sylvaine

Oui j'avais prévenu voila, et j'ai reçu une réponse aujourd'hui : "Bonjour, Nous avons bien reçu votre mail et nous vous remercions de nous avoir contactés. Nous vous remercions de nous avoir signalé ce dysfonctionnement. Effectivement, comme vous avez pu l’observer, il s’agissait d’un blacklistage temporaire chez Hotmail sur les adresses mail Voila. Les serveurs de Hotmail contrôlant régulièrement les flux potentiels de spams, il se peut que vous soyez à nouveau confronté à ce problème dans le futur et ce, de manière aléatoire. Nous vous assurons que nos équipes techniques travaillent actuellement à une stabilisation de cette situation. Nous vous prions de nous excuser pour les désagréments occasionnés. Bon surf et à bientôt !" Bon, apparemment ils s'en occupent... Pour l'instant j'ai toujours le même problème

Ouais, je vois à peu près le truc... Mais si voila n'a pas ce protocole, moi personnellement je ne peux toujours rien y faire si je comprends bien... A part me faire une adresse sur hotmail peut-être ? C'est quand même lourd, je me retrouve avec 3 adresses si je fais ça Au fait, est-ce qu'on peut rediriger ses mails d'une adresse hotmail vers Outlook ou Mail ?

C'est quoi un champ SPF ? Et on fait quoi alors ?

Je suis pas sûre, puisque j'ai le même problème à partir de mon adresse chez caramail.com... Je pense plutôt que le problème vient de chez Windows Live Hotmail, puisqu'apparemment ils ont des programmes destinés à éviter au maximum les courriers indésirables, mais c'est tellement au point que n'importe qui se retrouve bloqué sans raison... cf : http://postmaster.live.com/Services.aspx#SenderSolutions Le truc c'est que pour moi leur $@#*¤ de page est incompréhensible, et idem pour leur assistance technique (https://support.msn.com/eform.aspx?productKey=edfsmsbl&ct=eformts) Ce que je comprends c'est qu'ils te demandent d'aller passer 10 plombes à raconter toute ta vie sur leur $@#*¤ de Smart Data Service, pour ensuite te faire dire que ça marchera pas forcément mieux après, donc c'est bien lourd et ça a vraiment le don de m'énerver ce genre de truc. /Mode "coup de gueule super constructif et qui défoule même pas assez" off/

Mais j'ai rien fait moi !!! Truc bizarre aussi, ma mère a une adresse chez isi-fr.com et avec le même ordi, ça a l'air de marcher... Par contre pareil que moi pour son adresse chez voila... Bon, je vais essayer de contacter Orange pour voir ce qu'il en est... Merci pour vos réponses On se tient au courant

Ouais donc confirmation, même chose avec Caramail : "This is the Postfix program at host lmfilto02.st1.spray.net. I'm sorry to have to inform you that the message returned below could not be delivered to one or more destinations. For further assistance, please send mail to If you do so, please include this problem report. You can delete your own text from the message returned below. The Postfix program <raf_web@hotmail.com>: host mx4.hotmail.com[65.54.245.104] said: 550 SC-004 Mail rejected by Windows Live Hotmail for policy reasons. A block has been placed against your IP address because we have received complaints concerning mail coming from that IP address. If you are not an email/network admin please contact your E-mail/Internet Service Provider for help. Email/network admins, we recommend enrolling in our Junk E-Mail Reporting Program (JMRP), a free program intended to help senders remove unwanted recipients from their e-mail list: http://postmaster.live.com (in reply to MAIL FROM command) Reporting-MTA: dns; lmfilto02.st1.spray.net Arrival-Date: Mon, 12 Nov 2007 11:49:34 +0000 (GMT) Final-Recipient: rfc822; raf_web@hotmail.com Action: failed Status: 5.0.0 Diagnostic-Code: X-Postfix; host mx4.hotmail.com[65.54.245.104] said: 550 SC-004 Mail rejected by Windows Live Hotmail for policy reasons. A block has been placed against your IP address because we have received complaints concerning mail coming from that IP address. If you are not an email/network admin please contact your E-mail/Internet Service Provider for help. Email/network admins, we recommend enrolling in our Junk E-Mail Reporting Program (JMRP), a free program intended to help senders remove unwanted recipients from their e-mail list: http://postmaster.live.com (in reply to MAIL FROM command) Received: from localhost (localhost [127.0.0.1]) by lmfilto02-10025.st1.spray.net (Postfix) with ESMTP id 1D9362681E4F for <raf_web@hotmail.com>; Mon, 12 Nov 2007 11:49:34 +0000 (GMT) Received: from lmcodect3.st1.spray.net (localhost.localdomain [127.0.0.1]) by lmexpo02.st1.spray.net (Postfix) with SMTP id AAA3A1AA057 for <raf_web@hotmail.com>; Mon, 12 Nov 2007 12:43:46 +0000 (UTC) Received: from 212.78.203.47/32:42732 (from=;helo=lmcodect3.st1.spray.net) by eXpurgate V2.0.3.1, id=150420::071112124344-5C0E4000-21D9147F for <raf_web@hotmail.com>; Mon, 12 Nov 2007 12:43:44 -0000 Received: from lmcodect3.st1.spray.net (localhost.localdomain [127.0.0.1]) by lmcodect3.st1.spray.net (Postfix) with SMTP id 57F497DEB1 for <raf_web@hotmail.com>; Mon, 12 Nov 2007 11:44:23 +0000 (GMT) Comment: DomainKeys? See http://antispam.yahoo.com/domain keys DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=caramail.com; h=From:Subject; b=IxYudSEOYhkBBTZ2aa2ZID9OZDj0xLI/9TOPmj9yqMMWYdHLq7ZNXMrD6C3U/mdPAZPn1A+Sub 8ePSOLxsEsFSrEPLajepXnKuqdLm9S365FWctT7Y3oa8Mceodq9Cv0MLUZwHHxmTtsgz9rJbdIWG 3D6MR3EBBPA55vPOP9kjM=; From: "Sylvaine Arnaud" To: raf_web@hotmail.com Message-ID: <54069795912432@lycos-europe.com> X-Mailer: LycosMail X-Priority: 3 X-Originating-IP: 81.251.162.239 Mime-Version: 1.0 Subject: Re: Cherche chambre en coloc - St Henri/Lionel Groulx Date: Mon, 12 Nov 2007 11:44:23 +0000 Content-Type: multipart/mixed; boundary="=_NextPart_Lycos_12432540697960_ID" X-purgate: This mail is considered clean X-purgate: clean X-purgate-type: clean X-purgate-Ad: Checked for Spam by eleven - eXpurgate www.eXpurgate.net X-purgate-ID: 150420::071112124344-5C0E4000-21D9147F/0-0/0-0 X-purgate-size: 1365/302 X-Lycos-AS: 1.20 X-Lycos-AV: OK X-Lycos-IS: NO" ???????????????

J'ai une adresse chez Caramail mais certains mails me sont aussi revenus avec le même message... Je viens de refaire un test mais comme les e-mails arrivent toujours 10 ans après avec Caramail, je vais attendre un peu... C'est étrange parce que j'ai toujours envoyé des mails sur hotmail sans aucun souci. Ce problème a commencé à apparaître y'a 5 jours à peu près.

Help !!! C'est vraiment chiant ce truc

Voilà ce qui m' arrive récemment : Tous les e-mails que j'envoie vers des adresses xxx@hotmail.com me reviennent avec ce message : This is the SMTP Server program at host voila.fr. I'm sorry to have to inform you that your message could not be be delivered to one or more recipients. It's attached below. For further assistance, please send mail to <postmaster> If you do so, please include this problem report. You can delete your own text from the attached returned message. The SMTP Server program <xxx@hotmail.com>: host mx1.hotmail.com[65.54.244.136] said: 550 SC-004 Mail rejected by Windows Live Hotmail for policy reasons. A block has been placed against your IP address because we have received complaints concerning mail coming from that IP address. If you are not an email/network admin please contact your E-mail/Internet Service Provider for help. Email/network admins, we recommend enrolling in our Junk E-Mail Reporting Program (JMRP), a free program intended to help senders remove unwanted recipients from their e-mail list: http://postmaster.live.com (in reply to MAIL FROM command) ????????????????

