Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

virusprotecpro

papyclaude

Par papyclaude
dans Analyses et éradication malwares

 Partager

Messages recommandés

Thanos Devil Member !

Thanos

Posté(e)
Posté(e)

salut :P

 

Pas grave, on va essayer autre chose de plus simple >

 

Télécharge WinPFind3U.exe sur ton bureau.

  • Double clique sur le fichier téléchargé : un dossier nommé WinPFind3U va apparaitre sur ton bureau.
  • Ouvre le dossier et double clique sur le fichier WinPFind3U.exe pour lancer le programme.
  • Sous le groupe Files Created Within sélectionne 30 days
  • Sous le groupe Files Modified Within sélectionne 30 days
  • Sous le groupe String Search sélectionne Non-Microsoft
  • Sous le groupe Additional Scans coche les cases >
    Reg- Security Settings
    Reg- Uninstall List
  • A présent clique sur le bouton Run Scan dans la barre d'outils
  • Lorsque le scan est terminé,le bloc-notes s'ouvre et affiche le rapport.
  • Clique sur le menu "Format" et assure toi que la case "Retour automatique à la ligne" ne soit pas cochée.
  • Copie/Colle le contenu du rapport dans ta prochaine réponse.

Fais le scan en ligne suivant stp en plus >

 

Fais un scan en ligne avec Panda :

http://www.pandasoftware.fr/Activescan/Activescan.html .

Et poste le rapport qu'il t'affichera à la fin, pour cela, assure toi que IE est correctement configuré pour le scan en ligne comme indiqué ici : http://www.malekal.com/scan_Av_en_ligne.html#mozTocId898809 .

Si tu n'y arrives pas, le tuto est : http://www.malekal.com/scan_Av_en_ligne.html#mozTocId237368

 

Tu n'es pas obligé de donner ton email, tu peux utiliser une adresse jetable si tu le souhaites : http://www.jetable.org/fr/index

 

@+ tard.

papyclaude Member

papyclaude

Posté(e)
  • Auteur
Posté(e)
salut :P

 

Pas grave, on va essayer autre chose de plus simple >

 

Télécharge WinPFind3U.exe sur ton bureau.

  • Double clique sur le fichier téléchargé : un dossier nommé WinPFind3U va apparaitre sur ton bureau.
  • Ouvre le dossier et double clique sur le fichier WinPFind3U.exe pour lancer le programme.
  • Sous le groupe Files Created Within sélectionne 30 days
  • Sous le groupe Files Modified Within sélectionne 30 days
  • Sous le groupe String Search sélectionne Non-Microsoft
  • Sous le groupe Additional Scans coche les cases >
    Reg- Security Settings
    Reg- Uninstall List
  • A présent clique sur le bouton Run Scan dans la barre d'outils
  • Lorsque le scan est terminé,le bloc-notes s'ouvre et affiche le rapport.
  • Clique sur le menu "Format" et assure toi que la case "Retour automatique à la ligne" ne soit pas cochée.
  • Copie/Colle le contenu du rapport dans ta prochaine réponse.

Fais le scan en ligne suivant stp en plus >

 

Fais un scan en ligne avec Panda :

http://www.pandasoftware.fr/Activescan/Activescan.html .

Et poste le rapport qu'il t'affichera à la fin, pour cela, assure toi que IE est correctement configuré pour le scan en ligne comme indiqué ici : http://www.malekal.com/scan_Av_en_ligne.html#mozTocId898809 .

Si tu n'y arrives pas, le tuto est : http://www.malekal.com/scan_Av_en_ligne.html#mozTocId237368

 

Tu n'es pas obligé de donner ton email, tu peux utiliser une adresse jetable si tu le souhaites : http://www.jetable.org/fr/index

 

@+ tard.

que veux dire scan???

Thanos Devil Member !

Thanos

Posté(e)
Posté(e)

salut papyclaude :P

 

Pas de panique! Pour ce qio est du scan en ligne, suis exactement le tutoriel ici > http://www.malekal.com/scan_Av_en_ligne.html#mozTocId237368

C'est très simple.

 

Tu as un problème pour lancer WinPFind3U.exe >> lorsque tu as double cliqué sur le fichier téléchargé (WinPFind3U.zip) tu vois cette fenêtre >

 

53bbe2aaa4ff8d58763f7ccd4999.gif

 

Il te suffit de cliquer sur le bouton Extract (le premier sur la droite au dessus de Close) >> une fois ceci fait, il y a un dossier nommé WinPFind3U qui va apparaitre sur ton bureau. Ensuite il ne te reste plus qu'à sélectionner les éléments de scan comme je te demandais dans mon messgae plus bas.

Si tu reçois le message "already exists" > ca veux dire que le dossier WinpFind3U est déjà créé : regarde sur ton bureau!!

 

courage.

papyclaude Member

papyclaude

Posté(e)
  • Auteur
Posté(e)
salut papyclaude :P

 

Pas de panique! Pour ce qio est du scan en ligne, suis exactement le tutoriel ici > http://www.malekal.com/scan_Av_en_ligne.html#mozTocId237368

C'est très simple.

 

Tu as un problème pour lancer WinPFind3U.exe >> lorsque tu as double cliqué sur le fichier téléchargé (WinPFind3U.zip) tu vois cette fenêtre >

 

53bbe2aaa4ff8d58763f7ccd4999.gif

 

Il te suffit de cliquer sur le bouton Extract (le premier sur la droite au dessus de Close) >> une fois ceci fait, il y a un dossier nommé WinPFind3U qui va apparaitre sur ton bureau. Ensuite il ne te reste plus qu'à sélectionner les éléments de scan comme je te demandais dans mon messgae plus bas.

Si tu reçois le message "already exists" > ca veux dire que le dossier WinpFind3U est déjà créé : regarde sur ton bureau!!

 

courage.

WinPFind3 logfile created on: 24/07/2007 14:01:25

WinPFind3U by OldTimer - Version 1.0.39 Folder = C:\Documents and Settings\CLAUDE\Bureau\WinPFind3u\

Microsoft Windows XP Service Pack 2 (Version = 5.1.2600)

Internet Explorer (Version = 7.0.5730.11)

 

383,36 Mb Total Physical Memory | 131,98 Mb Available Physical Memory | 34,43% Memory free

919,23 Mb Paging File | 422,07 Mb Available in Paging File | 45,92% Paging File free

Paging file location(s): C:\pagefile.sys 576 1152;

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 145,14 Gb Total Space | 92,00 Gb Free Space | 63,38% Space Free

D: Drive not present or media not loaded

E: Drive not present or media not loaded

F: Drive not present or media not loaded

 

Computer Name: PAPYCLAUDE

Current User Name: CLAUDE

Logged in as Administrator.

Current Boot Mode: Normal

 

 

[Processes - Non-Microsoft Only]

aolacsd.exe -> %CommonProgramFiles%\AOL\ACS\AOLacsd.exe -> AOL LLC [Ver = 4.6.1.2 | Size = 46640 bytes | Modified Date = 23/10/2006 14:50:36 | Attr = R ]

aolsoftware.exe -> %CommonProgramFiles%\AOL\1164910896\ee\AOLSoftware.exe -> America Online, Inc. [Ver = 1.5.6.1 | Size = 50736 bytes | Modified Date = 17/11/2006 15:16:58 | Attr = ]

aoltray.exe -> %ProgramFiles%\AOL 9.0\aoltray.exe -> America Online, Inc. [Ver = 9.00.001 | Size = 156784 bytes | Modified Date = 10/05/2004 22:49:40 | Attr = H ]

ati2evxx.exe -> %System32%\ati2evxx.exe -> ATI Technologies Inc. [Ver = 6.14.10.4117 | Size = 376832 bytes | Modified Date = 29/06/2005 04:55:38 | Attr = ]

ati2evxx.exe -> %System32%\ati2evxx.exe -> ATI Technologies Inc. [Ver = 6.14.10.4117 | Size = 376832 bytes | Modified Date = 29/06/2005 04:55:38 | Attr = ]

calcheck.exe -> %ProgramFiles%\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe -> Ulead Systems, Inc. [Ver = 4, 0, 0, 0 | Size = 69632 bytes | Modified Date = 03/05/2002 12:05:26 | Attr = ]

fameh32.exe -> %ProgramFiles%\Common\FAMEH32.EXE -> F-Secure Corporation [Ver = 6.40.8825 | Size = 335923 bytes | Modified Date = 02/04/2006 03:19:54 | Attr = ]

fch32.exe -> %ProgramFiles%\Common\FCH32.EXE -> F-Secure Corporation [Ver = 6.40.8825 | Size = 127025 bytes | Modified Date = 02/04/2006 03:19:54 | Attr = ]

fsbwsys.exe -> %ProgramFiles%\Pack Securite\361343\Program\fsbwsys.exe -> F-Secure Corp. [Ver = 6.90.881 | Size = 278581 bytes | Modified Date = 09/12/2006 16:51:26 | Attr = ]

fsma32.exe -> %ProgramFiles%\Common\FSMA32.EXE -> F-Secure Corporation [Ver = 6.40.8825 | Size = 106546 bytes | Modified Date = 02/04/2006 03:19:54 | Attr = ]

fsmb32.exe -> %ProgramFiles%\Common\FSMB32.EXE -> F-Secure Corporation [Ver = 6.40.8825 | Size = 229426 bytes | Modified Date = 02/04/2006 03:19:54 | Attr = ]

fspc.exe -> %ProgramFiles%\FSPC\fspc.exe -> F-Secure Corporation [Ver = 7.00.12270 | Size = 450560 bytes | Modified Date = 06/07/2006 18:40:56 | Attr = ]

fspex.exe -> %ProgramFiles%\Pack Securite\361343\Program\fspex.exe -> Pack Securite [Ver = Version 6.3.2 (Build 123R) | Size = 32807 bytes | Modified Date = 09/12/2006 16:51:52 | Attr = ]

googleupdater.exe -> %ProgramFiles%\Google\Google Updater\GoogleUpdater.exe -> Google [Ver = 2.1.919.23132.beta | Size = 124912 bytes | Modified Date = 18/07/2007 04:44:06 | Attr = ]

