Aller au contenu

kbvz

Membres
  • Compteur de contenus

    22
  • Inscription

  • Dernière visite

Tout ce qui a été posté par kbvz

  1. Bonjour, Je viens de faire un scann de mes ports depuis l'utilitaire de zebulon et il m'indique que j'ai un port fermé: 443 https-- Utilisé pour sécuriser les communications HTTP. Si vous n'utilisez pas de serveur web, il est conseillé de fermer ce port. Ce port est également utilisé par AOL Instant Messenger Pour moi, j'ai l'impression que c'est une bonne chose que ce port soit fermé mais je maitrise pas bien ces notions... Secundo, deux ordis peuvent ils utiliser le meme port ? EN gros je pense avoir ouvert un port sur mon routeur afion de laisser passer azureus... dans mon routeur ils nomment cela transfert de port et me demande d'indiquer l'adresse ip qui utilise ce port...J'envisage de faire utiliser le meme port avec azureus sur mon second ordi... du coup les deux azureus passeraient par le meme port... Peu importe l'utilité ou pas de cette demarche (2 softs peer to peer sur la meme connexion internet), je veux savoir si c'est possible ou pas ... Merci beaucoup de votre aide à venir.
  2. Bonjour, Une amie viens de m'expliquer qu'elle avait un soucis (malware à priori) lié uniquement à son adresse hotmail. Je m'explique: Elle m'annonce qu'elle est sur MAC et je la chambre lui signifiant que Ce sytème n'est pas totalement imperméable Elle em répond que son problème n'est pas liè à sa machine et son sytème car lorsqu'elle est sur meeboo à son job, le problème est également présent... je cite: "si je suis au boulot, sur meebo ça l'envoie, c'est donc mon adresse mail qu'est vérolé" Son problème est similaire aux virus qui trainent sur msn depuis pas mal de temps, envoi automatique d'un lien... Je lui ai conseillé de changer son mot de passe directement sur hotmail afin de se prémunir d'un éventuel piratage de compte et cela n'a rien changé semble t'il... Avez vous des idées sur la question car jtrouve tout cela étonnant...? Merci !!
  3. kbvz

    emails infectés

    merci je vais voir cela... bitdefender m'en bloque une partie, mais en liasse pas mal passer... Je n'aime pas thunderbird, malgrès sa qualité, je ne le trouve pas du tout praqtique...
  4. kbvz

    emails infectés

    Bonsoir DAns l'ordre: SPAM BITDENFEDER (pour l'instant) outlook express (je sais, thunderbird est meilleur mais je ne l'aime pas) merci C'est justement parce que c'est du spam que ca m'inquiete...jles reconnait comme spam avec bitdefender mais evident ce ne sont jamais les mêmes adresses ou mêmes noms de domaines... :s
  5. Bonjour, j'ai récement utilisé les services du forum pour eradiquerles virus de ma machine et je vous en remercie. Cependant, une question me tanne... Depuis quelques temps, mon anti virus (que je n'ai toujour spas changé) detecte plusieurs fois par jours des e-mails vérollé? aujourdh'ui c'est 12 mails verrrolés qu'il a intercepté... Je m'inquiete...
  6. c:\bases c:\ComboFix c:\Downloads c:\Kaspersky ? jpeux faire sauter?
  7. ********ToolsCleaner! (A.Rothstein) V2.0******** Nettoyage commence le 11/08/2007 a 14:43:10,92 *************************************** Aucuns Programmes trouves! *************************************** Fin le 11/08/2007 a 14:43:11,01 Merci d'avoir utilise ToolsCleaner!
  8. ok vu en effet...du coup je peux éliminer ccealner merci
  9. ok oui avast a des failles...il ne detecte pas jumper b sous xp merci pour les precisions... j'irais demain sur le lien... Oui j'ai plus de 13 ans j'avais/j'ai spybot sur la machine et ccleaner mais spybot au repos puisque bitdefender suite... windows à jour aussi, il a refusé de dézipper le fichier reçu sur msn...myalbum machin chose... mais bon que veux tu...j'ai ignoré l'avertissement de secu... et hop fait le mariol... j'ai emme dit a mon conct: oh mais on dirais un fichier exe dans ton zip...(en fait ct un pseudo screen saver jcrois) J'ai pris une nouvelle leçon avec cette histoire ^^ Malgrè certaine bonnes connaissances, j'avoue avoir des grosses lacunes sur la sécurité... merci de ton aide
  10. je n'aime pas antivir...je l'ai eu il y a qqs années sur w98 et bof...zone alarm aussi je l'ai eu et bof... on m'a conseillé avs-outpost Pour avs je vais lire de suite... merci de ton aide !!!!!!!!!!!
  11. Comment dire? mieux !!! MERCI !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Je devais avoir qqs soucis avant le virus msn... car je viens de découvrir que nero voyait mon graveur alors que le mois dernier il ne le voyait pas... jm'étais dit ke le graveur n'avait ps apprécié le déménagement... mémoire un peu sollicitée aussi Quelle protection conseil tu ? j'étais avec bitdefender
  12. MSN_Fix 1.458 C:\Documents and Settings\stephane\Bureau\poetr\MSNFix Fix exécuté le 10/08/2007 - 16:26:14,71 By stephane mode normal ************************ Recherche les fichiers présents ... C:\??.tmp ... C:\???.tmp ... C:\WINDOWS\album17.zip ... C:\WINDOWS\album23.zip ... C:\WINDOWS\album44.zip ... C:\WINDOWS\album62.zip ... C:\WINDOWS\album80.zip ... C:\WINDOWS\album83.zip ... C:\WINDOWS\album98.zip ... C:\WINDOWS\image065.zip ... C:\WINDOWS\image077.zip ... C:\WINDOWS\image092.zip ... C:\WINDOWS\photo15.zip ... C:\WINDOWS\photo3.zip ... C:\WINDOWS\photo51.zip ... C:\WINDOWS\photo54.zip ... C:\WINDOWS\photo90.zip ... C:\WINDOWS\photos2007_10.zip ... C:\WINDOWS\photos2007_19.zip ... C:\WINDOWS\photos2007_22.zip ... C:\WINDOWS\photos2007_34.zip ... C:\WINDOWS\photos2007_76.zip ... C:\WINDOWS\photos2007_88.zip ... C:\WINDOWS\photos2007_10.zip ... C:\WINDOWS\photos2007_19.zip ... C:\WINDOWS\photos2007_22.zip ... C:\WINDOWS\photos2007_34.zip ... C:\WINDOWS\photos2007_76.zip ... C:\WINDOWS\photos2007_88.zip ************************ Recherche les dossiers présents Aucun dossier trouvé ************************ Suppression des fichiers .. OK ... C:\??.tmp .. OK ... C:\???.tmp .. OK ... C:\WINDOWS\album17.zip .. OK ... C:\WINDOWS\album23.zip .. OK ... C:\WINDOWS\album44.zip .. OK ... C:\WINDOWS\album62.zip .. OK ... C:\WINDOWS\album80.zip .. OK ... C:\WINDOWS\album83.zip .. OK ... C:\WINDOWS\album98.zip .. OK ... C:\WINDOWS\image065.zip .. OK ... C:\WINDOWS\image077.zip .. OK ... C:\WINDOWS\image092.zip .. OK ... C:\WINDOWS\photo15.zip .. OK ... C:\WINDOWS\photo3.zip .. OK ... C:\WINDOWS\photo51.zip .. OK ... C:\WINDOWS\photo54.zip .. OK ... C:\WINDOWS\photo90.zip .. OK ... C:\WINDOWS\photos2007_10.zip .. OK ... C:\WINDOWS\photos2007_19.zip .. OK ... C:\WINDOWS\photos2007_22.zip .. OK ... C:\WINDOWS\photos2007_34.zip .. OK ... C:\WINDOWS\photos2007_76.zip .. OK ... C:\WINDOWS\photos2007_88.zip .. OK ... C:\WINDOWS\photos2007_10.zip .. OK ... C:\WINDOWS\photos2007_19.zip .. OK ... C:\WINDOWS\photos2007_22.zip .. OK ... C:\WINDOWS\photos2007_34.zip .. OK ... C:\WINDOWS\photos2007_76.zip .. OK ... C:\WINDOWS\photos2007_88.zip ************************ Nettoyage du registre ************************ Fichiers suspects Aucun Fichier trouvé Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 10082007_16264843.zip ------------------------------------------------------------------------ Auteur : !aur3n7 Contact: http://www.changelog.fr ------------------------------------------------------------------------ --------------------------------------------- END ---------------------------------------------
  13. bon morpheus toolbar est tt seul dans programfiles... morpheus n'est plus sur le systeme... j'ai viré le fichier mirc
  14. lol non j'aime autant 2 vérifications qu'une seule... J'ai une questions ou deux: Bitdefender semble plus vulnérable que je ne le pensais...vaut il mieux que j'investisse dans kaspesky? Oiu bien trendmicro? Il semble qu'il yai un antivirus nommé avs qui utilise le moteur de kaspesky ancienne version qui est pas mal en gratuit...mieux qu'avast... Vu ce qui se passe sur le forum, tu dois avoir pas mal de remontés niveau anti virus... DiagHelp version v1.1.2 - http://www.malekal.com excute le 10/08/2007 à 15:47:49,54 Liste des derniers fichies modifies/crees dans windir\system32 C:\WINDOWS\System32/drivers\StarOpen.sys -->27/06/2007 05:15:46 C:\WINDOWS\System32/drivers\update.sys -->23/04/2007 12:32:54 C:\WINDOWS\System32/drivers\ntfs.sys -->09/02/2007 13:10:35 C:\WINDOWS\System32/drivers\wpdusb.sys -->18/10/2006 20:00:00 C:\WINDOWS\System32/drivers\nwrdr.sys -->13/10/2006 12:23:15 C:\WINDOWS\System32/drivers\WudfRd.sys -->28/09/2006 19:00:34 C:\WINDOWS\System32/drivers\WudfPf.sys -->28/09/2006 18:55:50 C:\WINDOWS\System32\bdod.bin -->10/08/2007 15:43:41 C:\WINDOWS\System32\bdss.log -->10/08/2007 14:38:21 C:\WINDOWS\System32\wpa.dbl -->08/08/2007 19:38:09 C:\WINDOWS\System32\asfiles.txt -->03/08/2007 00:31:19 C:\WINDOWS\System32\Uninstall.ico -->03/08/2007 00:26:16 C:\WINDOWS\System32\pavas.ico -->03/08/2007 00:26:16 C:\WINDOWS\System32\Help.ico -->03/08/2007 00:26:16 C:\WINDOWS\System32\swreg.exe -->22/07/2007 18:39:27 C:\WINDOWS\System32\nscompat.tlb -->16/07/2007 21:46:11 C:\WINDOWS\System32\amcompat.tlb -->16/07/2007 21:46:11 C:\WINDOWS\System32\MRT.exe -->28/06/2007 09:57:27 C:\WINDOWS\System32\TZLog.log -->26/06/2007 17:02:52 C:\WINDOWS\System32\perfh00C.dat -->26/06/2007 17:00:24 C:\WINDOWS\System32\perfh009.dat -->26/06/2007 17:00:24 C:\WINDOWS\System32\perfc00C.dat -->26/06/2007 17:00:24 C:\WINDOWS\System32\PerfStringBackup.INI -->26/06/2007 17:00:23 C:\WINDOWS\System32\perfc009.dat -->26/06/2007 17:00:23 C:\WINDOWS\System32\FNTCACHE.DAT -->26/06/2007 16:55:27 C:\WINDOWS\System32\rmoc3260.dll -->30/05/2007 00:04:26 C:\WINDOWS\System32\pndx5032.dll -->30/05/2007 00:04:16 C:\WINDOWS\System32\pndx5016.dll -->30/05/2007 00:04:16 C:\WINDOWS\System32\pncrt.dll -->30/05/2007 00:04:14 C:\WINDOWS\System32\jupdate-1.6.0_01-b06.log -->17/05/2007 10:58:52 C:\WINDOWS\System32\inetcomm.dll -->16/05/2007 17:13:53 C:\WINDOWS\System32\lvcoinst.log -->06/05/2007 21:47:29 C:\WINDOWS\WindowsUpdate.log -->10/08/2007 14:44:27 C:\WINDOWS\win.ini -->10/08/2007 11:37:37 C:\WINDOWS.log -->10/08/2007 05:22:09 C:\WINDOWS\wiaservc.log -->10/08/2007 05:22:05 C:\WINDOWS\wiadebug.log -->10/08/2007 05:22:04 C:\WINDOWS\bootstat.dat -->10/08/2007 05:21:50 C:\WINDOWS\ntbtlog.txt -->09/08/2007 23:31:05 C:\WINDOWS\SchedLgU.Txt -->09/08/2007 23:29:12 C:\WINDOWS\QTFont.for -->04/08/2007 21:13:33 C:\WINDOWS\QTFont.qfn -->04/08/2007 21:13:32 C:\WINDOWS\photos2007_88.zip -->30/07/2007 10:36:33 C:\WINDOWS\photos2007_76.zip -->30/07/2007 10:36:33 C:\WINDOWS\photos2007_34.zip -->30/07/2007 10:36:33 C:\WINDOWS\photos2007_22.zip -->30/07/2007 10:36:32 C:\WINDOWS\photos2007_19.zip -->30/07/2007 10:36:32 Le volume dans le lecteur C s'appelle sata Le numéro de série du volume est 84F4-3E41 Répertoire de C:\WINDOWS\system32 04/08/2004 00:54 6 144 csrss.exe 1 fichier(s) 6 144 octets 0 Rép(s) 28 437 295 104 octets libres Contenu de Downloaded Program Files Le volume dans le lecteur C s'appelle sata Le numéro de série du volume est 84F4-3E41 Répertoire de C:\WINDOWS\Downloaded Program Files 30/07/2007 00:33 <REP> . 30/07/2007 00:33 <REP> .. 24/08/2006 08:28 141 424 asinst.dll 22/08/2006 09:06 537 asinst.inf 07/12/2004 17:07 32 bdcore.dll 25/05/2006 01:21 118 784 bdupd.dll 14/10/2006 13:00 65 desktop.ini 25/07/2002 17:13 24 576 dwusplay.dll 25/07/2002 17:13 196 608 dwusplay.exe 23/03/2007 12:17 1 292 erma.inf 25/05/2006 01:21 53 248 ipsupd.dll 09/08/2004 05:02 327 680 isusweb.dll 08/08/2006 11:45 576 kavwebscan.inf 16/03/2005 12:34 7 407 lang.ini 07/12/2004 17:07 32 libfn.dll 14/03/2005 14:38 126 live.ini 01/06/2006 02:57 1 331 oscan8.inf 01/06/2006 02:54 471 040 oscan8.ocx 31/05/2006 04:15 10 oscan81.ocx_x 14/03/2005 14:58 7 073 scanoptions.tsi 18 fichier(s) 1 351 841 octets Total des fichiers listés : 18 fichier(s) 1 351 841 octets 2 Rép(s) 28 437 291 008 octets libres Recherche de rootkit! (Merci S!Ri) Recherche d'infections connues Export des clefs sensibles.. Liste des fichiers en exception sur le pare-feu XP SP2 "C:\\Kaspersky\\kavupd.exe"="C:\\Kaspersky\\kavupd.exe:*:Enabled:kavupd" "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Messenger" Export de la clef SharedTaskScheduler [sharedTaskScheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant" Rechercher adresses sensibles dans le fichier HOSTS... catchme 0.3.1066 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-08-10 15:48:38 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden services & system hive ... scanning hidden registry entries ... scanning hidden files ... scan completed successfully hidden files: 0 KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg) Process list by traversal of KiWaitListHead 4 - System 296 - HPZipm12.exe 608 - vsserv.exe 616 - xcommsvr.exe 656 - csrss.exe 680 - winlogon.exe 724 - services.exe 736 - lsass.exe 892 - svchost.exe 968 - svchost.exe 1028 - livesrv.exe 1060 - svchost.exe 1272 - svchost.exe 1552 - explorer.exe 1680 - bdss.exe 1744 - bdagent.exe 1764 - SMax4.exe 1776 - LVCOMSX.EXE 1852 - bdmcon.exe 1860 - msnmsgr.exe 1996 - alg.exe 2924 - usnsvc.exe 3192 - firefox.exe 3336 - cmd.exe Total number of processes = 24 NOTE: Under WinXP, this will not show all processes. KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg) Driver/Module list by traversal of PsLoadedModuleList 804D0000 - \WINDOWS\system32\ntoskrnl.exe 806E5000 - \WINDOWS\system32\hal.dll F8A36000 - \WINDOWS\system32\KDCOM.DLL F8946000 - \WINDOWS\system32\BOOTVID.dll F84E6000 - ACPI.sys F8A38000 - \WINDOWS\system32\DRIVERS\WMILIB.SYS F84D5000 - pci.sys F8536000 - isapnp.sys F8AFE000 - pciide.sys F87B6000 - \WINDOWS\system32\DRIVERS\PCIIDEX.SYS F8A3A000 - intelide.sys F8546000 - MountMgr.sys F84B6000 - ftdisk.sys F8A3C000 - dmload.sys F8490000 - dmio.sys F87BE000 - PartMgr.sys F8556000 - VolSnap.sys F8478000 - atapi.sys F8566000 - disk.sys F8576000 - \WINDOWS\system32\DRIVERS\CLASSPNP.SYS F8458000 - fltMgr.sys F8446000 - sr.sys F842F000 - KSecDD.sys F83A2000 - Ntfs.sys F8375000 - NDIS.sys F835A000 - Mup.sys F87C6000 - IABFilt.sys F8586000 - agp440.sys F8796000 - \SystemRoot\system32\DRIVERS\intelppm.sys F7DF3000 - \SystemRoot\system32\DRIVERS\ati2mtag.sys F7DDF000 - \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS F8866000 - \SystemRoot\system32\DRIVERS\usbuhci.sys F7DBC000 - \SystemRoot\system32\DRIVERS\USBPORT.SYS F886E000 - \SystemRoot\system32\DRIVERS\usbehci.sys F7D9E000 - \SystemRoot\system32\DRIVERS\e1000325.sys F7D68000 - \SystemRoot\system32\DRIVERS\HSFBS2S2.sys F7D45000 - \SystemRoot\system32\DRIVERS\ks.sys F7C46000 - \SystemRoot\system32\DRIVERS\HSFDPSP2.sys F7B9E000 - \SystemRoot\system32\DRIVERS\HSFCXTS2.sys F887E000 - \SystemRoot\System32\Drivers\Modem.SYS F7B8D000 - \SystemRoot\system32\DRIVERS\serial.sys F8A0A000 - \SystemRoot\system32\DRIVERS\serenum.sys F8886000 - \SystemRoot\system32\DRIVERS\fdc.sys F7B79000 - \SystemRoot\system32\DRIVERS\parport.sys F87A6000 - \SystemRoot\system32\DRIVERS\imapi.sys F8A0E000 - \SystemRoot\system32\drivers\pfc.sys F85D6000 - \SystemRoot\system32\DRIVERS\cdrom.sys F85E6000 - \SystemRoot\system32\DRIVERS\redbook.sys F888E000 - \SystemRoot\System32\Drivers\GEARAspiWDM.sys F7B39000 - \SystemRoot\system32\drivers\smwdm.sys F7B15000 - \SystemRoot\system32\drivers\portcls.sys F8606000 - \SystemRoot\system32\drivers\drmk.sys F7AF5000 - \SystemRoot\system32\drivers\aeaudio.sys F7A97000 - \SystemRoot\system32\drivers\senfilt.sys F8C3F000 - \SystemRoot\system32\DRIVERS\audstub.sys F8666000 - \SystemRoot\system32\DRIVERS\rasl2tp.sys F8A1E000 - \SystemRoot\system32\DRIVERS\ndistapi.sys F7A5C000 - \SystemRoot\system32\DRIVERS\ndiswan.sys F8676000 - \SystemRoot\system32\DRIVERS\raspppoe.sys F8686000 - \SystemRoot\system32\DRIVERS\raspptp.sys F8896000 - \SystemRoot\system32\DRIVERS\TDI.SYS F7A4B000 - \SystemRoot\system32\DRIVERS\psched.sys F8696000 - \SystemRoot\system32\DRIVERS\msgpc.sys F889E000 - \SystemRoot\system32\DRIVERS\ptilink.sys F88A6000 - \SystemRoot\system32\DRIVERS\raspti.sys F7A1A000 - \SystemRoot\system32\DRIVERS\rdpdr.sys F7F4A000 - \SystemRoot\system32\DRIVERS\termdd.sys F88AE000 - \SystemRoot\system32\DRIVERS\kbdclass.sys F88B6000 - \SystemRoot\system32\DRIVERS\mouclass.sys F8A8E000 - \SystemRoot\system32\DRIVERS\swenum.sys F7999000 - \SystemRoot\system32\DRIVERS\update.sys F832E000 - \SystemRoot\system32\DRIVERS\mssmbios.sys F7F3A000 - \SystemRoot\System32\Drivers\NDProxy.SYS F7F0A000 - \SystemRoot\system32\DRIVERS\usbhub.sys F8A96000 - \SystemRoot\system32\DRIVERS\USBD.SYS F89DA000 - \SystemRoot\system32\drivers\MODEMCSA.sys F88CE000 - \SystemRoot\system32\DRIVERS\flpydisk.sys F8A9A000 - \SystemRoot\System32\Drivers\Fs_Rec.SYS F8BF3000 - \SystemRoot\System32\Drivers\Null.SYS F8A9C000 - \SystemRoot\System32\Drivers\Beep.SYS F88DE000 - \SystemRoot\system32\DRIVERS\HIDPARSE.SYS F88E6000 - \SystemRoot\System32\drivers\vga.sys F8A9E000 - \SystemRoot\System32\Drivers\mnmdd.SYS F8AA0000 - \SystemRoot\System32\DRIVERS\RDPCDD.sys F88EE000 - \SystemRoot\System32\Drivers\Msfs.SYS F88F6000 - \SystemRoot\System32\Drivers\Npfs.SYS F89EE000 - \SystemRoot\system32\DRIVERS\rasacd.sys ED8FE000 - \SystemRoot\system32\DRIVERS\ipsec.sys ED8A6000 - \SystemRoot\system32\DRIVERS\tcpip.sys F88FE000 - \??\C:\Program Files\Softwin\BitDefender10\bdpredir.sys ED87E000 - \SystemRoot\system32\DRIVERS\netbt.sys ED85C000 - \SystemRoot\System32\drivers\afd.sys F7EBA000 - \SystemRoot\system32\DRIVERS\netbios.sys F8906000 - \SystemRoot\System32\Drivers\StarOpen.SYS ED831000 - \SystemRoot\system32\DRIVERS\rdbss.sys ED79A000 - \SystemRoot\system32\DRIVERS\mrxsmb.sys F86A6000 - \SystemRoot\System32\Drivers\Fips.SYS ED779000 - \SystemRoot\system32\DRIVERS\ipnat.sys F86B6000 - \SystemRoot\system32\DRIVERS\wanarp.sys F8916000 - \SystemRoot\system32\DRIVERS\usbccgp.sys F8C00000 - \??\C:\WINDOWS\system32\drivers\aslm75.sys F86F6000 - \SystemRoot\System32\Drivers\Cdfs.SYS F8926000 - \SystemRoot\system32\DRIVERS\USBSTOR.SYS F79FE000 - \SystemRoot\system32\DRIVERS\hidusb.sys F8706000 - \SystemRoot\system32\DRIVERS\HIDCLASS.SYS F8736000 - \SystemRoot\system32\drivers\lvusbsta.sys ED5FA000 - \SystemRoot\system32\DRIVERS\LV302AV.SYS F8746000 - \SystemRoot\system32\DRIVERS\STREAM.SYS ED3DF000 - \SystemRoot\system32\DRIVERS\lvsvf2.sys F8AC4000 - \SystemRoot\system32\DRIVERS\lv302af.sys F8756000 - \SystemRoot\system32\drivers\usbaudio.sys F7991000 - \SystemRoot\system32\DRIVERS\kbdhid.sys F798D000 - \SystemRoot\system32\DRIVERS\mouhid.sys ED39F000 - \SystemRoot\System32\Drivers\dump_atapi.sys F8ADC000 - \SystemRoot\System32\Drivers\dump_WMILIB.SYS BF800000 - \SystemRoot\System32\win32k.sys F7971000 - \SystemRoot\System32\drivers\Dxapi.sys F880E000 - \SystemRoot\System32\watchdog.sys BF9C3000 - \SystemRoot\System32\drivers\dxg.sys F8B66000 - \SystemRoot\System32\drivers\dxgthk.sys BF9D5000 - \SystemRoot\System32\ati2dvag.dll BFA0B000 - \SystemRoot\System32\ati2cqag.dll BFA43000 - \SystemRoot\System32\ati3duag.dll BFC11000 - \SystemRoot\System32\ativvaxx.dll ED2B7000 - \SystemRoot\system32\DRIVERS\ndisuio.sys ECF52000 - \SystemRoot\system32\drivers\wdmaud.sys ED0B7000 - \SystemRoot\system32\drivers\sysaudio.sys ECC1D000 - \SystemRoot\system32\DRIVERS\mrxdav.sys F8A54000 - \SystemRoot\System32\Drivers\ParVdm.SYS ECBDC000 - \SystemRoot\System32\Drivers\HTTP.sys ECD38000 - \SystemRoot\system32\DRIVERS\mdmxsdk.sys ECB62000 - \SystemRoot\system32\DRIVERS\srv.sys EC87A000 - \??\C:\Program Files\Softwin\BitDefender10\bdfsdrv.sys EC3FA000 - \SystemRoot\system32\drivers\kmixer.sys EC465000 - \??\C:\Program Files\Softwin\BitDefender10\bdfdll.sys ED03B000 - \??\C:\Program Files\Softwin\BitDefender10\bdrsdrv.sys F8C20000 - \SystemRoot\System32\DRIVERS\KProcCheck.sys Total number of drivers = 137 Liste des programmes installes Adobe Flash Player ActiveX HijackThis 1.99.1 Kaspersky Online Scanner Mozilla Firefox (2.0.0.6) Panda ActiveScan Le volume dans le lecteur C s'appelle sata Le numéro de série du volume est 84F4-3E41 Répertoire de C:\Program Files 30/07/2007 20:01 <REP> . 30/07/2007 20:01 <REP> .. 06/05/2007 11:38 <REP> 7-Zip 19/10/2006 21:35 <REP> Adobe 03/06/2007 19:46 <REP> ahead 05/05/2007 23:58 <REP> Analog Devices 06/05/2007 00:01 <REP> ASUS 19/06/2007 18:16 <REP> ATnotes 25/05/2007 18:22 <REP> Azureus 16/07/2007 23:24 <REP> CCleaner 14/10/2006 12:58 <REP> ComPlus Applications 24/06/2007 10:43 <REP> Dofus 10/05/2007 00:11 <REP> eMule 09/06/2007 22:05 <REP> Fichiers communs 10/06/2007 08:21 <REP> FileZilla 15/06/2007 22:32 <REP> Google 10/05/2007 22:05 <REP> Hewlett-Packard 10/05/2007 22:08 <REP> HP 14/10/2006 14:26 <REP> Intel 26/06/2007 16:48 <REP> Internet Explorer 17/10/2006 20:45 <REP> InterVideo 05/05/2007 20:45 <REP> Iomega 11/06/2007 13:02 <REP> IPNetInfo 18/10/2006 21:39 <REP> iPod 18/10/2006 21:39 <REP> iTunes 17/05/2007 10:58 <REP> Java 19/10/2006 21:31 <REP> Logitech 09/06/2007 22:04 <REP> Macromedia 26/06/2007 17:02 <REP> Messenger 06/06/2007 22:40 <REP> Messenger Plus! Live 14/10/2006 13:02 <REP> microsoft frontpage 20/10/2006 18:11 <REP> Microsoft Office 06/05/2007 20:27 <REP> Morpheus 14/10/2006 12:59 <REP> Movie Maker 06/08/2007 18:11 <REP> Mozilla Firefox 29/05/2007 15:40 <REP> Mozilla Sunbird 20/10/2006 07:02 <REP> Mozilla Thunderbird 14/10/2006 12:57 <REP> MSN 14/10/2006 12:58 <REP> MSN Gaming Zone 06/05/2007 16:45 <REP> MSN Messenger 26/06/2007 17:09 <REP> MSXML 4.0 14/10/2006 12:59 <REP> NetMeeting 18/10/2006 21:07 <REP> OpenOffice.org 2.0 26/06/2007 16:55 <REP> Outlook Express 31/05/2007 14:44 <REP> PDFCreator 31/05/2007 14:44 <REP> PDFCreator Toolbar 23/05/2007 18:45 <REP> QuickTime 30/05/2007 00:04 <REP> Real 27/06/2007 05:12 <REP> Samsung 14/10/2006 13:00 <REP> Services en ligne 14/10/2006 15:49 <REP> Softwin 27/06/2007 20:55 <REP> Spybot - Search & Destroy 25/06/2007 00:50 <REP> Star Downloader 05/05/2007 20:49 <REP> VideoLAN 17/05/2007 00:50 <REP> Windows Journal Viewer 06/06/2007 22:40 <REP> Windows Live 16/07/2007 21:45 <REP> Windows Media Connect 2 16/07/2007 21:45 <REP> Windows Media Player 14/10/2006 12:58 <REP> Windows NT 14/10/2006 13:02 <REP> xerox 06/06/2007 14:44 <REP> Yahoo! 18/10/2006 20:17 <REP> YRefresher 0 fichier(s) 0 octets 62 Rép(s) 28 436 992 000 octets libres Le volume dans le lecteur C s'appelle sata Le numéro de série du volume est 84F4-3E41 Répertoire de C:\Program Files\fichiers communs 09/06/2007 22:05 <REP> . 09/06/2007 22:05 <REP> .. 20/10/2006 18:18 <REP> Adobe 20/10/2006 18:11 <REP> DESIGNER 10/05/2007 22:03 <REP> Hewlett-Packard 10/05/2007 22:08 <REP> HP 22/06/2007 18:00 <REP> InstallShield 17/05/2007 10:57 <REP> Java 06/05/2007 21:42 <REP> Logitech 09/06/2007 22:04 <REP> Macromedia 09/06/2007 22:05 <REP> Macromedia Shared 06/05/2007 16:46 <REP> Microsoft Shared 14/10/2006 12:59 <REP> MSSoap 14/10/2006 14:54 <REP> ODBC 30/05/2007 00:04 <REP> Real 14/10/2006 12:59 <REP> Services 14/10/2006 15:49 <REP> Softwin 14/10/2006 14:54 <REP> SpeechEngines 26/06/2007 16:55 <REP> System 30/05/2007 00:04 <REP> xing shared 0 fichier(s) 0 octets 20 Rép(s) 28 436 987 904 octets libres Le volume dans le lecteur C s'appelle sata Le numéro de série du volume est 84F4-3E41 Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders 09/08/2007 01:58 <REP> . 09/08/2007 01:58 <REP> .. 20/10/2006 18:11 <REP> 1033 20/10/2006 18:11 <REP> 1036 11/07/2003 10:15 1 292 872 MSONSEXT.DLL 15/07/2003 06:52 35 896 MSOSV.DLL 03/06/1999 12:09 122 937 MSOWS409.DLL 07/03/2001 07:00 127 033 MSOWS40c.DLL 11/07/2003 02:25 80 448 PKMWS.DLL 5 fichier(s) 1 659 186 octets 4 Rép(s) 28 436 987 904 octets libres Le volume dans le lecteur C s'appelle sata Le numéro de série du volume est 84F4-3E41 Répertoire de C:\ 12/05/2007 18:22 68 096 diff.exe 12/05/2007 18:22 103 424 grep.exe 2 fichier(s) 171 520 octets 0 Rép(s) 28 436 987 904 octets libres c:\Documents and Settings\stephane\.housecall6.6\getMac.exe c:\Documents and Settings\stephane\.housecall6.6\patch.exe c:\Documents and Settings\stephane\.housecall6.6\tsc.exe c:\Documents and Settings\stephane\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\ARPPRODUCTICON.exe c:\Documents and Settings\stephane\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe c:\Documents and Settings\stephane\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\googleearth.exe1_407B9B5CDAC54F44A756B57CAB4E6A8B.exe c:\Documents and Settings\stephane\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\UNINST_Uninstall_G_3DE5E7D47B88403CA3FD2017A8240C5B.exe c:\Documents and Settings\stephane\Application Data\Microsoft\Installer\{90FF23FE-0E1B-40DF-A22E-B4C0372E5936}\ARPPRODUCTICON.exe c:\Documents and Settings\stephane\Bureau\Nouveau dossier\20070112093709031_Samsung_PC_Studio.exe c:\Documents and Settings\stephane\Bureau\Nouveau dossier\Samsung_PC_Studio_311_FKB.exe c:\Documents and Settings\stephane\Bureau\OpenOfficeorg 2.0 Installation Files\instmsia.exe c:\Documents and Settings\stephane\Bureau\OpenOfficeorg 2.0 Installation Files\instmsiw.exe c:\Documents and Settings\stephane\Bureau\OpenOfficeorg 2.0 Installation Files\setup.exe c:\Documents and Settings\stephane\Bureau\poetr\ATF-Cleaner.exe c:\Documents and Settings\stephane\Bureau\poetr\ComboFix.exe c:\Documents and Settings\stephane\Bureau\poetr\HijackThis.exe c:\Documents and Settings\stephane\Bureau\poetr\mwav.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\catchme.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\diff.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\dumphive.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\FilesInfoCmd.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\find2.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\Fport.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\grep.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\KProcCheck.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\LFiles.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\LISTDLLS.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\pslist.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\streams.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\swreg.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\attrib.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\catchme.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\find.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\findstr.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\regedit.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\cliptext.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\download.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\ERUNT.EXE c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\FixPath.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\LS.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\MD5File.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\moveex.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\Process.