecs/i386/wmvax.cab {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.3.1) DPF name: Java Runtime Environment 1.3.1 CLSID name: Java Plug-in 1.3.1 Installer: c:\winnt\Downloaded Program Files\jinstall_1_3_1.inf Codebase: http://java.sun.com/products/plugin/1.3.1/...all-131-win.cab description: Sun Java classification: Legitimate known filename: %PROGRAM FILES%\JabaSoft\JRE\*\Bin\npjava131.dll info link: info source: Patrick M. Kolla Path: C:\Program Files\JavaSoft\JRE\1.3.1\bin\ Long name: NPJava131.dll Short name: NPJAVA~1.DLL Date (created): 17/11/2003 14:40:52 Date (last access): 08/04/2006 Date (last write): 06/05/2001 11:14:22 Filesize: 53338 Attributes: archive MD5: 8D7694975F0E5C1F153AADD68A460887 CRC32: 2AD23CCB Version: 1.3.1.0 {9F1C11AA-197B-4942-BA54-47A8489BB47F} () DPF name: CLSID name: Installer: C:\WINNT\Downloaded Program Files\iuctl.inf Codebase: http://v4.windowsupdate.microsoft.com/CAB/...7979.3385300926 description: Windows Update classification: Legitimate known filename: %WINDIR%\System32\iuctl.dll,iuengine.dll info link: info source: Patrick M. Kolla {CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA} (Java Runtime Environment 1.3.1) DPF name: Java Runtime Environment 1.3.1 CLSID name: Java Plug-in 1.3.1 Installer: c:\winnt\Downloaded Program Files\jinstall_1_3_1.inf Codebase: http://java.sun.com/products/plugin/1.3.1/...all-131-win.cab description: Sun Java classification: Legitimate known filename: %PROGRAM FILES%\JabaSoft\JRE\*\Bin\npjava131.dll info link: info source: Patrick M. Kolla Path: C:\Program Files\JavaSoft\JRE\1.3.1\bin\ Long name: NPJava131.dll Short name: NPJAVA~1.DLL Date (created): 17/11/2003 14:40:52 Date (last access): 08/04/2006 Date (last write): 06/05/2001 11:14:22 Filesize: 53338 Attributes: archive MD5: 8D7694975F0E5C1F153AADD68A460887 CRC32: 2AD23CCB Version: 1.3.1.0 {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) DPF name: CLSID name: Shockwave Flash Object Installer: C:\WINNT\Downloaded Program Files\swflash.inf Codebase: http://download.macromedia.com/pub/shockwa...ash/swflash.cab description: Macromedia Shockwave Flash Player classification: Legitimate known filename: info link: info source: Patrick M. Kolla Path: C:\WINNT\system32\Macromed\Flash\ Long name: Flash8.ocx Short name: FLASH8.OCX Date (created): 27/08/2005 13:38:56 Date (last access): 08/04/2006 Date (last write): 27/08/2005 13:38:56 Filesize: 1435272 Attributes: archive MD5: 900373C059C2B51CA91BF110DBDECB33 CRC32: F19599BC Version: 8.0.22.0 --- Process list --- PID: 0 ( 0) [system] PID: 148 ( \SystemRoot\System32\smss.exe PID: 172 ( 148) \??\C:\WINNT\system32\csrss.exe PID: 192 ( 148) \??\C:\WINNT\system32\winlogon.exe PID: 220 ( 192) C:\WINNT\system32\services.exe size: 92944 MD5: 23AFE3A2F398B983903857D8B800DC0E PID: 232 ( 192) C:\WINNT\system32\lsass.exe size: 39184 MD5: C43C52FA225030EA2E62E820C9D898CA PID: 392 ( 220) C:\WINNT\system32\svchost.exe size: 7952 MD5: 1206706A25C5B32652B4F465EDE330E9 PID: 420 ( 220) C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe size: 235152 MD5: AB940EAC4DF12CCC6B469FBD3E759B90 PID: 448 ( 220) C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe size: 255632 MD5: 169FAEBA3CDA18C65A91769E66C12C69 PID: 552 ( 220) C:\WINNT\system32\spoolsv.exe size: 47376 MD5: FACFB75ECC070103619FA044E0B210D3 PID: 576 ( 220) C:\Program Files\AntiVir PersonalEdition Classic\sched.exe size: 33832 MD5: 02B942DE793953FBF0BA84DA8A438B50 PID: 588 ( 220) C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe size: 191016 MD5: 2476B751BA97953C7704F08EDADDD87D PID: 608 ( 220) C:\WINNT\system32\cisvc.exe size: 5392 MD5: C40DF5DB319CD19FAAF95673FA7FEED8 PID: 624 ( 220) C:\WINNT\System32\svchost.exe size: 7952 MD5: 1206706A25C5B32652B4F465EDE330E9 PID: 640 ( 220) C:\Program Files\Ahead\InCD\InCDsrv.exe size: 786484 MD5: 3C8132016AE9E9806FBA2C9CF7FFF96C PID: 744 ( 220) C:\Program Files\Ahead\NeroNET\NeroNET.exe size: 1028096 MD5: F53A37565CF373E7CB2D3C48B6D12AD3 PID: 956 ( 220) C:\WINNT\System32\nvsvc32.exe size: 69632 MD5: 26712CF8BE48BC767854927435C0B6A9 PID: 1016 ( 220) C:\WINNT\System32\tcpsvcs.exe size: 25360 MD5: 9B9942A409DA7C2C5EA32BD82B62404D PID: 1020 ( 220) C:\WINNT\System32\snmp.exe size: 30992 