googleupdaterservice.exe -> %ProgramFiles%\Google\Common\Google Updater\GoogleUpdaterService.exe -> Google [Ver = 2.2.824.5515.beta | Size = 138680 bytes | Modified Date = 14/05/2007 19:50:08 | Attr = ]

hpqimzone.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpqimzone.exe -> Hewlett-Packard Co. [Ver = 053.000.013.000 | Size = 479232 bytes | Modified Date = 12/05/2005 00:33:52 | Attr = ]

hpqste08.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpqste08.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 204800 bytes | Modified Date = 12/05/2005 00:40:38 | Attr = ]

hpqtra08.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpqtra08.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 282624 bytes | Modified Date = 11/05/2005 23:23:26 | Attr = ]

hpzipm12.exe -> %System32%\HPZipm12.exe -> HP [Ver = 10, 1, 1, 5 | Size = 69632 bytes | Modified Date = 03/03/2006 03:49:14 | Attr = ]

monitor.exe -> %ProgramFiles%\Ulead Systems\Ulead Photo Explorer 7.0\Monitor.exe -> Ulead Systems, Inc. [Ver = 1, 0, 0, 1 | Size = 40960 bytes | Modified Date = 11/09/2002 15:00:00 | Attr = ]

neuf_vod.exe -> %ProgramFiles%\neuf_VOD\neuf_VOD.exe -> GLOW ENTERTAINMENT GROUP SA [Ver = 2.0.4 | Size = 389120 bytes | Modified Date = 30/05/2007 12:04:40 | Attr = ]

qttask.exe -> %ProgramFiles%\QuickTime\qttask.exe -> Apple Computer, Inc. [Ver = 6.5 | Size = 98304 bytes | Modified Date = 24/09/2005 07:49:38 | Attr = ]

realsched.exe -> %CommonProgramFiles%\Real\Update_OB\realsched.exe -> RealNetworks, Inc. [Ver = 0.1.0.3725 | Size = 185784 bytes | Modified Date = 12/10/2006 06:11:12 | Attr = ]

schsvr.exe -> %ProgramFiles%\InterVideo\DVD5R\SchSvr.exe -> InterVideo Inc. [Ver = 3.0.88.0 | Size = 147456 bytes | Modified Date = 05/01/2005 20:15:38 | Attr = ]

sdtrayapp.exe -> %ProgramFiles%\Spyware Doctor\SDTrayApp.exe -> PC Tools [Ver = 5.0.1.40 | Size = 1053264 bytes | Modified Date = 12/06/2007 13:19:24 | Attr = ]

servic~1.exe -> %ProgramFiles%\Pack Securite\361343\Program\ServiceWrapper-361343.exe -> Pack Securite [Ver = Version 6.3.2 (Build 123R) | Size = 32807 bytes | Modified Date = 09/12/2006 16:51:52 | Attr = ]

svcntaux.exe -> %ProgramFiles%\Spyware Doctor\svcntaux.exe -> PC Tools [Ver = 5.0.1.22 | Size = 708688 bytes | Modified Date = 12/06/2007 13:27:14 | Attr = ]

swdsvc.exe -> %ProgramFiles%\Spyware Doctor\swdsvc.exe -> PC Tools [Ver = 5.0.1.62 | Size = 1309264 bytes | Modified Date = 12/06/2007 13:27:22 | Attr = ]

wanmpsvc.exe -> %SystemRoot%\wanmpsvc.exe -> America Online, Inc. [Ver = 9, 0, 0, 0 | Size = 65536 bytes | Modified Date = 27/08/2003 10:29:46 | Attr = ]

wincinemamgr.exe -> %ProgramFiles%\InterVideo\Common\Bin\WinCinemaMgr.exe -> InterVideo Inc. [Ver = 1.8.3 | Size = 270336 bytes | Modified Date = 30/12/2004 21:46:12 | Attr = ]

winpfind3u.exe -> %UserDesktop%\WinPFind3u\WinPFind3U.exe -> OldTimer Tools [Ver = 1.0.38.0 | Size = 322048 bytes | Modified Date = 23/06/2007 15:15:54 | Attr = ]

 

[Win32 Services - Non-Microsoft Only]

(AOL ACS) AOL Connectivity Service [Win32_Own | Auto | Running] -> %CommonProgramFiles%\AOL\ACS\AOLacsd.exe -> AOL LLC [Ver = 4.6.1.2 | Size = 46640 bytes | Modified Date = 23/10/2006 14:50:36 | Attr = R ]

(Ati HotKey Poller) Ati HotKey Poller [Win32_Own | Auto | Running] -> %System32%\ati2evxx.exe -> ATI Technologies Inc. [Ver = 6.14.10.4117 | Size = 376832 bytes | Modified Date = 29/06/2005 04:55:38 | Attr = ]

(BackWeb Plug-in - 361343) Pack Sécurité [Win32_Own | Auto | Running] -> %ProgramFiles%\Pack Securite\361343\Program\ServiceWrapper-361343.exe -> Pack Securite [Ver = Version 6.3.2 (Build 123R) | Size = 32807 bytes | Modified Date = 09/12/2006 16:51:52 | Attr = ]

(dmadmin) Service d'administration du Gestionnaire de disque logique [Win32_Shared | On_Demand | Stopped] -> %System32%\dmadmin.exe -> Microsoft Corp., Veritas Software [Ver = 2600.2180.503.0 | Size = 225280 bytes | Modified Date = 05/08/2004 21:00:00 | Attr = ]

(fsbwsys) fsbwsys [Win32_Own | Auto | Running] -> %ProgramFiles%\Pack Securite\361343\Program\fsbwsys.exe -> F-Secure Corp. [Ver = 6.90.881 | Size = 278581 bytes | Modified Date = 09/12/2006 16:51:26 | Attr = ]

(FSMA) FSMA [Win32_Own | Auto | Running] -> %ProgramFiles%\Common\FSMA32.EXE -> F-Secure Corporation [Ver = 6.40.8825 | Size = 106546 bytes | Modified Date = 02/04/2006 03:19:54 | Attr = ]

(gusvc) Google Updater Service [Win32_Own | Auto | Running] -> %ProgramFiles%\Google\Common\Google Updater\GoogleUpdaterService.exe -> Google [Ver = 2.2.824.5515.beta | Size = 138680 bytes | Modified Date = 14/05/2007 19:50:08 | Attr = ]

(Pml Driver HPZ12) Pml Driver HPZ12 [Win32_Own | Unknown | Running] -> -> File not found

(sdAuxService) Spyware Doctor Auxiliary Service [Win32_Own | Auto | Running] -> %ProgramFiles%\Spyware Doctor\svcntaux.exe -> PC Tools [Ver = 5.0.1.22 | Size = 708688 bytes | Modified Date = 12/06/2007 13:27:14 | Attr = ]

(sdCoreService) Spyware Doctor Service [Win32_Own | Auto | Running] -> %ProgramFiles%\Spyware Doctor\swdsvc.exe -> PC Tools [Ver = 5.0.1.62 | Size = 1309264 bytes | Modified Date = 12/06/2007 13:27:22 | Attr = ]

(WANMiniportService) WAN Miniport (ATW) Service [Win32_Own | Auto | Running] -> %SystemRoot%\wanmpsvc.exe -> America Online, Inc. [Ver = 9, 0, 0, 0 | Size = 65536 bytes | Modified Date = 27/08/2003 10:29:46 | Attr = ]

 

[Registry - Non-Microsoft Only]

< Run [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->

Adobe Reader Speed Launcher -> %ProgramFiles%\Adobe\Reader 8.0\Reader\Reader_sl.exe -> Adobe Systems Incorporated [Ver = 8.0.0.0 | Size = 40048 bytes | Modified Date = 11/05/2007 03:06:32 | Attr = ]

EoEngine -> -> File not found

HostManager -> %CommonProgramFiles%\AOL\1164910896\ee\AOLSoftware.exe -> America Online, Inc. [Ver = 1.5.6.1 | Size = 50736 bytes | Modified Date = 17/11/2006 15:16:58 | Attr = ]

neuf_VOD -> %ProgramFiles%\neuf_VOD\neuf_VOD.exe -> GLOW ENTERTAINMENT GROUP SA [Ver = 2.0.4 | Size = 389120 bytes | Modified Date = 30/05/2007 12:04:40 | Attr = ]

NI.UGA6PV_0001_N108M0207 -> %UserDocuments%\Attachmate\install_fr.exe -> Grand Soft Inc. [Ver = 1,3,108,5 | Size = 158744 bytes | Modified Date = 17/07/2007 14:07:40 | Attr = ]

QuickTime Task -> %ProgramFiles%\QuickTime\qttask.exe -> Apple Computer, Inc. [Ver = 6.5 | Size = 98304 bytes | Modified Date = 24/09/2005 07:49:38 | Attr = ]

SDTray -> %ProgramFiles%\Spyware Doctor\SDTrayApp.exe -> PC Tools [Ver = 5.0.1.40 | Size = 1053264 bytes | Modified Date = 12/06/2007 13:19:24 | Attr = ]

TkBellExe -> %CommonProgramFiles%\Real\Update_OB\realsched.exe -> RealNetworks, Inc. [Ver = 0.1.0.3725 | Size = 185784 bytes | Modified Date = 12/10/2006 06:11:12 | Attr = ]

Ulead Memory Card Detector -> %ProgramFiles%\Ulead Systems\Ulead Photo Explorer 7.0\Monitor.exe -> Ulead Systems, Inc. [Ver = 1, 0, 0, 1 | Size = 40960 bytes | Modified Date = 11/09/2002 15:00:00 | Attr = ]

< OptionalComponents [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\ ->

IMAIL -> Installed = 1 ->

MAPI -> Installed = 1 ->

MSFS -> Installed = 1 ->

< Run [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->

swg -> %ProgramFiles%\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe -> Google Inc. [Ver = 2, 0, 301, 1654 | Size = 68856 bytes | Modified Date = 14/05/2007 19:58:18 | Attr = ]

updateMgr -> %ProgramFiles%\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe -> File not found

< Common Startup > -> C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage ->