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\RegDACL.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\RestartIt!.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\sc.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\SF.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\shutdown.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\swreg.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\swsc.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\unzip.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\zip.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\Replace\W2K.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\Replace\XP.exe c:\Documents and Settings\stephane\Mes documents\ccm-2.0.5.exe c:\Documents and Settings\stephane\Mes documents\Atari ST\setup.exe c:\Documents and Settings\stephane\Mes documents\bench\stephane\3DMark03.exe c:\Documents and Settings\stephane\Mes documents\bench\stephane\dx90_redist.exe c:\Documents and Settings\stephane\Mes documents\claude\idiotiesdiverses\effects of alcohol_1.exe c:\Documents and Settings\stephane\Mes documents\claude\idiotiesdiverses\effects of ecstacy_1.exe c:\Documents and Settings\stephane\Mes documents\claude\idiotiesdiverses\effects of LSD_1.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\Acrobat v5.0\_ISDel.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\Acrobat v5.0\Setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\_ISDEL.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\SETUP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\Cleaner\cleaner.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\DXMedia\dxsetup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\QuickTim\QuickTimeInstaller.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\Real\installreal.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\Adobe Premiere Version 6.0\Premiere\Crack.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\keygen.Exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\PostScript Drivers\setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\PostScript Drivers\Adobe\_ISDel.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\PostScript Drivers\Adobe\Setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\PostScript Drivers\Adobe\Auto\AUTOPLAY.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\SVG Viewer\SVGSetup-fr_FR.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\Textures d'effets d'éclairage\Multi-Size Save.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\Textures d'effets d'éclairage\Size to Fit Within.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-phot7\_ISDel.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-phot7\Setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\advanced photo mosaic maker v1.2_keygen\emosaic.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\easy.photo.mosaic.maker.v2.16.winall.regged-scf\scfepmm2\scfepmm2\emosaic.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\Autorun.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\instmsia.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\instmsiw.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\SetReg.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\IE5\French\DCOM95.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\IE5\French\IE501DOM.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\IE5\French\IE5COMP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\IE5\French\ie5setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\IE5\French\OAINST.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\Redist\50ComUpd.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\Redist\Axdist.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\Redist\Oleaut.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\Redist\ShFolder.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\Redist\English\hhupd.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\TTS\spchapi.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\TTS\common module\Setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\TTS\language modules\Standard French\Setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\INSTALL.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SETUPSE.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQLWRAP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\IE5\FR\DCOM95.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\IE5\FR\IE5COMP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\IE5\FR\IE5SETUP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\IE5\FR\IEAK5.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\IE5\FR\IEAK5CD.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\IE5\FR\VRML2C.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\MSI\INSTMSI.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\MSI\INSTMSIW.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\ARTGALRY\ARTGALRY.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\ARTGALRY\CAG.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\DATAMAP\DATAINST.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\DATAMAP\MSMAP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\DBREP\WZCNFLCT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\EQUATION\EQNEDT32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\MSINFO\MSINFO32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\MSINFO\OFFPROV.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\ORGCHART\ORGCHART.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\PHOTOED\PHOTOED.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\ADMCGI\SCRIPTS\FPADMCGI.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\CFGWIZ.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\FPREMADM.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\FPSERVER.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\FPSRVADM.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\HTIMAGE.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\IMAGEMAP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\TCPTEST.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\ISAPI\FPCOUNT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\_VTI_BIN\FPCOUNT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\_VTI_BIN\SHTML.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\_VTI_BIN\_VTI_ADM\ADMIN.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\_VTI_BIN\_VTI_AUT\AUTHOR.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\FPWEBS\SERVER\VHTTPD32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\OUT40.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\CCMDLIST.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\CNFNOT32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\CWIMPORT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\95\MAPISP32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\95\ML3XEC16.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\95\NEWPROF.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\95\SCANPST.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\NT\MAPISP32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\NT\ML3XEC16.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\NT\NEWPROF.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\NT\SCANPST.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\FP98\VER3\BIN\FP98SADM.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\FP98\VER3\BIN\FP98SWIN.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\FP98\VER3\BIN\FPSRVADM.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\FP98\VER3\BIN\FPSRVWIN.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\BINDER.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\CONVTEXT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\DATCRT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\DLGCANCL.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\EXCEL.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\FINDER.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\FINDFAST.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\FRONTPG.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\GRAPH9.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MAKECERT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSACCESS.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSACNV30.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSIMPORT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSO7FTP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSO7FTPA.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSO7FTPS.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSOHTMED.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSQRY32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\NSREX.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\OFFCLN9.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\ORG11SVR.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\ORG21SVR.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\OSA9.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\OTUNEUP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\OUTLOOK.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\OWSTIMER.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\POWERPNT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\REXPROXY.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\RXCBPRXY.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\SELFCERT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\SETLANG.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\VTIDISC.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\VTIFORM.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\VTIPRES.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\WAVTOASF.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\WEBPUB.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\WINWORD.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\MSOFFICE.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\MSOHELP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\NFCLEAN.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\OLFMOD32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\OLFSETUP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\OLFSNT40.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\PROJWIZ.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\SCHDPL32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\WFXMSRVR.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\WRKGADM.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\FORMS\1036\REGCFG.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\XLATORS\PPVIEW32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\SNAPVIEW\SNAPVIEW.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\VSTUDIO\COMMON\IDE\IDE98\MSE.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SP\DCOM\DCOM95.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\BCP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\CMDWRAP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\CNFGSVR.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\DCOMSCM.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\DISTRIB.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\DTSRUN.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\DTSWIZ.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\LOGREAD.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\ODBCCMPT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\OSQL.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\REBUILDM.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\REGREBLD.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\REPLMERG.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SCM.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SNAPSHOT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SQLAGENT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SQLMANGR.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SQLSERVR.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SVRNETCN.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\VSWITCH.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\OTHER\DTCSETUP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\SETUP\_ISDEL.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\SETUP\MSETUP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\SETUP\SETUPSQL.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\SETUP\SQLSTP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\SYSTEM\CLICONFG.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\SYSTEM\REGSVR32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SYSTEM\CLICONFG.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SYSTEM\EXTRACT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SYSTEM\IMMC.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SYSTEM\ODBCAD32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SYSTEM95\AWSNTO32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SYSTEM95\FIXMAPI.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SYSTEM95\VIEWERS\QUIKVIEW.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SYSTEMNT\FIXMAPI.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SYSTEMNT\VIEWERS\QUIKVIEW.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\WINDOWS\HH.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\WINDOWS\MSAGENT\AGENTSVR.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\Setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\CHKDSK.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\EMM386.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\FLOPPY.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\FLOPPY9x.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\FLOPPYME.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\NWCDEX.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\PQBOOT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\PTEDIT32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\restrmbr.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\WRPROG.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Setup\instmsia.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Setup\instmsiw.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Setup\setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\DKeeper\instmsia.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\DKeeper\instmsiw.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\DKeeper\setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\Setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\CHKDSK.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\EMM386.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\FLOPPY.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\FLOPPY9x.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\FLOPPYME.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\NWCDEX.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\PTEDIT32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Setup\instmsia.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Setup\instmsiw.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Setup\setup.exe c:\Documents and Settings\stephane\Mes documents\Macromedia\keygen_Macromedia_Studio_MX.exe c:\Documents and Settings\stephane\Mes documents\Mes fichiers reçus\Contam.EXE c:\Documents and Settings\stephane\Mes documents\Mes images\LOTR_1.EXE c:\Documents and Settings\stephane\Mes documents\Mes images\msn\linsdsay\WINKS 1\mcoinstall.exe c:\Documents and Settings\stephane\Mes documents\open2.0\instmsia.exe c:\Documents and Settings\stephane\Mes documents\open2.0\instmsiw.exe c:\Documents and Settings\stephane\Mes documents\open2.0\setup.exe c:\Documents and Settings\stephane\Mes documents\Page Perso\vnc-3.3.7-x86_win32.exe c:\Documents and Settings\stephane\Mes documents\prog divers\DivX511Bundle.exe c:\Documents and Settings\stephane\Mes documents\prog divers\eMule0.30e-Installer.exe c:\Documents and Settings\stephane\Mes documents\prog divers\eMule0.42g-Installer.exe c:\Documents and Settings\stephane\Mes documents\prog divers\FileZilla_2_1_3a_setup.exe c:\Documents and Settings\stephane\Mes documents\prog divers\ie6setup.exe c:\Documents and Settings\stephane\Mes documents\prog divers\instantget.exe c:\Documents and Settings\stephane\Mes documents\prog divers\mdv.exe c:\Documents and Settings\stephane\Mes documents\prog divers\moorhuhn2.exe c:\Documents and Settings\stephane\Mes documents\prog divers\moorhuhnjagd.exe c:\Documents and Settings\stephane\Mes documents\prog divers\mozilla121fr.exe c:\Documents and Settings\stephane\Mes documents\prog divers\mozilla13us.exe c:\Documents and Settings\stephane\Mes documents\prog divers\ow32frfr606j.exe c:\Documents and Settings\stephane\Mes documents\prog divers\ow32frfr723.exe c:\Documents and Settings\stephane\Mes documents\prog divers\paintshoppro5.01.EXE c:\Documents and Settings\stephane\Mes documents\prog divers\pcbugdoctor_setup.exe c:\Documents and Settings\stephane\Mes documents\prog divers\rp505fra.exe c:\Documents and Settings\stephane\Mes documents\prog divers\SandraStd-DPK-9260.exe c:\Documents and Settings\stephane\Mes documents\prog divers\script_edit.exe c:\Documents and Settings\stephane\Mes documents\prog divers\sdpro.exe c:\Documents and Settings\stephane\Mes documents\prog divers\spybotsd12.exe c:\Documents and Settings\stephane\Mes documents\prog divers\stardown.exe c:\Documents and Settings\stephane\Mes documents\prog divers\TOM.exe c:\Documents and Settings\stephane\Mes documents\prog divers\ts15eval.exe c:\Documents and Settings\stephane\Mes documents\prog divers\VXP_v722.exe c:\Documents and Settings\stephane\Mes documents\prog divers\wace22.exe c:\Documents and Settings\stephane\Mes documents\prog divers\winamp502_full.exe c:\Documents and Settings\stephane\Mes documents\prog divers\winteredition.exe c:\Documents and Settings\stephane\Mes documents\prog divers\wrar32b2fr.exe c:\Documents and Settings\stephane\Mes documents\prog divers\zlsSetup_45_532.exe c:\Documents and Settings\stephane\Mes documents\prog divers\zlsSetup_45_538_001.exe c:\Documents and Settings\stephane\Mes documents\prog divers\arcanum\arcanum_fr_1064_1070.exe c:\Documents and Settings\stephane\Mes documents\prog divers\arcanum\arcanum_fr_1074.exe c:\Documents and Settings\stephane\Mes documents\site\Setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\reveilletoi.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\Acrobat v5.0\_ISDel.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\Acrobat v5.0\Setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\_ISDEL.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\SETUP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\Cleaner\cleaner.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\DXMedia\dxsetup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\QuickTim\QuickTimeInstaller.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\Real\installreal.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\Adobe Premiere Version 6.0\Premiere\Crack.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\keygen.Exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\PostScript Drivers\setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\PostScript Drivers\Adobe\_ISDel.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\PostScript Drivers\Adobe\Setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\PostScript Drivers\Adobe\Auto\AUTOPLAY.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\SVG Viewer\SVGSetup-fr_FR.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\Textures d'effets d'éclairage\Multi-Size Save.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\Textures d'effets d'éclairage\Size to Fit Within.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-phot7\_ISDel.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-phot7\Setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\advanced photo mosaic maker v1.2_keygen\emosaic.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\easy.photo.mosaic.maker.v2.16.winall.regged-scf\scfepmm2\scfepmm2\emosaic.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\Autorun.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\instmsia.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\instmsiw.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\SetReg.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\IE5\French\DCOM95.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\IE5\French\IE501DOM.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\IE5\French\IE5COMP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\IE5\French\ie5setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\IE5\French\OAINST.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\Redist\50ComUpd.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\Redist\Axdist.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\Redist\Oleaut.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\Redist\ShFolder.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\Redist\English\hhupd.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\TTS\spchapi.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\TTS\common module\Setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\TTS\language modules\Standard French\Setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\INSTALL.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SETUPSE.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQLWRAP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\IE5\FR\DCOM95.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\IE5\FR\IE5COMP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\IE5\FR\IE5SETUP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\IE5\FR\IEAK5.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\IE5\FR\IEAK5CD.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\IE5\FR\VRML2C.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\MSI\INSTMSI.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\MSI\INSTMSIW.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\ARTGALRY\ARTGALRY.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\ARTGALRY\CAG.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\DATAMAP\DATAINST.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\DATAMAP\MSMAP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\DBREP\WZCNFLCT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\EQUATION\EQNEDT32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\MSINFO\MSINFO32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\MSINFO\OFFPROV.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\ORGCHART\ORGCHART.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\PHOTOED\PHOTOED.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\ADMCGI\SCRIPTS\FPADMCGI.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\CFGWIZ.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\FPREMADM.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\FPSERVER.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\FPSRVADM.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\HTIMAGE.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\IMAGEMAP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\TCPTEST.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\ISAPI\FPCOUNT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\_VTI_BIN\FPCOUNT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\_VTI_BIN\SHTML.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\_VTI_BIN\_VTI_ADM\ADMIN.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\_VTI_BIN\_VTI_AUT\AUTHOR.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\FPWEBS\SERVER\VHTTPD32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\OUT40.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\CCMDLIST.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\CNFNOT32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\CWIMPORT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\95\MAPISP32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\95\ML3XEC16.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\95\NEWPROF.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\95\SCANPST.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\NT\MAPISP32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\NT\ML3XEC16.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\NT\NEWPROF.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\NT\SCANPST.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\FP98\VER3\BIN\FP98SADM.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\FP98\VER3\BIN\FP98SWIN.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\FP98\VER3\BIN\FPSRVADM.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\FP98\VER3\BIN\FPSRVWIN.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\BINDER.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\CONVTEXT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\DATCRT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\DLGCANCL.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\EXCEL.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\FINDER.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\FINDFAST.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\FRONTPG.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\GRAPH9.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MAKECERT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSACCESS.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSACNV30.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSIMPORT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSO7FTP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSO7FTPA.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSO7FTPS.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSOHTMED.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSQRY32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\NSREX.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\OFFCLN9.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\ORG11SVR.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\ORG21SVR.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\OSA9.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\OTUNEUP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\OUTLOOK.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\OWSTIMER.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\POWERPNT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\REXPROXY.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\RXCBPRXY.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\SELFCERT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\SETLANG.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\VTIDISC.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\VTIFORM.