MD5: 8719EB5BC246A499D0D97320C3FAD5AD PID: 1032 ( 220) C:\WINNT\system32\stisvc.exe size: 62224 MD5: DD7022D43813DAA09B14B4BC5F6D2780 PID: 1064 ( 220) C:\WINNT\system32\Tablet.exe size: 450560 MD5: 64F5255E28E86C8F91040F42A15E0511 PID: 1120 ( 220) C:\WINNT\System32\WBEM\WinMgmt.exe size: 196706 MD5: 974EE1A488A7AF678F84826B588D4AF1 PID: 1160 ( 220) C:\WINNT\system32\svchost.exe size: 7952 MD5: 1206706A25C5B32652B4F465EDE330E9 PID: 1180 ( 220) C:\WINNT\system32\inetsrv\inetinfo.exe size: 15120 MD5: 043B3BAF9EBCF5FE2375B1FD62C7A68F PID: 1204 ( 220) C:\WINNT\System32\msdtc.exe size: 6928 MD5: AF70B5B3A6B302FF1651AE442E1D06CC PID: 1240 (1032) C:\WINNT\WbcgoSvc.exe size: 28837 MD5: 670B52F372C721F518AE40992494C6A6 PID: 940 ( 768) C:\WINNT\Explorer.EXE size: 244496 MD5: A40D75E7D5E938503C28CF19BB3BDA4A PID: 1700 ( 940) C:\Program Files\Ahead\InCD\InCD.exe size: 1155122 MD5: A000996432C5E59B7EFF4FC3538BE17A PID: 1712 ( 940) C:\WINNT\Mixer.exe size: 1216512 MD5: FDF8A7450E23004213696A6F92F911B0 PID: 1736 ( 940) C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe size: 229416 MD5: 1D4A8B3AD408B0733605D16F340D1E2D PID: 276 ( 220) C:\WINNT\System32\svchost.exe size: 7952 MD5: 1206706A25C5B32652B4F465EDE330E9 PID: 1428 ( 940) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe size: 4393096 MD5: 09CA174A605B480318731E691DC98539 PID: 8 ( 0) System --- Browser start & search pages list --- Spybot - Search & Destroy browser pages report, 08/04/2006 16:51:23 HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar http://www.free.fr/search/ HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page about:blank HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Default_Page_URL about:blank HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page about:blank HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page http://www.microsoft.com/isapi/redir.dll?p...B_PVER}&ar=home HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL http://home.free.fr/ HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm --- Winsock Layered Service Provider list --- Protocol 0: MSAFD Tcpip [TCP/IP] GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192} Filename: %SystemRoot%\system32\msafd.dll Description: Microsoft Windows NT/2k/XP IP protocol DB filename: %SystemRoot%\system32\mswsock.dll DB protocol: MSAFD Tcpip [*] Protocol 1: MSAFD Tcpip [uDP/IP] GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192} Filename: %SystemRoot%\system32\msafd.dll Description: Microsoft Windows NT/2k/XP IP protocol DB filename: %SystemRoot%\system32\mswsock.dll DB protocol: MSAFD Tcpip [*] Protocol 2: MSAFD Tcpip [RAW/IP] GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192} Filename: %SystemRoot%\system32\msafd.dll Description: Microsoft Windows NT/2k/XP IP protocol DB filename: %SystemRoot%\system32\mswsock.dll DB protocol: MSAFD Tcpip [*] Protocol 3: RSVP UDP Service Provider GUID: {9D60A9E0-337A-11D0-BD88-0000C082E69A} Filename: %SystemRoot%\system32\rsvpsp.dll Description: Microsoft Windows NT/2k/XP RVSP DB filename: %SystemRoot%\system32\rsvpsp.dll DB protocol: RSVP * Service Provider Protocol 4: RSVP TCP Service Provider GUID: {9D60A9E0-337A-11D0-BD88-0000C082E69A} Filename: %SystemRoot%\system32\rsvpsp.dll Description: Microsoft Windows NT/2k/XP RVSP DB filename: %SystemRoot%\system32\rsvpsp.dll DB protocol: RSVP * Service Provider Protocol 5: MSAFD NetBIOS [\Device\NetBT_Tcpip_{31BCF267-F484-495E-A8B7-215EF56D3E21}] SEQPACKET 6 GUID: {8D5F1830-C273-11CF-95C8-00805F48A192} Filename: %SystemRoot%\system32\msafd.dll Description: Microsoft Windows NT/2k/XP NetBios protocol DB filename: %SystemRoot%\system32\mswsock.dll DB protocol: MSAFD NetBIOS * Protocol 6: MSAFD NetBIOS [\Device\NetBT_Tcpip_{31BCF267-F484-495E-A8B7-215EF56D3E21}] DATAGRAM 6 GUID: {8D5F1830-C273-11CF-95C8-00805F48A192} Filename: %SystemRoot%\system32\msafd.dll Description: Microsoft Windows NT/2k/XP NetBios protocol DB filename: %SystemRoot%\system32\mswsock.dll DB protocol: MSAFD NetBIOS * Protocol 7: MSAFD NetBIOS [\Device\NetBT_Tcpip_{F67598F9-06FB-4E67-BDC2-6DBB0415D28A}] SEQPACKET 5 GUID: {8D5F1830-C273-11CF-95C8-00805F48A192} Filename: %SystemRoot%\system32\msafd.dll Description: Microsoft Windows