%AllUsersStartup%\AOL 9.0 Icône AOL.lnk -> %ProgramFiles%\AOL 9.0\aoltray.exe -> America Online, Inc. [Ver = 9.00.001 | Size = 156784 bytes | Modified Date = 10/05/2004 22:49:40 | Attr = H ]

%AllUsersStartup%\Contrôleur de calendrier Ulead.lnk -> %ProgramFiles%\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe -> Ulead Systems, Inc. [Ver = 4, 0, 0, 0 | Size = 69632 bytes | Modified Date = 03/05/2002 12:05:26 | Attr = ]

%AllUsersStartup%\Démarrage rapide du logiciel HP Image Zone.lnk -> %ProgramFiles%\HP\Digital Imaging\bin\hpqthb08.exe -> Hewlett-Packard Co. [Ver = 053.000.013.000 | Size = 73728 bytes | Modified Date = 12/05/2005 00:49:24 | Attr = ]

%AllUsersStartup%\HP Digital Imaging Monitor.lnk -> %ProgramFiles%\HP\Digital Imaging\bin\hpqtra08.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 282624 bytes | Modified Date = 11/05/2005 23:23:26 | Attr = ]

%AllUsersStartup%\InterVideo Scheduler server.lnk -> %ProgramFiles%\InterVideo\DVD5R\SchSvr.exe -> InterVideo Inc. [Ver = 3.0.88.0 | Size = 147456 bytes | Modified Date = 05/01/2005 20:15:38 | Attr = ]

%AllUsersStartup%\InterVideo WinCinema Manager.lnk -> %ProgramFiles%\InterVideo\Common\Bin\WinCinemaMgr.exe -> InterVideo Inc. [Ver = 1.8.3 | Size = 270336 bytes | Modified Date = 30/12/2004 21:46:12 | Attr = ]

%AllUsersStartup%\Outil de mise à jour Google.lnk -> %ProgramFiles%\Google\Google Updater\GoogleUpdater.exe -> Google [Ver = 2.1.919.23132.beta | Size = 124912 bytes | Modified Date = 18/07/2007 04:44:06 | Attr = ]

%AllUsersStartup%\Pack Sécurité.lnk -> %ProgramFiles%\Pack Securite\361343\Program\fspex.exe -> Pack Securite [Ver = Version 6.3.2 (Build 123R) | Size = 32807 bytes | Modified Date = 09/12/2006 16:51:52 | Attr = ]

< ICQ Agent [HKCU] > -> HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps\ ->

HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps\ -> ->

< SecurityProviders [HKLM] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders ->

< Winlogon settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon ->

< Winlogon settings [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon ->

< Winlogon\Notify settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ ->

AtiExtEvent -> %System32%\ati2evxx.dll -> ATI Technologies Inc. [Ver = 6.14.10.4117 | Size = 46080 bytes | Modified Date = 29/06/2005 04:56:48 | Attr = ]

< CurrentVersion Policy Settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Ext\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Ext\CLSID\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Ext\CLSID\\{17492023-C23A-453E-A040-C7C580BBF700} -> 1 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{BDEADF00-C265-11D0-BCED-00A0C90AB50F} -> 1 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} -> 1073741857 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{0DF44EAA-FF21-4412-828E-260A8728E7F1} -> 32 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\dontdisplaylastusername -> 0 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticecaption -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticetext -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\shutdownwithoutlogon -> 1 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\undockwithoutlogon -> 1 ->

< CurrentVersion Policy Settings [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ ->

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> ->

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop\ -> ->

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> ->

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 ->

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\ -> ->

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\ -> ->

< HOSTS File > (790 bytes) -> C:\WINDOWS\System32\drivers\etc\Hosts ->

127.0.0.1 localhost -> ->

< Internet Explorer Settings > -> ->

HKLM: Default_Page_URL -> http://www.microsoft.com/isapi/redir.dll?p...&ar=msnhome ->

HKLM: Main\\Default_Search_URL -> http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch ->

HKLM: Local Page -> C:\windows\system32\blank.htm ->

HKLM: Search Page -> http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch ->

HKLM: Start Page -> http://www.microsoft.com/isapi/redir.dll?p...ER}&ar=home ->

HKLM: CustomizeSearch -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm ->

HKLM: Search\\Default_Search_URL -> http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch ->

HKLM: SearchAssistant -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm ->

HKCU: Default_Search_URL -> http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch ->

HKCU: Local Page -> C:\windows\system32\blank.htm ->

HKCU: Search Page -> http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch ->

HKCU: Start Page -> http://www.neufportail.fr/ ->

HKCU: Search\\Default_Search_URL -> http://www.google.com/ie ->

HKCU: ProxyEnable -> 0 ->

< BHO's > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ ->

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [HKLM] -> %CommonProgramFiles%\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [Aide pour le lien d'Adobe PDF Reader] -> Adobe Systems Incorporated [Ver = 8.0.0.2006102200 | Size = 62080 bytes | Modified Date = 22/10/2006 23:08:42 | Attr = ]

{559A0C27-B847-4e06-A81F-0E1352272DA6} [HKLM] -> %ProgramFiles%\Gratwee Toolbar\tbu1B\gratwee.dll [XBTP06668 Class] -> IE Toolbar [Ver = 1, 0, 0, 4 | Size = 536576 bytes | Modified Date = 05/09/2005 18:25:40 | Attr = ]

{64F56FC1-1272-44CD-BA6E-39723696E350} [HKLM] -> %ProgramFiles%\eoRezo\EoAdv\EoRezoBHO.dll [EoBho Class] -> File not found

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [HKLM] -> %ProgramFiles%\Java\jre1.6.0_01\bin\ssv.dll [sSVHelper Class] -> Sun Microsystems, Inc. [Ver = 6.0.10.6 | Size = 501400 bytes | Modified Date = 14/03/2007 03:43:40 | Attr = ]

{988B07F5-7392-455A-8A1F-64935CB8B6ED} [HKLM] -> %ProgramFiles%\BarreConfCMCIC\TAPbar.dll [bHO Barre de Confiance CM-CIC] -> Euro-Information [Ver = 2.1 | Size = 221184 bytes | Modified Date = 12/04/2007 12:26:08 | Attr = ]

{AA58ED58-01DD-4d91-8333-CF10577473F7} [HKLM] -> %ProgramFiles%\Google\googletoolbar1.dll [Google Toolbar Helper] -> Google Inc. [Ver = 4, 0, 1601, 4978 | Size = 2436160 bytes | Modified Date = 18/07/2007 04:44:44 | Attr = R ]

< Internet Explorer ToolBars [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar ->

{01E69986-A054-4C52-ABE8-EF63DF1C5211} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found] -> File not found

{2318C2B1-4965-11d4-9B18-009027A5CD4F} [HKLM] -> %ProgramFiles%\Google\googletoolbar1.dll [&Google] -> Google Inc. [Ver = 4, 0, 1601, 4978 | Size = 2436160 bytes | Modified Date = 18/07/2007 04:44:44 | Attr = R ]

{4982D40A-C53B-4615-B15B-B5B5E98D167C} [HKLM] -> %ProgramFiles%\AOL Toolbar\toolbar.dll [AOL Toolbar] -> IE Toolbar [Ver = 1, 0, 0, 4 | Size = 385024 bytes | Modified Date = 22/03/2004 15:58:04 | Attr = ]

{55BDF3B0-C0A8-481A-B8A6-01CD2BE0F3FD} [HKLM] -> %ProgramFiles%\BarreConfCMCIC\TAPbar.dll [barre de confiance CM-CIC] -> Euro-Information [Ver = 2.1 | Size = 221184 bytes | Modified Date = 12/04/2007 12:26:08 | Attr = ]

< Internet Explorer ToolBars [HKCU] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ ->

ShellBrowser\\{01E69986-A054-4C52-ABE8-EF63DF1C5211} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found] -> File not found

ShellBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} [HKLM] -> %ProgramFiles%\Google\googletoolbar1.dll [&Google] -> Google Inc. [Ver = 4, 0, 1601, 4978 | Size = 2436160 bytes | Modified Date = 18/07/2007 04:44:44 | Attr = R ]

WebBrowser\\{01E69986-A054-4C52-ABE8-EF63DF1C5211} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found] -> File not found

WebBrowser\\{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found] -> File not found

WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} [HKLM] -> %ProgramFiles%\Google\googletoolbar1.dll [&Google] -> Google Inc. [Ver = 4, 0, 1601, 4978 | Size = 2436160 bytes | Modified Date = 18/07/2007 04:44:44 | Attr = R ]

WebBrowser\\{4982D40A-C53B-4615-B15B-B5B5E98D167C} [HKLM] -> %ProgramFiles%\AOL Toolbar\toolbar.dll [AOL Toolbar] -> IE Toolbar [Ver = 1, 0, 0, 4 | Size = 385024 bytes | Modified Date = 22/03/2004 15:58:04 | Attr = ]

WebBrowser\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} [HKLM] -> Reg Data - Key not found [Yahoo! Toolbar avec bloqueur de fenêtres pop-up] -> File not found

< Internet Explorer Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ ->

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} [HKLM] -> %ProgramFiles%\Java\jre1.6.0_01\bin\npjpi160_01.dll [MenuText: Console Java (Sun)] -> Sun Microsystems, Inc. [Ver = 6.0.10.6 | Size = 132760 bytes | Modified Date = 14/03/2007 03:43:42 | Attr = ]

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} [HKCU] -> %ProgramFiles%\Java\jre1.6.0_01\bin\ssv.dll [MenuText: Console Java (Sun)] -> Sun Microsystems, Inc. [Ver = 6.0.10.6 | Size = 501400 bytes | Modified Date = 14/03/2007 03:43:40 | Attr = ]

{200DB664-75B5-47c0-8B45-A44ACCF73C00} -> Reg Data - Value does not exist [buttonText: Parental...] -> File not found

{200DB664-75B5-47c0-8B45-A44ACCF73F01} [HKLM] -> %ProgramFiles%\FSPC\fspcmsie.dll [MenuText: Parental...] -> F-Secure Corporation [Ver = 7.00.12270 | Size = 106496 bytes | Modified Date = 06/07/2006 18:40:56 | Attr = ]

{4982D40A-C53B-4615-B15B-B5B5E98D167C} -> Reg Data - Value does not exist [buttonText: AOL Toolbar] -> File not found