Salut Excuse-moi, j'ai dû partir pour une semaine donc le PC était resté en standby pendant ce temps... Au démarrage il démarre bien en mode sélectif (pas en mode sans échec) donc comme tu dis, tout est normal, en fait. Par contre à chaque démarrage il continue de m'afficher ce message d'erreur : "Le système a récupéré d'une erreur sérieuse" Signature de l'erreur BCCode : 1000008e BCP1 : C0000005 BCP2 : 8056E2EA BCP3 : F7C3AAA0 BCP4 : 00000000 OSVer : 5_1_2600 SP : 2_0 product : 768_1 Les fichiers suivants seroont inclus dans le rapport d'erreurs : C:\DOCUME~1\Arnaud\LOCALS~1\Temp\WER881e.dir00\Mini080407-05.dmp C:\DOCUME~1\Arnaud\LOCAL~1\Temp\WER881e.dir00\sysdata.xml ---------------------------------------------------------------------------------------------------------- J'ai refait un rapport WinPFind3U Par contre quand je le lance il me dit : Windows - Pas de disque Exception Processing Message c0000013 Parameters 75afbf9c 4 75afbf9c 75afbf9c 2 fois (j'ai fait continuer) Voilà le rapport : WinPFind3 logfile created on: 15/08/2007 10:18:06 WinPFind3U by OldTimer - Version 1.0.39 Folder = C:\Documents and Settings\Arnaud\Bureau\WinPFind3u\ Microsoft Windows XP Service Pack 2 (Version = 5.1.2600) Internet Explorer (Version = 6.0.2900.2180) 511,48 Mb Total Physical Memory | 320,66 Mb Available Physical Memory | 62,69% Memory free 866,36 Mb Paging File | 712,09 Mb Available in Paging File | 82,19% Paging File free Paging file location(s): C:\pagefile.sys 384 768; %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 18,74 Gb Total Space | 0,91 Gb Free Space | 4,83% Space Free Drive D: | 19,53 Gb Total Space | 7,15 Gb Free Space | 36,59% Space Free E: Drive not present or media not loaded F: Drive not present or media not loaded Computer Name: ARNAUD Current User Name: Arnaud Logged in as Administrator. Current Boot Mode: Normal [Processes - Non-Microsoft Only] ftrtsvc.exe -> %System32%\FTRTSVC.exe -> France Telecom [Ver = 11.0 (4) | Size = 40960 bytes | Modified Date = 23/08/2004 15:49:56 | Attr = ] hpqimzone.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpqimzone.exe -> Hewlett-Packard Co. [Ver = 053.000.013.000 | Size = 479232 bytes | Modified Date = 12/05/2005 00:33:52 | Attr = ] hpqtra08.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpqtra08.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 282624 bytes | Modified Date = 11/05/2005 23:23:26 | Attr = ] hprblog.exe -> %ProgramFiles%\HP\Digital Imaging\Product Assistant\bin\hprblog.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 77824 bytes | Modified Date = 11/05/2005 23:16:22 | Attr = ] hpwuschd2.exe -> %ProgramFiles%\HP\HP Software Update\HPWuSchd2.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 49152 bytes | Modified Date = 11/05/2005 23:12:54 | Attr = ] hpzipm12.exe -> %System32%\HPZipm12.exe -> HP [Ver = 9, 0, 0, 0 | Size = 69632 bytes | Modified Date = 29/09/2004 12:14:36 | Attr = ] nvsvc32.exe -> %System32%\nvsvc32.exe -> NVIDIA Corporation [Ver = 6.14.10.8198 | Size = 131139 bytes | Modified Date = 10/12/2005 03:06:00 | Attr = ] winpfind3u.exe -> %UserDesktop%\WinPFind3u\WinPFind3U.exe -> OldTimer Tools [Ver = 1.0.38.0 | Size = 322048 bytes | Modified Date = 23/06/2007 15:15:54 | Attr = ] wkcalrem.exe -> %CommonProgramFiles%\Microsoft Shared\Works Shared\WkCalRem.exe -> MicrosoftÆ Corporation [Ver = 6.00.1911.0 | Size = 24633 bytes | Modified Date = 12/07/2000 19:22:38 | Attr = ] [Win32 Services - Non-Microsoft Only] (dmadmin) Service d'administration du Gestionnaire de disque logique [Win32_Shared | On_Demand | Stopped] -> %System32%\dmadmin.exe -> Microsoft Corp., Veritas Software [Ver = 2600.2180.503.0 | Size = 225280 bytes | Modified Date = 05/08/2004 14:00:00 | Attr = ] (FTRTSVC) France Telecom Routing Table Service [Win32_Own | Auto | Running] -> %System32%\FTRTSVC.exe -> France Telecom [Ver = 11.0 (4) | Size = 40960 bytes | Modified Date = 23/08/2004 15:49:56 | Attr = ] (IDriverT) InstallDriver Table Manager [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\InstallShield\Driver\11\Intel 32\IDriverT.exe -> Macrovision Corporation [Ver = 11.00.28844 | Size = 69632 bytes | Modified Date = 04/04/2005 00:41:10 | Attr = ] (NVSvc) NVIDIA Display Driver Service [Win32_Own | Auto | Running] -> %System32%\nvsvc32.exe -> NVIDIA Corporation [Ver = 6.14.10.8198 | Size = 131139 bytes | Modified Date = 10/12/2005 03:06:00 | Attr = ] (Pml Driver HPZ12) Pml Driver HPZ12 [Win32_Own | Auto | Running] -> %System32%\HPZipm12.exe -> HP [Ver = 9, 0, 0, 0 | Size = 69632 bytes | Modified Date = 29/09/2004 12:14:36 | Attr = ] [Registry - Non-Microsoft Only] < Run [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> HP Software Update -> %ProgramFiles%\HP\HP Software Update\HPWuSchd2.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 49152 bytes | Modified Date = 11/05/2005 23:12:54 | Attr = ] KernelFaultCheck -> -> File not found Microsoft Works Portfolio -> %ProgramFiles%\Microsoft Works\wkssb.exe -> MicrosoftÆ Corporation [Ver = 6.00.1911.0 | Size = 311350 bytes | Modified Date = 12/07/2000 19:22:18 | Attr = ] Microsoft Works Update Detection -> %ProgramFiles%\Microsoft Works\WkDetect.exe -> MicrosoftÆ Corporation [Ver = 6.00.1911.0 | Size = 28739 bytes | Modified Date = 04/08/2000 08:09:58 | Attr = ] NeroFilterCheck -> %System32%\NeroCheck.exe -> Ahead Software Gmbh [Ver = 1, 0, 0, 2 | Size = 155648 bytes | Modified Date = 09/07/2001 12:50:42 | Attr = R ] NvCplDaemon -> %System32%\nvcpl.dll [RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup] -> NVIDIA Corporation [Ver = 6.14.10.8198 | Size = 7311360 bytes | Modified Date = 10/12/2005 03:06:00 | Attr = ] NvMediaCenter -> %System32%\nvmctray.dll [RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit] -> NVIDIA Corporation [Ver = 6.14.10.8198 | Size = 86016 bytes | Modified Date = 10/12/2005 03:06:00 | Attr = ] nwiz -> %System32%\nwiz.exe -> [Ver = | Size = 1519616 bytes | Modified Date = 10/12/2005 03:06:00 | Attr = ] QuickTime Task -> %ProgramFiles%\QuickTime\qttask.exe -> Apple Computer, Inc. [Ver = 7.0.3 | Size = 155648 bytes | Modified Date = 24/06/2006 10:40:54 | Attr = ] WOOWATCH -> %ProgramFiles%\Wanadoo\Watch.exe -> France TÈlÈcom R&D [Ver = 11.0 (2) | Size = 20480 bytes | Modified Date = 23/08/2004 14:49:56 | Attr = ] WorksFUD -> %ProgramFiles%\Microsoft Works\wkfud.exe -> MicrosoftÆ Corporation [Ver = 6.00.1911.0 | Size = 24576 bytes | Modified Date = 12/07/2000 18:07:18 | Attr = ] < OptionalComponents [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\ -> IMAIL -> Installed = 1 -> MAPI -> Installed = 1 -> MSFS -> Installed = 1 -> < Run [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> WOOKIT -> %ProgramFiles%\Wanadoo\Shell.exe -> [Ver = 10.0 (63) | Size = 122880 bytes | Modified Date = 23/08/2004 14:50:00 | Attr = ] < Common Startup > -> C:\Documents and Settings\All Users\Menu DÈmarrer\Programmes\DÈmarrage -> %AllUsersStartup%\DÈmarrage rapide du logiciel HP Image Zone.lnk -> %ProgramFiles%\HP\Digital Imaging\bin\hpqthb08.exe -> Hewlett-Packard Co. [Ver = 053.000.013.000 | Size = 73728 bytes | Modified Date = 12/05/2005 00:49:24 | Attr = ] %AllUsersStartup%\HP Digital Imaging Monitor.lnk -> %ProgramFiles%\HP\Digital Imaging\bin\hpqtra08.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 282624 bytes | Modified Date = 11/05/2005 23:23:26 | Attr = ] %AllUsersStartup%\Lancement rapide d'Adobe Reader.lnk -> %ProgramFiles%\Adobe\Acrobat 7.0\Reader\reader_sl.exe -> Adobe Systems Incorporated [Ver = 7.0.5.2005092300 | Size = 29696 bytes | Modified Date = 23/09/2005 22:05:26 | Attr = ] %AllUsersStartup%\Rappels du Calendrier Microsoft Works.lnk -> %CommonProgramFiles%\Microsoft Shared\Works Shared\WkCalRem.exe -> MicrosoftÆ Corporation [Ver = 6.00.1911.0 | Size = 24633 bytes | Modified Date = 12/07/2000 19:22:38 | Attr = ] < SecurityProviders [HKLM] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders -> < Winlogon settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon settings [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < CurrentVersion Policy Settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{BDEADF00-C265-11D0-BCED-00A0C90AB50F} -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} -> 1073741857 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{0DF44EAA-FF21-4412-828E-260A8728E7F1} -> 32 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\dontdisplaylastusername -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticecaption -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticetext -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\shutdownwithoutlogon -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\undockwithoutlogon -> 1 -> < CurrentVersion Policy Settings [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DisableRegistryTools -> 0 -> < HOSTS File > (790 bytes) -> C:\WINDOWS\System32\drivers\etc\Hosts -> 127.0.0.1 localhost -> -> < Internet Explorer Settings > -> -> HKLM: Default_Page_URL -> http://www.microsoft.com/isapi/redir.dll?p...&ar=msnhome -> HKLM: Main\\Default_Search_URL -> http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch -> HKLM: Local Page -> %SystemRoot%\system32\blank.htm -> HKLM: Search Page -> http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch -> HKLM: Start Page -> http://www.microsoft.com/isapi/redir.dll?p...ER}&ar=home -> HKLM: CustomizeSearch -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm -> HKLM: SearchAssistant -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm -> HKCU: Local Page -> C:\WINDOWS\system32\blank.htm -> HKCU: Search Page -> http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch -> HKCU: Start Page -> http://www.orange.fr/ -> HKCU: URLSearchHooks\\{08C06D61-F1F3-4799-86F8-BE1A89362C85} [HKLM] -> %ProgramFiles%\Wanadoo\SearchPageURL.dll [search Class] -> [Ver = 1, 0, 0, 1 | Size = 57344 bytes | Modified Date = 06/12/2004 14:27:48 | Attr = ] HKCU: URLSearchHooks\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! Toolbar] -> Yahoo! Inc. [Ver = 2006, 10, 26, 1 | Size = 440384 bytes | Modified Date = 26/10/2006 11:28:40 | Attr = ] HKCU: ProxyEnable -> 0 -> HKCU: ProxyOverride -> -> < Trusted Sites > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> msn.com [ - ] -> -> < BHO's > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ -> {02478D38-C3F9-4EFB-9B51-7695ECA05670} [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! Toolbar Helper] -> Yahoo! Inc. [Ver = 2006, 10, 26, 1 | Size = 440384 bytes | Modified Date = 26/10/2006 11:28:40 | Attr = ] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [HKLM] -> %ProgramFiles%\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [Adobe PDF Reader Link Helper] -> Adobe Systems Incorporated [Ver = 7.0.9.2006121800 | Size = 59032 bytes | Modified Date = 18/12/2006 04:16:42 | Attr = ] < Internet Explorer Bars [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\ -> {9455301C-CF6B-11D3-A266-00C04F689C50} [HKLM] -> %CommonProgramFiles%\Microsoft Shared\Reference 2001\EROProj.dll [&Organise-notes Encarta] -> [Ver = | Size = 258048 bytes | Modified Date = 08/08/2000 23:08:30 | Attr = ] < Internet Explorer ToolBars [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar -> {EF99BD32-C1FB-11D2-892F-0090271D4F88} [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! Toolbar] -> Yahoo! Inc. [Ver = 2006, 10, 26, 1 | Size = 440384 bytes | Modified Date = 26/10/2006 11:28:40 | Attr = ] < Internet Explorer ToolBars [HKCU] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ -> WebBrowser\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! Toolbar] -> Yahoo! Inc. [Ver = 2006, 10, 26, 1 | Size = 440384 bytes | Modified Date = 26/10/2006 11:28:40 | Attr = ] < Internet Explorer Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ -> {9455301C-CF6B-11D3-A266-00C04F689C50} -> Reg Data - Value does not exist [buttonText: Organise-notes] -> File not found < User Agent Post Platform [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform -> Orange 7.4 ; NaviWoo1.1 -> IEAKFT -> SV1 -> -> < DNS Name Servers [HKLM] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ -> {7CFABC67-FEBF-4977-AA6C-5BC5F662C089} -> (VIA Rhine II Fast Ethernet Adapter) -> < Protocol Handlers [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ -> compta -> coNetIE.ocx -> File not found ipp -> Reg Data - Key not found -> File not found msdaipp -> Reg Data - Key not found -> File not found msencarta -> %CommonProgramFiles%\Microsoft Shared\Reference 2001\MSREF.DLL -> [Ver = | Size = 90112 bytes | Modified Date = 08/08/2000 15:57:12 | Attr = ] msero -> %CommonProgramFiles%\Microsoft Shared\Reference 2001\msero.dll -> [Ver = | Size = 143360 bytes | Modified Date = 08/08/2000 23:08:20 | Attr = ] msref -> %CommonProgramFiles%\Microsoft Shared\Reference 2001\MSREF.DLL -> [Ver = | Size = 90112 bytes | Modified Date = 08/08/2000 15:57:12 | Attr = ] skype4com -> %CommonProgramFiles%\Skype\Skype4COM.dll -> Skype Technologies [Ver = 1, 0, 26, 0 | Size = 1783384 bytes | Modified Date = 01/11/2006 16:21:20 | Attr = R ] < Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ -> {00B71CFB-6864-4346-A978-C0A14556272C} -> Checkers Class - CodeBase = http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab -> {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} -> MessengerStatsClient Class - CodeBase = http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab -> {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} -> ActiveScan Installer Class - CodeBase = http://acs.pandasoftware.com/activescan/as5free/asinst.cab -> {D27CDB6E-AE6D-11CF-96B8-444553540000} -> - CodeBase = http://download.macromedia.com/pub/shockwa...ash/swflash.cab -> [Registry - Additional Scans - Non-Microsoft Only] < Security Settings > -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirstRunDisabled -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\AntiVirusDisableNotify -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirewallDisableNotify -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\UpdatesDisableNotify -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\AntiVirusOverride -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirewallOverride -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\Type -> 32 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\Start -> 3 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\ErrorControl -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\ImagePath -> %SystemRoot%\system32\svchost.exe -k netsvcs -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\DisplayName -> Service de transfert intelligent en arriËre-plan -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\DependOnService -> RpcSs; -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\DependOnGroup -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\ObjectName -> LocalSystem -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\Description -> TransfËre des donnÈes entre les clients et les serveurs en t‚che de fond. Si le service BITS est dÈsactivÈ, les fonctionnalitÈs telles que Windows Update ne fonctionneront pas correctement. -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\FailureActions -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Parameters\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Parameters\\ServiceDll -> C:\WINDOWS\system32\qmgr.dll -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Security\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Security\\Security -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\ -> Root\LEGACY_BITS00 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\\Count -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\\NextInstance -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DependOnGroup -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DependOnService -> Netman;WinMgmt; -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Description -> Assure la traduction d'adresses de rÈseau, l'adressage, les services de rÈsolution de noms et/ou les services de prÈvention d'intrusion pour un rÈseau de petite entreprise ou un rÈseau domestique. -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DisplayName -> Pare-feu Windows / Partage de connexion Internet -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ErrorControl -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ImagePath -> %SystemRoot%\system32\svchost.exe -k netsvcs -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ObjectName -> LocalSystem -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Start -> 2 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Type -> 32 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch\\Epoch -> 11759 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\\ServiceDll -> %SystemRoot%\System32\ipnathlp.dll -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\%windir%\system32\sessmgr.exe -> %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\MSN Messenger\msnmsgr.exe -> C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\MSN Messenger\msncall.exe -> C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone) -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\1900:UDP -> 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\2869:TCP -> 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\10280:UDP -> 10280:UDP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\10281:UDP -> 10281:UDP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\10282:UDP -> 10282:UDP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\10283:UDP -> 10283:UDP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\10284:UDP -> 10284:UDP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\10243:TCP -> 10243:TCP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\EnableFirewall -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\DoNotAllowExceptions -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\DisableNotifications -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\%windir%\system32\sessmgr.exe -> %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe -> C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe -> C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe -> C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hposid01.exe -> C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe -> C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe -> C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe -> C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe -> C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe -> C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe -> C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe -> C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\MSN Messenger\msnmsgr.exe -> C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\MSN Messenger\msncall.exe -> C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone) -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Skype\Phone\Skype.exe -> C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Grisoft\AVG7\avginet.exe -> C:\Program Files\Grisoft\AVG7\avginet.exe:*:Enabled:avginet.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Grisoft\AVG7\avgamsvr.exe -> C:\Program Files\Grisoft\AVG7\avgamsvr.exe:*:Enabled:avgamsvr.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Grisoft\AVG7\avgcc.exe -> C:\Program Files\Grisoft\AVG7\avgcc.exe:*:Enabled:avgcc.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Grisoft\AVG7\avgemc.exe -> C:\Program Files\Grisoft\AVG7\avgemc.exe:*:Enabled:avgemc.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe -> C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe:*:Enabled:Kaspersky AV Scanner -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\1900:UDP -> 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\2869:TCP -> 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\10280:UDP -> 10280:UDP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\10281:UDP -> 10281:UDP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\10282:UDP -> 10282:UDP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\10283:UDP -> 10283:UDP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\10284:UDP -> 10284:UDP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\10243:TCP -> 10243:TCP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\IcmpSettings\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\IcmpSettings\\AllowOutboundSourceQuench -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\IcmpSettings\\AllowOutboundParameterProblem -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\IcmpSettings\\AllowOutboundTimeExceeded -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\IcmpSettings\\AllowRedirect -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\\ServiceUpgrade -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\InterfacesUnfirewalledAtUpdate\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\InterfacesUnfirewalledAtUpdate\\All -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\ -> Root\LEGACY_SHAREDACCESS00 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\\Count -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\\NextInstance -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Type -> 32 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Start -> 2 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ErrorControl -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ImagePath -> %systemroot%\system32\svchost.exe -k netsvcs -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\DisplayName -> Mises ‡ jour automatiques -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ObjectName -> LocalSystem -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Description -> Active le tÈlÈchargement et l'installation des mises ‡ jour Windows. Si ce service est dÈsactivÈ, cet ordinateur ne pourra pas utiliser la fonctionnalitÈ des mises ‡ jour automatiques ou le site Windows Update. -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Parameters\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Parameters\\ServiceDll -> C:\WINDOWS\system32\wuauserv.dll -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Security\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Security\\Security -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\ -> Root\LEGACY_WUAUSERV00 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\\Count -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\\NextInstance -> 1 -> < Uninstall List > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ -> {02020202-5D65-445A-B3B4-3DCE72BA0C6C} -> Atlas mondial Microsoft Encarta 2001 -> {03B1B42B-F6DE-41d9-8CFF-DC44E895C7A7} -> PhotoGallery -> {0611BD4E-4FE4-4a62-B0C0-18A4CC463428} -> CP_Package_Variety1 -> {09984AEC-6B9F-4ca7-B78D-CB44D4771DA3} -> Destinations -> {0B33B738-AD79-4E32-90C5-E67BFB10BBFF} -> AiO_Scan -> {0B69DA57-BC7D-461D-B7D6-2AA9F08869CD} -> QuickTime -> {15C19366-3261-4D69-BF40-C3E30241A264} -> OS Pack Works Suite -> {15EE79F4-4ED1-4267-9B0F-351009325D7D} -> HP Software Update -> {172975EB-9465-4861-95B5-C7BB6D3DE62A} -> DocumentViewer -> {17342E3B-0818-4A6F-BFF8-99476605ADD6} -> livebox -> {1A995D22-F711-4199-83D4-579B593A46C5} -> TMPGEnc DVD Author 1.6 -> {1C139D7D-9FEA-468d-A9C8-2A6E3BDE564A} -> CP_Package_Variety3 -> {20D4A895-748C-4D88-871C-FDB1695B0169} -> Platform -> {21DB3D90-D816-4092-A260-CA3F6B55A6DD} -> Sonic_PrimoSDK -> {23A7B376-BBEC-4e76-BBD7-0F155E70D74B} -> CP_Panorama1Config -> {2CADCEAB-D5DA-44D6-B5FC-7DEE87AB3C0C} -> Unload -> {30C19FF2-7FBA-4d09-B9DE-1659977F64F6} -> TrayApp -> {32BDCCB8-9DC8-496d-9DB1-F77510775BDB} -> InstantShareDevices -> {3462AC6D-A932-4E96-B4B7-801CF5BC88BD} -> Synchronisation de Works -> {350C940c-3D7C-4EE8-BAA9-00BCB3D54227} -> WebFldrs