NT/2k/XP NetBios protocol DB filename: %SystemRoot%\system32\mswsock.dll DB protocol: MSAFD NetBIOS * Protocol 8: MSAFD NetBIOS [\Device\NetBT_Tcpip_{F67598F9-06FB-4E67-BDC2-6DBB0415D28A}] DATAGRAM 5 GUID: {8D5F1830-C273-11CF-95C8-00805F48A192} Filename: %SystemRoot%\system32\msafd.dll Description: Microsoft Windows NT/2k/XP NetBios protocol DB filename: %SystemRoot%\system32\mswsock.dll DB protocol: MSAFD NetBIOS * Protocol 9: MSAFD NetBIOS [\Device\NetBT_Tcpip_{14CF8D67-9B86-45F6-BFDB-21BC42F24ED3}] SEQPACKET 0 GUID: {8D5F1830-C273-11CF-95C8-00805F48A192} Filename: %SystemRoot%\system32\msafd.dll Description: Microsoft Windows NT/2k/XP NetBios protocol DB filename: %SystemRoot%\system32\mswsock.dll DB protocol: MSAFD NetBIOS * Protocol 10: MSAFD NetBIOS [\Device\NetBT_Tcpip_{14CF8D67-9B86-45F6-BFDB-21BC42F24ED3}] DATAGRAM 0 GUID: {8D5F1830-C273-11CF-95C8-00805F48A192} Filename: %SystemRoot%\system32\msafd.dll Description: Microsoft Windows NT/2k/XP NetBios protocol DB filename: %SystemRoot%\system32\mswsock.dll DB protocol: MSAFD NetBIOS * Protocol 11: MSAFD NetBIOS [\Device\NetBT_Tcpip_{0288EDF2-6281-4A18-B788-66458303EB76}] SEQPACKET 1 GUID: {8D5F1830-C273-11CF-95C8-00805F48A192} Filename: %SystemRoot%\system32\msafd.dll Description: Microsoft Windows NT/2k/XP NetBios protocol DB filename: %SystemRoot%\system32\mswsock.dll DB protocol: MSAFD NetBIOS * Protocol 12: MSAFD NetBIOS [\Device\NetBT_Tcpip_{0288EDF2-6281-4A18-B788-66458303EB76}] DATAGRAM 1 GUID: {8D5F1830-C273-11CF-95C8-00805F48A192} Filename: %SystemRoot%\system32\msafd.dll Description: Microsoft Windows NT/2k/XP NetBios protocol DB filename: %SystemRoot%\system32\mswsock.dll DB protocol: MSAFD NetBIOS * Protocol 13: MSAFD NetBIOS [\Device\NetBT_Tcpip_{D0F8B583-3D63-480F-A5ED-D26369A5844D}] SEQPACKET 2 GUID: {8D5F1830-C273-11CF-95C8-00805F48A192} Filename: %SystemRoot%\system32\msafd.dll Description: Microsoft Windows NT/2k/XP NetBios protocol DB filename: %SystemRoot%\system32\mswsock.dll DB protocol: MSAFD NetBIOS * Protocol 14: MSAFD NetBIOS [\Device\NetBT_Tcpip_{D0F8B583-3D63-480F-A5ED-D26369A5844D}] DATAGRAM 2 GUID: {8D5F1830-C273-11CF-95C8-00805F48A192} Filename: %SystemRoot%\system32\msafd.dll Description: Microsoft Windows NT/2k/XP NetBios protocol DB filename: %SystemRoot%\system32\mswsock.dll DB protocol: MSAFD NetBIOS * Protocol 15: MSAFD NetBIOS [\Device\NetBT_Tcpip_{49887293-53CB-4C3C-94CA-0F41033926D8}] SEQPACKET 3 GUID: {8D5F1830-C273-11CF-95C8-00805F48A192} Filename: %SystemRoot%\system32\msafd.dll Description: Microsoft Windows NT/2k/XP NetBios protocol DB filename: %SystemRoot%\system32\mswsock.dll DB protocol: MSAFD NetBIOS * Protocol 16: MSAFD NetBIOS [\Device\NetBT_Tcpip_{49887293-53CB-4C3C-94CA-0F41033926D8}] DATAGRAM 3 GUID: {8D5F1830-C273-11CF-95C8-00805F48A192} Filename: %SystemRoot%\system32\msafd.dll Description: Microsoft Windows NT/2k/XP NetBios protocol DB filename: %SystemRoot%\system32\mswsock.dll DB protocol: MSAFD NetBIOS * Protocol 17: MSAFD NetBIOS [\Device\NetBT_Tcpip_{572967C2-F412-47BB-B781-75AD1FA418BB}] SEQPACKET 4 GUID: {8D5F1830-C273-11CF-95C8-00805F48A192} Filename: %SystemRoot%\system32\msafd.dll Description: Microsoft Windows NT/2k/XP NetBios protocol DB filename: %SystemRoot%\system32\mswsock.dll DB protocol: MSAFD NetBIOS * Protocol 18: MSAFD NetBIOS [\Device\NetBT_Tcpip_{572967C2-F412-47BB-B781-75AD1FA418BB}] DATAGRAM 4 GUID: {8D5F1830-C273-11CF-95C8-00805F48A192} Filename: %SystemRoot%\system32\msafd.dll Description: Microsoft Windows NT/2k/XP NetBios protocol DB filename: %SystemRoot%\system32\mswsock.dll DB protocol: MSAFD NetBIOS * Namespace Provider 0: TCP/IP GUID: {22059D40-7E9E-11CF-AE5A-00AA00A7112B} Filename: %SystemRoot%\System32\rnr20.dll Description: Microsoft Windows NT/2k/XP TCP/IP name space provider DB filename: %SystemRoot%\system32\mswsock.dll DB protocol: TCP/IP Namespace Provider 1: NTDS GUID: {3B2637EE-E580-11CF-A555-00C04FD8D4AC} Filename: %SystemRoot%\System32\winrnr.dll Description: Microsoft Windows NT/2k/XP name space provider DB filename: %SystemRoot%\system32\winrnr.dll DB protocol: NTDS --- Uninstall list --- a-squared Free 1.6 1.6 (a-squared Free_is1) install location: C:\Program Files\a2 Free\ uninstall cmd: "C:\Program Files\a2 Free\unins000.exe" publisher: Emsi Software GmbH help link: http://forum.emsisoft.com (AddressBook) Adobe Acrobat 4.0 4.0 (Adobe Acrobat 4.0) version (major): 4 install location: C:\Program Files\Adobe\Acrobat 4.0 uninstall cmd: C:\WINNT\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.dll" publisher: Adobe Systems, Inc. help link: http://www.adobe.com/prodindex/acrobat/main.html Adobe Acrobat 5.0 5.0 (Adobe Acrobat 5.0) version (major): 5 install location: C:\Program Files\Adobe\Acrobat 5.0 install source: C:\Documents and Settings\Administrateur\Local Settings\Temp\pft85~tmp\ uninstall cmd: C:\WINNT\ISUNINST.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll" publisher: Adobe Systems, Inc. help link: http://www.adobe.com/prodindex/acrobat/main.html Adobe Photoshop Elements 1.0 (Adobe Photoshop Elements 1.0) version (major): 6 install location: C:\Program Files\Adobe\Photoshop Elements install source: E:\Francais\Adobe Photoshop Elements\ uninstall cmd: C:\WINNT\ISUN040C.EXE -f"C:\Program Files\Adobe\Photoshop Elements\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop Elements\Uninst.dll" publisher: Adobe Systems, Inc. Adobe SVG Viewer 3.0 3.0 (Adobe SVG Viewer) version (major): 3 install location: C:\WINNT\system32\Adobe\SVG Viewer 3.0 uninstall cmd: C:\Program Files\Fichiers communs\Adobe\SVG Viewer 3.0\Uninstall\Winstall.exe -u -fC:\Program Files\Fichiers communs\Adobe\SVG Viewer 3.0\Uninstall\Install.log publisher: Adobe Systems, Inc. Avira AntiVir PersonalEdition Classic (AntiVir PersonalEdition Classic) uninstall cmd: C:\Program Files\AntiVir PersonalEdition Classic\setup.exe /REMOVE publisher: Avira GmbH help link: http://www.free-av.com/support (AvantGo Client) (Branding) BSPlayer (remove only) (BSPlayer) uninstall cmd: "C:\Program Files\K-Lite Codec Pack\bsplayer\uninstall-bsplay.EXE" CameraWare (CameraWare) uninstall cmd: C:\CameraWare\Uninstall.exe Camfrog Video Chat 3.4 (remove only) (Camfrog 3.4) uninstall cmd: "C:\Program Files\Camfrog\Camfrog Video Chat 3.4\uninstall.exe" Canon S6300 (CANONBJ_Deinstall_CNMCP34.DLL) uninstall cmd: C:\WINNT\system32\CNMCP34.EXE -@C:\WINNT\IsUn040c.exe -f"C:\BJPrinter\CNMWINNT\Canon S6300 Installer\Inst\DeIsL1.isu" -pCanon S6300-c"C:\BJPrinter\CNMWINNT\Canon S6300 Installer\Inst\bjinst.dll CDex extraction audio (CDex) uninstall cmd: "C:\Program Files\CDex_150\uninstall.exe" (Connection Manager) Creative Video Blaster WebCam Go Driver (Creative Video Blaster WebCam Go) uninstall cmd: C:\WINNT\CtDrvIns.exe -uninstall usb\vid_1046&pid_9967 -plugin Wbcgopin.dll -pluginres Wbcgopin.crl (DirectAnimation) (DirectDrawEx) DivX 5.0.3 Bundle (DivX Codec) uninstall cmd: C:\WINNT\unvise32.exe C:\Program Files\DivX\uninstal.log Dr. DivX 1.0 Beta (Dr. DivX 1.0 Beta) uninstall cmd: C:\WINNT\unvise32.exe C:\Program Files\DivX\Dr.DivX.log DV Series (DV Series) uninstall cmd: C:\Program Files\DV Series\uninst.exe (DXM_Runtime) (expinst) (Fontcore) Free - Kit de connexion (Free.fr) uninstall cmd: RunDll32 advpack.dll,LaunchINFSection C:\Program Files\Free.fr\KitFree.inf, Uninstall.NT HijackThis 1.99.1 1.99.1 (HijackThis) uninstall cmd: C:\Program Files\Hijackthis Version Française\HijackThis.exe /uninstall publisher: Soeperman Enterprises Ltd. Hijackthis Version Française (Hijackthis Version Française_is1) install location: C:\Program Files\Hijackthis Version Française\ uninstall cmd: "C:\Program Files\Hijackthis Version Française\unins000.exe" publisher: Pc-Help-Bordeaux help link: http://pchelpbordeaux.free.fr Huffyuv AVI lossless video codec (Remove Only) (HUFFYUV) uninstall cmd: rundll.exe setupx.dll,InstallHinfSection DefaultUninstall 132 C:\WINNT\INF\HUFFYUV.INF (ICW) (IE40) (IE4Data) (IE5BAKEX) (IEData) (IEREADME) ImageDrive (ahead software) (ImageDrive!UninstallKey) uninstall cmd: C:\WINNT\UNIDRV.exe /UNINSTALL Ahead InCD (InCD!UninstallKey) uninstall cmd: C:\WINNT\NuNInst.exe /UNINSTALL Java 2 Runtime Environment Standard Edition v1.3.1 (JRE 1.3.1) uninstall cmd: C:\WINNT\IsUninst.exe -f"C:\Program Files\JavaSoft\JRE\1.3.1\Uninst.isu" Correctif Windows 2000 - Article Base de Connaissances 834707 20040929.091901 (KB834707-IE6SP1-20040929.091901) uninstall cmd: C:\WINNT\$NtUninstallKB834707-IE6SP1-20040929.091901$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com/?kbid=834707 Correctif pour DirectX 9 - KB839643 (KB839643-DirectX9) uninstall cmd: C:\WINNT\$NtUninstallKB839643-DirectX9$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=839643 Correctif Windows 2000 - KB842773 (KB842773) uninstall cmd: C:\WINNT\$NtUninstallKB842773$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=842773 Correctif Windows 2000 - KB867282 20050127.163319 (KB867282-IE6SP1-20050127.163319) uninstall cmd: C:\WINNT\$NtUninstallKB867282-IE6SP1-20050127.163319$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com/?kbid=867282 Correctif Windows 2000 - KB883939 20050428.125228 (KB883939-IE6SP1-20050428.125228) uninstall cmd: "C:\WINNT\$NtUninstallKB883939-IE6SP1-20050428.125228$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com/?kbid=883939 (KB884016) Correctif Lecteur Windows Media 9 [Voir KB885492 pour plus d'informations] (KB885492) uninstall cmd: C:\WINNT\$NtUninstallKB885492$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=885492 Correctif Windows 2000 - KB889293 20041111.235619 (KB889293-IE6SP1-20041111.235619) uninstall cmd: C:\WINNT\$NtUninstallKB889293-IE6SP1-20041111.235619$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com/?kbid=889293 Correctif Windows 2000 - KB890046 20050517.235025 (KB890046) uninstall cmd: "C:\WINNT\$NtUninstallKB890046$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=890046 Correctif Windows 2000 - KB890923 20050225.103456 (KB890923-IE6SP1-20050225.103456) uninstall cmd: "C:\WINNT\$NtUninstallKB890923-IE6SP1-20050225.103456$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com/?kbid=890923 Correctif Windows 2000 - KB893756 20050702.42421 (KB893756) uninstall cmd: "C:\WINNT\$NtUninstallKB893756$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=893756 Windows Installer 3.1 (KB893803) 3.1 (KB893803) uninstall cmd: "C:\WINNT\$MSI31Uninstall_KB893803$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://go.microsoft.com/fwlink/?LinkId=42467 Windows Installer 3.1 (KB893803) 3.1 (KB893803v2) uninstall cmd: "C:\WINNT\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://go.microsoft.com/fwlink/?LinkId=42467 Correctif Windows 2000 - KB894320 20050429.01037 (KB894320) uninstall cmd: "C:\WINNT\$NtUninstallKB894320$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=894320 Correctif Windows 2000 - KB896358 20050421.70926 (KB896358) uninstall cmd: "C:\WINNT\$NtUninstallKB896358$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=896358 Correctif Windows 2000 - KB896422 20050503.23608 (KB896422) uninstall cmd: "C:\WINNT\$NtUninstallKB896422$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=896422 Correctif Windows 2000 - KB896423 20050713.01536 (KB896423) uninstall cmd: "C:\WINNT\$NtUninstallKB896423$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=896423 Correctif Windows 2000 - KB896424 20051007.114600 (KB896424) uninstall cmd: "C:\WINNT\$NtUninstallKB896424$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=896424 Correctif Windows 2000 - KB896688 20051004.130236 (KB896688-IE6SP1-20051004.130236) uninstall cmd: "C:\WINNT\$NtUninstallKB896688-IE6SP1-20051004.130236$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com/?kbid=896688 Correctif Windows 2000 - KB896727 20050719.165959 (KB896727-IE6SP1-20050719.165959) uninstall cmd: "C:\WINNT\$NtUninstallKB896727-IE6SP1-20050719.165959$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com/?kbid=896727 Correctif Windows 2000 - KB897715 20050503.210336 (KB897715-OE6SP1-20050503.210336) uninstall cmd: "C:\WINNT\$NtUninstallKB897715-OE6SP1-20050503.210336$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com/?kbid=897715 Correctif Windows 2000 - KB899587 20050614.212757 (KB899587) uninstall cmd: "C:\WINNT\$NtUninstallKB899587$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=899587 Correctif Windows 2000 - KB899588 20050628.234036 (KB899588) uninstall cmd: "C:\WINNT\$NtUninstallKB899588$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=899588 Correctif Windows 2000 - KB899589 20050822.21016 (KB899589) uninstall cmd: "C:\WINNT\$NtUninstallKB899589$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=899589 Correctif