{CD67F990-D8E9-11d2-98FE-00C0F0318AFE} -> Reg Data - Value does not exist [buttonText: Real.com] -> File not found

{e2e2dd38-d088-4134-82b7-f2ba38496583} [HKLM] -> Reg Data - Key not found [MenuText: @xpsp3res.dll,-20001] -> File not found

< DNS Name Servers [HKLM] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ ->

{2977B107-0E27-4B35-B298-25BAFB42CB0F} -> (Marvell Yukon 88E8001/8003/8010 PCI Gigabit Ethernet Controller) ->

{A2539D1D-F5D4-4BFD-8E03-EE169A44D65E} -> (Carte réseau 1394) ->

< Winsock2 Catalogs [HKLM] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\ ->

Protocol_Catalog9\Catalog_Entries0000000001 -> %ProgramFiles%\FSPS\program\fslsp.dll -> F-Secure Corporation [Ver = 2.00.136 | Size = 159744 bytes | Modified Date = 07/06/2006 11:03:10 | Attr = ]

Protocol_Catalog9\Catalog_Entries0000000002 -> %ProgramFiles%\FSPS\program\fslsp.dll -> F-Secure Corporation [Ver = 2.00.136 | Size = 159744 bytes | Modified Date = 07/06/2006 11:03:10 | Attr = ]

Protocol_Catalog9\Catalog_Entries0000000003 -> %ProgramFiles%\FSPS\program\fslsp.dll -> F-Secure Corporation [Ver = 2.00.136 | Size = 159744 bytes | Modified Date = 07/06/2006 11:03:10 | Attr = ]

Protocol_Catalog9\Catalog_Entries0000000004 -> %ProgramFiles%\FSPS\program\fslsp.dll -> F-Secure Corporation [Ver = 2.00.136 | Size = 159744 bytes | Modified Date = 07/06/2006 11:03:10 | Attr = ]

Protocol_Catalog9\Catalog_Entries0000000005 -> %ProgramFiles%\FSPS\program\fslsp.dll -> F-Secure Corporation [Ver = 2.00.136 | Size = 159744 bytes | Modified Date = 07/06/2006 11:03:10 | Attr = ]

Protocol_Catalog9\Catalog_Entries0000000006 -> %ProgramFiles%\FSPS\program\fslsp.dll -> F-Secure Corporation [Ver = 2.00.136 | Size = 159744 bytes | Modified Date = 07/06/2006 11:03:10 | Attr = ]

Protocol_Catalog9\Catalog_Entries0000000007 -> %ProgramFiles%\FSPS\program\fslsp.dll -> F-Secure Corporation [Ver = 2.00.136 | Size = 159744 bytes | Modified Date = 07/06/2006 11:03:10 | Attr = ]

Protocol_Catalog9\Catalog_Entries0000000008 -> %ProgramFiles%\FSPS\program\fslsp.dll -> F-Secure Corporation [Ver = 2.00.136 | Size = 159744 bytes | Modified Date = 07/06/2006 11:03:10 | Attr = ]

Protocol_Catalog9\Catalog_Entries0000000009 -> %ProgramFiles%\FSPS\program\fslsp.dll -> F-Secure Corporation [Ver = 2.00.136 | Size = 159744 bytes | Modified Date = 07/06/2006 11:03:10 | Attr = ]

Protocol_Catalog9\Catalog_Entries0000000010 -> %ProgramFiles%\FSPS\program\fslsp.dll -> F-Secure Corporation [Ver = 2.00.136 | Size = 159744 bytes | Modified Date = 07/06/2006 11:03:10 | Attr = ]

Protocol_Catalog9\Catalog_Entries0000000011 -> %ProgramFiles%\FSPS\program\fslsp.dll -> F-Secure Corporation [Ver = 2.00.136 | Size = 159744 bytes | Modified Date = 07/06/2006 11:03:10 | Attr = ]

Protocol_Catalog9\Catalog_Entries0000000012 -> %ProgramFiles%\FSPS\program\fslsp.dll -> F-Secure Corporation [Ver = 2.00.136 | Size = 159744 bytes | Modified Date = 07/06/2006 11:03:10 | Attr = ]

Protocol_Catalog9\Catalog_Entries0000000013 -> %ProgramFiles%\FSPS\program\fslsp.dll -> F-Secure Corporation [Ver = 2.00.136 | Size = 159744 bytes | Modified Date = 07/06/2006 11:03:10 | Attr = ]

Protocol_Catalog9\Catalog_Entries0000000014 -> %ProgramFiles%\FSPS\program\fslsp.dll -> F-Secure Corporation [Ver = 2.00.136 | Size = 159744 bytes | Modified Date = 07/06/2006 11:03:10 | Attr = ]

Protocol_Catalog9\Catalog_Entries0000000015 -> %ProgramFiles%\FSPS\program\fslsp.dll -> F-Secure Corporation [Ver = 2.00.136 | Size = 159744 bytes | Modified Date = 07/06/2006 11:03:10 | Attr = ]

Protocol_Catalog9\Catalog_Entries0000000033 -> %ProgramFiles%\FSPS\program\fslsp.dll -> F-Secure Corporation [Ver = 2.00.136 | Size = 159744 bytes | Modified Date = 07/06/2006 11:03:10 | Attr = ]

< Protocol Handlers [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ ->

ipp -> Reg Data - Key not found -> File not found

msdaipp -> Reg Data - Key not found -> File not found

< Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ ->

{17492023-C23A-453E-A040-C7C580BBF700} -> Windows Genuine Advantage Validation Tool - CodeBase = http://go.microsoft.com/fwlink/?linkid=39204 ->

{26FCCDF9-A7E1-452A-A73D-7BF7B4D0BA6C} -> AOL Pictures Uploader Class - CodeBase = http://o.aolcdn.com/pictures/ap/Resources/...ns.10.6.0.6.cab ->

{6414512B-B978-451D-A0D8-FCFDF33E833C} -> WUWebControl Class - CodeBase = http://update.microsoft.com/windowsupdate/...b?1135349723546 ->

{8AD9C840-044E-11D1-B3E9-00805F499D93} -> Java Plug-in 1.6.0_01 - CodeBase = http://javadl-esd.sun.com/update/1.6.0/jin...ows-i586-jc.cab ->

{8FFBE65D-2C9C-4669-84BD-5829DC0B603C} -> - CodeBase = http://fpdownload.macromedia.com/get/flash...t/ultrashim.cab ->

{9D190AE6-C81E-4039-8061-978EBAD10073} -> F-Secure Online Scanner 3.0 - CodeBase = http://www.neufsecurite.com/Ols/fscax.cab ->

{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} -> Java Plug-in 1.6.0_01 - CodeBase = http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab ->

{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} -> Java Plug-in 1.6.0_01 - CodeBase = http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab ->

{D27CDB6E-AE6D-11CF-96B8-444553540000} -> - CodeBase = http://download.macromedia.com/pub/shockwa...ash/swflash.cab ->

 

 

[Registry - Additional Scans - Non-Microsoft Only]

< Security Settings > -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirstRunDisabled -> 1 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\AntiVirusDisableNotify -> 1 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirewallDisableNotify -> 1 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\UpdatesDisableNotify -> 1 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\AntiVirusOverride -> 1 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirewallOverride -> 0 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\Type -> 32 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\Start -> 3 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\ErrorControl -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\ImagePath -> %SystemRoot%\system32\svchost.exe -k netsvcs ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\DisplayName -> Service de transfert intelligent en arrière-plan ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\DependOnService -> RpcSs; ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\DependOnGroup -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\ObjectName -> LocalSystem ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\Description -> Transfère des données entre les clients et les serveurs en tâche de fond. Si le service BITS est désactivé, les fonctionnalités telles que Windows Update ne fonctionneront pas correctement. ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\FailureActions ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Parameters\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Parameters\\ServiceDll -> C:\WINDOWS\system32\qmgr.dll ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Security\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Security\\Security ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\ -> Root\LEGACY_BITS00 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\\Count -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\\NextInstance -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DependOnGroup -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DependOnService -> Netman;WinMgmt; ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Description -> Assure la traduction d'adresses de réseau, l'adressage, les services de résolution de noms et/ou les services de prévention d'intrusion pour un réseau de petite entreprise ou un réseau domestique. ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DisplayName -> Pare-feu Windows / Partage de connexion Internet ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ErrorControl -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ImagePath -> %SystemRoot%\system32\svchost.exe -k netsvcs ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ObjectName -> LocalSystem ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Start -> 2 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Type -> 32 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch\\Epoch -> 6493 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\\ServiceDll -> %SystemRoot%\System32\ipnathlp.dll ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\%windir%\system32\sessmgr.exe -> %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe -> C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe:*:Enabled:AOL ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe -> C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe:*:Enabled:AOL ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\AOL 9.0\waol.exe -> C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\%windir%\Network Diagnostic\xpnetdiag.exe -> %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\Pack Securite\361343\Program\fspex.exe -> C:\Program Files\Pack Securite\361343\Program\fspex.exe:*:Enabled:Pack Sécurité ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\EnableFirewall -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\DoNotAllowExceptions -> 0 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\DisableNotifications -> 0 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\%windir%\system32\sessmgr.exe -> %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe -> C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe:*:Enabled:AOL ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe -> C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe:*:Enabled:AOL ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\AOL 9.0\waol.exe -> C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe -> C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe -> C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe -> C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hposid01.exe -> C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe -> C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe -> C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe -> C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe -> C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe -> C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe -> C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe -> C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\eMule\emule.exe -> C:\Program Files\eMule\emule.exe:*:Disabled:eMule ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Orb Networks\Orb\bin\Orb.exe -> C:\Program Files\Orb Networks\Orb\bin\Orb.exe:*:Disabled:Orb ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Orb Networks\Orb\bin\OrbStreamerClient.exe -> C:\Program Files\Orb Networks\Orb\bin\OrbStreamerClient.exe:*:Disabled:Orb Stream Client ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Orb Networks\Orb\bin\OrbChannelScan.exe -> C:\Program Files\Orb Networks\Orb\bin\OrbChannelScan.exe:*:Disabled:OrbChannelScan ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Orb Networks\Orb\bin\OrbTray.exe -> C:\Program Files\Orb Networks\Orb\bin\OrbTray.exe:*:Disabled:OrbTray ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Orb Networks\Orb\bin\xmltv.exe -> C:\Program Files\Orb Networks\Orb\bin\xmltv.exe:*:Disabled:OrbTVGuide ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\%windir%\Network Diagnostic\xpnetdiag.exe -> %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Pack Securite\361343\Program\fspex.exe -> C:\Program Files\Pack Securite\361343\Program\fspex.exe:*:Enabled:Pack Sécurité ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Real\RealPlayer\realplay.exe -> C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\BitComet\BitComet.exe -> C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Messenger\msmsgs.exe -> C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\1900:UDP -> 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\2869:TCP -> 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\23005:TCP -> 23005:TCP:*:Enabled:BitComet 23005 TCP ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\23005:UDP -> 23005:UDP:*:Enabled:BitComet 23005 UDP ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\\ServiceUpgrade -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\InterfacesUnfirewalledAtUpdate\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\InterfacesUnfirewalledAtUpdate\\All -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\ -> Root\LEGACY_SHAREDACCESS00 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\\Count -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\\NextInstance -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Type -> 32 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Start -> 2 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ErrorControl -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ImagePath -> %systemroot%\system32\svchost.exe -k netsvcs ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\DisplayName -> Mises à jour automatiques ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ObjectName -> LocalSystem ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Description -> Active le téléchargement et l'installation des mises à jour Windows. Si ce service est désactivé, cet ordinateur ne pourra pas utiliser la fonctionnalité des mises à jour automatiques ou le site Windows Update. ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Parameters\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Parameters\\ServiceDll -> C:\WINDOWS\system32\wuauserv.dll ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Security\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Security\\Security ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\ -> Root\LEGACY_WUAUSERV00 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\\Count -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\\NextInstance -> 1 ->