XP -> {36E47DA1-10E1-45d9-8B19-14D19607CDCF} -> CP_CalendarTemplates1 -> {37477865-A3F1-4772-AD43-AAFC6BCFF99F} -> MSXML 4.0 SP2 (KB927978) -> {3D5E5C0A-5B36-4F98-99A7-287F7DBDCE03} -> Skype Plugin Manager -> {3DE5E7D4-7B88-403C-A3FD-2017A8240C5B} -> Google Earth -> {457B00DC-314C-48E8-870E-BE04B2DCC1E9} -> Dolet Light for Finale -> {4D719053-5593-11D3-8F25-0060085C1758} -> Microsoft AutoRoute 2001 -> {4F41AD68-89F2-4262-A32C-2F70B01FCE9E} -> PhotorÈcit 3 pour Windows -> {53EE9E42-CECB-4C92-BF76-9CA65DAF8F1C} -> FullDPAppQFolder -> {54E3707F-808E-4fd4-95C9-15D1AB077E5D} -> NewCopy -> {56EE8B17-8274-418d-89AC-C057C5DB251E} -> RandMap -> {56F8AFC3-FA98-4ff1-9673-8A026CBF85BE} -> WebReg -> {5A01C58E-B0EC-49b9-AD71-7C0468688087} -> CP_Package_Basic1 -> {5B622B7A-60FB-4630-B11D-F121D20BCCD6} -> MarketResearch -> {5B79CFD1-6845-4158-9D7D-6BE89DF2C135} -> HP PSC & OfficeJet 5.3.B -> {5F26311C-B135-4F7F-B11E-8E650F83651E} -> DeviceFunctionQFolder -> {66BA8C26-AFE4-4408-807B-43E76B57EF53} -> SkinsHP1 -> {66E6CE0C-5A1E-430C-B40A-0C90FF1804A8} -> eSupportQFolder -> {6BB6627C-694F-4FDC-A3E5-C7F4BED4C724} -> DocProc -> {6F5E2F4A-377D-4700-B0E3-8F7F7507EA15} -> CustomerResearchQFolder -> {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} -> Microsoft .NET Framework 2.0 -> {75DEB69B-4B6C-11D4-B0CE-00AA00BCC218} -> Microsoft Works 6.0 -> {7850A6D2-CBEA-4728-9877-F1BEDEA9F619} -> AiOSoftware -> {7C03270C-4FAB-4F5C-B10D-52FEDA190790} -> DocumentViewerQFolder -> {7C9B95B7-B598-4398-B30F-7F6827192E6C} -> ProductContext -> {7E27304E-BAA2-4d90-A34E-76641FAFABB4} -> CP_AtenaShokunin1Config -> {9028040C-6000-11D3-8CFE-0050048383C9} -> Microsoft Office XP Professional avec FrontPage -> {923A7F5A-1E8C-4FBE-8DF6-85940A60A79F} -> Readme -> {9A394342-4A68-4EBA-85A6-55B559F4E700} -> Microsoft .NET Framework 1.1 French Language Pack -> {A195B13E-A5E3-4BAF-A995-7F70F445CD06} -> ScannerCopy -> {A5BB5365-EFB4-44c3-A7E2-EB59B7EFD23D} -> CueTour -> {AB5D51AE-EBC3-438D-872C-705C7C2084B0} -> DeviceManagementQFolder -> {AC76BA86-7AD7-1036-7B44-A70900000002} -> Adobe Reader 7.0.9 - FranÁais -> {B4D279F1-4309-49cc-A4B5-3A0D2E59C7B5} -> PanoStandAlone -> {B824B5C9-849F-4b9e-9EA7-6FD8CD8116DA} -> CP_Package_Variety2 -> {B996AE66-10DB-4ac5-B151-E8B4BFBC42FC} -> BufferChm -> {C506A18C-1469-4678-B094-F4EC9DAE6DB7} -> Scan -> {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} -> Microsoft .NET Framework 1.1 -> {CE24344F-DFD8-40C8-8FD8-C9740B5F25AC} -> Fax -> {D085A1B6-90A4-11D3-82B7-00C04FA309DE} -> Microsoft Money 2001 -> {D28FDA7D-15C6-48A2-9868-6BCB28BE6254} -> Microsoft Picture It! Photo 2001 -> {E22885AB-B503-46E2-8437-73BBC6BC5487} -> Windows Live Messenger -> {E3F90083-80D4-4b5a-87C7-E97E12F5516D} -> HPProductAssistant -> {EA103B64-C0E4-4C0E-A506-751590E1653D} -> SolutionCenter -> {F196AC50-7C95-42E1-9947-BDAB18BF3C8C} -> Microsoft .NET Framework 2.0 Language Pack - FRA -> {F4C2E5F5-2970-45f4-ABD3-C180C4D961C4} -> Status -> Audacity_is1 -> Audacity 1.2.4 -> CDex -> CDex extraction audio -> Ditoo(C:/Program files/Ditoo) -> Ditoo(C:/Program files/Ditoo) -> Finale 2003 -> Finale 2003 -> FranceTelecomUninstall_FTBrowser -> Navigateur Orange -> GestionnaireInternet.exe -> Orange -> HijackThis -> HijackThis 1.99.1 -> HP DeskJet 690C Series -> HP DeskJet Serie 690C (Supprimer uniquement) -> HP Document Viewer -> HP Document Viewer 5.3 -> HP Imaging Device Functions -> HP Imaging Device Functions 5.3 -> HP Photo & Imaging -> HP Image Zone 5.3 -> HP PSC 1500 series_Driver -> HP PSC 1500 series -> HP Solution Center & Imaging Support Tools -> HP Solution Center & Imaging Support Tools 5.3 -> HPExtendedCapabilities -> HP Extended Capabilities 5.3 -> InstallShield_{0B69DA57-BC7D-461D-B7D6-2AA9F08869CD} -> QuickTime -> Isacompta Windows(C:/isacowp) -> Isacompta Windows(C:/isacowp) -> KB873339 -> Correctif Windows XP - KB873339 -> KB885835 -> Correctif Windows XP - KB885835 -> KB885836 -> Correctif Windows XP - KB885836 -> KB885884 -> Correctif Windows XP - KB885884 -> KB886185 -> Correctif Windows XP - KB886185 -> KB887472 -> Correctif Windows XP - KB887472 -> KB887742 -> Correctif Windows XP - KB887742 -> KB888113 -> Correctif Windows XP - KB888113 -> KB888302 -> Correctif Windows XP - KB888302 -> KB890046 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB890046) -> KB890859 -> Correctif Windows XP - KB890859 -> KB891122 -> Windows Media Format SDK Hotfix - KB891122 -> KB891781 -> Correctif Windows XP - KB891781 -> KB892130 -> Windows Genuine Advantage Validation Tool (KB892130) -> KB893756 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB893756) -> KB893803v2 -> Windows Installer 3.1 (KB893803) -> KB894391 -> Mise ‡ jour pour Windows XP (KB894391) -> KB896358 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB896358) -> KB896422 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB896422) -> KB896423 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB896423) -> KB896424 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB896424) -> KB896428 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB896428) -> KB898461 -> Mise ‡ jour pour Windows XP (KB898461) -> KB899587 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB899587) -> KB899591 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB899591) -> KB900485 -> Mise ‡ jour pour Windows XP (KB900485) -> KB900725 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB900725) -> KB901017 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB901017) -> KB901214 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB901214) -> KB902400 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB902400) -> KB904706 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB904706) -> KB904942 -> Mise ‡ jour pour Windows XP (KB904942) -> KB905414 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB905414) -> KB905749 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB905749) -> KB908519 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB908519) -> KB908531 -> Mise ‡ jour pour Windows XP (KB908531) -> KB909520 -> Package de base Microsoft de service de chiffrement pour cartes ‡ puce -> KB910437 -> Mise ‡ jour pour Windows XP (KB910437) -> KB911280 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB911280) -> KB911562 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB911562) -> KB911564 -> Mise ‡ jour de sÈcuritÈ pour Lecteur Windows Media (KB911564) -> KB911567 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB911567) -> KB911927 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB911927) -> KB912919 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB912919) -> KB913433 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB913433) -> KB913580 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB913580) -> KB914388 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB914388) -> KB914389 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB914389) -> KB916281 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB916281) -> KB916595 -> Mise ‡ jour pour Windows XP (KB916595) -> KB917159 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB917159) -> KB917344 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB917344) -> KB917422 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB917422) -> KB917734_WMP10 -> Mise ‡ jour de sÈcuritÈ pour Lecteur Windows Media 10 (KB917734) -> KB917734_WMP9 -> Mise ‡ jour de sÈcuritÈ pour Lecteur Windows Media 9 (KB917734) -> KB917953 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB917953) -> KB918118 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB918118) -> KB918439 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB918439) -> KB918899 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB918899) -> KB919007 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB919007) -> KB920213 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB920213) -> KB920214 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB920214) -> KB920670 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB920670) -> KB920683 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB920683) -> KB920685 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB920685) -> KB920872 -> Mise ‡ jour pour Windows XP (KB920872) -> KB921398 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB921398) -> KB921883 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB921883) -> KB922582 -> Mise ‡ jour pour Windows XP (KB922582) -> KB922616 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB922616) -> KB922760 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB922760) -> KB922819 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB922819) -> KB923191 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB923191) -> KB923414 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB923414) -> KB923689 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB923689) -> KB923694 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB923694) -> KB923980 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB923980) -> KB924191 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB924191) -> KB924270 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB924270) -> KB924496 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB924496) -> KB924667 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB924667) -> KB925398_WMP64 -> Mise ‡ jour de sÈcuritÈ pour Lecteur Windows Media 6.4 (KB925398) -> KB925454 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB925454) -> KB925486 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB925486) -> KB925902 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB925902) -> KB926255 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB926255) -> KB926436 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB926436) -> KB927779 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB927779) -> KB927802 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB927802) -> KB927891 -> Mise ‡ jour pour Windows XP (KB927891) -> KB928090 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB928090) -> KB928255 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB928255) -> KB928365.T1_1ToU569_1 -> Security Update pour Microsoft .NET Framework 2.0 (KB928365) -> KB928843 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB928843) -> KB929123 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB929123) -> KB929338 -> Mise ‡ jour pour Windows XP (KB929338) -> KB929969 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB929969) -> KB930178 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB930178) -> KB930916 -> Mise ‡ jour pour Windows XP (KB930916) -> KB931261 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB931261) -> KB931768 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB931768) -> KB931784 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB931784) -> KB931836 -> Mise ‡ jour pour Windows XP (KB931836) -> KB932168 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB932168) -> KB933566 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB933566) -> KB935839 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB935839) -> KB935840 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB935840) -> LM 2.0 -> LM 2.0 -> M928366 -> Microsoft .NET Framework 1.1 Hotfix (KB928366) -> Machinist2DLL -> Machinist2DLL -> Microsoft .NET Framework 1.1 (1033) -> Microsoft .NET Framework 1.1 -> Microsoft .NET Framework 2.0 -> Microsoft .NET Framework 2.0 -> Microsoft .NET Framework 2.0 Language Pack - FRA -> Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA -> Mozilla (1.7.1) -> Mozilla (1.7.1) -> MSNINST -> MSN -> Navilog1 -> Navilog1 Version 2.0.5 -> Nero - Burning Rom!UninstallKey -> Nero OEM -> NeroVision!UninstallKey -> NeroVision Express 2 SE -> NMPUninstallKey -> Nero Media Player -> NVIDIA Drivers -> NVIDIA Drivers -> PhotoFiltre -> PhotoFiltre -> SharpEye Music Reader 2 -> SharpEye Music Reader 2 -> Shockwave -> Shockwave -> ShockwaveFlash -> Adobe Flash Player 9 ActiveX -> ShrinkTo5Basic -> ShrinkTo5Basic -> Skype_is1 -> Skype 3.0 -> VIA Audio Driver Setup Program -> VIA Audio Driver Setup Program -> VN_VUIns_Rhine_VIA -> VIA Rhine-Family Fast Ethernet Adapter -> WGA -> Windows Genuine Advantage Validation Tool (KB892130) -> WgaNotify -> Windows Genuine Advantage Notifications (KB905474) -> Windows Media Format Runtime -> Windows Media Format Runtime -> Windows Media Player -> Lecteur Windows Media†10 -> WMCSetup -> Windows Media Connect -> Works2001Setup -> Installation de Microsoft Works Suite 2001 -> Yahoo! Companion -> Yahoo! Toolbar -> Yahoo! Toolbar -> Yahoo! Toolbar -> [Files/Folders - Created Within 30 days] hiberfil.sys -> %SystemDrive%\hiberfil.sys -> [Ver = | Size = 536399872 bytes | Created Date = 02/01/1601 23:00:00 | Attr = HS] Internet Logs -> %SystemRoot%\Internet Logs -> [Folder | Created Date = 30/07/2007 13:45:55 | Attr = ] Process.exe -> %System32%\Process.exe -> http://www.beyondlogic.org [Ver = 2, 0, 0, 0 | Size = 53248 bytes | Created Date = 01/08/2007 18:31:43 | Attr = ] vsdata.dll -> %System32%\vsdata.dll -> Zone Labs, LLC [Ver = 7.0.362.000 | Size = 83432 bytes | Created Date = 30/07/2007 13:45:54 | Attr = ] vsutil_loc040c.dll -> %System32%\vsutil_loc040c.dll -> Zone Labs Inc. [Ver = 5.3.017.000 | Size = 54672 bytes | Created Date = 30/07/2007 13:47:50 | Attr = ] vsxml.dll -> %System32%\vsxml.dll -> Zone Labs, LLC [Ver = 7.0.362.000 | Size = 99816 bytes | Created Date = 30/07/2007 13:46:53 | Attr = ] zllictbl.dat -> %System32%\zllictbl.dat -> [Ver = | Size = 4212 bytes | Created Date = 30/07/2007 13:47:58 | Attr = H ] ZoneLabs -> %System32%\ZoneLabs -> [Folder | Created Date = 30/07/2007 13:46:52 | Attr = ] avg7core.sys -> %System32%\drivers\avg7core.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.476 | Size = 820928 bytes | Created Date = 30/07/2007 12:04:17 | Attr = ] avg7rsw.sys -> %System32%\drivers\avg7rsw.sys -> GRISOFT, s.r.o. [Ver = 7,0,0,340 | Size = 4224 bytes | Created Date = 30/07/2007 12:04:25 | Attr = ] avg7rsxp.sys -> %System32%\drivers\avg7rsxp.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.442 | Size = 27776 bytes | Created Date = 30/07/2007 12:04:25 | Attr = ] avgtdi.sys -> %System32%\drivers\avgtdi.sys -> GRISOFT, s.r.o. [Ver = 7,0,0,346 | Size = 4960 bytes | Created Date = 30/07/2007 12:04:27 | Attr = ] fidbox.dat -> %System32%\drivers\fidbox.dat -> [Ver = | Size = 176160 bytes | Created Date = 30/07/2007 20:27:24 | Attr = HS] fidbox.idx -> %System32%\drivers\fidbox.idx -> [Ver = | Size = 4064 bytes | Created Date = 30/07/2007 20:27:33 | Attr = HS] [Files/Folders - Modified Within 30 days] boot.ini -> %SystemDrive%\boot.ini -> [Ver = | Size = 216 bytes | Modified Date = 04/08/2007 23:16:48 | Attr = HS] Config.Msi -> %SystemDrive%\Config.Msi -> [Folder | Modified Date = 15/08/2007 09:54:42 | Attr = H ] hiberfil.sys -> %SystemDrive%\hiberfil.sys -> [Ver = | Size = 536399872 bytes | Modified Date = 15/08/2007 09:53:40 | Attr = HS] Program Files -> %ProgramFiles% -> [Folder | Modified Date = 31/07/2007 13:47:38 | Attr = R ] sqmdata00.sqm -> %SystemDrive%\sqmdata00.sqm -> [Ver = | Size = 232 bytes | Modified Date = 30/07/2007 21:35:26 | Attr = H ] sqmdata01.sqm -> %SystemDrive%\sqmdata01.sqm -> [Ver = | Size = 268 bytes | Modified Date = 30/07/2007 23:05:56 | Attr = H ] sqmdata02.sqm -> %SystemDrive%\sqmdata02.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 00:13:22 | Attr = H ] sqmdata03.sqm -> %SystemDrive%\sqmdata03.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 00:47:02 | Attr = H ] sqmdata04.sqm -> %SystemDrive%\sqmdata04.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 01:02:22 | Attr = H ] sqmdata05.sqm -> %SystemDrive%\sqmdata05.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 09:58:28 | Attr = H ] sqmdata06.sqm -> %SystemDrive%\sqmdata06.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 10:09:10 | Attr = H ] sqmdata07.sqm -> %SystemDrive%\sqmdata07.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 10:12:06 | Attr = H ] sqmdata08.sqm -> %SystemDrive%\sqmdata08.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 10:32:00 | Attr = H ] sqmdata09.sqm -> %SystemDrive%\sqmdata09.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 13:37:46 | Attr = H ] sqmdata10.sqm -> %SystemDrive%\sqmdata10.sqm -> [Ver = | Size = 232 bytes | Modified Date = 31/07/2007 13:37:46 | Attr = H ] sqmdata11.sqm -> %SystemDrive%\sqmdata11.sqm -> [Ver = | Size = 268 bytes | Modified Date = 01/08/2007 00:01:22 | Attr = H ] sqmdata12.sqm -> %SystemDrive%\sqmdata12.sqm -> [Ver = | Size = 268 bytes | Modified Date = 02/08/2007 22:22:54 | Attr = H ] sqmdata13.sqm -> %SystemDrive%\sqmdata13.sqm -> [Ver = | Size = 268 bytes | Modified Date = 03/08/2007 19:18:14 | Attr = H ] sqmdata14.sqm -> %SystemDrive%\sqmdata14.sqm -> [Ver = | Size = 268 bytes | Modified Date = 04/08/2007 11:49:30 | Attr = H ] sqmdata15.sqm -> %SystemDrive%\sqmdata15.sqm -> [Ver = | Size = 268 bytes | Modified Date = 04/08/2007 11:54:12 | Attr = H ] sqmdata16.sqm -> %SystemDrive%\sqmdata16.sqm -> [Ver = | Size = 268 bytes | Modified Date = 04/08/2007 11:56:32 | Attr = H ] sqmdata17.sqm -> %SystemDrive%\sqmdata17.sqm -> [Ver = | Size = 268 bytes | Modified Date = 04/08/2007 23:15:36 | Attr = H ] sqmdata18.sqm -> %SystemDrive%\sqmdata18.sqm -> [Ver = | Size = 268 bytes | Modified Date = 04/08/2007 23:17:12 | Attr = H ] sqmdata19.sqm -> %SystemDrive%\sqmdata19.sqm -> [Ver = | Size = 268 bytes | Modified Date = 30/07/2007 22:58:40 | Attr = H ] sqmnoopt00.sqm -> %SystemDrive%\sqmnoopt00.sqm -> [Ver = | Size = 244 bytes | Modified Date = 30/07/2007 22:58:40 | Attr = H ] sqmnoopt01.sqm -> %SystemDrive%\sqmnoopt01.sqm -> [Ver = | Size = 244 bytes | Modified Date = 30/07/2007 23:05:56 | Attr = H ] sqmnoopt02.sqm -> %SystemDrive%\sqmnoopt02.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 00:13:22 | Attr = H ] sqmnoopt03.sqm -> %SystemDrive%\sqmnoopt03.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 00:47:02 | Attr = H ] sqmnoopt04.sqm -> %SystemDrive%\sqmnoopt04.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 01:02:22 | Attr = H ] sqmnoopt05.sqm -> %SystemDrive%\sqmnoopt05.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 09:58:28 | Attr = H ] sqmnoopt06.sqm -> %SystemDrive%\sqmnoopt06.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 10:09:10 | Attr = H ] sqmnoopt07.sqm -> %SystemDrive%\sqmnoopt07.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 10:12:06 | Attr = H ] sqmnoopt08.sqm -> %SystemDrive%\sqmnoopt08.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 10:32:00 | Attr = H ] sqmnoopt09.sqm -> %SystemDrive%\sqmnoopt09.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 13:37:46 | Attr = H ] sqmnoopt10.sqm -> %SystemDrive%\sqmnoopt10.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 13:37:46 | Attr = H ] sqmnoopt11.sqm -> %SystemDrive%\sqmnoopt11.sqm -> [Ver = | Size = 244 bytes | Modified Date = 01/08/2007 00:01:22 | Attr = H ] sqmnoopt12.sqm -> %SystemDrive%\sqmnoopt12.sqm -> [Ver = | Size = 244 bytes | Modified Date = 02/08/2007 22:22:54 | Attr = H ] sqmnoopt13.sqm -> %SystemDrive%\sqmnoopt13.sqm -> [Ver = | Size = 244 bytes | Modified Date = 03/08/2007 19:18:14 | Attr = H ] sqmnoopt14.sqm -> %SystemDrive%\sqmnoopt14.sqm -> [Ver = | Size = 244 bytes | Modified Date = 04/08/2007 11:49:30 | Attr = H ] sqmnoopt15.sqm -> %SystemDrive%\sqmnoopt15.sqm -> [Ver = | Size = 244 bytes | Modified Date = 04/08/2007 11:54:12 | Attr = H ] sqmnoopt16.sqm -> %SystemDrive%\sqmnoopt16.sqm -> [Ver = | Size = 244 bytes | Modified Date = 04/08/2007 11:56:32 | Attr = H ] sqmnoopt17.sqm -> %SystemDrive%\sqmnoopt17.sqm -> [Ver = | Size = 244 bytes | Modified Date = 04/08/2007 23:15:36 | Attr = H ] sqmnoopt18.sqm -> %SystemDrive%\sqmnoopt18.sqm -> [Ver = | Size = 244 bytes | Modified Date = 04/08/2007 23:17:12 | Attr = H ] sqmnoopt19.sqm -> %SystemDrive%\sqmnoopt19.sqm -> [Ver = | Size = 244 bytes | Modified Date = 30/07/2007 21:35:26 | Attr = H ] WINDOWS -> %SystemRoot% -> [Folder | Modified Date = 15/08/2007 09:53:58 | Attr = ] bootstat.dat -> %SystemRoot%\bootstat.dat -> [Ver = | Size = 2048 bytes | Modified Date = 15/08/2007 09:53:42 | Attr = S] inf -> %SystemRoot%\inf -> [Folder | Modified Date = 30/07/2007 14:47:30 | Attr = H ] Installer -> %SystemRoot%\Installer -> [Folder | Modified Date = 15/08/2007 09:54:42 | Attr = HS] Internet Logs -> %SystemRoot%\Internet Logs -> [Folder | Modified Date = 31/07/2007 00:45:58 | Attr = ] Minidump -> %SystemRoot%\Minidump -> [Folder | Modified Date = 04/08/2007 11:57:28 | Attr = ] NeroDigital.ini -> %SystemRoot%\NeroDigital.ini -> [Ver = | Size = 135 bytes | Modified Date = 23/07/2007 12:16:52 | Attr = ] Prefetch -> %SystemRoot%\Prefetch -> [Folder | Modified Date = 15/08/2007 10:17:38 | Attr = ] system -> %SystemRoot%\system -> [Folder | Modified Date = 30/07/2007 21:23:44 | Attr = ] system.ini -> %SystemRoot%\system.ini -> [Ver = | Size = 227 bytes | Modified Date = 04/08/2007 23:16:48 | Attr = ] system32 -> %System32% -> [Folder | Modified Date = 04/08/2007 11:48:34 | Attr = ] Temp -> %SystemRoot%\Temp -> [Folder | Modified Date = 15/08/2007 10:17:50 | Attr = ] win.ini -> %SystemRoot%\win.ini -> [Ver = | Size = 628 bytes | Modified Date = 15/08/2007 09:54:42 | Attr = ] SA.DAT -> %SystemRoot%\tasks\SA.DAT -> [Ver = | Size = 6 bytes | Modified Date = 15/08/2007 09:53:44 | Attr = H ] CatRoot -> %System32%\CatRoot -> [Folder | Modified Date = 31/07/2007 00:46:10 | Attr = ] CatRoot2 -> %System32%\CatRoot2 -> [Folder | Modified Date = 31/07/2007 00:46:08 | Attr = ] drivers -> %System32%\drivers -> [Folder | Modified Date = 31/07/2007 10:15:42 | Attr = ] nvapps.xml -> %System32%\nvapps.xml -> [Ver = | Size = 43573 bytes | Modified Date = 15/08/2007 09:53:56 | Attr = ] wpa.dbl -> %System32%\wpa.dbl -> [Ver = | Size = 13646 bytes | Modified Date = 15/08/2007 09:53:58 | Attr = ] zllictbl.dat -> %System32%\zllictbl.dat -> [Ver = | Size = 4212 bytes | Modified Date = 30/07/2007 14:59:20 | Attr = H ] ZoneLabs -> %System32%\ZoneLabs -> [Folder | Modified Date = 31/07/2007 00:46:16 | Attr = ] avg7core.sys -> %System32%\drivers\avg7core.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.476 | Size = 820928 bytes | Modified Date = 30/07/2007 13:04:18 | Attr = ] avg7rsw.sys -> %System32%\drivers\avg7rsw.sys -> GRISOFT, s.r.o. [Ver = 7,0,0,340 | Size = 4224 bytes | Modified Date = 30/07/2007 13:04:26 | Attr = ] avg7rsxp.sys -> %System32%\drivers\avg7rsxp.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.442 | Size = 27776 bytes | Modified Date = 30/07/2007 13:04:26 | Attr = ] avgtdi.sys -> %System32%\drivers\avgtdi.sys -> GRISOFT, s.r.o. [Ver = 7,0,0,346 | Size = 4960 bytes | Modified Date = 30/07/2007 13:04:28 | Attr = ] fidbox.dat -> %System32%\drivers\fidbox.dat -> [Ver = | Size = 176160 bytes | Modified Date = 31/07/2007 00:45:42 | Attr = HS] fidbox.idx -> %System32%\drivers\fidbox.idx -> [Ver = | Size = 4064 bytes | Modified Date = 31/07/2007 00:39:56 | Attr = HS] [File String Scan - Non-Microsoft Only] @Alternate Data Stream - 0 bytes -> %SystemRoot%\Thumbs.db:encryptable -> PEC2 , -> %System32%\dfrg.msc -> [Ver = | Size = 41131 bytes | Modified Date = 05/08/2004 14:00:00 | Attr = ] winsync , -> %System32%\wbdbase.deu -> [Ver = | Size = 1309184 bytes | Modified Date = 05/08/2004 14:00:00 | Attr = ] WSUD , UPX0 , -> %System32%\dllcache\hwxjpn.dll -> [Ver = | Size = 13463552 bytes | Modified Date = 05/08/2004 14:00:00 | Attr = ] UPX0 , -> %System32%\dllcache\NT5IIS.CAT -> [Ver = | Size = 809394 bytes | Modified Date = 05/08/2004 14:00:00 | Attr = ] UPX! , FSG! , PEC2 , aspack , -> %System32%\drivers\avg7core.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.476 | Size = 820928 bytes | Modified Date = 30/07/2007 13:04:18 | Attr = ] < End of report >