Windows 2000 - KB900725 20050923.34708 (KB900725) uninstall cmd: "C:\WINNT\$NtUninstallKB900725$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=900725 Correctif Windows 2000 - KB901017 20050830.22150 (KB901017) uninstall cmd: "C:\WINNT\$NtUninstallKB901017$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=901017 Correctif Windows 2000 - KB901214 20050629.02152 (KB901214) uninstall cmd: "C:\WINNT\$NtUninstallKB901214$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=901214 Correctif Windows 2000 - KB902400 20050905.04634 (KB902400) uninstall cmd: "C:\WINNT\$NtUninstallKB902400$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=902400 Mise à jour de sécurité pour Windows 2000 (KB904706) (KB904706) uninstall cmd: "C:\WINNT\$NtUninstallKB904706$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=904706 Correctif Windows 2000 - KB905414 20050816.13004 (KB905414) uninstall cmd: "C:\WINNT\$NtUninstallKB905414$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=905414 Correctif Windows 2000 - KB905495 20050805.184113 (KB905495-IE6SP1-20050805.184113) uninstall cmd: "C:\WINNT\$NtUninstallKB905495-IE6SP1-20050805.184113$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com/?kbid=905495 Correctif Windows 2000 - KB905749 20050902.21643 (KB905749) uninstall cmd: "C:\WINNT\$NtUninstallKB905749$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=905749 Correctif Windows 2000 - KB905915 20051122.175908 (KB905915-IE6SP1-20051122.175908) install date: 20051223 uninstall cmd: "C:\WINNT\$NtUninstallKB905915-IE6SP1-20051122.175908$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com/?kbid=905915 Correctif Windows 2000 - KB908519 20051124.165020 (KB908519) install date: 20060111 uninstall cmd: "C:\WINNT\$NtUninstallKB908519$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=908519 Correctif Windows 2000 - KB908523 20051021.131026 (KB908523) install date: 20051223 uninstall cmd: "C:\WINNT\$NtUninstallKB908523$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=908523 Mise à jour de sécurité pour Lecteur Windows Media (KB911564) (KB911564) install date: 20060216 uninstall cmd: "C:\WINNT\$NtUninstallKB911564$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com/?kbid=911564 Mise à jour de sécurité pour Lecteur Windows Media 9 (KB911565) (KB911565) install date: 20060216 uninstall cmd: "C:\WINNT\$NtUninstallKB911565$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com/?kbid=911565 Correctif Windows 2000 - KB912919 20060103.111025 (KB912919) install date: 20060108 uninstall cmd: "C:\WINNT\$NtUninstallKB912919$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=912919 K-Lite Codec Pack 2.35 Full 2.35 (KLiteCodecPack_is1) install location: C:\Program Files\K-Lite Codec Pack\ uninstall cmd: "C:\Program Files\K-Lite Codec Pack\unins000.exe" LeechFTP (LeechFTP) uninstall cmd: C:\WINNT\eraser.exe KILL "C:\Program Files\LeechFTP\uninstall.uif" LiveReg (Symantec Corporation) 2.4.1.2056 (LiveReg) install location: C:\Program Files\Fichiers communs\Symantec Shared\LiveReg uninstall cmd: C:\Program Files\Fichiers communs\Symantec Shared\LiveReg\VcSetup.exe /REMOVE publisher: Symantec Corporation LiveUpdate 1.90 (Symantec Corporation) 1.90.14.0 (LiveUpdate) install location: C:\Program Files\Symantec\LiveUpdate uninstall cmd: C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U publisher: Symantec Corporation (Microsoft NetShow Player 2.0) (Mobile Application Link) (MobileOptionPack) Mozilla Firefox (1.0.3) 1.0.3 (fr-FR) (Mozilla Firefox (1.0.3)) install location: C:\Program Files\Mozilla Firefox uninstall cmd: C:\WINNT\UninstallFirefox.exe /ua "1.0.3 (fr-FR)" publisher: Mozilla (MPlayer2) (MSI30-Beta1) (MSI30-Beta2) (MSI30-KB884016) (MSI30-RC1) (MSI30-RC2) (MSI30a-KB884016) (MSI31-Beta) (MSI31-RC1) (MsJavaVM) Ahead Nero Burning ROM (Nero - Burning Rom!UninstallKey) uninstall cmd: C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL Ahead NeroNET (NeroNet!UninstallKey) uninstall cmd: C:\WINNT\UNNeroNET.exe /UNINSTALL (NetMeeting) Ahead NeroMIX (NMIX!UninstallKey) uninstall cmd: C:\WINNT\UNNMIX.exe /UNINSTALL Ahead NeroMediaPlayer (NMPUninstallKey) uninstall cmd: C:\WINNT\UNNMP.exe /UNINSTALL NokiaFREE Unlock Codes Calculator (NokiaFREE Unlock