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\VTIPRES.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\WAVTOASF.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\WEBPUB.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\WINWORD.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\MSOFFICE.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\MSOHELP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\NFCLEAN.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\OLFMOD32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\OLFSETUP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\OLFSNT40.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\PROJWIZ.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\SCHDPL32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\WFXMSRVR.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\WRKGADM.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\FORMS\1036\REGCFG.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\XLATORS\PPVIEW32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\SNAPVIEW\SNAPVIEW.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\VSTUDIO\COMMON\IDE\IDE98\MSE.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SP\DCOM\DCOM95.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\BCP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\CMDWRAP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\CNFGSVR.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\DCOMSCM.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\DISTRIB.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\DTSRUN.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\DTSWIZ.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\LOGREAD.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\ODBCCMPT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\OSQL.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\REBUILDM.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\REGREBLD.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\REPLMERG.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SCM.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SNAPSHOT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SQLAGENT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SQLMANGR.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SQLSERVR.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SVRNETCN.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\VSWITCH.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\OTHER\DTCSETUP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\SETUP\_ISDEL.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\SETUP\MSETUP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\SETUP\SETUPSQL.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\SETUP\SQLSTP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\SYSTEM\CLICONFG.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\SYSTEM\REGSVR32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SYSTEM\CLICONFG.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SYSTEM\EXTRACT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SYSTEM\IMMC.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SYSTEM\ODBCAD32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SYSTEM95\AWSNTO32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SYSTEM95\FIXMAPI.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SYSTEM95\VIEWERS\QUIKVIEW.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SYSTEMNT\FIXMAPI.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SYSTEMNT\VIEWERS\QUIKVIEW.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\WINDOWS\HH.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\WINDOWS\MSAGENT\AGENTSVR.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\Setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\CHKDSK.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\EMM386.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\FLOPPY.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\FLOPPY9x.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\FLOPPYME.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\NWCDEX.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\PQBOOT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\PTEDIT32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\restrmbr.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\WRPROG.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Setup\instmsia.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Setup\instmsiw.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Setup\setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\DKeeper\instmsia.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\DKeeper\instmsiw.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\DKeeper\setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\Setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\CHKDSK.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\EMM386.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\FLOPPY.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\FLOPPY9x.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\FLOPPYME.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\NWCDEX.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\PTEDIT32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Setup\instmsia.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Setup\instmsiw.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Setup\setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\Atari ST\setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\bench\stephane\3DMark03.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\bench\stephane\dx90_redist.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\e_mule\dxwebsetup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\e_mule\mp71.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\e_mule\newwebter.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\Macromedia\keygen_Macromedia_Studio_MX.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\Page Perso\vnc-3.3.7-x86_win32.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\DivX511Bundle.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\eMule0.30e-Installer.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\FileZilla_2_1_3a_setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\ie6setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\instantget.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\mdv.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\moorhuhn2.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\moorhuhnjagd.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\mozilla121fr.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\mozilla13us.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\ow32frfr606j.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\ow32frfr723.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\paintshoppro5.01.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\pcbugdoctor_setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\rp505fra.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\SandraStd-DPK-9260.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\script_edit.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\spybotsd12.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\stardown.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\TOM.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\ts15eval.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\VXP_v722.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\wace22.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\winamp502_full.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\winteredition.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\wrar32b2fr.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\zlsSetup_45_532.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\zlsSetup_45_538_001.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\arcanum\arcanum_fr_1064_1070.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\arcanum\arcanum_fr_1074.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\RENNES\QuickTimeInstaller.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\RENNES\rennes.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\RENNES\cartographie\photo\Zoom64\perl.exe c:\Documents and Settings\stephane\Mes documents\telechargements\3DMark06_v102_installer.exe c:\Documents and Settings\stephane\Mes documents\telechargements\7z444.exe c:\Documents and Settings\stephane\Mes documents\telechargements\7z445.exe c:\Documents and Settings\stephane\Mes documents\telechargements\a2freesetup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Accelerateur-Alice.exe c:\Documents and Settings\stephane\Mes documents\telechargements\AdbeRdr60_fra_full.exe c:\Documents and Settings\stephane\Mes documents\telechargements\aida32ee_393.exe c:\Documents and Settings\stephane\Mes documents\telechargements\atnsetup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\autospell_outlookexpress(2).exe c:\Documents and Settings\stephane\Mes documents\telechargements\autospell_outlookexpress.exe c:\Documents and Settings\stephane\Mes documents\telechargements\avwinsfx(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements\Azureus_2.5.0.4a_Win32.setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Azureus25.exe c:\Documents and Settings\stephane\Mes documents\telechargements\bejeweled-setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\bitdefender_avplus_v10.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ccm-2.0.5.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ccm-2.0.6.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ccsetup136.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ccsetup140.exe c:\Documents and Settings\stephane\Mes documents\telechargements\cdex_151.exe c:\Documents and Settings\stephane\Mes documents\telechargements\character_aragorn.exe c:\Documents and Settings\stephane\Mes documents\telechargements\character_arwen.exe c:\Documents and Settings\stephane\Mes documents\telechargements\character_boromir.exe c:\Documents and Settings\stephane\Mes documents\telechargements\character_eowyn.exe c:\Documents and Settings\stephane\Mes documents\telechargements\character_eye.exe c:\Documents and Settings\stephane\Mes documents\telechargements\character_frodo.exe c:\Documents and Settings\stephane\Mes documents\telechargements\character_galadriel.exe c:\Documents and Settings\stephane\Mes documents\telechargements\character_gollum.exe c:\Documents and Settings\stephane\Mes documents\telechargements\character_legolas.exe c:\Documents and Settings\stephane\Mes documents\telechargements\cldxtra2.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ConCon111.exe c:\Documents and Settings\stephane\Mes documents\telechargements\culture_dwarves.exe c:\Documents and Settings\stephane\Mes documents\telechargements\culture_ents.exe c:\Documents and Settings\stephane\Mes documents\telechargements\culture_horses.exe c:\Documents and Settings\stephane\Mes documents\telechargements\culture_orcs.exe c:\Documents and Settings\stephane\Mes documents\telechargements\culture_wizards.exe c:\Documents and Settings\stephane\Mes documents\telechargements\DofusInstaller_v1_18_1.exe c:\Documents and Settings\stephane\Mes documents\telechargements\DofusPatch_v1_18_0_to_v1_18_1.exe c:\Documents and Settings\stephane\Mes documents\telechargements\DofusPatch_v1_18_2_to_v1_19_0.exe c:\Documents and Settings\stephane\Mes documents\telechargements\DofusPatch_v1_18_X_to_v1_18_2.exe c:\Documents and Settings\stephane\Mes documents\telechargements\dvd_conceptart(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements\dvd_conceptart.exe c:\Documents and Settings\stephane\Mes documents\telechargements\dvd_gallery.exe c:\Documents and Settings\stephane\Mes documents\telechargements\dvd_twotowers.exe c:\Documents and Settings\stephane\Mes documents\telechargements\dxwebsetup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\effects_helmsdeep.exe c:\Documents and Settings\stephane\Mes documents\telechargements\effects_prologue.exe c:\Documents and Settings\stephane\Mes documents\telechargements\emoticones.exe c:\Documents and Settings\stephane\Mes documents\telechargements\emoticones1_5.exe c:\Documents and Settings\stephane\Mes documents\telechargements\eMule0.47c-Installer.exe c:\Documents and Settings\stephane\Mes documents\telechargements\eMulePlus-1.1f.Installer.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ERPROT_604.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Europol.exe c:\Documents and Settings\stephane\Mes documents\telechargements\FileZilla_2_2_29_setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\FileZilla_2_2_31_setup(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements\FileZilla_2_2_31_setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\FIRCSetup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Firefox Setup 1.0.3.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Firefox Setup 1.0.4.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Firefox Setup 1.0.6.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Firefox Setup 1.0.7.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Firefox Setup 1.0.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Firefox Setup 1.5.0.12.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Firefox Setup 1.5.0.4.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Firefox Setup 1.5.0.7.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Firefox Setup 1.5.exe c:\Documents and Settings\stephane\Mes documents\telechargements\GenuineCheck.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Google_Earth_BZXE.exe c:\Documents and Settings\stephane\Mes documents\telechargements\gspot221.exe c:\Documents and Settings\stephane\Mes documents\telechargements\hotpop-3.0.2.exe c:\Documents and Settings\stephane\Mes documents\telechargements\HP_Vista_MFP_Ph1.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ie6setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Install_Messenger.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Install_MSN_Messenger.EXE c:\Documents and Settings\stephane\Mes documents\telechargements\INSTALL_MSN_MESSENGER_DL.EXE c:\Documents and Settings\stephane\Mes documents\telechargements\ioware-w32-x86-402.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ipnetinfo_setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\iTunesSetup(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements\iTunesSetup(2).exe c:\Documents and Settings\stephane\Mes documents\telechargements\iTunesSetup(3).exe c:\Documents and Settings\stephane\Mes documents\telechargements\iTunesSetup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\iview397.exe c:\Documents and Settings\stephane\Mes documents\telechargements\kav700123fr_1645.exe c:\Documents and Settings\stephane\Mes documents\telechargements\klcodec277f.exe c:\Documents and Settings\stephane\Mes documents\telechargements\location_beyond.exe c:\Documents and Settings\stephane\Mes documents\telechargements\location_concept.exe c:\Documents and Settings\stephane\Mes documents\telechargements\location_fangorn.exe c:\Documents and Settings\stephane\Mes documents\telechargements\location_hobbiton.exe c:\Documents and Settings\stephane\Mes documents\telechargements\location_lothlorien.exe c:\Documents and Settings\stephane\Mes documents\telechargements\location_moria.exe c:\Documents and Settings\stephane\Mes documents\telechargements\location_riven.exe c:\Documents and Settings\stephane\Mes documents\telechargements\location_theshire.exe c:\Documents and Settings\stephane\Mes documents\telechargements\MDAC_TYP.EXE c:\Documents and Settings\stephane\Mes documents\telechargements\mirc617.exe c:\Documents and Settings\stephane\Mes documents\telechargements\mozilla-win32-1.6-fr-FR-installer(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements\mozilla-win32-1.6-fr-FR-installer.exe c:\Documents and Settings\stephane\Mes documents\telechargements\mozilla-win32-1.7-installer(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements\mozilla-win32-1.7-installer.exe c:\Documents and Settings\stephane\Mes documents\telechargements\mp71.exe c:\Documents and Settings\stephane\Mes documents\telechargements\MPSetup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\MsgPlus-351.exe c:\Documents and Settings\stephane\Mes documents\telechargements\MsgPlusLive-401(2).exe c:\Documents and Settings\stephane\Mes documents\telechargements\MsgPlusLive-401.exe c:\Documents and Settings\stephane\Mes documents\telechargements\MsgPlusLive-420.exe c:\Documents and Settings\stephane\Mes documents\telechargements\msgr8us.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Nero-7.8.5.0_fra_trial.exe c:\Documents and Settings\stephane\Mes documents\telechargements\neverwinter_nights_mise_a_jour_critique_version_windows_francais_14688.exe c:\Documents and Settings\stephane\Mes documents\telechargements\newwebter.exe c:\Documents and Settings\stephane\Mes documents\telechargements\OOo_2.0.0_Win32Intel_install_fr.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ow32frfr723j.exe c:\Documents and Settings\stephane\Mes documents\telechargements\PalaceUserWin.exe c:\Documents and Settings\stephane\Mes documents\telechargements\pci_filerecovery.exe c:\Documents and Settings\stephane\Mes documents\telechargements\PDFCreator-0_9_3_GPLGhostscript(2).exe c:\Documents and Settings\stephane\Mes documents\telechargements\PDFCreator-0_9_3_GPLGhostscript.exe c:\Documents and Settings\stephane\Mes documents\telechargements\pilote_ati_catalyst_6.12_3220.exe c:\Documents and Settings\stephane\Mes documents\telechargements\pj64_1_5.exe c:\Documents and Settings\stephane\Mes documents\telechargements\pn31lous.exe c:\Documents and Settings\stephane\Mes documents\telechargements\qc1000fra.exe c:\Documents and Settings\stephane\Mes documents\telechargements\rmxv4.exe c:\Documents and Settings\stephane\Mes documents\telechargements\sc880xp.exe c:\Documents and Settings\stephane\Mes documents\telechargements\SDFix.exe c:\Documents and Settings\stephane\Mes documents\telechargements\sdfree(2).exe c:\Documents and Settings\stephane\Mes documents\telechargements\sdfree.exe c:\Documents and Settings\stephane\Mes documents\telechargements\sdfree-1.exe c:\Documents and Settings\stephane\Mes documents\telechargements\seamonkey-1.0.2.fr-FR.win32.installer.exe c:\Documents and Settings\stephane\Mes documents\telechargements\setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Setup_FreeConverter(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements\Setup_FreeConverter.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Shareaza_2.2.5.0.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Shockwave_Installer_Slim.exe c:\Documents and Settings\stephane\Mes documents\telechargements\SkypeSetup(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements\SkypeSetup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\spybotsd13.exe c:\Documents and Settings\stephane\Mes documents\telechargements\spybotsd14.exe c:\Documents and Settings\stephane\Mes documents\telechargements\sunbird-0.3.fr.win32.installer.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Thunderbird Setup 1.5.0.4.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Thunderbird Setup 1.5.0.7(2).exe c:\Documents and Settings\stephane\Mes documents\telechargements\Thunderbird Setup 1.5.0.7.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Thunderbird Setup 1-1.5.0.4.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ThunderbirdSetup-0.7.1.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ThunderbirdSetup-0.9-fr-FR.exe c:\Documents and Settings\stephane\Mes documents\telechargements\unlocker1.8.5.exe c:\Documents and Settings\stephane\Mes documents\telechargements\vlc-0.8.5-win32.exe c:\Documents and Settings\stephane\Mes documents\telechargements\vlc-0.8.6b-win32.exe c:\Documents and Settings\stephane\Mes documents\telechargements\winamp503_full.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Wormux-0.7.9-win32.exe c:\Documents and Settings\stephane\Mes documents\telechargements\wrar32b2fr.exe c:\Documents and Settings\stephane\Mes documents\telechargements\x-3gp-video-converter.exe c:\Documents and Settings\stephane\Mes documents\telechargements\yrsetup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\yrsetup-1.exe c:\Documents and Settings\stephane\Mes documents\telechargements\zlsSetup_45_594_000.exe c:\Documents and Settings\stephane\Mes documents\telechargements2-09-2006\Pilote_Epson_Stylus_Color_880_5.2as_2000XP.exe c:\Documents and Settings\stephane\Mes documents\telechargements4-03-2007\installspeedfan432(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements4-03-2007\installspeedfan432(2).exe c:\Documents and Settings\stephane\Mes documents\telechargements4-03-2007\installspeedfan432(3).exe c:\Documents and Settings\stephane\Mes documents\telechargements4-03-2007\installspeedfan432(4).exe c:\Documents and Settings\stephane\Mes documents\telechargements4-03-2007\installspeedfan432.exe c:\Documents and Settings\stephane\Mes documents\telechargements4-03-2007\speedfan432(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements4-03-2007\speedfan432(2).exe c:\Documents and Settings\stephane\Mes documents\telechargements4-03-2007\speedfan432(3).exe c:\Documents and Settings\stephane\Mes documents\telechargements4-03-2007\speedfan432.exe c:\Documents and Settings\stephane\Mes documents\telechargements4-06-2007\hdtune_253.exe c:\Documents and Settings\stephane\Mes documents\telechargements5-07-2006\picasa2Setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements5-09-2006\DivXPlay.exe c:\Documents and Settings\stephane\Mes documents\telechargements\11-07-2006\GmailConfig.exe c:\Documents and Settings\stephane\Mes documents\telechargements\17-07-2006\Morpheus.exe c:\Documents and Settings\stephane\Mes documents\telechargements\17-10-2006\hotpop-3.0.2.exe c:\Documents and Settings\stephane\Mes documents\telechargements\17-10-2006\MozBackup-1.4.5-ENG.exe c:\Documents and Settings\stephane\Mes documents\telechargements\20-06-2006\AdbeRdr705_fra_full.exe c:\Documents and Settings\stephane\Mes documents\telechargements\20-06-2006\qc848fra.exe c:\Documents and Settings\stephane\Mes documents\telechargements\25-06-2006\yrsetup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\29-06-2006\FileZilla_2_2_25_setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\29-06-2006\hotpop-3.0.2.exe c:\Documents and Settings\stephane\Mes documents\telechargements\29-06-2006\iTunesSetup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\29-06-2006\kav5.0.527trial_personalfr.exe c:\Documents and Settings\stephane\Mes documents\telechargements\29-06-2006\quickzip.exe c:\Documents and Settings\stephane\Mes documents\telechargements\29-06-2006\spybotsd14.exe c:\Documents and Settings\stephane\Mes documents\telechargements\29-06-2006\txp4trial(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements\29-06-2006\txp4trial.exe c:\Documents and Settings\stephane\Mes documents\telechargements\29-06-2006\ultrabackup_setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\epson880\epson1778eu.exe c:\Documents and Settings\stephane\Mes documents\telechargements\epson880\epson3400eu.exe c:\Documents and Settings\stephane\Mes documents\telechargements\epson880\Pilote_Epson_Stylus_Color_880_5.2as_2000XP.exe c:\Documents and Settings\stephane\Mes documents\telechargements\essai\tsrh-easyrec512a.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Nouveau dossier\san1037-W64.exe c:\Documents and Settings\stephane\Mes documents\telechargements\OpenOfficeorg 2.0 Installation Files\instmsia.exe c:\Documents and Settings\stephane\Mes documents\telechargements\OpenOfficeorg 2.0 Installation Files\instmsiw.exe c:\Documents and Settings\stephane\Mes documents\telechargements\OpenOfficeorg 2.0 Installation Files\setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\open_office\OOo_1.1.2_Win32Intel_install_fr\setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Partials\Adobe Photoshop 7.0, with serial.partial.exe c:\Documents and Settings\stephane\Mes documents\telechargements\samsung\20050816162816765_Image_Editor.exe c:\Documents and Settings\stephane\Mes documents\telechargements\samsung\20050816162816765_Internet_Access.exe c:\Documents and Settings\stephane\Mes documents\telechargements\samsung\20050816162816765_PIMS_File_Manager.exe c:\Documents and Settings\stephane\Mes documents\telechargements\samsung\20060707123156828_Sample.exe c:\Documents and Settings\stephane\Mes documents\telechargements\samsung\20070314073350250_ContactsCopier_Installer.exe c:\Documents and Settings\stephane\Mes documents\telechargements\sandra\san9131Win32.exe c:\Documents and Settings\stephane\Mes documents\telechargements\torrent\Adobe.Dreamweaver.CS3.v9.0.3453.Incl.Keygen.INTERNAL.READ.NFO-SSG\adwcs3v90b3453vl02\Adobe.Dreamweaver.CS3.exe c:\Documents and Settings\stephane\Mes documents\telechargements\torrent\Adobe.Dreamweaver.CS3.v9.0.3453.Incl.Keygen.INTERNAL.READ.NFO-SSG\adwcs3v90b3453vl02\adw3kg.exe c:\Documents and Settings\stephane\Mes documents\telechargements\torrent\Dreamweaver.MX.2004\Dreamweaver.MX.2004\dwmx2004_trial_en_win.exe c:\Documents and Settings\stephane\Mes documents\telechargements\torrent\Dreamweaver.MX.2004\Updates\dwmx2004_701update_en.exe c:\Documents and Settings\stephane\Mes documents\telechargements\torrent\MM_studio 8\Captivate_1.01_Installer_fr.exe c:\Documents and Settings\stephane\Mes documents\telechargements\torrent\MM_studio 8\Dreamweaver8-fr.exe c:\Documents and Settings\stephane\Mes documents\telechargements\torrent\MM_studio 8\dw8_802_update_fr.exe c:\Documents and Settings\stephane\Mes documents\telechargements\torrent\MM_studio 8\Fireworks8-fr.exe c:\Documents and Settings\stephane\Mes documents\telechargements\torrent\MM_studio 8\Flash8-fr.exe c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig.dll c:\Documents and Settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll c:\Documents and Settings\stephane\Application Data\Macromedia\Dreamweaver MX 2004\Configuration\Flash Player\FlashPlayerW.dll c:\Documents and Settings\stephane\Application Data\Macromedia\Dreamweaver MX 2004\Configuration\Flash Player\NPSWF32.dll ****** Fin du rapport DiagHelp
  15. Félicitation ! Votre sécurité semble optimale ! La totalité des ports TCP testés sont masqués, votre ordinateur ne donne donc aucune réponse aux tests de ports effectués. Votre machine est donc invisible aux yeux de pirates potentiels.