Yop Oui je suis passée par msconfig, mais le problème c'est que dès que je décoche "safeboot", il repasse automatiquement en mode sélectif. J'ai essayé plusieurs fois mais ça reste pareil. Voilà le contenu du boot.ini : [boot loader] timeout=30 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP êdition familiale" /noexecute=optin /fastdetect

Génial Un énorme merci pour ton aide Je pense que c'est dû à un windowsmediaplayer foireux téléchargé par le petit frère sur un site de fesse foireux (étant donné la gueule des pop-ups ) lol Ci-joint les 2 rapports comme tu m'as demandé Par contre quelques problèmes encore : Je n'arrive pas à démarrer en mode normal, il se remet toujours en mode sélectif, comment faire pour le changer ? Et aussi, à chaque démarrage, toujours le message d'erreur de Windows : le système a récupéré d'une erreur sérieuse Je t'ai mis à la suite le rapport attaché à ce message d'erreur, si tu peux m'éclairer là-dessus... A + et merci encore Sylvaine [Win32 Services - Non-Microsoft Only] Service CQVRHNOHPUUO stopped successfully. Service CQVRHNOHPUUO deleted successfully. File C:\DOCUME~1\Arnaud\LOCALS~1\Temp\CQVRHNOHPUUO.exe not found. Service CSWESGSH stopped successfully. Service CSWESGSH deleted successfully. File C:\DOCUME~1\Arnaud\LOCALS~1\Temp\CSWESGSH.exe not found. Service FTRTSVC stopped successfully. Service W stopped successfully. Service W deleted successfully. File C:\DOCUME~1\Arnaud\LOCALS~1\Temp\W.exe not found. [Registry - Non-Microsoft Only] Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\NWEReboot deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\WOOTASKBARICON deleted successfully. [Files/Folders - Created Within 60 days] C:\WINDOWS\logo1_.exe moved successfully. C:\WINDOWS\rundl132.dll moved successfully. C:\WINDOWS\rundll16.exe moved successfully. C:\WINDOWS\zts2.exe moved successfully. C:\WINDOWS\SYSTEM32\iifgfgf.dll moved successfully. C:\WINDOWS\SYSTEM32\vcmgcd32.dll moved successfully. [Files/Folders - Modified Within 60 days] File C:\WINDOWS\logo1_.exe not found! File C:\WINDOWS\rundl132.dll not found! File C:\WINDOWS\rundll16.exe not found! File C:\WINDOWS\zts2.exe not found! File C:\WINDOWS\SYSTEM32\vcmgcd32.dll not found! < End of log > Created on 08/04/2007 11:48:32 -------------------------------------------------------------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 11:51:24, on 04/08/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\savedump.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\FTRTSVC.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe C:\WINDOWS\system32\msiexec.exe C:\WINDOWS\system32\wuauclt.exe C:\Documents and Settings\Arnaud\Bureau\HijackThis.exe C:\WINDOWS\system32\msiexec.exe C:\WINDOWS\system32\MsiExec.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe" O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - Global Startup: DÈmarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ? O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2001\EROProj.dll O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU) O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O18 - Protocol: compta - {365B8213-2402-48CF-9907-A4E4A757DE38} - coNetIE.ocx (file missing) O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe -------------------------------------------------------------------------------------------------------- rapport d'erreur Windows : les fichiers suivants seront inscrits dans le rapport d'erreur : C:\DOCUME~1\Arnaud\LOCALS~1\Temp\WERb604.dir00\Mini080407-02.dmp C:\DOCUME~1\Arnaud\LOCALS~1\Temp\WERb604.dir00\sysdata.xml

J'ai oublié de dire : Je n'ai pas fait ces manips en mode sans échec, j'espère que c'est pas grave D'ailleurs quand je vais dans exécuter - msconfig et que j'essaye de switcher en mode normal dans "général", il se met automatiquement en safeboot dans boot.ini Et si je veux décocher le safeboot, j'ai pas le choix de démarrer en mode sélectif (avec fichier boot.ini modifié), je ne sais pas si c'est normal. En fait je suis donc tout le temps en mode sélectif. Voilà au cas où le rapport Navilog que j'ai fait hier, il y a quelques fichiers qui n'apparaissent plus aujourd'hui donc peut-être supprimés entre temps : Search Navipromo version 2.0.5 commencÈ le 30/07/2007 ‡ 23:33:33,16 !!! Attention,ce rapport peut indiquer des fichiers/programmes lÈgitimes!!! !!! Poster ce rapport sur le forum pour le faire analyser !!! !!! Ne pas lancer la partie dÈsinfection sans l'avis d'un spÈcialiste !!! Fix lancÈ depuis C:\Program Files\navilog1 Mise a jour le 01.07.2007 a 12h00 by IL-MAFIOSO ExecutÈ en mode normal *** Recherche Programmes installes *** *** Recherche dossiers dans C:\WINDOWS *** *** Recherche dossiers dans C:\Program Files *** *** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data *** *** Recherche dossiers dans C:\Documents and Settings\Arnaud\Application Data *** *** Recherche avec BlackLight Engine/F-secure *** BlackLight Engine est un produit de F-secure, pour + d'infos : http://www.f-secure.com/blacklight/blacklight_help.html Fichier(s) cachÈ(s) dans C:\WINDOWS\system32 : c:\WINDOWS\system32\rfwiibv.dat C:\windows\system32\rfwiibv.exe c:\WINDOWS\system32\rfwiibv_nav.dat c:\WINDOWS\system32\rfwiibv_navps.dat Processus cachÈ(s) dans C:\WINDOWS\system32 : C:\windows\system32\rfwiibv.exe *** Recherche fichiers *** C:\WINDOWS\pack.epk trouvÈ ! C:\WINDOWS\system32\nvs2.inf trouvÈ ! *** Recherche cles registre *** Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs] Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage] Recherche ClÈ Magic Control HKEY_CURRENT_USER\Software\Lanconfig trouvÈ ! *** Module de Recherche complÈmentaire *** (Recherche fichiers spÈcifiques) 1)Recherche fichiers connus: 2)Recherche Heuristique : * C:\WINDOWS\system32\rfwiibv.dat trouvÈ ! ** C:\WINDOWS\system32\rfwiibv.dat trouvÈ ! *** **** C:\WINDOWS\system32\rfwiibv_navps.dat trouvÈ ! ***** ****** ******* ******** 3)Recherche Certificats : Certificat Egroup trouvÈ ! *** Analyse TerminÈ le 30/07/2007 ‡ 23:45:54,62 ***