Codes Calculator) uninstall cmd: "C:\Program Files\NokiaFREE Unlock Codes Calculator\uninst.exe" NVIDIA Windows 2000/XP Display Drivers (NVIDIA) uninstall cmd: rundll32.exe C:\WINNT\System32\nvinstnt.dll,NvUninstallNT4 nv4_disp.inf (OutlookExpress) PCI Audio Driver (PCI Audio Driver) uninstall cmd: cmuninst.exe Pilote de tablette Wacom (Pilote de tablette Wacom) uninstall cmd: C:\WINNT\IsUn040c.exe -f"C:\Program Files\Wacom\Uninst.isu" -c"C:\WINNT\system32\TabUnst.dll" Plustek USB Scanner (Plustek USB Scanner) uninstall cmd: C:\PROGRA~1\ScannerU\UNINSTAL\SETUP.EXE Correctif pour le Lecteur Windows Media [Voir wm828026 pour plus d'informations] (Q828026) uninstall cmd: C:\WINNT\$NtUninstallQ828026$\spuninst\spuninst.exe publisher: Microsoft Corporation QuickTime (QuickTime) uninstall cmd: C:\WINNT\unvise32qt.exe C:\WINNT\system32\QuickTime\Uninstall.log RegFreeze 5.1 (RegFreeze_is1) install location: C:\Program Files\RegFreeze\ uninstall cmd: "C:\Program Files\RegFreeze\unins000.exe" publisher: ActualResearch, Inc. help link: http://www.actualresearch.com (SchedulingAgent) (Sevinst) Shockwave (Shockwave) uninstall cmd: C:\WINNT\system32\MACROMED\SHOCKW~1\UNWISE.EXE C:\WINNT\system32\MACROMED\SHOCKW~1\Install.log Macromedia Flash Player 8 8 (ShockwaveFlash) uninstall cmd: RunDll32 advpack.dll,LaunchINFSection C:\WINNT\INF\swflash.inf,DefaultUninstall,5 publisher: Macromedia help link: http://www.macromedia.com/go/flashplayer_support/ Sound'Em 1.0 (Sound'Em 1.0) uninstall cmd: C:\Program Files\DV Series\UNWISE.EXE C:\Program Files\DV Series\install.log Spybot - Search & Destroy 1.4 1.4 (Spybot - Search & Destroy_is1) install location: C:\Program Files\Spybot - Search & Destroy\ uninstall cmd: "C:\Program Files\Spybot - Search & Destroy\unins000.exe" publisher: Safer Networking Limited SWiSH v2.0 FRA (SWiSH v2.0 FRA) uninstall cmd: C:\WINNT\unvise32.exe C:\Program Files\SWiSH v2.0 FRA\uninstal.log Norton Internet Security (Symantec Corporation) 7.0.0.177 (SymSetup.{A93C9E60-29B6-49da-BA21-F70AC6AADE20}) install location: C:\Program Files\Norton Internet Security install source: E: uninstall cmd: C:\Program Files\Fichiers communs\Symantec Shared\SymSetup\{A93C9E60-29B6-49da-BA21-F70AC6AADE20}.exe /X p

spybot avait detecte quelques keys mais rien n apparrait dans les sauvegardes

voila j ai suivi la procedure a la lettre j ai retrouvé mon reseaux^par contre window ne peux plus ouvrir mon profil utilisateur et met celui par defaut je n ai donc plus mes messages outlook plus ma compta money ectt encore de l helpppppppppppppppppppppppppppppppp

voila si vous pouvez m aider merci Logfile of HijackThis v1.99.1 Scan saved at 16:52:34, on 07/04/2006 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe C:\WINNT\system32\cisvc.exe C:\WINNT\System32\svchost.exe C:\Program Files\Ahead\InCD\InCDsrv.exe C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe C:\Program Files\Ahead\NeroNET\NeroNET.exe C:\WINNT\Explorer.EXE C:\WINNT\System32\nvsvc32.exe C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe C:\WINNT\system32\MSTask.exe C:\WINNT\wbcgosvc.exe C:\WINNT\System32\tcpsvcs.exe C:\WINNT\System32\snmp.exe C:\WINNT\system32\stisvc.exe C:\WINNT\system32\Tablet.exe C:\Program Files\Ahead\InCD\InCD.exe C:\WINNT\Mixer.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe C:\WINNT\system32\RUNDLL32.EXE C:\WINNT\system32\internat.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\inetsrv\inetinfo.exe C:\WINNT\System32\msdtc.exe C:\WINNT\system32\mqsvc.exe C:\WINNT\system32\msiexec.exe C:\Program Files\Fichiers communs\Symantec Shared\NMain.exe C:\WINNT\system32\cidaemon.exe C:\WINNT\system32\cidaemon.exe C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll O4 - HKLM\..\Run: [WebCam Go Sti Service Application] wbcgosvc O4 - HKLM\..\Run: [urlLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer O4 - HKLM\..\Run: [LoadQM] loadqm.exe O4 - HKLM\..\Run: [inCD] C:\Program Files\Ahead\InCD\InCD.exe O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [synchronization Manager] mobsync.exe /logon O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NVMCTRAY.DLL,NvTaskbarInit O4 - HKCU\..\Run: [internat.exe] internat.exe O4 - HKCU\..