  16. StartupList report, 10/08/2007, 14:45:17 StartupList version: 1.52.2 Started from : C:\Documents and Settings\stephane\Bureau\poetr\HijackThis.EXE Detected: Windows XP SP2 (WinNT 5.01.2600) Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180) * Using default options * Including empty and uninteresting sections * Showing rarely important sections ================================================== Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Softwin\BitDefender10\bdagent.exe C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe C:\Program Files\Analog Devices\SoundMAX\smax4.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\WINDOWS\system32\HPZipm12.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe C:\Program Files\Softwin\BitDefender10\vsserv.exe C:\WINDOWS\system32\wuauclt.exe C:\Documents and Settings\stephane\Bureau\poetr\HijackThis.exe -------------------------------------------------- Listing of startup folders: Shell folders Startup: [C:\Documents and Settings\stephane\Menu Démarrer\Programmes\Démarrage] *No files* Shell folders AltStartup: *Folder not found* User shell folders Startup: *Folder not found* User shell folders AltStartup: *Folder not found* Shell folders Common Startup: [C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage] *No files* Shell folders Common AltStartup: *Folder not found* User shell folders Common Startup: *Folder not found* User shell folders Alternate Common Startup: *Folder not found* -------------------------------------------------- Checking Windows NT UserInit: [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] UserInit = C:\WINDOWS\system32\userinit.exe, [HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon] *Registry key not found* [HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] *Registry value not found* [HKCU\Software\Microsoft\Windows\CurrentVersion\Winlogon] *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\Run SoundMan = SOUNDMAN.EXE BDAgent = "C:\Program Files\Softwin\BitDefender10\bdagent.exe" SoundMAXPnP = C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe SoundMAX = "C:\Program Files\Analog Devices\SoundMAX\smax4.exe" /tray LVCOMSX = C:\WINDOWS\system32\LVCOMSX.EXE BDMCon = C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce *No values found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx *No values found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices *No values found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\Run MsnMsgr = "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce *No values found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices *No values found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\Run [OptionalComponents] *No values found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\Run *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run *Registry key not found* -------------------------------------------------- File association entry for .EXE: HKEY_CLASSES_ROOT\exefile\shell\open\command (Default) = "%1" %* -------------------------------------------------- File association entry for .COM: HKEY_CLASSES_ROOT\comfile\shell\open\command (Default) = "%1" %* -------------------------------------------------- File association entry for .BAT: HKEY_CLASSES_ROOT\batfile\shell\open\command (Default) = "%1" %* -------------------------------------------------- File association entry for .PIF: HKEY_CLASSES_ROOT\piffile\shell\open\command (Default) = "%1" %* -------------------------------------------------- File association entry for .SCR: HKEY_CLASSES_ROOT\scrfile\shell\open\command (Default) = "%1" /S -------------------------------------------------- File association entry for .HTA: HKEY_CLASSES_ROOT\htafile\shell\open\command (Default) = C:\WINDOWS\system32\mshta.exe "%1" %* -------------------------------------------------- File association entry for .TXT: HKEY_CLASSES_ROOT\txtfile\shell\open\command (Default) = %SystemRoot%\system32\NOTEPAD.EXE %1 -------------------------------------------------- Enumerating Active Setup stub paths: HKLM\Software\Microsoft\Active Setup\Installed Components (* = disabled by HKCU twin) [>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] StubPath = C:\WINDOWS\inf\unregmp2.exe /ShowWMP [>{26923b43-4d38-484f-9b9e-de460746276c}] * StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE [>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] * StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE [{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] * StubPath = %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll [{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] * StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install [{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] * StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT [{5945c046-1e7d-11d1-bc44-00c04fd912be}] * StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser [{6BF52A52-394A-11d3-B153-00C04F79FAA6}] * StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub [{7790769C-0471-11d2-AF11-00C04FA35D02}] * StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install [{89820200-ECBD-11cf-8B85-00AA005B4340}] * StubPath = regsvr32.exe /s /n /i:U shell32.dll [{89820200-ECBD-11cf-8B85-00AA005B4383}] * StubPath = %SystemRoot%\system32\ie4uinit.exe -------------------------------------------------- Enumerating ICQ Agent Autostart apps: HKCU\Software\Mirabilis\ICQ\Agent\Apps *Registry key not found* -------------------------------------------------- Load/Run keys from C:\WINDOWS\WIN.INI: load=*INI section not found* run=*INI section not found* Load/Run keys from Registry: HKLM\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found* HKLM\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found* HKLM\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found* HKLM\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found* HKCU\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found* HKCU\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found* HKCU\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found* HKCU\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found* HKCU\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found* HKCU\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found* HKLM\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found* HKLM\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found* HKLM\..\Windows NT\CurrentVersion\Windows: AppInit_DLLs=sockspy.dll -------------------------------------------------- Shell & screensaver key from C:\WINDOWS\SYSTEM.INI: Shell=*INI section not found* SCRNSAVE.EXE=*INI section not found* drivers=*INI section not found* Shell & screensaver key from Registry: Shell=Explorer.exe SCRNSAVE.EXE=*Registry value not found* drivers=*Registry value not found* Policies Shell key: HKCU\..\Policies: Shell=*Registry value not found* HKLM\..\Policies: Shell=*Registry value not found* -------------------------------------------------- Checking for EXPLORER.EXE instances: C:\WINDOWS\Explorer.exe: PRESENT! C:\Explorer.exe: not present C:\WINDOWS\Explorer\Explorer.exe: not present C:\WINDOWS\System\Explorer.exe: not present C:\WINDOWS\System32\Explorer.exe: not present C:\WINDOWS\Command\Explorer.exe: not present C:\WINDOWS\Fonts\Explorer.exe: not present -------------------------------------------------- Checking for superhidden extensions: .lnk: HIDDEN! (arrow overlay: yes) .pif: HIDDEN! (arrow overlay: yes) .exe: not hidden .com: not hidden .bat: not hidden .hta: not hidden .scr: not hidden .shs: HIDDEN! .shb: HIDDEN! .vbs: not hidden .vbe: not hidden .wsh: not hidden .scf: HIDDEN! (arrow overlay: NO!) .url: HIDDEN! (arrow overlay: yes) .js: not hidden .jse: not hidden -------------------------------------------------- Verifying REGEDIT.EXE integrity: - Regedit.exe found in C:\WINDOWS - .reg open command is normal (regedit.exe %1) - Regedit.exe has no CompanyName property! It is either missing or named something else. - Regedit.exe has no OriginalFilename property! It is either missing or named something else. - Regedit.exe has no FileDescription property! It is either missing or named something else. Registry check failed! -------------------------------------------------- Enumerating Browser Helper Objects: (no name) - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll - {02478D38-C3F9-4efb-9B51-7695ECA05670} (no name) - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (no name) - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (no name) - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll - {9030D464-4C02-4ABF-8ECC-5164760863C6} (no name) - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} (no name) - C:\PROGRA~1\STARDO~1\SDIEInt.dll - {FFFFFEF0-5B30-21D4-945D-000000000000} -------------------------------------------------- Enumerating Task Scheduler jobs: *No jobs found* -------------------------------------------------- Enumerating Download Program Files: [CKAVWebScan Object] InProcServer32 = C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll CODEBASE = http://webscanner.kaspersky.fr/kavwebscan_unicode.cab [installation Support] InProcServer32 = C:\Program Files\Yahoo!\Common\Yinsthelper.dll CODEBASE = C:\Program Files\Yahoo!\Common\Yinsthelper.dll [bDSCANONLINE Control] InProcServer32 = C:\WINDOWS\DOWNLO~1\oscan8.ocx CODEBASE = http://www.zebulon.fr/scan8/oscan8.cab [Java Plug-in 1.6.0_01] InProcServer32 = C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll CODEBASE = http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab [{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}] CODEBASE = http://fpdownload.macromedia.com/get/flash...t/ultrashim.cab [ActiveScan Installer Class] InProcServer32 = C:\WINDOWS\Downloaded Program Files\asinst.dll CODEBASE = http://acs.pandasoftware.com/activescan/as5free/asinst.cab [Java Plug-in 1.6.0_01] InProcServer32 = C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll CODEBASE = http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab [Java Plug-in 1.6.0_01] InProcServer32 = C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll CODEBASE = http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab -------------------------------------------------- Enumerating Winsock LSP files: NameSpace #1: C:\WINDOWS\System32\mswsock.dll NameSpace #2: C:\WINDOWS\System32\winrnr.dll NameSpace #3: C:\WINDOWS\System32\mswsock.dll Protocol #1: C:\WINDOWS\system32\mswsock.dll Protocol #2: C:\WINDOWS\system32\mswsock.dll Protocol #3: C:\WINDOWS\system32\mswsock.dll Protocol #4: C:\WINDOWS\system32\rsvpsp.dll Protocol #5: C:\WINDOWS\system32\rsvpsp.dll Protocol #6: C:\WINDOWS\system32\mswsock.dll Protocol #7: C:\WINDOWS\system32\mswsock.dll Protocol #8: C:\WINDOWS\system32\mswsock.dll Protocol #9: C:\WINDOWS\system32\mswsock.dll Protocol #10: C:\WINDOWS\system32\mswsock.dll Protocol #11: C:\WINDOWS\system32\mswsock.dll Protocol #12: C:\WINDOWS\system32\mswsock.dll Protocol #13: C:\WINDOWS\system32\mswsock.dll Protocol #14: C:\WINDOWS\system32\mswsock.dll Protocol #15: C:\WINDOWS\system32\mswsock.dll Protocol #16: C:\WINDOWS\system32\mswsock.dll Protocol #17: C:\WINDOWS\system32\mswsock.dll Protocol #18: C:\WINDOWS\system32\mswsock.dll Protocol #19: C:\WINDOWS\system32\mswsock.dll -------------------------------------------------- Enumerating Windows NT/2000/XP services Pilote ACPI Microsoft: system32\DRIVERS\ACPI.sys (system) aeaudio: system32\drivers\aeaudio.sys (manual start) Suppresseur d'écho acoustique (Noyau Microsoft): system32\drivers\aec.sys (manual start) AFD: \SystemRoot\System32\drivers\afd.sys (system) Filtre de bus AGP Intel: system32\DRIVERS\agp440.sys (system) Service for WDM 3D Audio Driver: system32\drivers\ALCXSENS.SYS (manual start) Service for Realtek AC97 Audio (WDM): system32\drivers\ALCXWDM.SYS (manual start) Avertissement: %SystemRoot%\system32\svchost.exe -k LocalService (disabled) Service de la passerelle de la couche Application: %SystemRoot%\System32\alg.exe (manual start) Gestion d'applications: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start) aslm75: \??\C:\WINDOWS\system32\drivers\aslm75.sys (system) Pilote de média asynchrone RAS: system32\DRIVERS\asyncmac.sys (manual start) Contrôleur de disque dur IDE/ESDI standard: system32\DRIVERS\atapi.sys (system) ati2mtag: system32\DRIVERS\ati2mtag.sys (manual start) Protocole client ATM ARP: system32\DRIVERS\atmarpc.sys (manual start) Audio Windows: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Pilote audio Stub: system32\DRIVERS\audstub.sys (manual start) bdfdll: \??\C:\Program Files\Softwin\BitDefender10\bdfdll.sys (manual start) BDFSDRV: \??\C:\Program Files\Softwin\BitDefender10\bdfsdrv.sys (manual start) bdpredir: \??\C:\Program Files\Softwin\BitDefender10\bdpredir.sys (system) BDRSDRV: \??\C:\Program Files\Softwin\BitDefender10\bdrsdrv.sys (autostart) BitDefender Scan Server: "C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (autostart) Service de transfert intelligent en arrière-plan: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start) Explorateur d'ordinateur: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) catchme: \??\C:\DOCUME~1\stephane\LOCALS~1\Temp\catchme.sys (manual start) Décodeur sous-titre fermé: system32\DRIVERS\CCDECODE.sys (manual start) Pilote de CD-ROM: system32\DRIVERS\cdrom.sys (system) Indexing Service: %SystemRoot%\system32\cisvc.exe (manual start) Gestionnaire de l'Album: %SystemRoot%\system32\clipsrv.exe (disabled) Application système COM+: C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} (manual start) Services de cryptographie: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) Lanceur de processus serveur DCOM: %SystemRoot%\system32\svchost -k DcomLaunch (autostart) Client DHCP: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) Pilote de disque: system32\DRIVERS\disk.sys (system) Service d'administration du Gestionnaire de disque logique: %SystemRoot%\System32\dmadmin.exe /com (manual start) dmboot: System32\drivers\dmboot.sys (disabled) Pilote de Gestionnaire de disque logique: System32\drivers\dmio.sys (system) dmload: System32\drivers\dmload.sys (system) Gestionnaire de disque logique: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Synthétiseur DLS du noyau Microsoft: system32\drivers\DMusic.sys (manual start) Client DNS: %SystemRoot%\system32\svchost.exe -k NetworkService (autostart) Filtre de décodeur DRM (Noyau Microsoft): system32\drivers\drmkaud.sys (manual start) Intel® PRO/1000 Adapter Driver: system32\DRIVERS\e1000325.sys (manual start) Error Reporting Service: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Journal des événements: %SystemRoot%\system32\services.exe (autostart) Système d'événements de COM+: C:\WINDOWS\system32\svchost.exe -k netsvcs (manual start) Compatibilité avec le Changement rapide d'utilisateur: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) Pilote de contrôleur de lecteur de disquettes: system32\DRIVERS\fdc.sys (manual start) Pilote de lecteur de disquettes: system32\DRIVERS\flpydisk.sys (manual start) FltMgr: system32\DRIVERS\fltMgr.sys (system) Pilote du Gestionnaire de volume: system32\DRIVERS\ftdisk.sys (system) GEARAspiWDM: System32\Drivers\GEARAspiWDM.sys (manual start) GMSIPCI: \??\D:\INSTALL\GMSIPCI.SYS (manual start) Classificateur de paquets générique: system32\DRIVERS\msgpc.sys (manual start) Aide et support: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) HID Input Service: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Pilote de classe HID Microsoft: system32\DRIVERS\hidusb.sys (manual start) IEEE-1284.4 Driver HPZid412: system32\DRIVERS\HPZid412.sys (manual start) Print Class Driver for IEEE-1284.4 HPZipr12: system32\DRIVERS\HPZipr12.sys (manual start) USB to IEEE-1284.4 Translation Driver HPZius12: system32\DRIVERS\HPZius12.sys (manual start) HSFHWBS2: system32\DRIVERS\HSFBS2S2.sys (manual start) HSF_DP: system32\DRIVERS\HSFDPSP2.sys (manual start) HTTP: System32\Drivers\HTTP.sys (manual start) HTTP SSL: %SystemRoot%\System32\svchost.exe -k HTTPFilter (manual start) Pilote pour clavier i8042 et souris sur port PS/2: system32\DRIVERS\i8042prt.sys (system) Iomega Snapshot Volume Filter: system32\DRIVERS\IABFilt.sys (system) InstallDriver Table Manager: "C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe" (manual start) Pilote de filtre de gravure CD: system32\DRIVERS\imapi.sys (system) Service COM de gravage de CD IMAPI: C:\WINDOWS\system32\imapi.exe (manual start) IntelIde: system32\DRIVERS\intelide.sys (system) Pilote de processeur Intel: system32\DRIVERS\intelppm.sys (system) Pilote de filtre de trafic IP: system32\DRIVERS\ipfltdrv.sys (manual start) Pilote de tunnelage IP dans IP: system32\DRIVERS\ipinip.sys (manual start) Traducteur d'adresses réseau IP: system32\DRIVERS\ipnat.sys (manual start) iPodService: C:\Program Files\iPod\bin\iPodService.exe (manual start) Pilote IPSEC: system32\DRIVERS\ipsec.sys (system) Service énumérateur IR: system32\DRIVERS\irenum.sys (manual start) Pilote de bus Plug-and-Play ISA/EISA: system32\DRIVERS\isapnp.sys (system) Pilote de la classe Clavier: system32\DRIVERS\kbdclass.sys (system) Pilote HID de clavier: system32\DRIVERS\kbdhid.sys (system) Mélangeur audio Wave de noyau Microsoft: system32\drivers\kmixer.sys (manual start) Serveur: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) Station de travail: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) BitDefender Desktop Update Service: "C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (autostart) Assistance TCP/IP NetBIOS: %SystemRoot%\system32\svchost.exe -k LocalService (autostart) Logitech USB Monitor Filter: system32\drivers\lvusbsta.sys (manual start) Macromedia Licensing Service: "C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe" (manual start) mdmxsdk: system32\DRIVERS\mdmxsdk.sys (autostart) Affichage des messages: %SystemRoot%\system32\svchost.exe -k netsvcs (disabled) MidiSyn: system32\drivers\MidiSyn.sys (manual start) Partage de Bureau à distance NetMeeting: C:\WINDOWS\system32\mnmsrvc.exe (manual start) Périphérique de filtrage de flux Unimodem: system32\drivers\MODEMCSA.sys (manual start) Pilote de la classe Souris: system32\DRIVERS\mouclass.sys (system) Pilote HID de souris: system32\DRIVERS\mouhid.sys (manual start) Redirecteur client WebDav: system32\DRIVERS\mrxdav.sys (manual start) MRXSMB: system32\DRIVERS\mrxsmb.sys (system) Distributed Transaction Coordinator: C:\WINDOWS\system32\msdtc.exe (manual start) Windows Installer: C:\WINDOWS\system32\msiexec.exe /V (manual start) Proxy de service de répartition Microsoft: system32\drivers\MSKSSRV.sys (manual start) Proxy d'horloge de répartition Microsoft: system32\drivers\MSPCLOCK.sys (manual start) Proxy de gestion de qualité de répartition Microsoft: system32\drivers\MSPQM.sys (manual start) Pilote BIOS de gestion de systèmes Microsoft: system32\DRIVERS\mssmbios.sys (manual start) Convertisseur en T/site-à-site de répartition Microsoft: system32\drivers\MSTEE.sys (manual start) Codec NABTS/FEC VBI: system32\DRIVERS\NABTSFEC.sys (manual start) Connection TV/vidéo Microsoft: system32\DRIVERS\NdisIP.sys (manual start) Pilote TAPI NDIS d'accès distant: system32\DRIVERS\ndistapi.sys (manual start) NDIS mode utilisateur E/S Protocole: system32\DRIVERS\ndisuio.sys (manual start) Pilote réseau étendu NDIS d'accès distant: system32\DRIVERS\ndiswan.sys (manual start) Interface NetBIOS: system32\DRIVERS\netbios.sys (system) NetBIOS sur TCP/IP: system32\DRIVERS\netbt.sys (system) DDE réseau: %SystemRoot%\system32\netdde.exe (disabled) DSDM DDE réseau: %SystemRoot%\system32\netdde.exe (disabled) Ouverture de session réseau: %SystemRoot%\system32\lsass.exe (manual start) Connexions réseau: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) NLA (Network Location Awareness): %SystemRoot%\system32\svchost.exe -k netsvcs (manual start) Fournisseur de la prise en charge de sécurité LM NT: %SystemRoot%\system32\lsass.exe (manual start) Stockage amovible: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start) Pilote de filtre de trafic IPX: system32\DRIVERS\nwlnkflt.sys (manual start) Pilote de transfert de trafic IPX: system32\DRIVERS\nwlnkfwd.sys (manual start) Office Source Engine: "C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE" (manual start) Pilote de port parallèle: system32\DRIVERS\parport.sys (manual start) Pilote de bus PCI: system32\DRIVERS\pci.sys (system) PCIIde: system32\DRIVERS\pciide.sys (system) Volume Adapter: system32\DRIVERS\lv302af.sys (manual start) Padus ASPI Shell: system32\drivers\pfc.sys (manual start) QuickCam IM(PID_08A0): system32\DRIVERS\LV302AV.SYS (manual start) Plug-and-Play: %SystemRoot%\system32\services.exe (autostart) Pml Driver HPZ12: C:\WINDOWS\system32\HPZipm12.exe (autostart) Services IPSEC: %SystemRoot%\system32\lsass.exe (autostart) Miniport réseau étendu (PPTP): system32\DRIVERS\raspptp.sys (manual start) Emplacement protégé: %SystemRoot%\system32\lsass.exe (autostart) Planificateur de paquets QoS: system32\DRIVERS\psched.sys (manual start) Pilote de liaison parallèle directe: system32\DRIVERS\ptilink.sys (manual start) Pilote de connexion automatique d'accès distant: system32\DRIVERS\rasacd.sys (system) Gestionnaire de connexion automatique d'accès distant: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start) Miniport réseau étendu (L2TP): system32\DRIVERS\rasl2tp.sys (manual start) Gestionnaire de connexions d'accès distant: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start) Pilote PPPOE d'accès à distance: system32\DRIVERS\raspppoe.sys (manual start) Parallèle direct: system32\DRIVERS\raspti.sys (manual start) Rdbss: system32\DRIVERS\rdbss.sys (system) RDPCDD: System32\DRIVERS\RDPCDD.sys (system) Pilote de redirecteur de périphérique Terminal Server: system32\DRIVERS\rdpdr.sys (manual start) Gestionnaire de session d'aide sur le Bureau à distance: C:\WINDOWS\system32\sessmgr.exe (manual start) Pilote de filtre de lecture digitale de CD audio: system32\DRIVERS\redbook.sys (system) Routage et accès distant: %SystemRoot%\system32\svchost.exe -k netsvcs (disabled) Accès à distance au Registre: %SystemRoot%\system32\svchost.exe -k LocalService (autostart) Localisateur d'appels de procédure distante (RPC): %SystemRoot%\system32\locator.exe (manual start) Appel de procédure distante (RPC): %SystemRoot%\system32\svchost -k rpcss (autostart) QoS RSVP: %SystemRoot%\system32\rsvp.exe (manual start) Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C): system32\DRIVERS\RTL8139.SYS (manual start) Gestionnaire de comptes de sécurité: %SystemRoot%\system32\lsass.exe (autostart) Carte à puce: %SystemRoot%\System32\SCardSvr.exe (manual start) Planificateur de tâches: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Secdrv: system32\DRIVERS\secdrv.sys (manual start) Connexion secondaire: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) senfilt: system32\drivers\senfilt.sys (manual start) Notification d'événement système: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) Pilote de filtre Serenum: system32\DRIVERS\serenum.sys (manual start) Pilote de port série: system32\DRIVERS\serial.sys (system) Internet Connection Sharing: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Détection matériel noyau: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Détrameur décalage BDA: system32\DRIVERS\SLIP.sys (manual start) smwdm: system32\drivers\smwdm.sys (manual start) SoundMAX Agent Service: C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe (autostart) Splitter audio du noyau Microsoft: system32\drivers\splitter.sys (manual start) Spouleur d'impression: %SystemRoot%\system32\spoolsv.exe (autostart) Pilote de filtre de restauration système: system32\DRIVERS\sr.sys (system) Service de restauration système: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) Srv: system32\DRIVERS\srv.sys (manual start) Service de découvertes SSDP: %SystemRoot%\system32\svchost.exe -k LocalService (manual start) SAMSUNG Mobile USB Device II 1.0 driver (WDM): system32\DRIVERS\ssm_bus.sys (manual start) SAMSUNG Mobile USB Modem II 1.0 Filter: system32\DRIVERS\ssm_mdfl.sys (manual start) SAMSUNG Mobile USB Modem II 1.0 Drivers: system32\DRIVERS\ssm_mdm.sys (manual start) Acquisition d'image Windows (WIA): %SystemRoot%\system32\svchost.exe -k imgsvc (autostart) BDA IPSink: system32\DRIVERS\StreamIP.sys (manual start) Pilote de bus logiciel: system32\DRIVERS\swenum.sys (manual start) Synthétiseur de table de sons GC noyau Microsoft: system32\drivers\swmidi.sys (manual start) MS Software Shadow Copy Provider: C:\WINDOWS\system32\dllhost.exe /Processid:{D636E0DD-0B59-43C4-9643-357AEBEBED7E} (manual start) Périphérique audio système du noyau Microsoft: system32\drivers\sysaudio.sys (manual start) Journaux et alertes de performance: %SystemRoot%\system32\smlogsvc.exe (manual start) Téléphonie: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) Pilote du protocole TCP/IP: system32\DRIVERS\tcpip.sys (system) Pilote de périphérique terminal: system32\DRIVERS\termdd.sys (system) Services Terminal Server: %SystemRoot%\System32\svchost -k DComLaunch (manual start) Thèmes: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Telnet: C:\WINDOWS\system32\tlntsvr.exe (disabled) Client de suivi de lien distribué: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) Pilote de mise à jour microcode: system32\DRIVERS\update.sys (manual start) Hôte de périphérique universel Plug-and-Play: %SystemRoot%\system32\svchost.exe -k LocalService (autostart) Uninterruptible Power Supply: %SystemRoot%\System32\ups.exe (manual start) Pilote USB audio (WDM): system32\drivers\usbaudio.sys (manual start) Pilote parent générique USB Microsoft: system32\DRIVERS\usbccgp.sys (manual start) Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0: system32\DRIVERS\usbehci.sys (manual start) Pilote de concentrateur standard USB Microsoft: system32\DRIVERS\usbhub.sys (manual start) Classe d'imprimantes USB Microsoft: system32\DRIVERS\usbprint.sys (manual start) Pilote de scanneur USB: system32\DRIVERS\usbscan.sys (manual start) Pilote de stockage de masse USB: system32\DRIVERS\USBSTOR.SYS (manual start) Pilote miniport de contrôleur hôte universel USB Microsoft: system32\DRIVERS\usbuhci.sys (manual start) Service Messenger Sharing Folders USN Journal Reader: "C:\Program Files\MSN Messenger\usnsvc.exe" (manual start) VgaSave: \SystemRoot\System32\drivers\vga.sys (system) Cliché instantané de volume: %SystemRoot%\System32\vssvc.exe (manual start) BitDefender Virus Shield: "C:\Program Files\Softwin\BitDefender10\vsserv.exe" /service (autostart) Horloge Windows: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Pilote ARP IP d'accès distant: system32\DRIVERS\wanarp.sys (manual start) Pilote WINMM de compatibilité audio WDM Microsoft: system32\drivers\wdmaud.sys (manual start) WebClient: %SystemRoot%\system32\svchost.exe -k LocalService (autostart) winachsf: system32\DRIVERS\HSFCXTS2.sys (manual start) Infrastructure de gestion Windows: %systemroot%\system32\svchost.exe -k netsvcs (autostart) Service de numéro de série du lecteur multimédia portable: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) Extensions du pilote WMI: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) Carte de performance WMI: C:\WINDOWS\system32\wbem\wmiapsrv.exe (manual start) Service Partage réseau du Lecteur Windows Media: "C:\Program Files\Windows Media Player\WMPNetwk.exe" (manual start) Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0: \SystemRoot\System32\drivers\ws2ifsl.sys (disabled) Centre de sécurité: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Codec Teletext standard: system32\DRIVERS\WSTCODEC.SYS (manual start) Mises à jour automatiques: %systemroot%\system32\svchost.exe -k netsvcs (autostart) Windows Driver Foundation - User-mode Driver Framework Platform Driver: system32\DRIVERS\WudfPf.sys (manual start) Windows Driver Foundation - User-mode Driver Framework Reflector: system32\DRIVERS\wudfrd.sys (manual start) Windows Driver Foundation - User-mode Driver Framework: %SystemRoot%\system32\svchost.exe -k WudfServiceGroup (manual start) Configuration automatique sans fil: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) BitDefender Communicator: "C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (autostart) Service d'approvisionnement réseau: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) -------------------------------------------------- Enumerating Windows NT logon/logoff scripts: *No scripts set to run* Windows NT checkdisk command: BootExecute = autocheck autochk * Windows NT 'Wininit.ini': PendingFileRenameOperations: *Registry value not found* -------------------------------------------------- Enumerating ShellServiceObjectDelayLoad items: PostBootReminder: C:\WINDOWS\system32\SHELL32.dll CDBurn: C:\WINDOWS\system32\SHELL32.dll WebCheck: C:\WINDOWS\system32\webcheck.dll SysTray: C:\WINDOWS\system32\stobject.dll WPDShServiceObj: C:\WINDOWS\system32\WPDShServiceObj.dll -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run *No values found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run *No values found* -------------------------------------------------- End of report, 36 530 bytes Report generated in 0,250 seconds Command line options: /verbose - to add additional info on each section /complete - to include empty sections and unsuspicious data /full - to include several rarely-important sections /force9x - to include Win9x-only startups even if running on WinNT /forcent - to include WinNT-only startups even if running on Win9x /forceall - to include all Win9x and WinNT startups, regardless of platform /history - to list version history only
  17. bjour, Oai irc jsais pas trop ce qu'il contient... a l'epoke j'avais encore kaspersky et il refusait ke j'install a cause de ce probleme... j'ai gardé le fcihier de telechargement mais jvais el gicler...jpense qu'il doit y avoir un spy... Morpheus, jvais jeter un oeil mais je pense kil pourris pas mal les machines...j'ai eu qqs galre avec..j'avais pas fait gaff a ce su'il soit encore sur mon systeme... C:\Documents and Settings\stephane\Mes documents\telechargements\mirc617.exe C:\Program Files\Morpheus\morpheustoolbar.exe jfait ca ds l'aprem merci
  18. Bonjour, voici le résultat du scann avec eScan: File C:\Documents and Settings\stephane\Mes documents\telechargements\mirc617.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.617. No Action Taken. File C:\Program Files\Morpheus\morpheustoolbar.exe tagged as not-a-virus:AdTool.Win32.MyWebSearch. No Action Taken. File C:\QooBox\Quarantine\catchme2007-08-09_ 20059.23.zip infected by "SpamTool.Win32.Mailbot.bc" Virus. Action Taken: File Renamed. A priori le système est pas mal, non? merci.
  19. rapport avec le script... **pour les conseils pré ctés (banque, etc...) depuis que j'ai choppé le virus msn, j'ai fait en sorte de ne pas y aller...kaspesky scan online me donnait ds crasses a chaque fois donc pas confiance dans le pc *** ComboFix 07-08-09.3 - "stephane" 2007-08-09 16:39:29.2 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.220 [GMT 2:00] Command switches used :: C:\Documents and Settings\stephane\Bureau\poetr\CFScript.txt * Created a new restore point FILE:: C:\Documents and Settings\stephane\zstxsz.exe C:\Documents and Settings\stephane\dplozl.exe ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) C:\Documents and Settings\stephane\dplozl.exe C:\Documents and Settings\stephane\zstxsz.exe ((((((((((((((((((((((((( Files Created from 2007-07-09 to 2007-08-09 ))))))))))))))))))))))))))))))) 2007-08-09 01:55 51,200 --a------ C:\WINDOWS\nircmd.exe 2007-08-08 20:21 853 --a------ C:\reboot.cmd 2007-08-08 20:21 68,096 --a------ C:\diff.exe 2007-08-08 20:21 103,424 --a------ C:\grep.exe 2007-08-06 18:09 <REP> d-------- C:\DOCUME~1\stephane\.housecall6.6 2007-08-03 00:26 <REP> d-------- C:\WINDOWS\LastGood 2007-07-30 20:25 <REP> d-------- C:\WINDOWS\CSC 2007-07-30 19:27 <REP> d-------- C:\WINDOWS\ERUNT 2007-07-30 08:05 <REP> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab 2007-07-30 00:30 <REP> d-------- C:\WINDOWS\system32\Kaspersky Lab 2007-07-16 23:24 <REP> d-------- C:\Program Files\CCleaner 2007-07-16 21:45 <REP> d-------- C:\Program Files\Windows Media Connect 2 2007-07-16 21:41 <REP> d-------- C:\WINDOWS\system32\drivers\UMDF (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-08-09 16:42 81984 --a------ C:\WINDOWS\system32\bdod.bin 2007-08-04 05:42 --------- d--h----- C:\Program Files\Fichiers communs\delsim 2007-07-27 00:40 --------- d-------- C:\DOCUME~1\stephane\APPLIC~1\Azureus 2007-07-16 23:27 --------- d-------- C:\DOCUME~1\stephane\APPLIC~1\Yahoo! 2007-06-27 05:22 --------- d-------- C:\DOCUME~1\stephane\APPLIC~1\TransRender 2007-06-27 05:19 --------- d-------- C:\DOCUME~1\stephane\APPLIC~1\Temporary 2007-06-27 05:18 --------- d-------- C:\DOCUME~1\stephane\APPLIC~1\ConvertTemp 2007-06-27 05:16 --------- d-------- C:\DOCUME~1\stephane\APPLIC~1\Samsung 2007-06-27 05:15 5632 --a------ C:\WINDOWS\system32\drivers\StarOpen.sys 2007-06-27 05:12 --------- d--h----- C:\Program Files\InstallShield Installation Information 2007-06-27 05:12 --------- d-------- C:\Program Files\Samsung 2007-06-26 17:09 --------- d-------- C:\Program Files\MSXML 4.0 2007-06-26 17:02 --------- d-------- C:\Program Files\Messenger 2007-06-26 17:00 48856 --a------ C:\WINDOWS\system32\perfc00C.dat 2007-06-26 17:00 368076 --a------ C:\WINDOWS\system32\perfh00C.dat 2007-06-25 00:50 --------- d-------- C:\Program Files\Star Downloader 2007-06-24 10:43 --------- d-------- C:\Program Files\Dofus 2007-06-22 18:00 --------- d-------- C:\Program Files\Fichiers communs\InstallShield 2007-06-19 18:16 --------- d-------- C:\Program Files\ATnotes 2007-06-15 22:38 --------- d-------- C:\DOCUME~1\stephane\APPLIC~1\Google 2007-06-15 22:32 --------- d-------- C:\Program Files\Google 2007-06-12 16:31 --------- d-------- C:\DOCUME~1\stephane\APPLIC~1\OpenOffice.org2 2007-06-11 13:02 --------- d-------- C:\Program Files\IPNetInfo 2007-06-11 13:01 39424 --a------ C:\WINDOWS\zipinst.exe 2007-06-10 08:21 --------- d-------- C:\Program Files\FileZilla 2007-06-09 22:05 --------- d-------- C:\Program Files\Fichiers communs\Macromedia Shared 2007-05-31 14:44 264097 --a------ C:\WINDOWS\PDFCreator_Toolbar_Uninstaller_4140.exe 2007-05-30 00:05 6176 --a------ C:\WINDOWS\mozver.dat 2007-05-16 17:13 86528 --a--c--- C:\WINDOWS\system32\dllcache\directdb.dll 2007-05-16 17:13 85504 --a--c--- C:\WINDOWS\system32\dllcache\wabimp.dll 2007-05-16 17:13 683520 --a--c--- C:\WINDOWS\system32\dllcache\inetcomm.dll 2007-05-16 17:13 683520 --a------ C:\WINDOWS\system32\inetcomm.dll 2007-05-16 17:13 510976 --a--c--- C:\WINDOWS\system32\dllcache\wab32.dll 2007-05-16 17:13 1314816 --a--c--- C:\WINDOWS\system32\dllcache\msoe.dll 2007-05-10 22:11 131942 --a------ C:\WINDOWS\hpoins11.dat ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SoundMan"="SOUNDMAN.EXE" [2004-02-09 10:54 C:\WINDOWS\SOUNDMAN.EXE] "BDAgent"="C:\Program Files\Softwin\BitDefender10\bdagent.exe" [2007-05-05 17:42] "SoundMAXPnP"="C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-10-14 09:11] "SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\smax4.exe" [2004-08-06 07:27] "LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2004-10-08 11:52] "BDMCon"="C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe" [2007-05-05 17:43] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:55] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "appinit_dlls"=sockspy.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cld2000.exe] C:\Program Files\Calendrier\Cld2000.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Iomega Automatic Backup Pro] "C:\Program Files\Iomega\Automatic Backup Pro\LiveSystem.exe" -s [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck] C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" R0 IABFilt;Iomega Snapshot Volume Filter;C:\WINDOWS\system32\DRIVERS\IABFilt.sys R1 aslm75;aslm75;\??\C:\WINDOWS\system32\drivers\aslm75.sys R1 StarOpen;StarOpen;C:\WINDOWS\system32\drivers\StarOpen.sys R2 SoundMAX Agent Service (default);SoundMAX Agent Service;C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe R3 pepifilter;Volume Adapter;C:\WINDOWS\system32\DRIVERS\lv302af.sys R3 PID_08A0;QuickCam IM(PID_08A0);C:\WINDOWS\system32\DRIVERS\LV302AV.SYS R3 senfilt;senfilt;C:\WINDOWS\system32\drivers\senfilt.sys R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS S3 GMSIPCI;GMSIPCI;\??\D:\INSTALL\GMSIPCI.SYS S3 MidiSyn;MidiSyn;C:\WINDOWS\system32\drivers\MidiSyn.sys S3 ssm_bus;SAMSUNG Mobile USB Device II 1.0 driver (WDM);C:\WINDOWS\system32\DRIVERS\ssm_bus.sys S3 ssm_mdfl;SAMSUNG Mobile USB Modem II 1.0 Filter;C:\WINDOWS\system32\DRIVERS\ssm_mdfl.sys S3 ssm_mdm;SAMSUNG Mobile USB Modem II 1.0 Drivers;C:\WINDOWS\system32\DRIVERS\ssm_mdm.sys S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys *Newly Created Service* - CATCHME ************************************************************************** catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-08-09 16:43:09 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden registry entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** Completion time: 2007-08-09 16:45:00 C:\ComboFix-quarantined-files.txt ... 2007-08-09 16:44 C:\ComboFix2.txt ... 2007-08-09 02:02 --- E O F ---
  20. résolu Bonsoir/Bonjour , Voilà le rapport de combofix: merci. ComboFix 07-08-09.3 - "stephane" 2007-08-09 1:56:25.1 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.271 [GMT 2:00] * Created a new restore point ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) C:\DOCUME~1\stephane\APPLIC~1\..\new.txt C:\Program Files\Fichiers communs\microsoft shared\web folders\ibm00001.dll C:\Program Files\Fichiers communs\microsoft shared\web folders\ibm00002.dll C:\WINDOWS\images0.zip C:\WINDOWS\images21.zip C:\WINDOWS\images24.zip C:\WINDOWS\images33.zip C:\WINDOWS\images36.zip C:\WINDOWS\images57.zip C:\WINDOWS\images6.zip C:\WINDOWS\photo_album19.zip C:\WINDOWS\photo_album31.zip C:\WINDOWS\photo_album70.zip C:\WINDOWS\photo_album79.zip C:\WINDOWS\system32_exception.nls C:\WINDOWS\system32\xpdx.sys ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) -------\LEGACY_LDRSVC -------\LEGACY_NTMLSVC -------\LEGACY_RUNTIME -------\LEGACY_RUNTIME2 -------\LEGACY_SYSLIBRARY -------\asc3550u -------\ldrsvc -------\NtmlSvc -------\poof -------\xpdx ((((((((((((((((((((((((( Files Created from 2007-07-08 to 2007-08-08 ))))))))))))))))))))))))))))))) 2007-08-09 01:55 51,200 --a------ C:\WINDOWS\nircmd.exe 2007-08-08 20:21 853 --a------ C:\reboot.cmd 2007-08-08 20:21 68,096 --a------ C:\diff.exe 2007-08-08 20:21 103,424 --a------ C:\grep.exe 2007-08-06 18:09 <REP> d-------- C:\DOCUME~1\stephane\.housecall6.6 2007-08-03 00:26 <REP> d-------- C:\WINDOWS\LastGood 2007-07-31 23:28 <REP> d-------- C:\WINDOWS\LastGood.Tmp 2007-07-30 20:25 <REP> d-------- C:\WINDOWS\CSC 2007-07-30 19:27 <REP> d-------- C:\WINDOWS\ERUNT 2007-07-30 08:12 5,548 --a------ C:\DOCUME~1\stephane\zstxsz.exe 2007-07-30 08:05 <REP> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab 2007-07-30 08:03 5,548 --a------ C:\DOCUME~1\stephane\dplozl.exe 2007-07-30 00:30 <REP> d-------- C:\WINDOWS\system32\Kaspersky Lab 2007-07-16 23:24 <REP> d-------- C:\Program Files\CCleaner 2007-07-16 21:45 <REP> d-------- C:\Program Files\Windows Media Connect 2 2007-07-16 21:41 <REP> d-------- C:\WINDOWS\system32\drivers\UMDF (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-08-09 01:59 81984 --a------ C:\WINDOWS\system32\bdod.bin 2007-08-04 05:42 --------- d--h----- C:\Program Files\Fichiers communs\delsim 2007-07-27 00:40 --------- d-------- C:\DOCUME~1\stephane\APPLIC~1\Azureus 2007-07-16 23:27 --------- d-------- C:\DOCUME~1\stephane\APPLIC~1\Yahoo! 2007-06-27 05:22 --------- d-------- C:\DOCUME~1\stephane\APPLIC~1\TransRender 2007-06-27 05:19 --------- d-------- C:\DOCUME~1\stephane\APPLIC~1\Temporary 2007-06-27 05:18 --------- d-------- C:\DOCUME~1\stephane\APPLIC~1\ConvertTemp 2007-06-27 05:16 --------- d-------- C:\DOCUME~1\stephane\APPLIC~1\Samsung 2007-06-27 05:15 5632 --a------ C:\WINDOWS\system32\drivers\StarOpen.sys 2007-06-27 05:12 --------- d--h----- C:\Program Files\InstallShield Installation Information 2007-06-27 05:12 --------- d-------- C:\Program Files\Samsung 2007-06-26 17:09 --------- d-------- C:\Program Files\MSXML 4.0 2007-06-26 17:02 --------- d-------- C:\Program Files\Messenger 2007-06-26 17:00 48856 --a------ C:\WINDOWS\system32\perfc00C.dat 2007-06-26 17:00 368076 --a------ C:\WINDOWS\system32\perfh00C.dat 2007-06-25 00:50 --------- d-------- C:\Program Files\Star Downloader 2007-06-24 10:43 --------- d-------- C:\Program Files\Dofus 2007-06-22 18:00 --------- d-------- C:\Program Files\Fichiers communs\InstallShield 2007-06-19 18:16 --------- d-------- C:\Program Files\ATnotes 2007-06-15 22:38 --------- d-------- C:\DOCUME~1\stephane\APPLIC~1\Google 2007-06-15 22:32 --------- d-------- C:\Program Files\Google 2007-06-12 16:31 --------- d-------- C:\DOCUME~1\stephane\APPLIC~1\OpenOffice.org2 2007-06-11 13:02 --------- d-------- C:\Program Files\IPNetInfo 2007-06-11 13:01 39424 --a------ C:\WINDOWS\zipinst.exe 2007-06-10 08:21 --------- d-------- C:\Program Files\FileZilla 2007-06-09 22:05 --------- d-------- C:\Program Files\Fichiers communs\Macromedia Shared 2007-05-31 14:44 264097 --a------ C:\WINDOWS\PDFCreator_Toolbar_Uninstaller_4140.exe 2007-05-30 00:05 6176 --a------ C:\WINDOWS\mozver.dat 2007-05-16 17:13 86528 --a--c--- C:\WINDOWS\system32\dllcache\directdb.dll 2007-05-16 17:13 85504 --a--c--- C:\WINDOWS\system32\dllcache\wabimp.dll 2007-05-16 17:13 683520 --a--c--- C:\WINDOWS\system32\dllcache\inetcomm.dll 2007-05-16 17:13 683520 --a------ C:\WINDOWS\system32\inetcomm.dll 2007-05-16 17:13 510976 --a--c--- C:\WINDOWS\system32\dllcache\wab32.dll 2007-05-16 17:13 1314816 --a--c--- C:\WINDOWS\system32\dllcache\msoe.dll 2007-05-10 22:11 131942 --a------ C:\WINDOWS\hpoins11.dat ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SoundMan"="SOUNDMAN.EXE" [2004-02-09 10:54 C:\WINDOWS\SOUNDMAN.EXE] "BDAgent"="C:\Program Files\Softwin\BitDefender10\bdagent.exe" [2007-05-05 17:42] "SoundMAXPnP"="C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-10-14 09:11] "SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\smax4.exe" [2004-08-06 07:27] "LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2004-10-08 11:52] "BDMCon"="C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe" [2007-05-05 17:43] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:55] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "appinit_dlls"=sockspy.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cld2000.exe] C:\Program Files\Calendrier\Cld2000.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Firewall auto setup] c:\63.tmp [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Iomega Automatic Backup Pro] "C:\Program Files\Iomega\Automatic Backup Pro\LiveSystem.exe" -s [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck] C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\startdrv] C:\WINDOWS\Temp\startdrv.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" R0 IABFilt;Iomega Snapshot Volume Filter;C:\WINDOWS\system32\DRIVERS\IABFilt.sys R1 aslm75;aslm75;\??\C:\WINDOWS\system32\drivers\aslm75.sys R1 StarOpen;StarOpen;C:\WINDOWS\system32\drivers\StarOpen.sys R2 SoundMAX Agent Service (default);SoundMAX Agent Service;C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe R3 pepifilter;Volume Adapter;C:\WINDOWS\system32\DRIVERS\lv302af.sys R3 PID_08A0;QuickCam IM(PID_08A0);C:\WINDOWS\system32\DRIVERS\LV302AV.SYS R3 senfilt;senfilt;C:\WINDOWS\system32\drivers\senfilt.sys R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS S3 GMSIPCI;GMSIPCI;\??\D:\INSTALL\GMSIPCI.SYS S3 MidiSyn;MidiSyn;C:\WINDOWS\system32\drivers\MidiSyn.sys S3 ssm_bus;SAMSUNG Mobile USB Device II 1.0 driver (WDM);C:\WINDOWS\system32\DRIVERS\ssm_bus.sys S3 ssm_mdfl;SAMSUNG Mobile USB Modem II 1.0 Filter;C:\WINDOWS\system32\DRIVERS\ssm_mdfl.sys S3 ssm_mdm;SAMSUNG Mobile USB Modem II 1.0 Drivers;C:\WINDOWS\system32\DRIVERS\ssm_mdm.sys S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9f290b19-6057-11db-938f-0015f2c233ea}] Auto\command- I:\AdobeR.exe e AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e ************************************************************************** catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-08-09 02:01:01 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden registry entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** Completion time: 2007-08-09 2:02:36 - machine was rebooted C:\ComboFix-quarantined-files.txt ... 2007-08-09 02:02 --- E O F ---
  21. Voilà...merci de ton aide... 8atmp a viré je ne sais comment surement ccleaner... DiagHelp version v1.1.2 - http://www.malekal.com excute le 08/08/2007 à 20:20:07,48 Liste des derniers fichies modifies/crees dans windir\system32 C:\WINDOWS\System32/drivers\StarOpen.sys -->27/06/2007 05:15:46 C:\WINDOWS\System32/drivers\update.sys -->23/04/2007 12:32:54 C:\WINDOWS\System32/drivers\ntfs.sys -->09/02/2007 13:10:35 C:\WINDOWS\System32/drivers\wpdusb.sys -->18/10/2006 20:00:00 C:\WINDOWS\System32/drivers\nwrdr.sys -->13/10/2006 12:23:15 C:\WINDOWS\System32/drivers\WudfRd.sys -->28/09/2006 19:00:34 C:\WINDOWS\System32/drivers\WudfPf.sys -->28/09/2006 18:55:50 C:\WINDOWS\System32\bdod.bin -->08/08/2007 20:19:25 C:\WINDOWS\System32\bdss.log -->08/08/2007 20:09:17 C:\WINDOWS\System32\wpa.dbl -->08/08/2007 19:38:09 C:\WINDOWS\System32\asfiles.txt -->03/08/2007 00:31:19 C:\WINDOWS\System32\Uninstall.ico -->03/08/2007 00:26:16 C:\WINDOWS\System32\pavas.ico -->03/08/2007 00:26:16 C:\WINDOWS\System32\Help.ico -->03/08/2007 00:26:16 C:\WINDOWS\System32\xpdx.sys -->02/08/2007 11:24:16 C:\WINDOWS\System32_exception.nls -->29/07/2007 23:59:47 C:\WINDOWS\System32\nscompat.tlb -->16/07/2007 21:46:11 C:\WINDOWS\System32\amcompat.tlb -->16/07/2007 21:46:11 C:\WINDOWS\System32\MRT.exe -->28/06/2007 09:57:27 C:\WINDOWS\System32\TZLog.log -->26/06/2007 17:02:52 C:\WINDOWS\System32\perfh00C.dat -->26/06/2007 17:00:24 C:\WINDOWS\System32\perfh009.dat -->26/06/2007 17:00:24 C:\WINDOWS\System32\perfc00C.dat -->26/06/2007 17:00:24 C:\WINDOWS\System32\PerfStringBackup.INI -->26/06/2007 17:00:23 C:\WINDOWS\System32\perfc009.dat -->26/06/2007 17:00:23 C:\WINDOWS\System32\FNTCACHE.DAT -->26/06/2007 16:55:27 C:\WINDOWS\System32\rmoc3260.dll -->30/05/2007 00:04:26 C:\WINDOWS\System32\pndx5032.dll -->30/05/2007 00:04:16 C:\WINDOWS\System32\pndx5016.dll -->30/05/2007 00:04:16 C:\WINDOWS\System32\pncrt.dll -->30/05/2007 00:04:14 C:\WINDOWS\System32\jupdate-1.6.0_01-b06.log -->17/05/2007 10:58:52 C:\WINDOWS\System32\inetcomm.dll -->16/05/2007 17:13:53 C:\WINDOWS\win.ini -->08/08/2007 20:08:39 C:\WINDOWS\WindowsUpdate.log -->08/08/2007 19:39:38 C:\WINDOWS.log -->08/08/2007 19:38:29 C:\WINDOWS\wiadebug.log -->08/08/2007 19:38:27 C:\WINDOWS\wiaservc.log -->08/08/2007 19:38:24 C:\WINDOWS\bootstat.dat -->08/08/2007 19:38:07 C:\WINDOWS\SchedLgU.Txt -->08/08/2007 19:36:39 C:\WINDOWS\QTFont.for -->04/08/2007 21:13:33 C:\WINDOWS\QTFont.qfn -->04/08/2007 21:13:32 C:\WINDOWS\photo_album79.zip -->30/07/2007 10:36:34 C:\WINDOWS\photo_album70.zip -->30/07/2007 10:36:34 C:\WINDOWS\photo_album31.zip -->30/07/2007 10:36:34 C:\WINDOWS\photo_album19.zip -->30/07/2007 10:36:33 C:\WINDOWS\photos2007_88.zip -->30/07/2007 10:36:33 C:\WINDOWS\photos2007_76.zip -->30/07/2007 10:36:33 Le volume dans le lecteur C s'appelle sata Le numéro de série du volume est 84F4-3E41 Répertoire de C:\WINDOWS\system32 04/08/2004 00:54 6 144 csrss.exe 1 fichier(s) 6 144 octets 0 Rép(s) 28 366 716 928 octets libres Contenu de Downloaded Program Files Le volume dans le lecteur C s'appelle sata Le numéro de série du volume est 84F4-3E41 Répertoire de C:\WINDOWS\Downloaded Program Files 30/07/2007 00:33 <REP> . 30/07/2007 00:33 <REP> .. 24/08/2006 08:28 141 424 asinst.dll 22/08/2006 09:06 537 asinst.inf 07/12/2004 17:07 32 bdcore.dll 25/05/2006 01:21 118 784 bdupd.dll 14/10/2006 13:00 65 desktop.ini 25/07/2002 17:13 24 576 dwusplay.dll 25/07/2002 17:13 196 608 dwusplay.exe 23/03/2007 12:17 1 292 erma.inf 25/05/2006 01:21 53 248 ipsupd.dll 09/08/2004 05:02 327 680 isusweb.dll 08/08/2006 11:45 576 kavwebscan.inf 16/03/2005 12:34 7 407 lang.ini 07/12/2004 17:07 32 libfn.dll 14/03/2005 14:38 126 live.ini 01/06/2006 02:57 1 331 oscan8.inf 01/06/2006 02:54 471 040 oscan8.ocx 31/05/2006 04:15 10 oscan81.ocx_x 14/03/2005 14:58 7 073 scanoptions.tsi 18 fichier(s) 1 351 841 octets Total des fichiers listés : 18 fichier(s) 1 351 841 octets 2 Rép(s) 28 366 712 832 octets libres Recherche de rootkit! (Merci S!Ri) xpdx présent Possible infection Rustock, l'utilisation d'un scanneur rootkit est recommandé Recherche d'infections connues Export des clefs sensibles.. Liste des fichiers en exception sur le pare-feu XP SP2 "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)" "C:\\Program Files\\Morpheus\\Morpheus.exe"="C:\\Program Files\\Morpheus\\Morpheus.exe:*:Enabled:M5Shell" "C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule" "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe:*:Enabled:hpqtra08.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe:*:Enabled:hpqste08.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe:*:Enabled:hpofxm08.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe:*:Enabled:hposfx08.