< Uninstall List > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ ->

{03B1B42B-F6DE-41d9-8CFF-DC44E895C7A7} -> PhotoGallery ->

{0611BD4E-4FE4-4a62-B0C0-18A4CC463428} -> CP_Package_Variety1 ->

{09984AEC-6B9F-4ca7-B78D-CB44D4771DA3} -> Destinations ->

{0B33B738-AD79-4E32-90C5-E67BFB10BBFF} -> AiO_Scan ->

{0BEDBD4E-2D34-47B5-9973-57E62B29307C} -> ATI Control Panel ->

{15EE79F4-4ED1-4267-9B0F-351009325D7D} -> HP Software Update ->

{172975EB-9465-4861-95B5-C7BB6D3DE62A} -> DocumentViewer ->

{18D10072035C4515918F7E37EAFAACFC} -> AutoUpdate ->

{193DB24F-9A66-4896-8404-22D53EA89075} -> 1400_Help ->

{1C139D7D-9FEA-468d-A9C8-2A6E3BDE564A} -> CP_Package_Variety3 ->

{21DB3D90-D816-4092-A260-CA3F6B55A6DD} -> Sonic_PrimoSDK ->

{2318C2B1-4965-11d4-9B18-009027A5CD4F} -> Google Toolbar for Internet Explorer ->

{23A7B376-BBEC-4e76-BBD7-0F155E70D74B} -> CP_Panorama1Config ->

{266959FA-0AEE-41D0-A88E-F1EAC10A7C14} -> 1400 ->

{2CADCEAB-D5DA-44D6-B5FC-7DEE87AB3C0C} -> Unload ->

{30C19FF2-7FBA-4d09-B9DE-1659977F64F6} -> TrayApp ->

{3248F0A8-6813-11D6-A77B-00B0D0160010} -> Java SE Runtime Environment 6 Update 1 ->

{32BDCCB8-9DC8-496d-9DB1-F77510775BDB} -> InstantShareDevices ->

{350C940c-3D7C-4EE8-BAA9-00BCB3D54227} -> WebFldrs XP ->

{35B8CC58-F128-4169-82EB-0E6CB0C3AFE6} -> ArcSoft PhotoImpression ->

{36E47DA1-10E1-45d9-8B19-14D19607CDCF} -> CP_CalendarTemplates1 ->

{37477865-A3F1-4772-AD43-AAFC6BCFF99F} -> MSXML 4.0 SP2 (KB927978) ->

{374F03BB-9C09-4DB3-9C9B-C71E63292950} -> Google Earth ->

{53EE9E42-CECB-4C92-BF76-9CA65DAF8F1C} -> FullDPAppQFolder ->

{5421155F-B033-49DB-9B33-8F80F233D4D5} -> GdiplusUpgrade ->

{54E3707F-808E-4fd4-95C9-15D1AB077E5D} -> NewCopy ->

{56EE8B17-8274-418d-89AC-C057C5DB251E} -> RandMap ->

{56F8AFC3-FA98-4ff1-9673-8A026CBF85BE} -> WebReg ->

{5A01C58E-B0EC-49b9-AD71-7C0468688087} -> CP_Package_Basic1 ->

{5B622B7A-60FB-4630-B11D-F121D20BCCD6} -> MarketResearch ->

{5B79CFD1-6845-4158-9D7D-6BE89DF2C135} -> HP PSC & OfficeJet 5.3.B ->

{5F26311C-B135-4F7F-B11E-8E650F83651E} -> DeviceFunctionQFolder ->

{63569CE9-FA00-469C-AF5C-E5D4D93ACF91} -> Windows Genuine Advantage v1.3.0254.0 ->

{66BA8C26-AFE4-4408-807B-43E76B57EF53} -> SkinsHP1 ->

{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8} -> eSupportQFolder ->

{6994491D-D491-48F1-AE1F-E179C1FFFC2F} -> HP Photosmart Essential ->

{6BB6627C-694F-4FDC-A3E5-C7F4BED4C724} -> DocProc ->

{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15} -> CustomerResearchQFolder ->

{76EFFC7C-17A6-479D-9E47-8E658C1695AE} -> Utilitaire de sauvegarde Windows ->

{7850A6D2-CBEA-4728-9877-F1BEDEA9F619} -> AiOSoftware ->

{7B63B2922B174135AFC0E1377DD81EC2} -> DivX Codec ->

{7C03270C-4FAB-4F5C-B10D-52FEDA190790} -> DocumentViewerQFolder ->

{7C6D8763-EEB7-433E-A75E-2AB44892FCA2} -> Ulead Photo Explorer 7.0 SE Platinum ->

{7C9B95B7-B598-4398-B30F-7F6827192E6C} -> ProductContext ->

{7E27304E-BAA2-4d90-A34E-76641FAFABB4} -> CP_AtenaShokunin1Config ->

{8ADFC4160D694100B5B8A22DE9DCABD9} -> DivX Player ->

{8AEEE6D6-C95D-465A-B8D3-B7AE2FA7B8B4} -> InterVideo Launcher ->

{9012040C-6000-11D3-8CFE-0050048383C9} -> Microsoft Office XP Standard ->

{90AF040C-6000-11D3-8CFE-0150048383C9} -> Microsoft Office PowerPoint Viewer 2003 ->

{923A7F5A-1E8C-4FBE-8DF6-85940A60A79F} -> Readme ->

{9A394342-4A68-4EBA-85A6-55B559F4E700} -> Microsoft .NET Framework 1.1 French Language Pack ->

{9C650676-CDDB-42C0-8D11-3EEB7F791F99} -> Kit d'installation ->

{A195B13E-A5E3-4BAF-A995-7F70F445CD06} -> ScannerCopy ->

{A36BE275-BD22-406C-8D2D-ED99F9E6C0B4} -> IKEA HomePlanner Kitchen ->

{A5BB5365-EFB4-44c3-A7E2-EB59B7EFD23D} -> CueTour ->

{AB5D51AE-EBC3-438D-872C-705C7C2084B0} -> DeviceManagementQFolder ->

{AC76BA86-7AD7-1036-7B44-A81000000003} -> Adobe Reader 8.1.0 - Français ->

{B13A7C41581B411290FBC0395694E2A9} -> DivX Converter ->

{B4D279F1-4309-49cc-A4B5-3A0D2E59C7B5} -> PanoStandAlone ->

{B7050CBDB2504B34BC2A9CA0A692CC29} -> DivX Web Player ->

{B824B5C9-849F-4b9e-9EA7-6FD8CD8116DA} -> CP_Package_Variety2 ->

{B996AE66-10DB-4ac5-B151-E8B4BFBC42FC} -> BufferChm ->

{BBC0D330-C37B-4472-BFB9-AA217CF0C95F} -> Ulead Photo Express 4.0 SE ->

{C506A18C-1469-4678-B094-F4EC9DAE6DB7} -> Scan ->

{C510CA36-98D6-4F07-8AFF-81E7399A075B} -> 1400Trb ->

{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} -> Microsoft .NET Framework 1.1 ->

{CE24344F-DFD8-40C8-8FD8-C9740B5F25AC} -> Fax ->

{D050D7362D214723AD585B541FFB6C11} -> DivX Content Uploader ->

{DBEA1034-5882-4A88-8033-81C4EF0CFA29} -> Google Toolbar for Internet Explorer ->

{DEF2E5A3-0317-4822-B930-8B721EB483E4} -> ArcSoft VideoImpression 1.6 ->

{E3436EE2-D5CB-4249-840B-3A0140CC34C3} -> Classic PhoneTools ->

{E3F90083-80D4-4b5a-87C7-E97E12F5516D} -> HPProductAssistant ->

{E5431FB5-B3EB-46C8-8275-F6447131C98A} -> Norton™ Security Scan ->

{E85397AD-D60E-4141-82E6-FAA312A09271} -> Dual Mode Camera (8008 VGA) ->

{EA103B64-C0E4-4C0E-A506-751590E1653D} -> SolutionCenter ->

{F4C2E5F5-2970-45f4-ABD3-C180C4D961C4} -> Status ->

{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F} -> Extension HighMAT pour l'Assistant Graver un CD de Microsoft Windows XP ->