\RunOnce: [East-Tec Eraser 2003] "C:\Program Files\East-Tec Eraser 2003\silent.exe" /R O4 - Startup: RegFreeze.lnk.disabled O4 - Startup: RegFreeze.lnk = C:\Program Files\RegFreeze\regfreeze.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Watch.lnk.disabled O4 - Global Startup: Serveur de connexion PsiWin 2.3.lnk.disabled O4 - Global Startup: Post-it® Software Notes Lite.lnk.disabled O4 - Global Startup: DSLMON.lnk.disabled O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O14 - IERESET.INF: START_PAGE_URL=http://home.free.fr/ O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: InCD File System Service (InCDsrv) - AHEAD Software - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe O23 - Service: NeroNET - Ahead Software AG - C:\Program Files\Ahead\NeroNET\NeroNET.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: RA Server (Slave) - Unknown owner - C:\WINNT\Slave.exe (file missing) O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe O23 - Service: TabletService - Wacom Technology, Corp. - C:\WINNT\system32\Tablet.exe O23 - Service: wins(WINS) (wins) - Unknown owner - C:\WINNT\system32\winscntrl.exe (file missing)

bonjour j ai chope il y a qlq jours spy cheriff depuis impossible de l erradiquer pouvez vous venir a mon secour norton ne voit rien ad square et regfreese n ont rien pu faire spybot non plus et meme SmitfraudFix en mode sans echec je craque mon reseau et donc internet est bloqué comment m en sortir!!!!!!!!!!!!! voici rapport hijackthis Logfile of HijackThis v1.99.1 Scan saved at 16:52:34, on 07/04/2006 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe C:\WINNT\system32\cisvc.exe C:\WINNT\System32\svchost.exe C:\Program Files\Ahead\InCD\InCDsrv.exe C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe C:\Program Files\Ahead\NeroNET\NeroNET.exe C:\WINNT\Explorer.EXE C:\WINNT\System32\nvsvc32.exe C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe C:\WINNT\system32\MSTask.exe C:\WINNT\wbcgosvc.exe C:\WINNT\System32\tcpsvcs.exe C:\WINNT\System32\snmp.exe C:\WINNT\system32\stisvc.exe C:\WINNT\system32\Tablet.exe C:\Program Files\Ahead\InCD\InCD.exe C:\WINNT\Mixer.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe C:\WINNT\system32\RUNDLL32.EXE C:\WINNT\system32\internat.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\inetsrv\inetinfo.exe C:\WINNT\System32\msdtc.exe C:\WINNT\system32\mqsvc.exe C:\WINNT\system32\msiexec.exe C:\Program Files\Fichiers communs\Symantec Shared\NMain.exe C:\WINNT\system32\cidaemon.exe C:\WINNT\system32\cidaemon.exe C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll O4 - HKLM\..\Run: [WebCam Go Sti Service Application] wbcgosvc O4 - HKLM\..\Run: [urlLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer O4 - HKLM\..\Run: [LoadQM] loadqm.exe O4 - HKLM\..\Run: [inCD] C:\Program Files\Ahead\InCD\InCD.exe O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [synchronization Manager] mobsync.exe /logon O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NVMCTRAY.DLL,NvTaskbarInit O4 - HKCU\..\Run: [internat.exe] internat.exe O4 - HKCU\..\RunOnce: [East-Tec Eraser 2003] "C:\Program Files\East-Tec Eraser 2003\silent.exe" /R O4 - Startup: RegFreeze.lnk.disabled O4 - Startup: RegFreeze.lnk = C:\Program Files\RegFreeze\regfreeze.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Watch.lnk.disabled O4 - Global Startup: Serveur de connexion PsiWin 2.3.lnk.disabled O4 - Global Startup: Post-it® Software Notes Lite.lnk.disabled O4 - Global Startup: DSLMON.lnk.disabled O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O14 - IERESET.INF: START_PAGE_URL=http://home.free.fr/ O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: InCD File System Service (InCDsrv) - AHEAD Software - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe O23 - Service: NeroNET - Ahead Software AG - C:\Program Files\Ahead\NeroNET\NeroNET.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: RA Server (Slave) - Unknown owner - C:\WINNT\Slave.exe (file missing) O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe O23 - Service: TabletService - Wacom Technology, Corp. - C:\WINNT\system32\Tablet.exe O23 - Service: wins(WINS) (wins) - Unknown owner - C:\WINNT\system32\winscntrl.exe (file missing) suis sous win 2000 merci a vous