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe:*:Enabled:hposid01.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe:*:Enabled:hpqscnvw.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe:*:Enabled:hpqkygrp.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe:*:Enabled:hpqcopy.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe:*:Enabled:hpfccopy.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe:*:Enabled:hpzwiz01.exe" "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"="C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe:*:Enabled:hpqphunl.exe" "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"="C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe:*:Enabled:hpqdia.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe:*:Enabled:hpoews01.exe" "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe:*:Enabled:hpqnrs08.exe" "C:\\Documents and Settings\\stephane\\Mes documents\\telechargements\\penses bete\\Memo.exe"="C:\\Documents and Settings\\stephane\\Mes documents\\telechargements\\penses bete\\Memo.exe:*:Enabled:Desktop tool" "C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes" "C:\\Program Files\\Azureus\\Azureus.exe"="C:\\Program Files\\Azureus\\Azureus.exe:*:Enabled:Azureus" "C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe:*:Enabled:Yahoo! Messenger" "C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe:*:Enabled:Yahoo! FT Server" "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)" "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" Export de la clef SharedTaskScheduler [sharedTaskScheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant" Rechercher adresses sensibles dans le fichier HOSTS... catchme 0.3.1066 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-08-08 20:20:34 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden services & system hive ... [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xpdx] "Type"=dword:00000001 "Start"=dword:00000001 "ErrorControl"=dword:00000000 "ImagePath"=str(2):"\??\C:\WINDOWS\system32\xpdx.sys" "DisplayName"="xpdx system driver" "Group"="Base" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xpdx\Security] "Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\xpdx] "Type"=dword:00000001 "Start"=dword:00000001 "ErrorControl"=dword:00000000 "ImagePath"=str(2):"\??\C:\WINDOWS\system32\xpdx.sys" "DisplayName"="xpdx system driver" "Group"="Base" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\xpdx\Security] "Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,.. scanning hidden registry entries ... scanning hidden files ... scan completed successfully hidden files: 0 KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg) Process list by traversal of KiWaitListHead 4 - System 288 - svchost.exe 424 - HPZipm12.exe 620 - xcommsvr.exe 648 - csrss.exe 672 - winlogon.exe 716 - services.exe 728 - lsass.exe 884 - svchost.exe 960 - svchost.exe 1052 - svchost.exe 1116 - svchost.exe 1172 - svchost.exe 1236 - livesrv.exe 1504 - explorer.exe 1532 - cmd.exe 1564 - bdss.exe 1840 - SOUNDMAN.EXE 1848 - bdagent.exe 1856 - SMax4PNP.exe 1864 - SMax4.exe 1872 - LVCOMSX.EXE 1884 - bdmcon.exe 1892 - msnmsgr.exe 2128 - alg.exe 3032 - usnsvc.exe 3136 - vsserv.exe 3800 - firefox.exe 4048 - msimn.exe Total number of processes = 29 NOTE: Under WinXP, this will not show all processes. KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg) Driver/Module list by traversal of PsLoadedModuleList 804D0000 - \WINDOWS\system32\ntoskrnl.exe 806E5000 - \WINDOWS\system32\hal.dll F8A36000 - \WINDOWS\system32\KDCOM.DLL F8946000 - \WINDOWS\system32\BOOTVID.dll F84E6000 - ACPI.sys F8A38000 - \WINDOWS\system32\DRIVERS\WMILIB.SYS F84D5000 - pci.sys F8536000 - isapnp.sys F8AFE000 - pciide.sys F87B6000 - \WINDOWS\system32\DRIVERS\PCIIDEX.SYS F8A3A000 - intelide.sys F8546000 - MountMgr.sys F84B6000 - ftdisk.sys F8A3C000 - dmload.sys F8490000 - dmio.sys F87BE000 - PartMgr.sys F8556000 - VolSnap.sys F8478000 - atapi.sys F8566000 - disk.sys F8576000 - \WINDOWS\system32\DRIVERS\CLASSPNP.SYS F8458000 - fltMgr.sys F8446000 - sr.sys F842F000 - KSecDD.sys F83A2000 - Ntfs.sys F8375000 - NDIS.sys F835A000 - Mup.sys F87C6000 - IABFilt.sys F8586000 - agp440.sys F8616000 - \SystemRoot\system32\DRIVERS\intelppm.sys F824B000 - \SystemRoot\system32\DRIVERS\ati2mtag.sys F8237000 - \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS F88AE000 - \SystemRoot\system32\DRIVERS\usbuhci.sys F8214000 - \SystemRoot\system32\DRIVERS\USBPORT.SYS F88B6000 - \SystemRoot\system32\DRIVERS\usbehci.sys F81F6000 - \SystemRoot\system32\DRIVERS\e1000325.sys F81C0000 - \SystemRoot\system32\DRIVERS\HSFBS2S2.sys F819D000 - \SystemRoot\system32\DRIVERS\ks.sys F809E000 - \SystemRoot\system32\DRIVERS\HSFDPSP2.sys F7FF6000 - \SystemRoot\system32\DRIVERS\HSFCXTS2.sys F88BE000 - \SystemRoot\System32\Drivers\Modem.SYS F7FE5000 - \SystemRoot\system32\DRIVERS\serial.sys F8A2E000 - \SystemRoot\system32\DRIVERS\serenum.sys F88C6000 - \SystemRoot\system32\DRIVERS\fdc.sys F7FD1000 - \SystemRoot\system32\DRIVERS\parport.sys F8626000 - \SystemRoot\system32\DRIVERS\imapi.sys F8A32000 - \SystemRoot\system32\drivers\pfc.sys F8636000 - \SystemRoot\system32\DRIVERS\cdrom.sys F8646000 - \SystemRoot\system32\DRIVERS\redbook.sys F88CE000 - \SystemRoot\System32\Drivers\GEARAspiWDM.sys F7F91000 - \SystemRoot\system32\drivers\smwdm.sys F7F6D000 - \SystemRoot\system32\drivers\portcls.sys F8666000 - \SystemRoot\system32\drivers\drmk.sys F7F4D000 - \SystemRoot\system32\drivers\aeaudio.sys F7EEF000 - \SystemRoot\system32\drivers\senfilt.sys F8B93000 - \SystemRoot\system32\DRIVERS\audstub.sys F86C6000 - \SystemRoot\system32\DRIVERS\rasl2tp.sys F832E000 - \SystemRoot\system32\DRIVERS\ndistapi.sys F7ED8000 - \SystemRoot\system32\DRIVERS\ndiswan.sys F86D6000 - \SystemRoot\system32\DRIVERS\raspppoe.sys F86E6000 - \SystemRoot\system32\DRIVERS\raspptp.sys F88D6000 - \SystemRoot\system32\DRIVERS\TDI.SYS F7EC7000 - \SystemRoot\system32\DRIVERS\psched.sys F86F6000 - \SystemRoot\system32\DRIVERS\msgpc.sys F88DE000 - \SystemRoot\system32\DRIVERS\ptilink.sys F88E6000 - \SystemRoot\system32\DRIVERS\raspti.sys F7E72000 - \SystemRoot\system32\DRIVERS\rdpdr.sys F8706000 - \SystemRoot\system32\DRIVERS\termdd.sys F88EE000 - \SystemRoot\system32\DRIVERS\kbdclass.sys F88F6000 - \SystemRoot\system32\DRIVERS\mouclass.sys F8A82000 - \SystemRoot\system32\DRIVERS\swenum.sys F7DF1000 - \SystemRoot\system32\DRIVERS\update.sys F8312000 - \SystemRoot\system32\DRIVERS\mssmbios.sys F8716000 - \SystemRoot\System32\Drivers\NDProxy.SYS F8746000 - \SystemRoot\system32\DRIVERS\usbhub.sys F8A9A000 - \SystemRoot\system32\DRIVERS\USBD.SYS F89F6000 - \SystemRoot\system32\drivers\MODEMCSA.sys F8906000 - \SystemRoot\system32\DRIVERS\flpydisk.sys F8AA2000 - \SystemRoot\System32\Drivers\Fs_Rec.SYS F8C56000 - \SystemRoot\System32\Drivers\Null.SYS F8AA4000 - \SystemRoot\System32\Drivers\Beep.SYS F8786000 - \??\C:\WINDOWS\system32\xpdx.sys F8916000 - \SystemRoot\system32\DRIVERS\usbccgp.sys F891E000 - \SystemRoot\system32\DRIVERS\HIDPARSE.SYS F8926000 - \SystemRoot\System32\drivers\vga.sys F8AA6000 - \SystemRoot\System32\Drivers\mnmdd.SYS F8AA8000 - \SystemRoot\System32\DRIVERS\RDPCDD.sys F892E000 - \SystemRoot\System32\Drivers\Msfs.SYS F8936000 - \SystemRoot\System32\Drivers\Npfs.SYS F8A12000 - \SystemRoot\system32\DRIVERS\rasacd.sys ED2AB000 - \SystemRoot\system32\DRIVERS\ipsec.sys ED253000 - \SystemRoot\system32\DRIVERS\tcpip.sys F893E000 - \??\C:\Program Files\Softwin\BitDefender10\bdpredir.sys ED22B000 - \SystemRoot\system32\DRIVERS\netbt.sys ED209000 - \SystemRoot\System32\drivers\afd.sys F85D6000 - \SystemRoot\system32\DRIVERS\netbios.sys F87EE000 - \SystemRoot\System32\Drivers\StarOpen.SYS ED1DE000 - \SystemRoot\system32\DRIVERS\rdbss.sys ED147000 - \SystemRoot\system32\DRIVERS\mrxsmb.sys F85E6000 - \SystemRoot\System32\Drivers\Fips.SYS ED126000 - \SystemRoot\system32\DRIVERS\ipnat.sys F85F6000 - \SystemRoot\system32\DRIVERS\wanarp.sys F8B51000 - \??\C:\WINDOWS\system32\drivers\aslm75.sys F8806000 - \SystemRoot\system32\DRIVERS\USBSTOR.SYS F7E6A000 - \SystemRoot\system32\DRIVERS\hidusb.sys F8606000 - \SystemRoot\system32\DRIVERS\HIDCLASS.SYS F8656000 - \SystemRoot\system32\drivers\lvusbsta.sys ECCE1000 - \SystemRoot\system32\DRIVERS\LV302AV.SYS F8676000 - \SystemRoot\system32\DRIVERS\STREAM.SYS ECAC6000 - \SystemRoot\system32\DRIVERS\lvsvf2.sys F8AAA000 - \SystemRoot\system32\DRIVERS\lv302af.sys F8686000 - \SystemRoot\system32\drivers\usbaudio.sys F7E66000 - \SystemRoot\system32\DRIVERS\kbdhid.sys F7E62000 - \SystemRoot\system32\DRIVERS\mouhid.sys F7940000 - \SystemRoot\System32\Drivers\Cdfs.SYS EC84C000 - \SystemRoot\System32\Drivers\dump_atapi.sys F8AC6000 - \SystemRoot\System32\Drivers\dump_WMILIB.SYS BF800000 - \SystemRoot\System32\win32k.sys F8A0E000 - \SystemRoot\System32\drivers\Dxapi.sys F883E000 - \SystemRoot\System32\watchdog.sys BF9C3000 - \SystemRoot\System32\drivers\dxg.sys F8BFF000 - \SystemRoot\System32\drivers\dxgthk.sys BF9D5000 - \SystemRoot\System32\ati2dvag.dll BFA0B000 - \SystemRoot\System32\ati2cqag.dll BFA43000 - \SystemRoot\System32\ati3duag.dll BFC11000 - \SystemRoot\System32\ativvaxx.dll EC830000 - \SystemRoot\system32\DRIVERS\ndisuio.sys EC49F000 - \SystemRoot\system32\drivers\wdmaud.sys EC784000 - \SystemRoot\system32\drivers\sysaudio.sys EC25E000 - \SystemRoot\System32\Drivers\Fastfat.SYS EC16F000 - \SystemRoot\system32\DRIVERS\mrxdav.sys F8A5E000 - \SystemRoot\System32\Drivers\ParVdm.SYS EC0DE000 - \SystemRoot\System32\Drivers\HTTP.sys EBFC4000 - \SystemRoot\system32\DRIVERS\srv.sys EC4EC000 - \SystemRoot\system32\DRIVERS\mdmxsdk.sys EBCB0000 - \??\C:\Program Files\Softwin\BitDefender10\bdfsdrv.sys F884E000 - \??\C:\Program Files\Softwin\BitDefender10\bdfdll.sys EB818000 - \??\C:\Program Files\Softwin\BitDefender10\bdrsdrv.sys EC294000 - \SystemRoot\system32\drivers\kmixer.sys F8BC9000 - \SystemRoot\System32\DRIVERS\KProcCheck.sys Total number of drivers = 139 Liste des programmes installes Adobe Flash Player ActiveX HijackThis 1.99.1 Kaspersky Online Scanner Mozilla Firefox (2.0.0.6) Panda ActiveScan Le volume dans le lecteur C s'appelle sata Le numéro de série du volume est 84F4-3E41 Répertoire de C:\Program Files 30/07/2007 20:01 <REP> . 30/07/2007 20:01 <REP> .. 06/05/2007 11:38 <REP> 7-Zip 19/10/2006 21:35 <REP> Adobe 03/06/2007 19:46 <REP> ahead 05/05/2007 23:58 <REP> Analog Devices 06/05/2007 00:01 <REP> ASUS 19/06/2007 18:16 <REP> ATnotes 25/05/2007 18:22 <REP> Azureus 16/07/2007 23:24 <REP> CCleaner 14/10/2006 12:58 <REP> ComPlus Applications 24/06/2007 10:43 <REP> Dofus 10/05/2007 00:11 <REP> eMule 09/06/2007 22:05 <REP> Fichiers communs 10/06/2007 08:21 <REP> FileZilla 15/06/2007 22:32 <REP> Google 10/05/2007 22:05 <REP> Hewlett-Packard 10/05/2007 22:08 <REP> HP 14/10/2006 14:26 <REP> Intel 26/06/2007 16:48 <REP> Internet Explorer 17/10/2006 20:45 <REP> InterVideo 05/05/2007 20:45 <REP> Iomega 11/06/2007 13:02 <REP> IPNetInfo 18/10/2006 21:39 <REP> iPod 18/10/2006 21:39 <REP> iTunes 17/05/2007 10:58 <REP> Java 19/10/2006 21:31 <REP> Logitech 09/06/2007 22:04 <REP> Macromedia 26/06/2007 17:02 <REP> Messenger 06/06/2007 22:40 <REP> Messenger Plus! Live 14/10/2006 13:02 <REP> microsoft frontpage 20/10/2006 18:11 <REP> Microsoft Office 06/05/2007 20:27 <REP> Morpheus 14/10/2006 12:59 <REP> Movie Maker 06/08/2007 18:11 <REP> Mozilla Firefox 29/05/2007 15:40 <REP> Mozilla Sunbird 20/10/2006 07:02 <REP> Mozilla Thunderbird 14/10/2006 12:57 <REP> MSN 14/10/2006 12:58 <REP> MSN Gaming Zone 06/05/2007 16:45 <REP> MSN Messenger 26/06/2007 17:09 <REP> MSXML 4.0 14/10/2006 12:59 <REP> NetMeeting 18/10/2006 21:07 <REP> OpenOffice.org 2.0 26/06/2007 16:55 <REP> Outlook Express 31/05/2007 14:44 <REP> PDFCreator 31/05/2007 14:44 <REP> PDFCreator Toolbar 23/05/2007 18:45 <REP> QuickTime 30/05/2007 00:04 <REP> Real 27/06/2007 05:12 <REP> Samsung 14/10/2006 13:00 <REP> Services en ligne 14/10/2006 15:49 <REP> Softwin 27/06/2007 20:55 <REP> Spybot - Search & Destroy 25/06/2007 00:50 <REP> Star Downloader 05/05/2007 20:49 <REP> VideoLAN 17/05/2007 00:50 <REP> Windows Journal Viewer 06/06/2007 22:40 <REP> Windows Live 16/07/2007 21:45 <REP> Windows Media Connect 2 16/07/2007 21:45 <REP> Windows Media Player 14/10/2006 12:58 <REP> Windows NT 14/10/2006 13:02 <REP> xerox 06/06/2007 14:44 <REP> Yahoo! 18/10/2006 20:17 <REP> YRefresher 0 fichier(s) 0 octets 62 Rép(s) 28 366 413 824 octets libres Le volume dans le lecteur C s'appelle sata Le numéro de série du volume est 84F4-3E41 Répertoire de C:\Program Files\fichiers communs 09/06/2007 22:05 <REP> . 09/06/2007 22:05 <REP> .. 20/10/2006 18:18 <REP> Adobe 20/10/2006 18:11 <REP> DESIGNER 10/05/2007 22:03 <REP> Hewlett-Packard 10/05/2007 22:08 <REP> HP 22/06/2007 18:00 <REP> InstallShield 17/05/2007 10:57 <REP> Java 06/05/2007 21:42 <REP> Logitech 09/06/2007 22:04 <REP> Macromedia 09/06/2007 22:05 <REP> Macromedia Shared 06/05/2007 16:46 <REP> Microsoft Shared 14/10/2006 12:59 <REP> MSSoap 14/10/2006 14:54 <REP> ODBC 30/05/2007 00:04 <REP> Real 14/10/2006 12:59 <REP> Services 14/10/2006 15:49 <REP> Softwin 14/10/2006 14:54 <REP> SpeechEngines 26/06/2007 16:55 <REP> System 30/05/2007 00:04 <REP> xing shared 0 fichier(s) 0 octets 20 Rép(s) 28 366 413 824 octets libres Le volume dans le lecteur C s'appelle sata Le numéro de série du volume est 84F4-3E41 Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders 30/07/2007 01:52 <REP> . 30/07/2007 01:52 <REP> .. 20/10/2006 18:11 <REP> 1033 20/10/2006 18:11 <REP> 1036 30/07/2007 00:31 74 378 ibm00001.dll 30/07/2007 00:31 57 514 ibm00002.dll 11/07/2003 10:15 1 292 872 MSONSEXT.DLL 15/07/2003 06:52 35 896 MSOSV.DLL 03/06/1999 12:09 122 937 MSOWS409.DLL 07/03/2001 07:00 127 033 MSOWS40c.DLL 11/07/2003 02:25 80 448 PKMWS.DLL 7 fichier(s) 1 791 078 octets 4 Rép(s) 28 366 413 824 octets libres Le volume dans le lecteur C s'appelle sata Le numéro de série du volume est 84F4-3E41 Répertoire de C:\ 12/05/2007 18:22 68 096 diff.exe 12/05/2007 18:22 103 424 grep.exe 2 fichier(s) 171 520 octets 0 Rép(s) 28 366 413 824 octets libres c:\Documents and Settings\stephane\dplozl.exe c:\Documents and Settings\stephane\zstxsz.exe c:\Documents and Settings\stephane\.housecall6.6\getMac.exe c:\Documents and Settings\stephane\.housecall6.6\patch.exe c:\Documents and Settings\stephane\.housecall6.6\tsc.exe c:\Documents and Settings\stephane\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\ARPPRODUCTICON.exe c:\Documents and Settings\stephane\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe c:\Documents and Settings\stephane\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\googleearth.exe1_407B9B5CDAC54F44A756B57CAB4E6A8B.exe c:\Documents and Settings\stephane\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\UNINST_Uninstall_G_3DE5E7D47B88403CA3FD2017A8240C5B.exe c:\Documents and Settings\stephane\Application Data\Microsoft\Installer\{90FF23FE-0E1B-40DF-A22E-B4C0372E5936}\ARPPRODUCTICON.exe c:\Documents and Settings\stephane\Bureau\Nouveau dossier\20070112093709031_Samsung_PC_Studio.exe c:\Documents and Settings\stephane\Bureau\Nouveau dossier\Samsung_PC_Studio_311_FKB.exe c:\Documents and Settings\stephane\Bureau\OpenOfficeorg 2.0 Installation Files\instmsia.exe c:\Documents and Settings\stephane\Bureau\OpenOfficeorg 2.0 Installation Files\instmsiw.exe c:\Documents and Settings\stephane\Bureau\OpenOfficeorg 2.0 Installation Files\setup.exe c:\Documents and Settings\stephane\Bureau\poetr\HijackThis.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\catchme.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\diff.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\dumphive.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\FilesInfoCmd.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\find2.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\Fport.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\grep.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\KProcCheck.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\LFiles.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\LISTDLLS.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\pslist.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\streams.exe c:\Documents and Settings\stephane\Bureau\poetr\DiagHelp\swreg.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\attrib.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\catchme.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\find.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\findstr.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\regedit.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\cliptext.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\download.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\ERUNT.EXE c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\FixPath.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\LS.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\MD5File.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\moveex.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\Process.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\RegDACL.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\RestartIt!.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\sc.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\SF.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\shutdown.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\swreg.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\swsc.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\unzip.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\zip.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\Replace\W2K.exe c:\Documents and Settings\stephane\Bureau\sdfix\SDFix\apps\Replace\XP.exe c:\Documents and Settings\stephane\Local Settings\Temp\Répertoire temporaire 1 pour DiagHelp.zip\DiagHelp\catchme.exe c:\Documents and Settings\stephane\Local Settings\Temp\Répertoire temporaire 1 pour DiagHelp.zip\DiagHelp\diff.exe c:\Documents and Settings\stephane\Local Settings\Temp\Répertoire temporaire 1 pour DiagHelp.zip\DiagHelp\dumphive.exe c:\Documents and Settings\stephane\Local Settings\Temp\Répertoire temporaire 1 pour DiagHelp.zip\DiagHelp\FilesInfoCmd.exe c:\Documents and Settings\stephane\Local Settings\Temp\Répertoire temporaire 1 pour DiagHelp.zip\DiagHelp\find2.exe c:\Documents and Settings\stephane\Local Settings\Temp\Répertoire temporaire 1 pour DiagHelp.zip\DiagHelp\Fport.exe c:\Documents and Settings\stephane\Local Settings\Temp\Répertoire temporaire 1 pour DiagHelp.zip\DiagHelp\grep.exe c:\Documents and Settings\stephane\Local Settings\Temp\Répertoire temporaire 1 pour DiagHelp.zip\DiagHelp\KProcCheck.exe c:\Documents and Settings\stephane\Local Settings\Temp\Répertoire temporaire 1 pour DiagHelp.zip\DiagHelp\LFiles.exe c:\Documents and Settings\stephane\Local Settings\Temp\Répertoire temporaire 1 pour DiagHelp.zip\DiagHelp\LISTDLLS.exe c:\Documents and Settings\stephane\Local Settings\Temp\Répertoire temporaire 1 pour DiagHelp.zip\DiagHelp\pslist.exe c:\Documents and Settings\stephane\Local Settings\Temp\Répertoire temporaire 1 pour DiagHelp.zip\DiagHelp\streams.exe c:\Documents and Settings\stephane\Local Settings\Temp\Répertoire temporaire 1 pour DiagHelp.zip\DiagHelp\swreg.exe c:\Documents and Settings\stephane\Local Settings\Temp\Répertoire temporaire 1 pour hijackthis.zip\HijackThis.exe c:\Documents and Settings\stephane\Mes documents\ccm-2.0.5.exe c:\Documents and Settings\stephane\Mes documents\Atari ST\setup.exe c:\Documents and Settings\stephane\Mes documents\bench\stephane\3DMark03.exe c:\Documents and Settings\stephane\Mes documents\bench\stephane\dx90_redist.exe c:\Documents and Settings\stephane\Mes documents\claude\idiotiesdiverses\effects of alcohol_1.exe c:\Documents and Settings\stephane\Mes documents\claude\idiotiesdiverses\effects of ecstacy_1.exe c:\Documents and Settings\stephane\Mes documents\claude\idiotiesdiverses\effects of LSD_1.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\Acrobat v5.0\_ISDel.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\Acrobat v5.0\Setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\_ISDEL.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\SETUP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\Cleaner\cleaner.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\DXMedia\dxsetup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\QuickTim\QuickTimeInstaller.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\Real\installreal.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\Adobe Premiere Version 6.0\Premiere\Crack.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\keygen.Exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\PostScript Drivers\setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\PostScript Drivers\Adobe\_ISDel.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\PostScript Drivers\Adobe\Setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\PostScript Drivers\Adobe\Auto\AUTOPLAY.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\SVG Viewer\SVGSetup-fr_FR.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\Textures d'effets d'éclairage\Multi-Size Save.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\Textures d'effets d'éclairage\Size to Fit Within.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-phot7\_ISDel.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-phot7\Setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\advanced photo mosaic maker v1.2_keygen\emosaic.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\easy.photo.mosaic.maker.v2.16.winall.regged-scf\scfepmm2\scfepmm2\emosaic.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\Autorun.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\instmsia.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\instmsiw.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\SetReg.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\IE5\French\DCOM95.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\IE5\French\IE501DOM.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\IE5\French\IE5COMP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\IE5\French\ie5setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\IE5\French\OAINST.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\Redist\50ComUpd.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\Redist\Axdist.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\Redist\Oleaut.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\Redist\ShFolder.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\Redist\English\hhupd.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\TTS\spchapi.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\TTS\common module\Setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\TTS\language modules\Standard French\Setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\INSTALL.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SETUPSE.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQLWRAP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\IE5\FR\DCOM95.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\IE5\FR\IE5COMP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\IE5\FR\IE5SETUP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\IE5\FR\IEAK5.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\IE5\FR\IEAK5CD.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\IE5\FR\VRML2C.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\MSI\INSTMSI.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\MSI\INSTMSIW.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\ARTGALRY\ARTGALRY.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\ARTGALRY\CAG.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\DATAMAP\DATAINST.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\DATAMAP\MSMAP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\DBREP\WZCNFLCT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\EQUATION\EQNEDT32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\MSINFO\MSINFO32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\MSINFO\OFFPROV.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\ORGCHART\ORGCHART.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\PHOTOED\PHOTOED.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\ADMCGI\SCRIPTS\FPADMCGI.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\CFGWIZ.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\FPREMADM.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\FPSERVER.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\FPSRVADM.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\HTIMAGE.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\IMAGEMAP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\TCPTEST.