Adobe Flash Player ActiveX -> Adobe Flash Player ActiveX ->

AOL Pictures -> Plug-in AOL Photos (version 10.6.0.6) ->

AOL Toolbar -> AOL Toolbar ->

AOL YGP Screensaver -> Ecran de veille AOL Photos ->

AOLCoach fr -> AOL Coach Version 1.0(Build:20040229.1 fr) ->

AOLSAV -> AOL Auto-diagnostic ->

ATI Display Driver -> ATI Display Driver ->

BackWeb-361343 Uninstaller -> Contrôle Parental ->

CNXT_MODEM_PCI_VEN_14F1&DEV_2F00&SUBSYS_200414F1 -> SoftK56 Data Fax Voice Speakerphone CARP ->

EcoLotofoot Shareware_is1 -> EcoLotoFoot ->

EuroMillions Expert_is1 -> EuroMillions Expert 5.36 ->

Google Updater -> Outil de mise à jour Google ->

HijackThis -> HijackThis 1.99.1 ->

HP Document Viewer -> HP Document Viewer 5.3 ->

HP Imaging Device Functions -> HP Imaging Device Functions 5.3 ->

HP Photo & Imaging -> HP Image Zone 5.3 ->

HP Solution Center & Imaging Support Tools -> HP Solution Center & Imaging Support Tools 5.3 ->