Salut et merci beaucoup pour ton aide Ne t'inquiète pas, le PC n'est même pas connecté physiquement au modem, c'est mon Mac qui est connecté et je fais les transferts avec une clé usb comme tu dis. Voilà le résultat des rapports Navilog et WinPFind3U Par contre, je me suis permis de cocher "60 days" au lieu de "30 days" car l'infection date d'il y a + d'un mois, en fait. Je n'étais pas chez mes parents à ce moment-là mais je sais qu'il y avait déjà des dégâts. J'espère que j'ai bien fait (sinon je referai la manip). --------------------------------------------------------------------------------------------------------- Search Navipromo version 2.0.5 commencÈ le 01/08/2007 ‡ 19:31:57,89 !!! Attention,ce rapport peut indiquer des fichiers/programmes lÈgitimes!!! !!! Poster ce rapport sur le forum pour le faire analyser !!! !!! Ne pas lancer la partie dÈsinfection sans l'avis d'un spÈcialiste !!! Fix lancÈ depuis C:\Program Files\navilog1 Mise a jour le 01.07.2007 a 12h00 by IL-MAFIOSO ExecutÈ en mode normal *** Recherche Programmes installes *** *** Recherche dossiers dans C:\WINDOWS *** *** Recherche dossiers dans C:\Program Files *** *** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data *** *** Recherche dossiers dans C:\Documents and Settings\Arnaud\Application Data *** *** Recherche avec BlackLight Engine/F-secure *** BlackLight Engine est un produit de F-secure, pour + d'infos : http://www.f-secure.com/blacklight/blacklight_help.html F-SECURE BLACKLIGHT ROOTKIT ELIMINATOR ====================================== Copyright 2005-2006 F-Secure Corporation. All rights reserved. This is a beta version. It will expire on 1st of October, 2007. Version information: 2.2.1064. [+] Started on 08/01/07 at 19:31:59. [+] Initializing ... [+] Starting scan, press Ctrl-C to abort. [+] Scanning for hidden items ............................................................................................. [+] Scan complete. [+] Summary: 0 hidden item(s) found, 0 scheduled for renaming. [+] Exited on 08/01/07 at 19:41:48 (return code = 0). *** Recherche fichiers *** *** Recherche cles registre *** Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs] Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage] Recherche ClÈ Magic Control *** Module de Recherche complÈmentaire *** (Recherche fichiers spÈcifiques) 1)Recherche fichiers connus: 2)Recherche Heuristique : * ** *** **** ***** ****** ******* ******** 3)Recherche Certificats : *** Analyse TerminÈ le 01/08/2007 ‡ 19:42:17,85 *** ------------------------------------------------------------------------------------------------------------ WinPFind3 logfile created on: 01/08/2007 19:46:11 WinPFind3U by OldTimer - Version 1.0.39 Folder = C:\Documents and Settings\Arnaud\Bureau\WinPFind3u\ Microsoft Windows XP Service Pack 2 (Version = 5.1.2600) Internet Explorer (Version = 6.0.2900.2180) 511,48 Mb Total Physical Memory | 316,98 Mb Available Physical Memory | 61,97% Memory free 866,36 Mb Paging File | 714,40 Mb Available in Paging File | 82,46% Paging File free Paging file location(s): C:\pagefile.sys 384 768; %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 18,74 Gb Total Space | 0,98 Gb Free Space | 5,22% Space Free Drive D: | 19,53 Gb Total Space | 7,01 Gb Free Space | 35,88% Space Free E: Drive not present or media not loaded F: Drive not present or media not loaded Computer Name: ARNAUD Current User Name: Arnaud Logged in as Administrator. Current Boot Mode: Normal [Processes - Non-Microsoft Only] ftrtsvc.exe -> %System32%\FTRTSVC.exe -> France Telecom [Ver = 11.0 (4) | Size = 40960 bytes | Modified Date = 23/08/2004 15:49:56 | Attr = ] hpqimzone.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpqimzone.exe -> Hewlett-Packard Co. [Ver = 053.000.013.000 | Size = 479232 bytes | Modified Date = 12/05/2005 00:33:52 | Attr = ] hpqtra08.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpqtra08.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 282624 bytes | Modified Date = 11/05/2005 23:23:26 | Attr = ] hprblog.exe -> %ProgramFiles%\HP\Digital Imaging\Product Assistant\bin\hprblog.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 77824 bytes | Modified Date = 11/05/2005 23:16:22 | Attr = ] hpwuschd2.exe -> %ProgramFiles%\HP\HP Software Update\HPWuSchd2.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 49152 bytes | Modified Date = 11/05/2005 23:12:54 | Attr = ] hpzipm12.exe -> %System32%\HPZipm12.exe -> HP [Ver = 9, 0, 0, 0 | Size = 69632 bytes | Modified Date = 29/09/2004 12:14:36 | Attr = ] nvsvc32.exe -> %System32%\nvsvc32.exe -> NVIDIA Corporation [Ver = 6.14.10.8198 | Size = 131139 bytes | Modified Date = 10/12/2005 03:06:00 | Attr = ] taskbaricon.exe -> %ProgramFiles%\Wanadoo\TaskBarIcon.exe -> France TÈlÈcom R&D [Ver = 5.9 (1) | Size = 61440 bytes | Modified Date = 05/10/2004 17:00:12 | Attr = ] winpfind3u.exe -> %UserDesktop%\WinPFind3u\WinPFind3U.exe -> OldTimer Tools [Ver = 1.0.38.0 | Size = 322048 bytes | Modified Date = 23/06/2007 15:15:54 | Attr = ] wkcalrem.exe -> %CommonProgramFiles%\Microsoft Shared\Works Shared\WkCalRem.exe -> MicrosoftÆ Corporation [Ver = 6.00.1911.0 | Size = 24633 bytes | Modified Date = 12/07/2000 19:22:38 | Attr = ] [Win32 Services - Non-Microsoft Only] (CQVRHNOHPUUO) CQVRHNOHPUUO [Win32_Own | On_Demand | Stopped] -> %SystemDrive%\DOCUME~1\Arnaud\LOCALS~1\Temp\CQVRHNOHPUUO.exe -> File not found (CSWESGSH) CSWESGSH [Win32_Own | On_Demand | Stopped] -> %SystemDrive%\DOCUME~1\Arnaud\LOCALS~1\Temp\CSWESGSH.exe -> File not found (dmadmin) Service d'administration du Gestionnaire de disque logique [Win32_Shared | On_Demand | Stopped] -> %System32%\dmadmin.exe -> Microsoft Corp., Veritas Software [Ver = 2600.2180.503.0 | Size = 225280 bytes | Modified Date = 05/08/2004 14:00:00 | Attr = ] (FTRTSVC) France Telecom Routing Table Service [Win32_Own | Auto | Running] -> %System32%\FTRTSVC.exe -> France Telecom [Ver = 11.0 (4) | Size = 40960 bytes | Modified Date = 23/08/2004 15:49:56 | Attr = ] (IDriverT) InstallDriver Table Manager [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\InstallShield\Driver\11\Intel 32\IDriverT.exe -> Macrovision Corporation [Ver = 11.00.28844 | Size = 69632 bytes | Modified Date = 04/04/2005 00:41:10 | Attr = ] (NVSvc) NVIDIA Display Driver Service [Win32_Own | Auto | Running] -> %System32%\nvsvc32.exe -> NVIDIA Corporation [Ver = 6.14.10.8198 | Size = 131139 bytes | Modified Date = 10/12/2005 03:06:00 | Attr = ] (Pml Driver HPZ12) Pml Driver HPZ12 [Win32_Own | Auto | Running] -> %System32%\HPZipm12.exe -> HP [Ver = 9, 0, 0, 0 | Size = 69632 bytes | Modified Date = 29/09/2004 12:14:36 | Attr = ] (W) W [Win32_Own | On_Demand | Stopped] -> %SystemDrive%\DOCUME~1\Arnaud\LOCALS~1\Temp\W.exe -> File not found [Registry - Non-Microsoft Only] < Run [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> HP Software Update -> %ProgramFiles%\HP\HP Software Update\HPWuSchd2.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 49152 bytes | Modified Date = 11/05/2005 23:12:54 | Attr = ] Microsoft Works Portfolio -> %ProgramFiles%\Microsoft Works\wkssb.exe -> MicrosoftÆ Corporation [Ver = 6.00.1911.0 | Size = 311350 bytes | Modified Date = 12/07/2000 19:22:18 | Attr = ] Microsoft Works Update Detection -> %ProgramFiles%\Microsoft Works\WkDetect.exe -> MicrosoftÆ Corporation [Ver = 6.00.1911.0 | Size = 28739 bytes | Modified Date = 04/08/2000 08:09:58 | Attr = ] NeroFilterCheck -> %System32%\NeroCheck.exe -> Ahead Software Gmbh [Ver = 1, 0, 0, 2 | Size = 155648 bytes | Modified Date = 09/07/2001 12:50:42 | Attr = R ] NvCplDaemon -> %System32%\nvcpl.dll [RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup] -> NVIDIA Corporation [Ver = 6.14.10.8198 | Size = 7311360 bytes | Modified Date = 10/12/2005 03:06:00 | Attr = ] NvMediaCenter -> %System32%\nvmctray.dll [RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit] -> NVIDIA Corporation [Ver = 6.14.10.8198 | Size = 86016 bytes | Modified Date = 10/12/2005 03:06:00 | Attr = ] NWEReboot -> -> File not found nwiz -> %System32%\nwiz.exe -> [Ver = | Size = 1519616 bytes | Modified Date = 10/12/2005 03:06:00 | Attr = ] QuickTime Task -> %ProgramFiles%\QuickTime\qttask.exe -> Apple Computer, Inc. [Ver = 7.0.3 | Size = 155648 bytes | Modified Date = 24/06/2006 10:40:54 | Attr = ] WOOTASKBARICON -> %SystemDrive%\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe -> File not found WOOWATCH -> %ProgramFiles%\Wanadoo\Watch.exe -> France TÈlÈcom R&D [Ver = 11.0 (2) | Size = 20480 bytes | Modified Date = 23/08/2004 14:49:56 | Attr = ] WorksFUD -> %ProgramFiles%\Microsoft Works\wkfud.exe -> MicrosoftÆ Corporation [Ver = 6.00.1911.0 | Size = 24576 bytes | Modified Date = 12/07/2000 18:07:18 | Attr = ] < OptionalComponents [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\ -> IMAIL -> Installed = 1 -> MAPI -> Installed = 1 -> MSFS -> Installed = 1 -> < Run [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> WOOKIT -> %ProgramFiles%\Wanadoo\Shell.exe -> [Ver = 10.0 (63) | Size = 122880 bytes | Modified Date = 23/08/2004 14:50:00 | Attr = ] < Common Startup > -> C:\Documents and Settings\All Users\Menu DÈmarrer\Programmes\DÈmarrage -> %AllUsersStartup%\DÈmarrage rapide du logiciel HP Image Zone.lnk -> %ProgramFiles%\HP\Digital Imaging\bin\hpqthb08.exe -> Hewlett-Packard Co. [Ver = 053.000.013.000 | Size = 73728 bytes | Modified Date = 12/05/2005 00:49:24 | Attr = ] %AllUsersStartup%\HP Digital Imaging Monitor.lnk -> %ProgramFiles%\HP\Digital Imaging\bin\hpqtra08.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 282624 bytes | Modified Date = 11/05/2005 23:23:26 | Attr = ] %AllUsersStartup%\Lancement rapide d'Adobe Reader.lnk -> %ProgramFiles%\Adobe\Acrobat 7.0\Reader\reader_sl.exe -> Adobe Systems Incorporated [Ver = 7.0.5.2005092300 | Size = 29696 bytes | Modified Date = 23/09/2005 22:05:26 | Attr = ] %AllUsersStartup%\Rappels du Calendrier Microsoft Works.lnk -> %CommonProgramFiles%\Microsoft Shared\Works Shared\WkCalRem.exe -> MicrosoftÆ Corporation [Ver = 6.00.1911.0 | Size = 24633 bytes | Modified Date = 12/07/2000 19:22:38 | Attr = ] < SecurityProviders [HKLM] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders -> < Winlogon settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < Winlogon settings [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> < CurrentVersion Policy Settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{BDEADF00-C265-11D0-BCED-00A0C90AB50F} -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} -> 1073741857 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{0DF44EAA-FF21-4412-828E-260A8728E7F1} -> 32 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\dontdisplaylastusername -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticecaption -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticetext -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\shutdownwithoutlogon -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\undockwithoutlogon -> 1 -> < CurrentVersion Policy Settings [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\ -> -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DisableRegistryTools -> 0 -> < HOSTS File > (790 bytes) -> C:\WINDOWS\System32\drivers\etc\Hosts -> 127.0.0.1 localhost -> -> < Internet Explorer Settings > -> -> HKLM: Default_Page_URL -> http://www.microsoft.com/isapi/redir.dll?p...&ar=msnhome -> HKLM: Main\\Default_Search_URL -> http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch -> HKLM: Local Page -> %SystemRoot%\system32\blank.htm -> HKLM: Search Page -> http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch -> HKLM: Start Page -> http://www.microsoft.com/isapi/redir.dll?p...ER}&ar=home -> HKLM: CustomizeSearch -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm -> HKLM: SearchAssistant -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm -> HKCU: Local Page -> C:\WINDOWS\system32\blank.htm -> HKCU: Search Page -> http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch -> HKCU: Start Page -> http://www.orange.fr/ -> HKCU: URLSearchHooks\\{08C06D61-F1F3-4799-86F8-BE1A89362C85} [HKLM] -> %ProgramFiles%\Wanadoo\SearchPageURL.dll [search Class] -> [Ver = 1, 0, 0, 1 | Size = 57344 bytes | Modified Date = 06/12/2004 14:27:48 | Attr = ] HKCU: URLSearchHooks\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! Toolbar] -> Yahoo! Inc. [Ver = 2006, 10, 26, 1 | Size = 440384 bytes | Modified Date = 26/10/2006 11:28:40 | Attr = ] HKCU: ProxyEnable -> 0 -> HKCU: ProxyOverride -> -> < Trusted Sites > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> msn.com [ - ] -> -> < BHO's > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ -> {02478D38-C3F9-4EFB-9B51-7695ECA05670} [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! Toolbar Helper] -> Yahoo! Inc. [Ver = 2006, 10, 26, 1 | Size = 440384 bytes | Modified Date = 26/10/2006 11:28:40 | Attr = ] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [HKLM] -> %ProgramFiles%\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [Adobe PDF Reader Link Helper] -> Adobe Systems Incorporated [Ver = 7.0.9.2006121800 | Size = 59032 bytes | Modified Date = 18/12/2006 04:16:42 | Attr = ] < Internet Explorer Bars [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\ -> {9455301C-CF6B-11D3-A266-00C04F689C50} [HKLM] -> %CommonProgramFiles%\Microsoft Shared\Reference 2001\EROProj.dll [&Organise-notes Encarta] -> [Ver = | Size = 258048 bytes | Modified Date = 08/08/2000 23:08:30 | Attr = ] < Internet Explorer ToolBars [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar -> {EF99BD32-C1FB-11D2-892F-0090271D4F88} [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! Toolbar] -> Yahoo! Inc. [Ver = 2006, 10, 26, 1 | Size = 440384 bytes | Modified Date = 26/10/2006 11:28:40 | Attr = ] < Internet Explorer ToolBars [HKCU] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ -> WebBrowser\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! Toolbar] -> Yahoo! Inc. [Ver = 2006, 10, 26, 1 | Size = 440384 bytes | Modified Date = 26/10/2006 11:28:40 | Attr = ] < Internet Explorer Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ -> {9455301C-CF6B-11D3-A266-00C04F689C50} -> Reg Data - Value does not exist [buttonText: Organise-notes] -> File not found < User Agent Post Platform [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform -> Orange 7.4 ; NaviWoo1.1 -> IEAKFT -> SV1 -> -> < DNS Name Servers [HKLM] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ -> {7CFABC67-FEBF-4977-AA6C-5BC5F662C089} -> (VIA Rhine II Fast Ethernet Adapter) -> < Protocol Handlers [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ -> compta -> coNetIE.ocx -> File not found ipp -> Reg Data - Key not found -> File not found msdaipp -> Reg Data - Key not found -> File not found msencarta -> %CommonProgramFiles%\Microsoft Shared\Reference 2001\MSREF.DLL -> [Ver = | Size = 90112 bytes | Modified Date = 08/08/2000 15:57:12 | Attr = ] msero -> %CommonProgramFiles%\Microsoft Shared\Reference 2001\msero.dll -> [Ver = | Size = 143360 bytes | Modified Date = 08/08/2000 23:08:20 | Attr = ] msref -> %CommonProgramFiles%\Microsoft Shared\Reference 2001\MSREF.DLL -> [Ver = | Size = 90112 bytes | Modified Date = 08/08/2000 15:57:12 | Attr = ] skype4com -> %CommonProgramFiles%\Skype\Skype4COM.dll -> Skype Technologies [Ver = 1, 0, 26, 0 | Size = 1783384 bytes | Modified Date = 01/11/2006 16:21:20 | Attr = R ] < Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ -> {00B71CFB-6864-4346-A978-C0A14556272C} -> Checkers Class - CodeBase = http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab -> {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} -> MessengerStatsClient Class - CodeBase = http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab -> {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} -> ActiveScan Installer Class - CodeBase = http://acs.pandasoftware.com/activescan/as5free/asinst.cab -> {D27CDB6E-AE6D-11CF-96B8-444553540000} -> - CodeBase = http://download.macromedia.com/pub/shockwa...ash/swflash.cab -> [Registry - Additional Scans - Non-Microsoft Only] < Security Settings > -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirstRunDisabled -> 1 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\AntiVirusDisableNotify -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirewallDisableNotify -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\UpdatesDisableNotify -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\AntiVirusOverride -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirewallOverride -> 0 -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall\ -> -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\Type -> 32 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\Start -> 3 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\ErrorControl -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\ImagePath -> %SystemRoot%\system32\svchost.exe -k netsvcs -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\DisplayName -> Service de transfert intelligent en arriËre-plan -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\DependOnService -> RpcSs; -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\DependOnGroup -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\ObjectName -> LocalSystem -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\Description -> TransfËre des donnÈes entre les clients et les serveurs en t‚che de fond. Si le service BITS est dÈsactivÈ, les fonctionnalitÈs telles que Windows Update ne fonctionneront pas correctement. -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\FailureActions -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Parameters\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Parameters\\ServiceDll -> C:\WINDOWS\system32\qmgr.dll -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Security\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Security\\Security -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\ -> Root\LEGACY_BITS00 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\\Count -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\\NextInstance -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DependOnGroup -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DependOnService -> Netman;WinMgmt; -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Description -> Assure la traduction d'adresses de rÈseau, l'adressage, les services de rÈsolution de noms et/ou les services de prÈvention d'intrusion pour un rÈseau de petite entreprise ou un rÈseau domestique. -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DisplayName -> Pare-feu Windows / Partage de connexion Internet -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ErrorControl -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ImagePath -> %SystemRoot%\system32\svchost.exe -k netsvcs -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ObjectName -> LocalSystem -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Start -> 2 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Type -> 32 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch\\Epoch -> 11735 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\\ServiceDll -> %SystemRoot%\System32\ipnathlp.dll -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\%windir%\system32\sessmgr.exe -> %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\MSN Messenger\msnmsgr.exe -> C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\MSN Messenger\msncall.exe -> C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone) -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\1900:UDP -> 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\2869:TCP -> 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\10280:UDP -> 10280:UDP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\10281:UDP -> 10281:UDP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\10282:UDP -> 10282:UDP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\10283:UDP -> 10283:UDP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\10284:UDP -> 10284:UDP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\10243:TCP -> 10243:TCP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\EnableFirewall -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\DoNotAllowExceptions -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\DisableNotifications -> 0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\%windir%\system32\sessmgr.exe -> %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe -> C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe -> C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe -> C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hposid01.exe -> C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe -> C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe -> C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe -> C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe -> C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe -> C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe -> C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe -> C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\MSN Messenger\msnmsgr.exe -> C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\MSN Messenger\msncall.exe -> C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone) -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Skype\Phone\Skype.exe -> C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Grisoft\AVG7\avginet.exe -> C:\Program Files\Grisoft\AVG7\avginet.exe:*:Enabled:avginet.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Grisoft\AVG7\avgamsvr.exe -> C:\Program Files\Grisoft\AVG7\avgamsvr.exe:*:Enabled:avgamsvr.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Grisoft\AVG7\avgcc.exe -> C:\Program Files\Grisoft\AVG7\avgcc.exe:*:Enabled:avgcc.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Grisoft\AVG7\avgemc.exe -> C:\Program Files\Grisoft\AVG7\avgemc.exe:*:Enabled:avgemc.exe -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe -> C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe:*:Enabled:Kaspersky AV Scanner -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\1900:UDP -> 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\2869:TCP -> 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\10280:UDP -> 10280:UDP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\10281:UDP -> 10281:UDP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\10282:UDP -> 10282:UDP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\10283:UDP -> 10283:UDP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\10284:UDP -> 10284:UDP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\10243:TCP -> 10243:TCP:LocalSubNet:Enabled:Windows Media Connect -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\IcmpSettings\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\IcmpSettings\\AllowOutboundSourceQuench -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\IcmpSettings\\AllowOutboundParameterProblem -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\IcmpSettings\\AllowOutboundTimeExceeded -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\IcmpSettings\\AllowRedirect -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\\ServiceUpgrade -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\InterfacesUnfirewalledAtUpdate\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\InterfacesUnfirewalledAtUpdate\\All -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\ -> Root\LEGACY_SHAREDACCESS00 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\\Count -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\\NextInstance -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Type -> 32 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Start -> 2 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ErrorControl -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ImagePath -> %systemroot%\system32\svchost.exe -k netsvcs -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\DisplayName -> Mises ‡ jour automatiques -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ObjectName -> LocalSystem -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Description -> Active le tÈlÈchargement et l'installation des mises ‡ jour Windows. Si ce service est dÈsactivÈ, cet ordinateur ne pourra pas utiliser la fonctionnalitÈ des mises ‡ jour automatiques ou le site Windows Update. -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Parameters\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Parameters\\ServiceDll -> C:\WINDOWS\system32\wuauserv.dll -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Security\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Security\\Security -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\ -> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\ -> Root\LEGACY_WUAUSERV00 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\\Count -> 1 -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\\NextInstance -> 1 -> < Uninstall List > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ -> {02020202-5D65-445A-B3B4-3DCE72BA0C6C} -> Atlas mondial Microsoft Encarta 2001 -> {03B1B42B-F6DE-41d9-8CFF-DC44E895C7A7} -> PhotoGallery -> {0611BD4E-4FE4-4a62-B0C0-18A4CC463428} -> CP_Package_Variety1 -> {09984AEC-6B9F-4ca7-B78D-CB44D4771DA3} -> Destinations -> {0B33B738-AD79-4E32-90C5-E67BFB10BBFF} -> AiO_Scan -> {0B69DA57-BC7D-461D-B7D6-2AA9F08869CD} -> QuickTime -> {15C19366-3261-4D69-BF40-C3E30241A264} -> OS Pack Works Suite -> {15EE79F4-4ED1-4267-9B0F-351009325D7D} -> HP Software Update -> {172975EB-9465-4861-95B5-C7BB6D3DE62A} -> DocumentViewer -> {17342E3B-0818-4A6F-BFF8-99476605ADD6} -> livebox -> {1A995D22-F711-4199-83D4-579B593A46C5} -> TMPGEnc DVD Author 1.6 -> {1C139D7D-9FEA-468d-A9C8-2A6E3BDE564A} -> CP_Package_Variety3 -> {20D4A895-748C-4D88-871C-FDB1695B0169} -> Platform -> {21DB3D90-D816-4092-A260-CA3F6B55A6DD} -> Sonic_PrimoSDK -> {23A7B376-BBEC-4e76-BBD7-0F155E70D74B} -> CP_Panorama1Config -> {2CADCEAB-D5DA-44D6-B5FC-7DEE87AB3C0C} -> Unload -> {30C19FF2-7FBA-4d09-B9DE-1659977F64F6} -> TrayApp -> {32BDCCB8-9DC8-496d-9DB1-F77510775BDB} -> InstantShareDevices -> {3462AC6D-A932-4E96-B4B7-801CF5BC88BD} -> Synchronisation de Works -> {350C940c-3D7C-4EE8-BAA9-00BCB3D54227} -> WebFldrs XP -> {36E47DA1-10E1-45d9-8B19-14D19607CDCF} -> CP_CalendarTemplates1 -> {37477865-A3F1-4772-AD43-AAFC6BCFF99F} -> MSXML 4.0 SP2 (KB927978) -> {3D5E5C0A-5B36-4F98-99A7-287F7DBDCE03} -> Skype Plugin Manager -> {3DE5E7D4-7B88-403C-A3FD-2017A8240C5B} -> Google Earth -> {457B00DC-314C-48E8-870E-BE04B2DCC1E9} -> Dolet Light for Finale -> {4D719053-5593-11D3-8F25-0060085C1758} -> Microsoft AutoRoute 2001 -> {4F41AD68-89F2-4262-A32C-2F70B01FCE9E} -> PhotorÈcit 3 pour Windows -> {53EE9E42-CECB-4C92-BF76-9CA65DAF8F1C} -> FullDPAppQFolder -> {54E3707F-808E-4fd4-95C9-15D1AB077E5D} -> NewCopy -> {56EE8B17-8274-418d-89AC-C057C5DB251E} -> RandMap -> {56F8AFC3-FA98-4ff1-9673-8A026CBF85BE} -> WebReg -> {5A01C58E-B0EC-49b9-AD71-7C0468688087} -> CP_Package_Basic1 -> {5B622B7A-60FB-4630-B11D-F121D20BCCD6} -> MarketResearch -> {5B79CFD1-6845-4158-9D7D-6BE89DF2C135} -> HP PSC & OfficeJet 5.3.B -> {5F26311C-B135-4F7F-B11E-8E650F83651E} -> DeviceFunctionQFolder -> {66BA8C26-AFE4-4408-807B-43E76B57EF53} -> SkinsHP1 -> {66E6CE0C-5A1E-430C-B40A-0C90FF1804A8} -> eSupportQFolder -> {6BB6627C-694F-4FDC-A3E5-C7F4BED4C724} -> DocProc -> {6F5E2F4A-377D-4700-B0E3-8F7F7507EA15} -> CustomerResearchQFolder -> {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} -> Microsoft .NET Framework 2.0 -> {75DEB69B-4B6C-11D4-B0CE-00AA00BCC218} -> Microsoft Works 6.0 -> {7850A6D2-CBEA-4728-9877-F1BEDEA9F619} -> AiOSoftware -> {7C03270C-4FAB-4F5C-B10D-52FEDA190790} -> DocumentViewerQFolder -> {7C9B95B7-B598-4398-B30F-7F6827192E6C} -> ProductContext -> {7E27304E-BAA2-4d90-A34E-76641FAFABB4} -> CP_AtenaShokunin1Config -> {9028040C-6000-11D3-8CFE-0050048383C9} -> Microsoft Office XP Professional avec FrontPage -> {923A7F5A-1E8C-4FBE-8DF6-85940A60A79F} -> Readme -> {9A394342-4A68-4EBA-85A6-55B559F4E700} -> Microsoft .NET Framework 1.1 French Language Pack -> {A195B13E-A5E3-4BAF-A995-7F70F445CD06} -> ScannerCopy -> {A5BB5365-EFB4-44c3-A7E2-EB59B7EFD23D} -> CueTour -> {AB5D51AE-EBC3-438D-872C-705C7C2084B0} -> DeviceManagementQFolder -> {AC76BA86-7AD7-1036-7B44-A70900000002} -> Adobe Reader 7.0.9 - FranÁais -> {B4D279F1-4309-49cc-A4B5-3A0D2E59C7B5} -> PanoStandAlone -> {B824B5C9-849F-4b9e-9EA7-6FD8CD8116DA} -> CP_Package_Variety2 -> {B996AE66-10DB-4ac5-B151-E8B4BFBC42FC} -> BufferChm -> {C506A18C-1469-4678-B094-F4EC9DAE6DB7} -> Scan -> {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} -> Microsoft .NET Framework 1.1 -> {CE24344F-DFD8-40C8-8FD8-C9740B5F25AC} -> Fax -> {D085A1B6-90A4-11D3-82B7-00C04FA309DE} -> Microsoft Money 2001 -> {D28FDA7D-15C6-48A2-9868-6BCB28BE6254} -> Microsoft Picture It! Photo 2001 -> {E22885AB-B503-46E2-8437-73BBC6BC5487} -> Windows Live Messenger -> {E3F90083-80D4-4b5a-87C7-E97E12F5516D} -> HPProductAssistant -> {EA103B64-C0E4-4C0E-A506-751590E1653D} -> SolutionCenter -> {F196AC50-7C95-42E1-9947-BDAB18BF3C8C} -> Microsoft .NET Framework 2.0 Language Pack - FRA -> {F4C2E5F5-2970-45f4-ABD3-C180C4D961C4} -> Status -> Audacity_is1 -> Audacity 1.2.4 -> CDex -> CDex extraction audio -> Ditoo(C:/Program files/Ditoo) -> Ditoo(C:/Program files/Ditoo) -> Finale 2003 -> Finale 2003 -> FranceTelecomUninstall_FTBrowser -> Navigateur Orange -> GestionnaireInternet.exe -> Orange -> HijackThis -> HijackThis 1.99.1 -> HP DeskJet 690C Series -> HP DeskJet Serie 690C (Supprimer uniquement) -> HP Document Viewer -> HP Document Viewer 5.3 -> HP Imaging Device Functions -> HP Imaging Device Functions 5.3 -> HP Photo & Imaging -> HP Image Zone 5.3 -> HP PSC 1500 series_Driver -> HP PSC 1500 series -> HP Solution Center & Imaging Support Tools -> HP Solution Center & Imaging Support Tools 5.3 -> HPExtendedCapabilities -> HP Extended Capabilities 5.3 -> InstallShield_{0B69DA57-BC7D-461D-B7D6-2AA9F08869CD} -> QuickTime -> Isacompta Windows(C:/isacowp) -> Isacompta Windows(C:/isacowp) -> KB873339 -> Correctif Windows XP - KB873339 -> KB885835 -> Correctif Windows XP - KB885835 -> KB885836 -> Correctif Windows XP - KB885836 -> KB885884 -> Correctif Windows XP - KB885884 -> KB886185 -> Correctif Windows XP - KB886185 -> KB887472 -> Correctif Windows XP - KB887472 -> KB887742 -> Correctif Windows XP - KB887742 -> KB888113 -> Correctif Windows XP - KB888113 -> KB888302 -> Correctif Windows XP - KB888302 -> KB890046 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB890046) -> KB890859 -> Correctif Windows XP - KB890859 -> KB891122 -> Windows Media Format SDK Hotfix - KB891122 -> KB891781 -> Correctif Windows XP - KB891781 -> KB892130 -> Windows Genuine Advantage Validation Tool (KB892130) -> KB893756 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB893756) -> KB893803v2 -> Windows Installer 3.1 (KB893803) -> KB894391 -> Mise ‡ jour pour Windows XP (KB894391) -> KB896358 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB896358) -> KB896422 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB896422) -> KB896423 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB896423) -> KB896424 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB896424) -> KB896428 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB896428) -> KB898461 -> Mise ‡ jour pour Windows XP (KB898461) -> KB899587 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB899587) -> KB899591 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB899591) -> KB900485 -> Mise ‡ jour pour Windows XP (KB900485) -> KB900725 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB900725) -> KB901017 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB901017) -> KB901214 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB901214) -> KB902400 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB902400) -> KB904706 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB904706) -> KB904942 -> Mise ‡ jour pour Windows XP (KB904942) -> KB905414 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB905414) -> KB905749 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB905749) -> KB908519 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB908519) -> KB908531 -> Mise ‡ jour pour Windows XP (KB908531) -> KB909520 -> Package de base Microsoft de service de chiffrement pour cartes ‡ puce -> KB910437 -> Mise ‡ jour pour Windows XP (KB910437) -> KB911280 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB911280) -> KB911562 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB911562) -> KB911564 -> Mise ‡ jour de sÈcuritÈ pour Lecteur Windows Media (KB911564) -> KB911567 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB911567) -> KB911927 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB911927) -> KB912919 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB912919) -> KB913433 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB913433) -> KB913580 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB913580) -> KB914388 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB914388) -> KB914389 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB914389) -> KB916281 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB916281) -> KB916595 -> Mise ‡ jour pour Windows XP (KB916595) -> KB917159 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB917159) -> KB917344 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB917344) -> KB917422 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB917422) -> KB917734_WMP10 -> Mise ‡ jour de sÈcuritÈ pour Lecteur Windows Media 10 (KB917734) -> KB917734_WMP9 -> Mise ‡ jour de sÈcuritÈ pour Lecteur Windows Media 9 (KB917734) -> KB917953 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB917953) -> KB918118 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB918118) -> KB918439 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB918439) -> KB918899 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB918899) -> KB919007 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB919007) -> KB920213 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB920213) -> KB920214 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB920214) -> KB920670 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB920670) -> KB920683 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB920683) -> KB920685 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB920685) -> KB920872 -> Mise ‡ jour pour Windows XP (KB920872) -> KB921398 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB921398) -> KB921883 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB921883) -> KB922582 -> Mise ‡ jour pour Windows XP (KB922582) -> KB922616 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB922616) -> KB922760 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB922760) -> KB922819 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB922819) -> KB923191 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB923191) -> KB923414 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB923414) -> KB923689 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB923689) -> KB923694 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB923694) -> KB923980 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB923980) -> KB924191 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB924191) -> KB924270 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB924270) -> KB924496 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB924496) -> KB924667 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB924667) -> KB925398_WMP64 -> Mise ‡ jour de sÈcuritÈ pour Lecteur Windows Media 6.4 (KB925398) -> KB925454 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB925454) -> KB925486 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB925486) -> KB925902 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB925902) -> KB926255 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB926255) -> KB926436 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB926436) -> KB927779 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB927779) -> KB927802 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB927802) -> KB927891 -> Mise ‡ jour pour Windows XP (KB927891) -> KB928090 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB928090) -> KB928255 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB928255) -> KB928365.T1_1ToU569_1 -> Security Update pour Microsoft .NET Framework 2.0 (KB928365) -> KB928843 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB928843) -> KB929123 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB929123) -> KB929338 -> Mise ‡ jour pour Windows XP (KB929338) -> KB929969 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB929969) -> KB930178 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB930178) -> KB930916 -> Mise ‡ jour pour Windows XP (KB930916) -> KB931261 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB931261) -> KB931768 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB931768) -> KB931784 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB931784) -> KB931836 -> Mise ‡ jour pour Windows XP (KB931836) -> KB932168 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB932168) -> KB933566 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB933566) -> KB935839 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB935839) -> KB935840 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB935840) -> LM 2.0 -> LM 2.0 -> M928366 -> Microsoft .NET Framework 1.1 Hotfix (KB928366) -> Machinist2DLL -> Machinist2DLL -> Microsoft .NET Framework 1.1 (1033) -> Microsoft .NET Framework 1.1 -> Microsoft .NET Framework 2.0 -> Microsoft .NET Framework 2.0 -> Microsoft .NET Framework 2.0 Language Pack - FRA -> Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA -> Mozilla (1.7.1) -> Mozilla (1.7.1) -> MSNINST -> MSN -> Navilog1 -> Navilog1 Version 2.0.5 -> Nero - Burning Rom!UninstallKey -> Nero OEM -> NeroVision!UninstallKey -> NeroVision Express 2 SE -> NMPUninstallKey -> Nero Media Player -> NVIDIA Drivers -> NVIDIA Drivers -> PhotoFiltre -> PhotoFiltre -> SharpEye Music Reader 2 -> SharpEye Music Reader 2 -> Shockwave -> Shockwave -> ShockwaveFlash -> Adobe Flash Player 9 ActiveX -> ShrinkTo5Basic -> ShrinkTo5Basic -> Skype_is1 -> Skype 3.0 -> VIA Audio Driver Setup Program -> VIA Audio Driver Setup Program -> VN_VUIns_Rhine_VIA -> VIA Rhine-Family Fast Ethernet Adapter -> WGA -> Windows Genuine Advantage Validation Tool (KB892130) -> WgaNotify -> Windows Genuine Advantage Notifications (KB905474) -> Windows Media Format Runtime -> Windows Media Format Runtime -> Windows Media Player -> Lecteur Windows Media†10 -> WMCSetup -> Windows Media Connect -> Works2001Setup -> Installation de Microsoft Works Suite 2001 -> Yahoo! Companion -> Yahoo! Toolbar -> Yahoo! Toolbar -> Yahoo! Toolbar -> [Files/Folders - Created Within 60 days] hiberfil.sys -> %SystemDrive%\hiberfil.sys -> [Ver = | Size = 536399872 bytes | Created Date = 02/01/1601 23:00:00 | Attr = HS] $NtUninstallKB929123$ -> %SystemRoot%\$NtUninstallKB929123$ -> [Folder | Created Date = 13/06/2007 11:05:33 | Attr = H ] $NtUninstallKB933566$ -> %SystemRoot%\$NtUninstallKB933566$ -> [Folder | Created Date = 13/06/2007 11:06:08 | Attr = H ] $NtUninstallKB935839$ -> %SystemRoot%\$NtUninstallKB935839$ -> [Folder | Created Date = 13/06/2007 11:02:06 | Attr = H ] $NtUninstallKB935840$ -> %SystemRoot%\$NtUninstallKB935840$ -> [Folder | Created Date = 13/06/2007 11:05:07 | Attr = H ] Internet Logs -> %SystemRoot%\Internet Logs -> [Folder | Created Date = 30/07/2007 13:45:55 | Attr = ] Lic.xxx -> %SystemRoot%\Lic.xxx -> [Ver = | Size = 26 bytes | Created Date = 12/07/2007 21:52:33 | Attr = ] logo1_.exe -> %SystemRoot%\logo1_.exe -> [Folder | Created Date = 12/07/2007 21:54:35 | Attr = ] rundl132.dll -> %SystemRoot%\rundl132.dll -> [Folder | Created Date = 12/07/2007 21:54:35 | Attr = ] rundll16.exe -> %SystemRoot%\rundll16.exe -> [Folder | Created Date = 12/07/2007 21:54:35 | Attr = ] zts2.exe -> %SystemRoot%\zts2.exe -> [Folder | Created Date = 12/07/2007 21:54:35 | Attr = ] iifgfgf.dll -> %System32%\iifgfgf.dll -> [Folder | Created Date = 12/07/2007 21:54:35 | Attr = ] Process.exe -> %System32%\Process.exe -> http://www.beyondlogic.org [Ver = 2, 0, 0, 0 | Size = 53248 bytes | Created Date = 01/08/2007 18:31:43 | Attr = ] vcmgcd32.dll -> %System32%\vcmgcd32.dll -> [Folder | Created Date = 12/07/2007 21:54:35 | Attr = ] vsdata.dll -> %System32%\vsdata.dll -> Zone Labs, LLC [Ver = 7.0.362.000 | Size = 83432 bytes | Created Date = 30/07/2007 13:45:54 | Attr = ] vsutil_loc040c.dll -> %System32%\vsutil_loc040c.dll -> Zone Labs Inc. [Ver = 5.3.017.000 | Size = 54672 bytes | Created Date = 30/07/2007 13:47:50 | Attr = ] vsxml.dll -> %System32%\vsxml.dll -> Zone Labs, LLC [Ver = 7.0.362.000 | Size = 99816 bytes | Created Date = 30/07/2007 13:46:53 | Attr = ] zllictbl.dat -> %System32%\zllictbl.dat -> [Ver = | Size = 4212 bytes | Created Date = 30/07/2007 13:47:58 | Attr = H ] ZoneLabs -> %System32%\ZoneLabs -> [Folder | Created Date = 30/07/2007 13:46:52 | Attr = ] avg7core.sys -> %System32%\drivers\avg7core.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.476 | Size = 820928 bytes | Created Date = 30/07/2007 12:04:17 | Attr = ] avg7rsw.sys -> %System32%\drivers\avg7rsw.sys -> GRISOFT, s.r.o. [Ver = 7,0,0,340 | Size = 4224 bytes | Created Date = 30/07/2007 12:04:25 | Attr = ] avg7rsxp.sys -> %System32%\drivers\avg7rsxp.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.442 | Size = 27776 bytes | Created Date = 30/07/2007 12:04:25 | Attr = ] avgtdi.sys -> %System32%\drivers\avgtdi.sys -> GRISOFT, s.r.o. [Ver = 7,0,0,346 | Size = 4960 bytes | Created Date = 30/07/2007 12:04:27 | Attr = ] fidbox.dat -> %System32%\drivers\fidbox.dat -> [Ver = | Size = 176160 bytes | Created Date = 30/07/2007 20:27:24 | Attr = HS] fidbox.idx -> %System32%\drivers\fidbox.idx -> [Ver = | Size = 4064 bytes | Created Date = 30/07/2007 20:27:33 | Attr = HS] [Files/Folders - Modified Within 60 days] boot.ini -> %SystemDrive%\boot.ini -> [Ver = | Size = 216 bytes | Modified Date = 01/08/2007 19:27:36 | Attr = HS] Config.Msi -> %SystemDrive%\Config.Msi -> [Folder | Modified Date = 01/08/2007 19:27:58 | Attr = H ] hiberfil.sys -> %SystemDrive%\hiberfil.sys -> [Ver = | Size = 536399872 bytes | Modified Date = 01/08/2007 19:24:08 | Attr = HS] isacowf -> %SystemDrive%\isacowf -> [Folder | Modified Date = 04/06/2007 15:56:26 | Attr = ] PDOXUSRS.NET -> %SystemDrive%\PDOXUSRS.NET -> [Ver = | Size = 13030 bytes | Modified Date = 04/06/2007 12:48:10 | Attr = ] Program Files -> %ProgramFiles% -> [Folder | Modified Date = 31/07/2007 13:47:38 | Attr = R ] sqmdata00.sqm -> %SystemDrive%\sqmdata00.sqm -> [Ver = | Size = 232 bytes | Modified Date = 30/07/2007 21:35:26 | Attr = H ] sqmdata01.sqm -> %SystemDrive%\sqmdata01.sqm -> [Ver = | Size = 268 bytes | Modified Date = 30/07/2007 23:05:56 | Attr = H ] sqmdata02.sqm -> %SystemDrive%\sqmdata02.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 00:13:22 | Attr = H ] sqmdata03.sqm -> %SystemDrive%\sqmdata03.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 00:47:02 | Attr = H ] sqmdata04.sqm -> %SystemDrive%\sqmdata04.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 01:02:22 | Attr = H ] sqmdata05.sqm -> %SystemDrive%\sqmdata05.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 09:58:28 | Attr = H ] sqmdata06.sqm -> %SystemDrive%\sqmdata06.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 10:09:10 | Attr = H ] sqmdata07.sqm -> %SystemDrive%\sqmdata07.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 10:12:06 | Attr = H ] sqmdata08.sqm -> %SystemDrive%\sqmdata08.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 10:32:00 | Attr = H ] sqmdata09.sqm -> %SystemDrive%\sqmdata09.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 13:37:46 | Attr = H ] sqmdata10.sqm -> %SystemDrive%\sqmdata10.sqm -> [Ver = | Size = 232 bytes | Modified Date = 31/07/2007 13:37:46 | Attr = H ] sqmdata11.sqm -> %SystemDrive%\sqmdata11.sqm -> [Ver = | Size = 268 bytes | Modified Date = 01/08/2007 00:01:22 | Attr = H ] sqmdata12.sqm -> %SystemDrive%\sqmdata12.sqm -> [Ver = | Size = 268 bytes | Modified Date = 30/07/2007 12:47:54 | Attr = H ] sqmdata13.sqm -> %SystemDrive%\sqmdata13.sqm -> [Ver = | Size = 232 bytes | Modified Date = 30/07/2007 12:50:12 | Attr = H ] sqmdata14.sqm -> %SystemDrive%\sqmdata14.sqm -> [Ver = | Size = 232 bytes | Modified Date = 30/07/2007 12:52:48 | Attr = H ] sqmdata15.sqm -> %SystemDrive%\sqmdata15.sqm -> [Ver = | Size = 268 bytes | Modified Date = 30/07/2007 12:59:12 | Attr = H ] sqmdata16.sqm -> %SystemDrive%\sqmdata16.sqm -> [Ver = | Size = 268 bytes | Modified Date = 30/07/2007 14:50:12 | Attr = H ] sqmdata17.sqm -> %SystemDrive%\sqmdata17.sqm -> [Ver = | Size = 232 bytes | Modified Date = 30/07/2007 14:50:12 | Attr = H ] sqmdata18.sqm -> %SystemDrive%\sqmdata18.sqm -> [Ver = | Size = 268 bytes | Modified Date = 30/07/2007 21:35:26 | Attr = H ] sqmdata19.sqm -> %SystemDrive%\sqmdata19.sqm -> [Ver = | Size = 268 bytes | Modified Date = 30/07/2007 22:58:40 | Attr = H ] sqmnoopt00.sqm -> %SystemDrive%\sqmnoopt00.sqm -> [Ver = | Size = 244 bytes | Modified Date = 30/07/2007 22:58:40 | Attr = H ] sqmnoopt01.sqm -> %SystemDrive%\sqmnoopt01.sqm -> [Ver = | Size = 244 bytes | Modified Date = 30/07/2007 23:05:56 | Attr = H ] sqmnoopt02.sqm -> %SystemDrive%\sqmnoopt02.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 00:13:22 | Attr = H ] sqmnoopt03.sqm -> %SystemDrive%\sqmnoopt03.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 00:47:02 | Attr = H ] sqmnoopt04.sqm -> %SystemDrive%\sqmnoopt04.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 01:02:22 | Attr = H ] sqmnoopt05.sqm -> %SystemDrive%\sqmnoopt05.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 09:58:28 | Attr = H ] sqmnoopt06.sqm -> %SystemDrive%\sqmnoopt06.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 10:09:10 | Attr = H ] sqmnoopt07.sqm -> %SystemDrive%\sqmnoopt07.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 10:12:06 | Attr = H ] sqmnoopt08.sqm -> %SystemDrive%\sqmnoopt08.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 10:32:00 | Attr = H ] sqmnoopt09.sqm -> %SystemDrive%\sqmnoopt09.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 13:37:46 | Attr = H ] sqmnoopt10.sqm -> %SystemDrive%\sqmnoopt10.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 13:37:46 | Attr = H ] sqmnoopt11.sqm -> %SystemDrive%\sqmnoopt11.sqm -> [Ver = | Size = 244 bytes | Modified Date = 01/08/2007 00:01:22 | Attr = H ] sqmnoopt12.sqm -> %SystemDrive%\sqmnoopt12.sqm -> [Ver = | Size = 244 bytes | Modified Date = 30/07/2007 12:47:54 | Attr = H ] sqmnoopt13.sqm -> %SystemDrive%\sqmnoopt13.sqm -> [Ver = | Size = 244 bytes | Modified Date = 30/07/2007 12:50:12 | Attr = H ] sqmnoopt14.sqm -> %SystemDrive%\sqmnoopt14.sqm -> [Ver = | Size = 244 bytes | Modified Date = 30/07/2007 12:52:48 | Attr = H ] sqmnoopt15.sqm -> %SystemDrive%\sqmnoopt15.sqm -> [Ver = | Size = 244 bytes | Modified Date = 30/07/2007 12:59:12 | Attr = H ] sqmnoopt16.sqm -> %SystemDrive%\sqmnoopt16.sqm -> [Ver = | Size = 244 bytes | Modified Date = 30/07/2007 14:50:12 | Attr = H ] sqmnoopt17.sqm -> %SystemDrive%\sqmnoopt17.sqm -> [Ver = | Size = 244 bytes | Modified Date = 30/07/2007 14:50:12 | Attr = H ] sqmnoopt18.sqm -> %SystemDrive%\sqmnoopt18.sqm -> [Ver = | Size = 244 bytes | Modified Date = 30/07/2007 21:35:26 | Attr = H ] sqmnoopt19.sqm -> %SystemDrive%\sqmnoopt19.sqm -> [Ver = | Size = 244 bytes | Modified Date = 30/07/2007 21:35:26 | Attr = H ] WINDOWS -> %SystemRoot% -> [Folder | Modified Date = 01/08/2007 19:27:14 | Attr = ] $hf_mig$ -> %SystemRoot%\$hf_mig$ -> [Folder | Modified Date = 13/06/2007 09:20:46 | Attr = H ] $NtUninstallKB929123$ -> %SystemRoot%\$NtUninstallKB929123$ -> [Folder | Modified Date = 13/06/2007 12:05:36 | Attr = H ] $NtUninstallKB933566$ -> %SystemRoot%\$NtUninstallKB933566$ -> [Folder | Modified Date = 13/06/2007 12:06:14 | Attr = H ] $NtUninstallKB935839$ -> %SystemRoot%\$NtUninstallKB935839$ -> [Folder | Modified Date = 13/06/2007 12:02:08 | Attr = H ] $NtUninstallKB935840$ -> %SystemRoot%\$NtUninstallKB935840$ -> [Folder | Modified Date = 13/06/2007 12:05:10 | Attr = H ] assembly -> %SystemRoot%\assembly -> [Folder | Modified Date = 12/07/2007 12:38:36 | Attr = R S] bootstat.dat -> %SystemRoot%\bootstat.dat -> [Ver = | Size = 2048 bytes | Modified Date = 01/08/2007 19:24:10 | Attr = S] Downloaded Program Files -> %SystemRoot%\Downloaded Program Files -> [Folder | Modified Date = 05/06/2007 22:53:36 | Attr = S] Help -> %SystemRoot%\Help -> [Folder | Modified Date = 21/06/2007 07:51:30 | Attr = ] imsins.BAK -> %SystemRoot%\imsins.BAK -> [Ver = | Size = 1917 bytes | Modified Date = 13/07/2007 01:58:52 | Attr = ] inf -> %SystemRoot%\inf -> [Folder | Modified Date = 30/07/2007 14:47:30 | Attr = H ] Installer -> %SystemRoot%\Installer -> [Folder | Modified Date = 01/08/2007 19:27:58 | Attr = HS] Internet Logs -> %SystemRoot%\Internet Logs -> [Folder | Modified Date = 31/07/2007 00:45:58 | Attr = ] Lic.xxx -> %SystemRoot%\Lic.xxx -> [Ver = | Size = 26 bytes | Modified Date = 13/07/2007 00:08:12 | Attr = ] logo1_.exe -> %SystemRoot%\logo1_.exe -> [Folder | Modified Date = 12/07/2007 22:54:36 | Attr = ] Microsoft.NET -> %SystemRoot%\Microsoft.NET -> [Folder | Modified Date = 12/07/2007 12:38:42 | Attr = ] Minidump -> %SystemRoot%\Minidump -> [Folder | Modified Date = 31/07/2007 13:38:46 | Attr = ] NeroDigital.ini -> %SystemRoot%\NeroDigital.ini -> [Ver = | Size = 135 bytes | Modified Date = 23/07/2007 12:16:52 | Attr = ] Prefetch -> %SystemRoot%\Prefetch -> [Folder | Modified Date = 01/08/2007 19:44:32 | Attr = ] Registration -> %SystemRoot%\Registration -> [Folder | Modified Date = 10/06/2007 20:58:04 | Attr = ] rundl132.dll -> %SystemRoot%\rundl132.dll -> [Folder | Modified Date = 12/07/2007 22:54:36 | Attr = ] rundll16.exe -> %SystemRoot%\rundll16.exe -> [Folder | Modified Date = 12/07/2007 22:54:36 | Attr = ] SoftwareDistribution -> %SystemRoot%\SoftwareDistribution -> [Folder | Modified Date = 21/06/2007 07:51:30 | Attr = ] system -> %SystemRoot%\system -> [Folder | Modified Date = 30/07/2007 21:23:44 | Attr = ] system.ini -> %SystemRoot%\system.ini -> [Ver = | Size = 227 bytes | Modified Date = 01/08/2007 19:27:36 | Attr = ] system32 -> %System32% -> [Folder | Modified Date = 01/08/2007 19:31:44 | Attr = ] Tasks -> %SystemRoot%\Tasks -> [Folder | Modified Date = 11/07/2007 15:25:48 | Attr = S] Temp -> %SystemRoot%\Temp -> [Folder | Modified Date = 01/08/2007 19:27:16 | Attr = ] win.ini -> %SystemRoot%\win.ini -> [Ver = | Size = 628 bytes | Modified Date = 01/08/2007 19:27:58 | Attr = ] WinSxS -> %SystemRoot%\WinSxS -> [Folder | Modified Date = 12/07/2007 12:05:40 | Attr = ] zts2.exe -> %SystemRoot%\zts2.exe -> [Folder | Modified Date = 12/07/2007 22:54:36 | Attr = ] SA.DAT -> %SystemRoot%\tasks\SA.DAT -> [Ver = | Size = 6 bytes | Modified Date = 01/08/2007 19:24:10 | Attr = H ] ActiveScan -> %System32%\ActiveScan -> [Folder | Modified Date = 12/07/2007 18:26:16 | Attr = ] CatRoot -> %System32%\CatRoot -> [Folder | Modified Date = 31/07/2007 00:46:10 | Attr = ] CatRoot2 -> %System32%\CatRoot2 -> [Folder | Modified Date = 31/07/2007 00:46:08 | Attr = ] config -> %System32%\config -> [Folder | Modified Date = 10/06/2007 20:58:20 | Attr = ] dllcache -> %System32%\dllcache -> [Folder | Modified Date = 22/06/2007 08:09:30 | Attr = RHS] drivers -> %System32%\drivers -> [Folder | Modified Date = 31/07/2007 10:15:42 | Attr = ] Help.ico -> %System32%\Help.ico -> [Ver = | Size = 1406 bytes | Modified Date = 12/07/2007 18:24:56 | Attr = ] iifgfgf.dll -> %System32%\iifgfgf.dll -> [Folder | Modified Date = 12/07/2007 22:54:36 | Attr = ] nvapps.xml -> %System32%\nvapps.xml -> [Ver = | Size = 43573 bytes | Modified Date = 01/08/2007 19:27:12 | Attr = ] pavas.ico -> %System32%\pavas.ico -> [Ver = | Size = 30590 bytes | Modified Date = 12/07/2007 18:24:56 | Attr = ] perfc009.dat -> %System32%\perfc009.dat -> [Ver = | Size = 62480 bytes | Modified Date = 12/07/2007 12:07:32 | Attr = ] perfc00C.dat -> %System32%\perfc00C.dat -> [Ver = | Size = 75506 bytes | Modified Date = 12/07/2007 12:07:32 | Attr = ] perfh009.dat -> %System32%\perfh009.dat -> [Ver = | Size = 401200 bytes | Modified Date = 12/07/2007 12:07:32 | Attr = ] perfh00C.dat -> %System32%\perfh00C.dat -> [Ver = | Size = 468490 bytes | Modified Date = 12/07/2007 12:07:32 | Attr = ] PerfStringBackup.INI -> %System32%\PerfStringBackup.INI -> [Ver = | Size = 981392 bytes | Modified Date = 12/07/2007 12:07:32 | Attr = ] Restore -> %System32%\Restore -> [Folder | Modified Date = 10/06/2007 09:08:32 | Attr = ] Uninstall.ico -> %System32%\Uninstall.ico -> [Ver = | Size = 2550 bytes | Modified Date = 12/07/2007 18:24:56 | Attr = ] vcmgcd32.dll -> %System32%\vcmgcd32.dll -> [Folder | Modified Date = 12/07/2007 22:54:36 | Attr = ] vsdata.dll -> %System32%\vsdata.dll -> Zone Labs, LLC [Ver = 7.0.362.000 | Size = 83432 bytes | Modified Date = 21/06/2007 21:54:30 | Attr = ] vsutil_loc040c.dll -> %System32%\vsutil_loc040c.dll -> Zone Labs Inc. [Ver = 5.3.017.000 | Size = 54672 bytes | Modified Date = 21/06/2007 21:55:30 | Attr = ] vsxml.dll -> %System32%\vsxml.dll -> Zone Labs, LLC [Ver = 7.0.362.000 | Size = 99816 bytes | Modified Date = 21/06/2007 21:54:34 | Attr = ] wbem -> %System32%\wbem -> [Folder | Modified Date = 10/06/2007 20:58:04 | Attr = ] wpa.dbl -> %System32%\wpa.dbl -> [Ver = | Size = 13646 bytes | Modified Date = 01/08/2007 19:27:10 | Attr = ] zllictbl.dat -> %System32%\zllictbl.dat -> [Ver = | Size = 4212 bytes | Modified Date = 30/07/2007 14:59:20 | Attr = H ] ZoneLabs -> %System32%\ZoneLabs -> [Folder | Modified Date = 31/07/2007 00:46:16 | Attr = ] avg7core.sys -> %System32%\drivers\avg7core.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.476 | Size = 820928 bytes | Modified Date = 30/07/2007 13:04:18 | Attr = ] avg7rsw.sys -> %System32%\drivers\avg7rsw.sys -> GRISOFT, s.r.o. [Ver = 7,0,0,340 | Size = 4224 bytes | Modified Date = 30/07/2007 13:04:26 | Attr = ] avg7rsxp.sys -> %System32%\drivers\avg7rsxp.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.442 | Size = 27776 bytes | Modified Date = 30/07/2007 13:04:26 | Attr = ] avgtdi.sys -> %System32%\drivers\avgtdi.sys -> GRISOFT, s.r.o. [Ver = 7,0,0,346 | Size = 4960 bytes | Modified Date = 30/07/2007 13:04:28 | Attr = ] fidbox.dat -> %System32%\drivers\fidbox.dat -> [Ver = | Size = 176160 bytes | Modified Date = 31/07/2007 00:45:42 | Attr = HS] fidbox.idx -> %System32%\drivers\fidbox.idx -> [Ver = | Size = 4064 bytes | Modified Date = 31/07/2007 00:39:56 | Attr = HS] [File String Scan - Non-Microsoft Only] @Alternate Data Stream - 0 bytes -> %SystemRoot%\Thumbs.db:encryptable -> PEC2 , -> %System32%\dfrg.msc -> [Ver = | Size = 41131 bytes | Modified Date = 05/08/2004 14:00:00 | Attr = ] winsync , -> %System32%\wbdbase.deu -> [Ver = | Size = 1309184 bytes | Modified Date = 05/08/2004 14:00:00 | Attr = ] WSUD , UPX0 , -> %System32%\dllcache\hwxjpn.dll -> [Ver = | Size = 13463552 bytes | Modified Date = 05/08/2004 14:00:00 | Attr = ] UPX0 , -> %System32%\dllcache\NT5IIS.CAT -> [Ver = | Size = 809394 bytes | Modified Date = 05/08/2004 14:00:00 | Attr = ] UPX! , FSG! , PEC2 , aspack , -> %System32%\drivers\avg7core.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.476 | Size = 820928 bytes | Modified Date = 30/07/2007 13:04:18 | Attr = ] < End of report > ------------------------------------------------------------------------------------------------------------ ça a vraiment une gueule immonde ce rapport Bon courage et merci encore ` Sylvaine