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\ISAPI\FPCOUNT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\_VTI_BIN\FPCOUNT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\_VTI_BIN\SHTML.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\_VTI_BIN\_VTI_ADM\ADMIN.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\_VTI_BIN\_VTI_AUT\AUTHOR.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\FPWEBS\SERVER\VHTTPD32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\OUT40.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\CCMDLIST.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\CNFNOT32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\CWIMPORT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\95\MAPISP32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\95\ML3XEC16.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\95\NEWPROF.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\95\SCANPST.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\NT\MAPISP32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\NT\ML3XEC16.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\NT\NEWPROF.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\NT\SCANPST.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\FP98\VER3\BIN\FP98SADM.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\FP98\VER3\BIN\FP98SWIN.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\FP98\VER3\BIN\FPSRVADM.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\FP98\VER3\BIN\FPSRVWIN.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\BINDER.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\CONVTEXT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\DATCRT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\DLGCANCL.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\EXCEL.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\FINDER.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\FINDFAST.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\FRONTPG.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\GRAPH9.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MAKECERT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSACCESS.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSACNV30.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSIMPORT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSO7FTP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSO7FTPA.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSO7FTPS.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSOHTMED.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSQRY32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\NSREX.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\OFFCLN9.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\ORG11SVR.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\ORG21SVR.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\OSA9.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\OTUNEUP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\OUTLOOK.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\OWSTIMER.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\POWERPNT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\REXPROXY.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\RXCBPRXY.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\SELFCERT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\SETLANG.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\VTIDISC.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\VTIFORM.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\VTIPRES.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\WAVTOASF.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\WEBPUB.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\WINWORD.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\MSOFFICE.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\MSOHELP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\NFCLEAN.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\OLFMOD32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\OLFSETUP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\OLFSNT40.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\PROJWIZ.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\SCHDPL32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\WFXMSRVR.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\WRKGADM.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\FORMS\1036\REGCFG.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\XLATORS\PPVIEW32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\SNAPVIEW\SNAPVIEW.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\PFILES\VSTUDIO\COMMON\IDE\IDE98\MSE.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SP\DCOM\DCOM95.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\BCP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\CMDWRAP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\CNFGSVR.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\DCOMSCM.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\DISTRIB.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\DTSRUN.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\DTSWIZ.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\LOGREAD.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\ODBCCMPT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\OSQL.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\REBUILDM.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\REGREBLD.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\REPLMERG.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SCM.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SNAPSHOT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SQLAGENT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SQLMANGR.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SQLSERVR.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SVRNETCN.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\VSWITCH.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\OTHER\DTCSETUP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\SETUP\_ISDEL.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\SETUP\MSETUP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\SETUP\SETUPSQL.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\SETUP\SQLSTP.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\SYSTEM\CLICONFG.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SQL\X86\SYSTEM\REGSVR32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SYSTEM\CLICONFG.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SYSTEM\EXTRACT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SYSTEM\IMMC.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SYSTEM\ODBCAD32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SYSTEM95\AWSNTO32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SYSTEM95\FIXMAPI.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SYSTEM95\VIEWERS\QUIKVIEW.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SYSTEMNT\FIXMAPI.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\SYSTEMNT\VIEWERS\QUIKVIEW.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\WINDOWS\HH.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\pack office 2000 PRO\WINDOWS\MSAGENT\AGENTSVR.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\Setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\CHKDSK.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\EMM386.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\FLOPPY.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\FLOPPY9x.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\FLOPPYME.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\NWCDEX.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\PQBOOT.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\PTEDIT32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\restrmbr.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\WRPROG.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Setup\instmsia.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Setup\instmsiw.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Setup\setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\DKeeper\instmsia.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\DKeeper\instmsiw.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\DKeeper\setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\Setup.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\CHKDSK.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\EMM386.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\FLOPPY.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\FLOPPY9x.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\FLOPPYME.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\NWCDEX.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\PTEDIT32.EXE c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Setup\instmsia.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Setup\instmsiw.exe c:\Documents and Settings\stephane\Mes documents\Gravures en attente\partmagik\Partition Magic 8 fr\Setup\setup.exe c:\Documents and Settings\stephane\Mes documents\Macromedia\keygen_Macromedia_Studio_MX.exe c:\Documents and Settings\stephane\Mes documents\Mes fichiers reçus\Contam.EXE c:\Documents and Settings\stephane\Mes documents\Mes images\LOTR_1.EXE c:\Documents and Settings\stephane\Mes documents\Mes images\msn\linsdsay\WINKS 1\mcoinstall.exe c:\Documents and Settings\stephane\Mes documents\open2.0\instmsia.exe c:\Documents and Settings\stephane\Mes documents\open2.0\instmsiw.exe c:\Documents and Settings\stephane\Mes documents\open2.0\setup.exe c:\Documents and Settings\stephane\Mes documents\Page Perso\vnc-3.3.7-x86_win32.exe c:\Documents and Settings\stephane\Mes documents\prog divers\DivX511Bundle.exe c:\Documents and Settings\stephane\Mes documents\prog divers\eMule0.30e-Installer.exe c:\Documents and Settings\stephane\Mes documents\prog divers\eMule0.42g-Installer.exe c:\Documents and Settings\stephane\Mes documents\prog divers\FileZilla_2_1_3a_setup.exe c:\Documents and Settings\stephane\Mes documents\prog divers\ie6setup.exe c:\Documents and Settings\stephane\Mes documents\prog divers\instantget.exe c:\Documents and Settings\stephane\Mes documents\prog divers\mdv.exe c:\Documents and Settings\stephane\Mes documents\prog divers\moorhuhn2.exe c:\Documents and Settings\stephane\Mes documents\prog divers\moorhuhnjagd.exe c:\Documents and Settings\stephane\Mes documents\prog divers\mozilla121fr.exe c:\Documents and Settings\stephane\Mes documents\prog divers\mozilla13us.exe c:\Documents and Settings\stephane\Mes documents\prog divers\ow32frfr606j.exe c:\Documents and Settings\stephane\Mes documents\prog divers\ow32frfr723.exe c:\Documents and Settings\stephane\Mes documents\prog divers\paintshoppro5.01.EXE c:\Documents and Settings\stephane\Mes documents\prog divers\pcbugdoctor_setup.exe c:\Documents and Settings\stephane\Mes documents\prog divers\rp505fra.exe c:\Documents and Settings\stephane\Mes documents\prog divers\SandraStd-DPK-9260.exe c:\Documents and Settings\stephane\Mes documents\prog divers\script_edit.exe c:\Documents and Settings\stephane\Mes documents\prog divers\sdpro.exe c:\Documents and Settings\stephane\Mes documents\prog divers\spybotsd12.exe c:\Documents and Settings\stephane\Mes documents\prog divers\stardown.exe c:\Documents and Settings\stephane\Mes documents\prog divers\TOM.exe c:\Documents and Settings\stephane\Mes documents\prog divers\ts15eval.exe c:\Documents and Settings\stephane\Mes documents\prog divers\VXP_v722.exe c:\Documents and Settings\stephane\Mes documents\prog divers\wace22.exe c:\Documents and Settings\stephane\Mes documents\prog divers\winamp502_full.exe c:\Documents and Settings\stephane\Mes documents\prog divers\winteredition.exe c:\Documents and Settings\stephane\Mes documents\prog divers\wrar32b2fr.exe c:\Documents and Settings\stephane\Mes documents\prog divers\zlsSetup_45_532.exe c:\Documents and Settings\stephane\Mes documents\prog divers\zlsSetup_45_538_001.exe c:\Documents and Settings\stephane\Mes documents\prog divers\arcanum\arcanum_fr_1064_1070.exe c:\Documents and Settings\stephane\Mes documents\prog divers\arcanum\arcanum_fr_1074.exe c:\Documents and Settings\stephane\Mes documents\site\Setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\reveilletoi.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\Acrobat v5.0\_ISDel.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\Acrobat v5.0\Setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\_ISDEL.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\SETUP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\Cleaner\cleaner.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\DXMedia\dxsetup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\QuickTim\QuickTimeInstaller.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\Adobe Premiere Version 6.0\frpre60to\Premiere_6.0 Tryout Win\Real\installreal.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\Adobe Premiere Version 6.0\Premiere\Crack.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\keygen.Exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\PostScript Drivers\setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\PostScript Drivers\Adobe\_ISDel.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\PostScript Drivers\Adobe\Setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\PostScript Drivers\Adobe\Auto\AUTOPLAY.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\SVG Viewer\SVGSetup-fr_FR.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\Textures d'effets d'éclairage\Multi-Size Save.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-addon\GOODIES\Textures d'effets d'éclairage\Size to Fit Within.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-phot7\_ISDel.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\ADOBE_PhotoShop_v7.0_Incl._Keygen_FRENCH-BS\bs-phot7\Setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\advanced photo mosaic maker v1.2_keygen\emosaic.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\easy.photo.mosaic.maker.v2.16.winall.regged-scf\scfepmm2\scfepmm2\emosaic.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\Autorun.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\instmsia.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\instmsiw.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\SetReg.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\IE5\French\DCOM95.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\IE5\French\IE501DOM.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\IE5\French\IE5COMP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\IE5\French\ie5setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\IE5\French\OAINST.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\Redist\50ComUpd.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\Redist\Axdist.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\Redist\Oleaut.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\Redist\ShFolder.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\Redist\English\hhupd.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\TTS\spchapi.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\TTS\common module\Setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\adobe\omnipage11\omnip-11\OmniPage\TTS\language modules\Standard French\Setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\INSTALL.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SETUPSE.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQLWRAP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\IE5\FR\DCOM95.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\IE5\FR\IE5COMP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\IE5\FR\IE5SETUP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\IE5\FR\IEAK5.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\IE5\FR\IEAK5CD.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\IE5\FR\VRML2C.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\MSI\INSTMSI.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\MSI\INSTMSIW.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\ARTGALRY\ARTGALRY.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\ARTGALRY\CAG.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\DATAMAP\DATAINST.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\DATAMAP\MSMAP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\DBREP\WZCNFLCT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\EQUATION\EQNEDT32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\MSINFO\MSINFO32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\MSINFO\OFFPROV.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\ORGCHART\ORGCHART.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\PHOTOED\PHOTOED.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\ADMCGI\SCRIPTS\FPADMCGI.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\CFGWIZ.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\FPREMADM.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\FPSERVER.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\FPSRVADM.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\HTIMAGE.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\IMAGEMAP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\BIN\TCPTEST.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\ISAPI\FPCOUNT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\_VTI_BIN\FPCOUNT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\_VTI_BIN\SHTML.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\_VTI_BIN\_VTI_ADM\ADMIN.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\40\_VTI_BIN\_VTI_AUT\AUTHOR.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\MSSHARED\WEBSRVEX\FPWEBS\SERVER\VHTTPD32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\OUT40.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\CCMDLIST.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\CNFNOT32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\CWIMPORT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\95\MAPISP32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\95\ML3XEC16.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\95\NEWPROF.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\95\SCANPST.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\NT\MAPISP32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\NT\ML3XEC16.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\NT\NEWPROF.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\COMMON\SYSTEM\MAPI\1036\NT\SCANPST.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\FP98\VER3\BIN\FP98SADM.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\FP98\VER3\BIN\FP98SWIN.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\FP98\VER3\BIN\FPSRVADM.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\FP98\VER3\BIN\FPSRVWIN.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\BINDER.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\CONVTEXT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\DATCRT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\DLGCANCL.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\EXCEL.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\FINDER.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\FINDFAST.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\FRONTPG.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\GRAPH9.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MAKECERT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSACCESS.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSACNV30.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSIMPORT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSO7FTP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSO7FTPA.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSO7FTPS.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSOHTMED.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\MSQRY32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\NSREX.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\OFFCLN9.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\ORG11SVR.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\ORG21SVR.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\OSA9.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\OTUNEUP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\OUTLOOK.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\OWSTIMER.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\POWERPNT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\REXPROXY.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\RXCBPRXY.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\SELFCERT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\SETLANG.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\VTIDISC.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\VTIFORM.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\VTIPRES.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\WAVTOASF.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\WEBPUB.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\WINWORD.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\MSOFFICE.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\MSOHELP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\NFCLEAN.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\OLFMOD32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\OLFSETUP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\OLFSNT40.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\PROJWIZ.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\SCHDPL32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\WFXMSRVR.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\1036\WRKGADM.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\FORMS\1036\REGCFG.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\MSOFFICE\OFFICE\XLATORS\PPVIEW32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\SNAPVIEW\SNAPVIEW.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\PFILES\VSTUDIO\COMMON\IDE\IDE98\MSE.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SP\DCOM\DCOM95.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\BCP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\CMDWRAP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\CNFGSVR.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\DCOMSCM.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\DISTRIB.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\DTSRUN.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\DTSWIZ.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\LOGREAD.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\ODBCCMPT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\OSQL.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\REBUILDM.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\REGREBLD.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\REPLMERG.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SCM.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SNAPSHOT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SQLAGENT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SQLMANGR.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SQLSERVR.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\SVRNETCN.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\BINN\VSWITCH.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\OTHER\DTCSETUP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\SETUP\_ISDEL.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\SETUP\MSETUP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\SETUP\SETUPSQL.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\SETUP\SQLSTP.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\SYSTEM\CLICONFG.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SQL\X86\SYSTEM\REGSVR32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SYSTEM\CLICONFG.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SYSTEM\EXTRACT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SYSTEM\IMMC.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SYSTEM\ODBCAD32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SYSTEM95\AWSNTO32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SYSTEM95\FIXMAPI.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SYSTEM95\VIEWERS\QUIKVIEW.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SYSTEMNT\FIXMAPI.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\SYSTEMNT\VIEWERS\QUIKVIEW.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\WINDOWS\HH.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\pack office 2000 PRO\WINDOWS\MSAGENT\AGENTSVR.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\Setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\CHKDSK.