HPExtendedCapabilities -> HP Extended Capabilities 5.3 ->

IDNMitigationAPIs -> Microsoft Internationalized Domain Names Mitigation APIs ->

ie7 -> Windows Internet Explorer 7 ->

IExplorer Security Plug-in -> IExplorer Security Plug-in ->

Internet Explorer Secure Bar -> Internet Explorer Secure Bar ->

KB835221WXP -> High Definition Audio Driver Package - KB835221 ->

KB867282 -> Correctif Windows XP - KB867282 ->

KB873333 -> Correctif Windows XP - KB873333 ->

KB873339 -> Correctif Windows XP - KB873339 ->

KB883939 -> Mise à jour de sécurité pour Windows XP (KB883939) ->

KB884883 -> Correctif Windows XP - KB884883 ->

KB885222 -> Correctif Windows XP - KB885222 ->

KB885250 -> Correctif Windows XP - KB885250 ->

KB885295 -> Correctif Windows XP - KB885295 ->

KB885835 -> Correctif Windows XP - KB885835 ->

KB885836 -> Correctif Windows XP - KB885836 ->

KB886185 -> Correctif Windows XP - KB886185 ->

KB886716 -> Correctif Windows XP - KB886716 ->

KB887472 -> Correctif Windows XP - KB887472 ->

KB887742 -> Correctif Windows XP - KB887742 ->

KB887797 -> Correctif Windows XP - KB887797 ->

KB888113 -> Correctif Windows XP - KB888113 ->

KB888302 -> Correctif Windows XP - KB888302 ->

KB889016 -> Correctif Windows XP - KB889016 ->

KB889527 -> Correctif pour Windows XP (KB889527) ->

KB890046 -> Mise à jour de sécurité pour Windows XP (KB890046) ->

KB890047 -> Correctif Windows XP - KB890047 ->

KB890175 -> Correctif Windows XP - KB890175 ->

KB890859 -> Correctif Windows XP - KB890859 ->

KB890923 -> Correctif Windows XP - KB890923 ->

KB891781 -> Correctif Windows XP - KB891781 ->

KB893066 -> Mise à jour de sécurité pour Windows XP (KB893066) ->

KB893086 -> Correctif Windows XP - KB893086 ->

KB893357 -> Correctif pour Windows XP (KB893357) ->

KB893756 -> Mise à jour de sécurité pour Windows XP (KB893756) ->

KB893803v2 -> Windows Installer 3.1 (KB893803) ->

KB894391 -> Mise à jour pour Windows XP (KB894391) ->

KB896358 -> Mise à jour de sécurité pour Windows XP (KB896358) ->

KB896422 -> Mise à jour de sécurité pour Windows XP (KB896422) ->

KB896423 -> Mise à jour de sécurité pour Windows XP (KB896423) ->

KB896424 -> Mise à jour de sécurité pour Windows XP (KB896424) ->

KB896428 -> Mise à jour de sécurité pour Windows XP (KB896428) ->

KB896626 -> Correctif Windows XP - KB896626 ->

KB896688 -> Mise à jour de sécurité pour Windows XP (KB896688) ->

KB896727 -> Mise à jour pour Windows XP (KB896727) ->

KB898461 -> Mise à jour pour Windows XP (KB898461) ->

KB899587 -> Mise à jour de sécurité pour Windows XP (KB899587) ->

KB899588 -> Mise à jour de sécurité pour Windows XP (KB899588) ->

KB899591 -> Mise à jour de sécurité pour Windows XP (KB899591) ->

KB900485 -> Mise à jour pour Windows XP (KB900485) ->

KB900725 -> Mise à jour de sécurité pour Windows XP (KB900725) ->

KB900930 -> Mise à jour de sécurité pour Windows XP (KB900930) ->

KB901017 -> Mise à jour de sécurité pour Windows XP (KB901017) ->

KB901214 -> Mise à jour de sécurité pour Windows XP (KB901214) ->

KB902400 -> Mise à jour de sécurité pour Windows XP (KB902400) ->

KB904706 -> Mise à jour de sécurité pour Windows XP (KB904706) ->

KB904942 -> Mise à jour pour Windows XP (KB904942) ->

KB905414 -> Mise à jour de sécurité pour Windows XP (KB905414) ->

KB905749 -> Mise à jour de sécurité pour Windows XP (KB905749) ->

KB905915 -> Mise à jour de sécurité pour Windows XP (KB905915) ->

KB908519 -> Mise à jour de sécurité pour Windows XP (KB908519) ->

KB908531 -> Mise à jour de sécurité pour Windows XP (KB908531) ->

KB910437 -> Mise à jour pour Windows XP (KB910437) ->

KB911280 -> Mise à jour de sécurité pour Windows XP (KB911280) ->

KB911562 -> Mise à jour de sécurité pour Windows XP (KB911562) ->

KB911564 -> Mise à jour de sécurité pour Lecteur Windows Media (KB911564) ->

KB911565 -> Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565) ->

KB911567 -> Mise à jour de sécurité pour Windows XP (KB911567) ->

KB911927 -> Mise à jour de sécurité pour Windows XP (KB911927) ->

KB912812 -> Mise à jour de sécurité pour Windows XP (KB912812) ->

KB912919 -> Mise à jour de sécurité pour Windows XP (KB912919) ->

KB913446 -> Mise à jour de sécurité pour Windows XP (KB913446) ->

KB913580 -> Mise à jour de sécurité pour Windows XP (KB913580) ->

KB914388 -> Mise à jour de sécurité pour Windows XP (KB914388) ->

KB914389 -> Mise à jour de sécurité pour Windows XP (KB914389) ->

KB914440 -> Correctif pour Windows XP (KB914440) ->

KB915865 -> Hotfix for Windows XP (KB915865) ->

KB916281 -> Mise à jour de sécurité pour Windows XP (KB916281) ->

KB916595 -> Mise à jour pour Windows XP (KB916595) ->

KB917159 -> Mise à jour de sécurité pour Windows XP (KB917159) ->

KB917344 -> Mise à jour de sécurité pour Windows XP (KB917344) ->

KB917422 -> Mise à jour de sécurité pour Windows XP (KB917422) ->

KB917734_WMP10 -> Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734) ->

KB917953 -> Mise à jour de sécurité pour Windows XP (KB917953) ->

KB918118 -> Mise à jour de sécurité pour Windows XP (KB918118) ->

KB918439 -> Mise à jour de sécurité pour Windows XP (KB918439) ->

KB918899 -> Mise à jour de sécurité pour Windows XP (KB918899) ->

KB919007 -> Mise à jour de sécurité pour Windows XP (KB919007) ->

KB920213 -> Mise à jour de sécurité pour Windows XP (KB920213) ->

KB920214 -> Mise à jour de sécurité pour Windows XP (KB920214) ->

KB920670 -> Mise à jour de sécurité pour Windows XP (KB920670) ->

KB920683 -> Mise à jour de sécurité pour Windows XP (KB920683) ->

KB920685 -> Mise à jour de sécurité pour Windows XP (KB920685) ->

KB920872 -> Mise à jour pour Windows XP (KB920872) ->

KB921398 -> Mise à jour de sécurité pour Windows XP (KB921398) ->

KB921883 -> Mise à jour de sécurité pour Windows XP (KB921883) ->

KB922582 -> Mise à jour pour Windows XP (KB922582) ->

KB922616 -> Mise à jour de sécurité pour Windows XP (KB922616) ->

KB922760 -> Mise à jour de sécurité pour Windows XP (KB922760) ->

KB922819 -> Mise à jour de sécurité pour Windows XP (KB922819) ->

KB923191 -> Mise à jour de sécurité pour Windows XP (KB923191) ->

KB923414 -> Mise à jour de sécurité pour Windows XP (KB923414) ->

KB923694 -> Mise à jour de sécurité pour Windows XP (KB923694) ->

KB923980 -> Mise à jour de sécurité pour Windows XP (KB923980) ->

KB924191 -> Mise à jour de sécurité pour Windows XP (KB924191) ->

KB924270 -> Mise à jour de sécurité pour Windows XP (KB924270) ->

KB924496 -> Mise à jour de sécurité pour Windows XP (KB924496) ->

KB924667 -> Mise à jour de sécurité pour Windows XP (KB924667) ->

KB925398_WMP64 -> Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398) ->

KB925486 -> Mise à jour de sécurité pour Windows XP (KB925486) ->

KB925902 -> Mise à jour de sécurité pour Windows XP (KB925902) ->

KB926239 -> Hotfix for Windows XP (KB926239) ->

KB926255 -> Mise à jour de sécurité pour Windows XP (KB926255) ->

KB926436 -> Mise à jour de sécurité pour Windows XP (KB926436) ->

KB927779 -> Mise à jour de sécurité pour Windows XP (KB927779) ->

KB927802 -> Mise à jour de sécurité pour Windows XP (KB927802) ->

KB927891 -> Mise à jour pour Windows XP (KB927891) ->

KB928090-IE7 -> Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090) ->

KB928255 -> Mise à jour de sécurité pour Windows XP (KB928255) ->

KB928843 -> Mise à jour de sécurité pour Windows XP (KB928843) ->

KB929123 -> Mise à jour de sécurité pour Windows XP (KB929123) ->

KB929338 -> Mise à jour pour Windows XP (KB929338) ->

KB929399 -> Hotfix for Windows Media Format 11 SDK (KB929399) ->

KB929969 -> Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969) ->

KB930178 -> Mise à jour de sécurité pour Windows XP (KB930178) ->

KB930916 -> Mise à jour pour Windows XP (KB930916) ->

KB931261 -> Mise à jour de sécurité pour Windows XP (KB931261) ->

KB931768-IE7 -> Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768) ->

KB931784 -> Mise à jour de sécurité pour Windows XP (KB931784) ->

KB931836 -> Mise à jour pour Windows XP (KB931836) ->

KB932168 -> Mise à jour de sécurité pour Windows XP (KB932168) ->

KB933566-IE7 -> Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566) ->

KB935448 -> Correctif pour Windows XP (KB935448) ->

KB935839 -> Mise à jour de sécurité pour Windows XP (KB935839) ->

KB935840 -> Mise à jour de sécurité pour Windows XP (KB935840) ->

KB936357 -> Mise à jour pour Windows XP (KB936357) ->

M928366 -> Microsoft .NET Framework 1.1 Hotfix (KB928366) ->

Messenger Service -> Messenger Service ->

Microsoft .NET Framework 1.1 (1033) -> Microsoft .NET Framework 1.1 ->

Mozilla Firefox (2.0.0.4) -> Mozilla Firefox (2.0.0.4) ->

MSCompPackV1 -> Microsoft Compression Client Pack 1.0 for Windows XP ->

MSNINST -> MSN ->

Neuf_TV_PC -> TV sur PC ->

neuf_VOD -> Désinstallation du Lecteur Neuf VOD ->

NLSDownlevelMapping -> Microsoft National Language Support Downlevel APIs ->

Programme de désinstallation AOL -> AOL - Assistant de désinstallation ->

PronoFoot Expert Plus_is1 -> PronoFoot Expert Plus 2.56 ->

PronoFoot Expert_is1 -> PronoFoot Expert 5.22 ->

QuickTime -> QuickTime ->

Radio Media Player -> Radio Media Player ->

RealAlt_is1 -> Real Alternative 1.46 ->

RealPlayer 6.0 -> RealPlayer ->

Spyware Doctor -> Spyware Doctor 5.0 ->

ST6UNST #1 -> Loto1N2 ->

ST6UNST #2 -> Loto1N2 (C:\Program Files\Loto1N2\) ->

ST6UNST #3 -> Loto1N2 (C:\Program Files\Loto1N2\) #3 ->

StreetPlugin -> Learn2 Player (Uninstall Only) ->

TAPBar -> Barre de confiance CM-CIC ->

U526 PC Assistant_is1 -> U526 PC Assistant V1.2.0 ->

ViewpointMediaPlayer -> Viewpoint Media Player ->

WGA -> Windows Genuine Advantage Validation Tool ->

WgaNotify -> Windows Genuine Advantage Notifications (KB905474) ->

Windows Media Format Runtime -> Windows Media Format 11 runtime ->

Windows Media Player -> Lecteur Windows Media 11 ->

WMFDist11 -> Windows Media Format 11 runtime ->

wmp11 -> Windows Media Player 11 ->

Wudf01000 -> Microsoft User-Mode Driver Framework Feature Pack 1.0 ->

XBTB06668.XBTB06668Toolbar -> Gratwee Toolbar ->

 

[Files/Folders - Created Within 30 days]

Downloads -> %SystemDrive%\Downloads -> [Folder | Created Date = 26/06/2007 16:22:00 | Attr = ]

$NtUninstallKB936357$ -> %SystemRoot%\$NtUninstallKB936357$ -> [Folder | Created Date = 12/07/2007 02:58:55 | Attr = H ]

dsndp202.exe -> %SystemRoot%\dsndp202.exe -> [Ver = 1, 0, 0, 4 | Size = 20480 bytes | Created Date = 27/06/2007 13:45:12 | Attr = ]

pcdlib32.dll -> %SystemRoot%\pcdlib32.dll -> Eastman Kodak [Ver = 3, 0, 0, 0 | Size = 212480 bytes | Created Date = 27/06/2007 13:38:24 | Attr = ]

PI4_setup.ini -> %SystemRoot%\PI4_setup.ini -> [Ver = | Size = 21 bytes | Created Date = 27/06/2007 13:38:24 | Attr = ]

QTFont.for -> %SystemRoot%\QTFont.for -> [Ver = | Size = 1409 bytes | Created Date = 15/07/2007 19:43:41 | Attr = ]

QTFont.qfn -> %SystemRoot%\QTFont.qfn -> [Ver = | Size = 54156 bytes | Created Date = 15/07/2007 19:43:41 | Attr = H ]

sndp202.ini -> %SystemRoot%\sndp202.ini -> [Ver = | Size = 15522 bytes | Created Date = 27/06/2007 13:45:13 | Attr = ]

sndp202.src -> %SystemRoot%\sndp202.src -> [Ver = | Size = 13046 bytes | Created Date = 27/06/2007 13:45:13 | Attr = ]

Ulead32.ini -> %SystemRoot%\Ulead32.ini -> [Ver = | Size = 324 bytes | Created Date = 27/06/2007 13:26:34 | Attr = ]

videoimp.ini -> %SystemRoot%\videoimp.ini -> [Ver = | Size = 433 bytes | Created Date = 27/06/2007 13:40:44 | Attr = ]

VI_setup.ini -> %SystemRoot%\VI_setup.ini -> [Ver = | Size = 21 bytes | Created Date = 27/06/2007 13:40:28 | Attr = ]

Norton Security Scan.job -> %SystemRoot%\tasks\Norton Security Scan.job -> [Ver = | Size = 410 bytes | Created Date = 18/07/2007 06:40:29 | Attr = ]

dsndp202.ax -> %System32%\dsndp202.ax -> [Ver = 0, 9, 3, 6 | Size = 28672 bytes | Created Date = 27/06/2007 13:45:12 | Attr = ]

dsndp202.dll -> %System32%\dsndp202.dll -> [Ver = 0, 9, 0, 6 | Size = 45056 bytes | Created Date = 27/06/2007 13:45:13 | Attr = ]

dumphive.exe -> %System32%\dumphive.exe -> [Ver = | Size = 51200 bytes | Created Date = 20/07/2007 05:45:10 | Attr = ]

PhotoImpression Screen Saver.scr -> %System32%\PhotoImpression Screen Saver.scr -> ArcSoft Inc. [Ver = 1.0.0.1 | Size = 163840 bytes | Created Date = 27/06/2007 13:39:26 | Attr = ]

Process.exe -> %System32%\Process.exe -> http://www.beyondlogic.org [Ver = 2, 0, 0, 0 | Size = 53248 bytes | Created Date = 20/07/2007 05:45:10 | Attr = ]

quartz.vxd -> %System32%\quartz.vxd -> [Ver = | Size = 5672 bytes | Created Date = 27/06/2007 13:40:39 | Attr = ]

sndp2022.dll -> %System32%\sndp2022.dll -> [Ver = 0, 9, 5, 125 | Size = 233472 bytes | Created Date = 27/06/2007 13:45:13 | Attr = ]

sndp2023.dll -> %System32%\sndp2023.dll -> [Ver = 0, 9, 5, 1310 | Size = 282624 bytes | Created Date = 27/06/2007 13:45:13 | Attr = ]

SrchSTS.exe -> %System32%\SrchSTS.exe -> S!Ri [Ver = | Size = 288417 bytes | Created Date = 20/07/2007 05:45:10 | Attr = ]

swreg.exe -> %System32%\swreg.exe -> SteelWerX [Ver = 2.0.1.0 | Size = 135168 bytes | Created Date = 20/07/2007 05:45:10 | Attr = ]

swsc.exe -> %System32%\swsc.exe -> [Ver = | Size = 40960 bytes | Created Date = 20/07/2007 05:45:10 | Attr = ]

swxcacls.exe -> %System32%\swxcacls.exe -> SteelWerX [Ver = 1.0.1.1 | Size = 79360 bytes | Created Date = 20/07/2007 05:45:10 | Attr = ]

tm20dec.ax -> %System32%\tm20dec.ax -> The Duck Corporation [Ver = 2.98.3.16 | Size = 140800 bytes | Created Date = 27/06/2007 13:40:43 | Attr = ]

tmp.reg -> %System32%\tmp.reg -> [Ver = | Size = 2696 bytes | Created Date = 20/07/2007 05:45:50 | Attr = ]

Ulead Photo Explorer.scr -> %System32%\Ulead Photo Explorer.scr -> [Ver = 1, 0, 0, 1 | Size = 36864 bytes | Created Date = 27/06/2007 13:26:28 | Attr = ]

vidx16.dll -> %System32%\vidx16.dll -> [Ver = | Size = 10240 bytes | Created Date = 27/06/2007 13:40:39 | Attr = ]

vsndp202.dll -> %System32%\vsndp202.dll -> [Ver = | Size = 36864 bytes | Created Date = 27/06/2007 13:45:12 | Attr = ]

ikfileflt.sys -> %System32%\drivers\ikfileflt.sys -> PCTools Research Pty Ltd. [Ver = 5.0.2.1017 | Size = 39376 bytes | Created Date = 18/07/2007 06:41:29 | Attr = ]

ikfilesec.sys -> %System32%\drivers\ikfilesec.sys -> PCTools Research Pty Ltd. [Ver = 5.0.2.1027 | Size = 53840 bytes | Created Date = 18/07/2007 06:41:29 | Attr = ]

iksysflt.sys -> %System32%\drivers\iksysflt.sys -> PCTools Research Pty Ltd. [Ver = 5.0.2.1019 | Size = 57424 bytes | Created Date = 18/07/2007 06:41:29 | Attr = ]

iksyssec.sys -> %System32%\drivers\iksyssec.sys -> PCTools Research Pty Ltd. [Ver = 5.0.2.1018 | Size = 83024 bytes | Created Date = 18/07/2007 06:41:29 | Attr = ]

kcom.sys -> %System32%\drivers\kcom.sys -> PCTools Research Pty Ltd. [Ver = 5.0.2.1008 | Size = 29264 bytes | Created Date = 18/07/2007 06:41:29 | Attr = ]

sndp202.sys -> %System32%\drivers\sndp202.sys -> [Ver = 0, 9, 5, 2 | Size = 245120 bytes | Created Date = 27/06/2007 13:45:13 | Attr = ]