Salut et merci Excuse-moi pour ce manque de savoir-vivre :-/, j'ai juste pensé à tort que ce n'était pas coutume sur ce forum de mettre autre chose que le rapport... J'espère que tu m'en excuses donc Une rapide explication du truc : il s'agit du PC de mes parents qui avait d'abord des problèmes de pop-ups (plutôt hardcore ) qui réapparaissent sans arrêt, et toujours le même message d'erreur "Windows a récupéré d'une erreur sérieuse" au démarrage, l'antivirus (Avira) qui dit que l'ordinateur est dangereusement infecté, etc. Après un clean-up des Spywares que j'ai fait comme j'ai pu (Spybot), ainsi que le nettoyage de tous les fichiers temp etc, j'ai toujours le problème des pop-ups quand je me connecte à internet (même en activant le pop-up blocker), et le message au démarrage. Et l'internet est devenu très lent, la boîte e-mail parfois ne s'ouvre pas. En fait j'ai déjà fait toute la procédure que tu décris, seulement l'ordi n'a jamais été connecté pendant, car je me suis servi de mon Mac perso () pour faire les téléchargements de programmes puis transfert par clé usb... L'antivirus (Avira) a toujours été actif sur le PC, à part pendant le temps de la procédure comme c'était indiqué. Je compte le réinstaller ainsi que le pare-feu dès que j'aurai fini le nettoyage et avant de reconnecter le PC à l'internet. Le rapport HijackThis que j'ai posté, c'est celui que j'ai eu à la fin de toute cette procédure. Par contre pour le rapport su scan Avira, je ne sais pas où le trouver... il avait trouvé 2 fichiers louches dont un qui contenait "navilog" (sûrement parce que j'ai fait hier l'autre procédure vachement complexe que j'ai trouvé dans ce post : http://forum.zebulon.fr/index.php?showtopic=126176 car c'est les mêmes problèmes que j'ai), j'ai mis les fichiers en quarantaine, mais maintenant Avira est désinstallé et comment retrouver le rapport ? J'espère que ça t'en dira un peu + J'avoue que je suis loin d'être experte en PC (même si je comprends un peu quand même ) car j'ai toujours travaillé sur Mac, et ce forum est un peu mon dernier espoir avant de reformater, ce qui m'embêterait beaucoup... Voilà Merci encore pour ton aide... Sylvaine

Logfile of HijackThis v1.99.1 Scan saved at 13:48:22, on 31/07/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\FTRTSVC.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\PROGRA~1\Wanadoo\TaskBarIcon.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe C:\WINDOWS\system32\msiexec.exe C:\WINDOWS\system32\wscntfy.exe C:\Documents and Settings\Arnaud\Bureau\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe" O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - Global Startup: DÈmarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ? O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2001\EROProj.dll O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU) O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O18 - Protocol: compta - {365B8213-2402-48CF-9907-A4E4A757DE38} - coNetIE.ocx (file missing) O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: CQVRHNOHPUUO - Unknown owner - C:\DOCUME~1\Arnaud\LOCALS~1\Temp\CQVRHNOHPUUO.exe (file missing) O23 - Service: CSWESGSH - Unknown owner - C:\DOCUME~1\Arnaud\LOCALS~1\Temp\CSWESGSH.exe (file missing) O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: W - Unknown owner - C:\DOCUME~1\Arnaud\LOCALS~1\Temp\W.exe (file missing)