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\EMM386.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\FLOPPY.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\FLOPPY9x.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\FLOPPYME.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\NWCDEX.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\PQBOOT.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\PTEDIT32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\restrmbr.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Rescueme\DOSYSTEM\WRPROG.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Setup\instmsia.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Setup\instmsiw.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\BTMagic\Setup\setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\DKeeper\instmsia.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\DKeeper\instmsiw.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\DKeeper\setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\Setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\CHKDSK.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\EMM386.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\FLOPPY.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\FLOPPY9x.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\FLOPPYME.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\NWCDEX.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Rescueme\DOSYSTEM\PTEDIT32.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Setup\instmsia.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Setup\instmsiw.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Gravures en attente\partmagik\Partition Magic 8 fr\Setup\setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\Atari ST\setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\bench\stephane\3DMark03.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\bench\stephane\dx90_redist.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\e_mule\dxwebsetup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\e_mule\mp71.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\e_mule\newwebter.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\Macromedia\keygen_Macromedia_Studio_MX.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\Page Perso\vnc-3.3.7-x86_win32.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\DivX511Bundle.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\eMule0.30e-Installer.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\FileZilla_2_1_3a_setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\ie6setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\instantget.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\mdv.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\moorhuhn2.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\moorhuhnjagd.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\mozilla121fr.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\mozilla13us.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\ow32frfr606j.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\ow32frfr723.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\paintshoppro5.01.EXE c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\pcbugdoctor_setup.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\rp505fra.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\SandraStd-DPK-9260.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\script_edit.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\spybotsd12.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\stardown.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\TOM.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\ts15eval.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\VXP_v722.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\wace22.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\winamp502_full.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\winteredition.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\wrar32b2fr.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\zlsSetup_45_532.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\zlsSetup_45_538_001.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\arcanum\arcanum_fr_1064_1070.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\Mes docs\prog divers\arcanum\arcanum_fr_1074.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\RENNES\QuickTimeInstaller.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\RENNES\rennes.exe c:\Documents and Settings\stephane\Mes documents\site\sauvegarde\RENNES\cartographie\photo\Zoom64\perl.exe c:\Documents and Settings\stephane\Mes documents\telechargements\3DMark06_v102_installer.exe c:\Documents and Settings\stephane\Mes documents\telechargements\7z444.exe c:\Documents and Settings\stephane\Mes documents\telechargements\7z445.exe c:\Documents and Settings\stephane\Mes documents\telechargements\a2freesetup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Accelerateur-Alice.exe c:\Documents and Settings\stephane\Mes documents\telechargements\AdbeRdr60_fra_full.exe c:\Documents and Settings\stephane\Mes documents\telechargements\aida32ee_393.exe c:\Documents and Settings\stephane\Mes documents\telechargements\atnsetup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\autospell_outlookexpress(2).exe c:\Documents and Settings\stephane\Mes documents\telechargements\autospell_outlookexpress.exe c:\Documents and Settings\stephane\Mes documents\telechargements\avwinsfx(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements\Azureus_2.5.0.4a_Win32.setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Azureus25.exe c:\Documents and Settings\stephane\Mes documents\telechargements\bejeweled-setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\bitdefender_avplus_v10.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ccm-2.0.5.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ccm-2.0.6.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ccsetup136.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ccsetup140.exe c:\Documents and Settings\stephane\Mes documents\telechargements\cdex_151.exe c:\Documents and Settings\stephane\Mes documents\telechargements\character_aragorn.exe c:\Documents and Settings\stephane\Mes documents\telechargements\character_arwen.exe c:\Documents and Settings\stephane\Mes documents\telechargements\character_boromir.exe c:\Documents and Settings\stephane\Mes documents\telechargements\character_eowyn.exe c:\Documents and Settings\stephane\Mes documents\telechargements\character_eye.exe c:\Documents and Settings\stephane\Mes documents\telechargements\character_frodo.exe c:\Documents and Settings\stephane\Mes documents\telechargements\character_galadriel.exe c:\Documents and Settings\stephane\Mes documents\telechargements\character_gollum.exe c:\Documents and Settings\stephane\Mes documents\telechargements\character_legolas.exe c:\Documents and Settings\stephane\Mes documents\telechargements\cldxtra2.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ConCon111.exe c:\Documents and Settings\stephane\Mes documents\telechargements\culture_dwarves.exe c:\Documents and Settings\stephane\Mes documents\telechargements\culture_ents.exe c:\Documents and Settings\stephane\Mes documents\telechargements\culture_horses.exe c:\Documents and Settings\stephane\Mes documents\telechargements\culture_orcs.exe c:\Documents and Settings\stephane\Mes documents\telechargements\culture_wizards.exe c:\Documents and Settings\stephane\Mes documents\telechargements\DofusInstaller_v1_18_1.exe c:\Documents and Settings\stephane\Mes documents\telechargements\DofusPatch_v1_18_0_to_v1_18_1.exe c:\Documents and Settings\stephane\Mes documents\telechargements\DofusPatch_v1_18_2_to_v1_19_0.exe c:\Documents and Settings\stephane\Mes documents\telechargements\DofusPatch_v1_18_X_to_v1_18_2.exe c:\Documents and Settings\stephane\Mes documents\telechargements\dvd_conceptart(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements\dvd_conceptart.exe c:\Documents and Settings\stephane\Mes documents\telechargements\dvd_gallery.exe c:\Documents and Settings\stephane\Mes documents\telechargements\dvd_twotowers.exe c:\Documents and Settings\stephane\Mes documents\telechargements\dxwebsetup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\effects_helmsdeep.exe c:\Documents and Settings\stephane\Mes documents\telechargements\effects_prologue.exe c:\Documents and Settings\stephane\Mes documents\telechargements\emoticones.exe c:\Documents and Settings\stephane\Mes documents\telechargements\emoticones1_5.exe c:\Documents and Settings\stephane\Mes documents\telechargements\eMule0.47c-Installer.exe c:\Documents and Settings\stephane\Mes documents\telechargements\eMulePlus-1.1f.Installer.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ERPROT_604.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Europol.exe c:\Documents and Settings\stephane\Mes documents\telechargements\FileZilla_2_2_29_setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\FileZilla_2_2_31_setup(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements\FileZilla_2_2_31_setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\FIRCSetup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Firefox Setup 1.0.3.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Firefox Setup 1.0.4.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Firefox Setup 1.0.6.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Firefox Setup 1.0.7.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Firefox Setup 1.0.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Firefox Setup 1.5.0.12.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Firefox Setup 1.5.0.4.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Firefox Setup 1.5.0.7.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Firefox Setup 1.5.exe c:\Documents and Settings\stephane\Mes documents\telechargements\GenuineCheck.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Google_Earth_BZXE.exe c:\Documents and Settings\stephane\Mes documents\telechargements\gspot221.exe c:\Documents and Settings\stephane\Mes documents\telechargements\hotpop-3.0.2.exe c:\Documents and Settings\stephane\Mes documents\telechargements\HP_Vista_MFP_Ph1.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ie6setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Install_Messenger.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Install_MSN_Messenger.EXE c:\Documents and Settings\stephane\Mes documents\telechargements\INSTALL_MSN_MESSENGER_DL.EXE c:\Documents and Settings\stephane\Mes documents\telechargements\ioware-w32-x86-402.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ipnetinfo_setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\iTunesSetup(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements\iTunesSetup(2).exe c:\Documents and Settings\stephane\Mes documents\telechargements\iTunesSetup(3).exe c:\Documents and Settings\stephane\Mes documents\telechargements\iTunesSetup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\iview397.exe c:\Documents and Settings\stephane\Mes documents\telechargements\kav700123fr_1645.exe c:\Documents and Settings\stephane\Mes documents\telechargements\klcodec277f.exe c:\Documents and Settings\stephane\Mes documents\telechargements\location_beyond.exe c:\Documents and Settings\stephane\Mes documents\telechargements\location_concept.exe c:\Documents and Settings\stephane\Mes documents\telechargements\location_fangorn.exe c:\Documents and Settings\stephane\Mes documents\telechargements\location_hobbiton.exe c:\Documents and Settings\stephane\Mes documents\telechargements\location_lothlorien.exe c:\Documents and Settings\stephane\Mes documents\telechargements\location_moria.exe c:\Documents and Settings\stephane\Mes documents\telechargements\location_riven.exe c:\Documents and Settings\stephane\Mes documents\telechargements\location_theshire.exe c:\Documents and Settings\stephane\Mes documents\telechargements\MDAC_TYP.EXE c:\Documents and Settings\stephane\Mes documents\telechargements\mirc617.exe c:\Documents and Settings\stephane\Mes documents\telechargements\mozilla-win32-1.6-fr-FR-installer(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements\mozilla-win32-1.6-fr-FR-installer.exe c:\Documents and Settings\stephane\Mes documents\telechargements\mozilla-win32-1.7-installer(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements\mozilla-win32-1.7-installer.exe c:\Documents and Settings\stephane\Mes documents\telechargements\mp71.exe c:\Documents and Settings\stephane\Mes documents\telechargements\MPSetup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\MsgPlus-351.exe c:\Documents and Settings\stephane\Mes documents\telechargements\MsgPlusLive-401(2).exe c:\Documents and Settings\stephane\Mes documents\telechargements\MsgPlusLive-401.exe c:\Documents and Settings\stephane\Mes documents\telechargements\MsgPlusLive-420.exe c:\Documents and Settings\stephane\Mes documents\telechargements\msgr8us.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Nero-7.8.5.0_fra_trial.exe c:\Documents and Settings\stephane\Mes documents\telechargements\neverwinter_nights_mise_a_jour_critique_version_windows_francais_14688.exe c:\Documents and Settings\stephane\Mes documents\telechargements\newwebter.exe c:\Documents and Settings\stephane\Mes documents\telechargements\OOo_2.0.0_Win32Intel_install_fr.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ow32frfr723j.exe c:\Documents and Settings\stephane\Mes documents\telechargements\PalaceUserWin.exe c:\Documents and Settings\stephane\Mes documents\telechargements\pci_filerecovery.exe c:\Documents and Settings\stephane\Mes documents\telechargements\PDFCreator-0_9_3_GPLGhostscript(2).exe c:\Documents and Settings\stephane\Mes documents\telechargements\PDFCreator-0_9_3_GPLGhostscript.exe c:\Documents and Settings\stephane\Mes documents\telechargements\pilote_ati_catalyst_6.12_3220.exe c:\Documents and Settings\stephane\Mes documents\telechargements\pj64_1_5.exe c:\Documents and Settings\stephane\Mes documents\telechargements\pn31lous.exe c:\Documents and Settings\stephane\Mes documents\telechargements\qc1000fra.exe c:\Documents and Settings\stephane\Mes documents\telechargements\rmxv4.exe c:\Documents and Settings\stephane\Mes documents\telechargements\sc880xp.exe c:\Documents and Settings\stephane\Mes documents\telechargements\SDFix.exe c:\Documents and Settings\stephane\Mes documents\telechargements\sdfree(2).exe c:\Documents and Settings\stephane\Mes documents\telechargements\sdfree.exe c:\Documents and Settings\stephane\Mes documents\telechargements\sdfree-1.exe c:\Documents and Settings\stephane\Mes documents\telechargements\seamonkey-1.0.2.fr-FR.win32.installer.exe c:\Documents and Settings\stephane\Mes documents\telechargements\setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Setup_FreeConverter(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements\Setup_FreeConverter.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Shareaza_2.2.5.0.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Shockwave_Installer_Slim.exe c:\Documents and Settings\stephane\Mes documents\telechargements\SkypeSetup(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements\SkypeSetup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\spybotsd13.exe c:\Documents and Settings\stephane\Mes documents\telechargements\spybotsd14.exe c:\Documents and Settings\stephane\Mes documents\telechargements\sunbird-0.3.fr.win32.installer.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Thunderbird Setup 1.5.0.4.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Thunderbird Setup 1.5.0.7(2).exe c:\Documents and Settings\stephane\Mes documents\telechargements\Thunderbird Setup 1.5.0.7.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Thunderbird Setup 1-1.5.0.4.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ThunderbirdSetup-0.7.1.exe c:\Documents and Settings\stephane\Mes documents\telechargements\ThunderbirdSetup-0.9-fr-FR.exe c:\Documents and Settings\stephane\Mes documents\telechargements\unlocker1.8.5.exe c:\Documents and Settings\stephane\Mes documents\telechargements\vlc-0.8.5-win32.exe c:\Documents and Settings\stephane\Mes documents\telechargements\vlc-0.8.6b-win32.exe c:\Documents and Settings\stephane\Mes documents\telechargements\winamp503_full.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Wormux-0.7.9-win32.exe c:\Documents and Settings\stephane\Mes documents\telechargements\wrar32b2fr.exe c:\Documents and Settings\stephane\Mes documents\telechargements\x-3gp-video-converter.exe c:\Documents and Settings\stephane\Mes documents\telechargements\yrsetup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\yrsetup-1.exe c:\Documents and Settings\stephane\Mes documents\telechargements\zlsSetup_45_594_000.exe c:\Documents and Settings\stephane\Mes documents\telechargements2-09-2006\Pilote_Epson_Stylus_Color_880_5.2as_2000XP.exe c:\Documents and Settings\stephane\Mes documents\telechargements4-03-2007\installspeedfan432(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements4-03-2007\installspeedfan432(2).exe c:\Documents and Settings\stephane\Mes documents\telechargements4-03-2007\installspeedfan432(3).exe c:\Documents and Settings\stephane\Mes documents\telechargements4-03-2007\installspeedfan432(4).exe c:\Documents and Settings\stephane\Mes documents\telechargements4-03-2007\installspeedfan432.exe c:\Documents and Settings\stephane\Mes documents\telechargements4-03-2007\speedfan432(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements4-03-2007\speedfan432(2).exe c:\Documents and Settings\stephane\Mes documents\telechargements4-03-2007\speedfan432(3).exe c:\Documents and Settings\stephane\Mes documents\telechargements4-03-2007\speedfan432.exe c:\Documents and Settings\stephane\Mes documents\telechargements4-06-2007\hdtune_253.exe c:\Documents and Settings\stephane\Mes documents\telechargements5-07-2006\picasa2Setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements5-09-2006\DivXPlay.exe c:\Documents and Settings\stephane\Mes documents\telechargements\11-07-2006\GmailConfig.exe c:\Documents and Settings\stephane\Mes documents\telechargements\17-07-2006\Morpheus.exe c:\Documents and Settings\stephane\Mes documents\telechargements\17-10-2006\hotpop-3.0.2.exe c:\Documents and Settings\stephane\Mes documents\telechargements\17-10-2006\MozBackup-1.4.5-ENG.exe c:\Documents and Settings\stephane\Mes documents\telechargements\20-06-2006\AdbeRdr705_fra_full.exe c:\Documents and Settings\stephane\Mes documents\telechargements\20-06-2006\qc848fra.exe c:\Documents and Settings\stephane\Mes documents\telechargements\25-06-2006\yrsetup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\29-06-2006\FileZilla_2_2_25_setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\29-06-2006\hotpop-3.0.2.exe c:\Documents and Settings\stephane\Mes documents\telechargements\29-06-2006\iTunesSetup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\29-06-2006\kav5.0.527trial_personalfr.exe c:\Documents and Settings\stephane\Mes documents\telechargements\29-06-2006\quickzip.exe c:\Documents and Settings\stephane\Mes documents\telechargements\29-06-2006\spybotsd14.exe c:\Documents and Settings\stephane\Mes documents\telechargements\29-06-2006\txp4trial(1).exe c:\Documents and Settings\stephane\Mes documents\telechargements\29-06-2006\txp4trial.exe c:\Documents and Settings\stephane\Mes documents\telechargements\29-06-2006\ultrabackup_setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\epson880\epson1778eu.exe c:\Documents and Settings\stephane\Mes documents\telechargements\epson880\epson3400eu.exe c:\Documents and Settings\stephane\Mes documents\telechargements\epson880\Pilote_Epson_Stylus_Color_880_5.2as_2000XP.exe c:\Documents and Settings\stephane\Mes documents\telechargements\essai\tsrh-easyrec512a.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Nouveau dossier\san1037-W64.exe c:\Documents and Settings\stephane\Mes documents\telechargements\OpenOfficeorg 2.0 Installation Files\instmsia.exe c:\Documents and Settings\stephane\Mes documents\telechargements\OpenOfficeorg 2.0 Installation Files\instmsiw.exe c:\Documents and Settings\stephane\Mes documents\telechargements\OpenOfficeorg 2.0 Installation Files\setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\open_office\OOo_1.1.2_Win32Intel_install_fr\setup.exe c:\Documents and Settings\stephane\Mes documents\telechargements\Partials\Adobe Photoshop 7.0, with serial.partial.exe c:\Documents and Settings\stephane\Mes documents\telechargements\samsung\20050816162816765_Image_Editor.exe c:\Documents and Settings\stephane\Mes documents\telechargements\samsung\20050816162816765_Internet_Access.exe c:\Documents and Settings\stephane\Mes documents\telechargements\samsung\20050816162816765_PIMS_File_Manager.exe c:\Documents and Settings\stephane\Mes documents\telechargements\samsung\20060707123156828_Sample.exe c:\Documents and Settings\stephane\Mes documents\telechargements\samsung\20070314073350250_ContactsCopier_Installer.exe c:\Documents and Settings\stephane\Mes documents\telechargements\sandra\san9131Win32.exe c:\Documents and Settings\stephane\Mes documents\telechargements\torrent\Adobe.Dreamweaver.CS3.v9.0.3453.Incl.Keygen.INTERNAL.READ.NFO-SSG\adwcs3v90b3453vl02\Adobe.Dreamweaver.CS3.exe c:\Documents and Settings\stephane\Mes documents\telechargements\torrent\Adobe.Dreamweaver.CS3.v9.0.3453.Incl.Keygen.INTERNAL.READ.NFO-SSG\adwcs3v90b3453vl02\adw3kg.exe c:\Documents and Settings\stephane\Mes documents\telechargements\torrent\Dreamweaver.MX.2004\Dreamweaver.MX.2004\dwmx2004_trial_en_win.exe c:\Documents and Settings\stephane\Mes documents\telechargements\torrent\Dreamweaver.MX.2004\Updates\dwmx2004_701update_en.exe c:\Documents and Settings\stephane\Mes documents\telechargements\torrent\MM_studio 8\Captivate_1.01_Installer_fr.exe c:\Documents and Settings\stephane\Mes documents\telechargements\torrent\MM_studio 8\Dreamweaver8-fr.exe c:\Documents and Settings\stephane\Mes documents\telechargements\torrent\MM_studio 8\dw8_802_update_fr.exe c:\Documents and Settings\stephane\Mes documents\telechargements\torrent\MM_studio 8\Fireworks8-fr.exe c:\Documents and Settings\stephane\Mes documents\telechargements\torrent\MM_studio 8\Flash8-fr.exe c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig.dll c:\Documents and Settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll c:\Documents and Settings\stephane\Application Data\Macromedia\Dreamweaver MX 2004\Configuration\Flash Player\FlashPlayerW.dll c:\Documents and Settings\stephane\Application Data\Macromedia\Dreamweaver MX 2004\Configuration\Flash Player\NPSWF32.dll ****** Fin du rapport DiagHelp
  22. bonjour, j'ai été infecté par le virus msn qui traine (tapez moi je le mérite, je savais quasiment que c'était une crasse mais j'ai ouvert tt de même le fichier). voici le rapport hijakis, que je ne sais pas déchiffrer: Logfile of HijackThis v1.99.1 Scan saved at 18:07:08, on 06/08/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Softwin\BitDefender10\bdagent.exe C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe C:\Program Files\Analog Devices\SoundMAX\smax4.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\HPZipm12.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Outlook Express\msimn.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\WINDOWS\system32\notepad.exe C:\Documents and Settings\stephane\Bureau\poetr\HijackThis.exe C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe C:\Program Files\Softwin\BitDefender10\vsserv.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.reverso.net/text_translation.asp?lang=FR R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.files-ftp.com/~unicorni/phpBB2/index.php R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll O3 - Toolbar: RefresherBand Class - {B24BA06E-FB7B-4757-95C2-DC01125F750E} - C:\PROGRA~1\YREFRE~1\YREFRE~1.DLL O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe" O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe O4 - HKLM\..\Run: [soundMAX] "C:\Program Files\Analog Devices\SoundMAX\smax4.exe" /tray O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [bDMCon] C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [Firewall auto setup] c:\8A.tmp O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\ O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing) O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing) O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender10\vsserv.exe" /service (file missing) O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing) Merci de votre aide.
×
×
  • Créer...