 

[Files/Folders - Modified Within 30 days]

Config.Msi -> %SystemDrive%\Config.Msi -> [Folder | Modified Date = 18/07/2007 07:40:34 | Attr = H ]

Downloads -> %SystemDrive%\Downloads -> [Folder | Modified Date = 26/06/2007 17:22:02 | Attr = ]

hiberfil.sys -> %SystemDrive%\hiberfil.sys -> [Ver = | Size = 402051072 bytes | Modified Date = 24/07/2007 11:16:32 | Attr = HS]

Program Files -> %ProgramFiles% -> [Folder | Modified Date = 24/07/2007 13:55:36 | Attr = R ]

WINDOWS -> %SystemRoot% -> [Folder | Modified Date = 24/07/2007 11:18:30 | Attr = ]

$hf_mig$ -> %SystemRoot%\$hf_mig$ -> [Folder | Modified Date = 11/07/2007 04:07:24 | Attr = H ]

$NtUninstallKB936357$ -> %SystemRoot%\$NtUninstallKB936357$ -> [Folder | Modified Date = 12/07/2007 03:58:56 | Attr = H ]

bootstat.dat -> %SystemRoot%\bootstat.dat -> [Ver = | Size = 2048 bytes | Modified Date = 24/07/2007 11:16:38 | Attr = S]

Downloaded Installations -> %SystemRoot%\Downloaded Installations -> [Folder | Modified Date = 13/07/2007 20:55:58 | Attr = ]

Downloaded Program Files -> %SystemRoot%\Downloaded Program Files -> [Folder | Modified Date = 17/07/2007 14:48:06 | Attr = S]

Fonts -> %SystemRoot%\Fonts -> [Folder | Modified Date = 13/07/2007 20:51:34 | Attr = R S]

Help -> %SystemRoot%\Help -> [Folder | Modified Date = 27/06/2007 14:44:50 | Attr = ]

inf -> %SystemRoot%\inf -> [Folder | Modified Date = 13/07/2007 08:32:10 | Attr = H ]

Installer -> %SystemRoot%\Installer -> [Folder | Modified Date = 18/07/2007 07:40:34 | Attr = HS]

Prefetch -> %SystemRoot%\Prefetch -> [Folder | Modified Date = 24/07/2007 13:57:06 | Attr = ]

QTFont.for -> %SystemRoot%\QTFont.for -> [Ver = | Size = 1409 bytes | Modified Date = 15/07/2007 20:43:42 | Attr = ]

QTFont.qfn -> %SystemRoot%\QTFont.qfn -> [Ver = | Size = 54156 bytes | Modified Date = 15/07/2007 20:43:42 | Attr = H ]

system32 -> %System32% -> [Folder | Modified Date = 24/07/2007 13:36:40 | Attr = ]

Tasks -> %SystemRoot%\Tasks -> [Folder | Modified Date = 18/07/2007 07:40:30 | Attr = S]

Temp -> %SystemRoot%\Temp -> [Folder | Modified Date = 24/07/2007 13:49:30 | Attr = ]

twain_32 -> %SystemRoot%\twain_32 -> [Folder | Modified Date = 27/06/2007 14:45:14 | Attr = ]

Ulead32.ini -> %SystemRoot%\Ulead32.ini -> [Ver = | Size = 324 bytes | Modified Date = 13/07/2007 04:09:48 | Attr = ]

videoimp.ini -> %SystemRoot%\videoimp.ini -> [Ver = | Size = 433 bytes | Modified Date = 27/06/2007 14:44:52 | Attr = ]

win.ini -> %SystemRoot%\win.ini -> [Ver = | Size = 780 bytes | Modified Date = 22/07/2007 21:46:22 | Attr = ]

Norton Security Scan.job -> %SystemRoot%\tasks\Norton Security Scan.job -> [Ver = | Size = 410 bytes | Modified Date = 18/07/2007 07:40:30 | Attr = ]

SA.DAT -> %SystemRoot%\tasks\SA.DAT -> [Ver = | Size = 6 bytes | Modified Date = 24/07/2007 11:16:46 | Attr = H ]

CatRoot -> %System32%\CatRoot -> [Folder | Modified Date = 27/06/2007 14:47:20 | Attr = ]

Catroot2 -> %System32%\Catroot2 -> [Folder | Modified Date = 24/07/2007 11:17:40 | Attr = ]

dllcache -> %System32%\dllcache -> [Folder | Modified Date = 13/07/2007 02:20:10 | Attr = RHS]

drivers -> %System32%\drivers -> [Folder | Modified Date = 18/07/2007 07:41:30 | Attr = ]

FNTCACHE.DAT -> %System32%\FNTCACHE.DAT -> [Ver = | Size = 195368 bytes | Modified Date = 15/07/2007 18:32:22 | Attr = ]

Macromed -> %System32%\Macromed -> [Folder | Modified Date = 06/07/2007 20:17:12 | Attr = ]

tmp.reg -> %System32%\tmp.reg -> [Ver = | Size = 2696 bytes | Modified Date = 22/07/2007 20:42:54 | Attr = ]

wpa.dbl -> %System32%\wpa.dbl -> [Ver = | Size = 1170 bytes | Modified Date = 24/07/2007 11:19:34 | Attr = ]

 

[File String Scan - Non-Microsoft Only]

PEC2 , -> %System32%\dfrg.msc -> [Ver = | Size = 41131 bytes | Modified Date = 05/08/2004 21:00:00 | Attr = ]

PEC2 , PECompact2 , -> %System32%\DivX.dll -> DivX, Inc. [Ver = 6.6.1.4 | Size = 740442 bytes | Modified Date = 31/05/2007 08:44:56 | Attr = ]

PEC2 , PECompact2 , -> %System32%\kvgnymryz.exe -> [Ver = | Size = 333312 bytes | Modified Date = 28/04/2007 17:00:08 | Attr = ]

Thawte Consulting , -> %System32%\rmoc3260.dll -> RealNetworks, Inc. [Ver = 6.0.9.2533 | Size = 181736 bytes | Modified Date = 12/10/2006 06:12:20 | Attr = ]

UPX! , UPX0 , -> %System32%\SrchSTS.exe -> S!Ri [Ver = | Size = 288417 bytes | Modified Date = 27/04/2006 17:49:30 | Attr = ]

UPX! , UPX0 , -> %System32%\swreg.exe -> SteelWerX [Ver = 2.0.1.0 | Size = 135168 bytes | Modified Date = 29/08/2006 19:43:54 | Attr = ]

UPX! , UPX0 , -> %System32%\swsc.exe -> [Ver = | Size = 40960 bytes | Modified Date = 09/01/2006 10:36:06 | Attr = ]

UPX! , UPX0 , -> %System32%\swxcacls.exe -> SteelWerX [Ver = 1.0.1.1 | Size = 79360 bytes | Modified Date = 01/12/2006 06:20:34 | Attr = ]

winsync , -> %System32%\wbdbase.deu -> [Ver = | Size = 1309184 bytes | Modified Date = 05/08/2004 21:00:00 | Attr = ]

 

< End of report >

papyclaude Member

papyclaude

Posté(e)
  • Auteur
Posté(e)
bien !! c'est le bon rapport :P je regarde dès que je rentre du boulot ce soir papyclaude :P

 

Incident Statut Analyse

 

Adware:adware/safetybar No Désinfecté c:\documents and settings\all users\bureau\Online Security Guide.url

Outil indésirable:application/winantispyware2006 No Désinfecté c:\program files\WinAntiSpyware 2006 Scanner

Adware:adware/cws.yexe No Désinfecté Registre Windows

Adware:adware/cramtoolbar No Désinfecté Registre Windows

Spyware:Cookie/Xiti No Désinfecté C:\Documents and Settings\ALEXANDRE\Cookies\alexandre@xiti[1].txt

Outil indésirable:Application/Winantivirus2006 No Désinfecté C:\Documents and Settings\CLAUDE\Application Data\winantispyware2006freeinstall_fr[1].exe

Outil indésirable:Application/Winantivirus2006 No Désinfecté C:\Documents and Settings\CLAUDE\Application Data\winantiviruspro2006freeinstall_fr[1].exe

Outil indésirable:Application/Processor No Désinfecté C:\Documents and Settings\CLAUDE\Bureau\SmitfraudFix\Process.exe

Outil indésirable:Application/SuperFast No Désinfecté C:\Documents and Settings\CLAUDE\Bureau\SmitfraudFix\restart.exe

Spyware:Cookie/Advertising No Désinfecté C:\Documents and Settings\CLAUDE\Cookies\claude@advertising[1].txt

Spyware:Cookie/Bluestreak No Désinfecté C:\Documents and Settings\CLAUDE\Cookies\claude@bluestreak[2].txt

Spyware:Cookie/Doubleclick No Désinfecté C:\Documents and Settings\CLAUDE\Cookies\claude@doubleclick[1].txt

Spyware:Cookie/Mediaplex No Désinfecté C:\Documents and Settings\CLAUDE\Cookies\claude@mediaplex[1].txt

Spyware:Cookie/Overture No Désinfecté C:\Documents and Settings\CLAUDE\Cookies\claude@overture[1].txt

Spyware:Cookie/Smartadserver No Désinfecté C:\Documents and Settings\CLAUDE\Cookies\claude@smartadserver[1].txt

Spyware:Cookie/Weborama No Désinfecté C:\Documents and Settings\CLAUDE\Cookies\claude@weborama[2].txt

Spyware:Cookie/Xiti No Désinfecté C:\Documents and Settings\CLAUDE\Cookies\claude@xiti[1].txt

Outil indésirable:Application/DriveCleaner No Désinfecté C:\Documents and Settings\CLAUDE\Mes documents\Arm--e\installdrivecleanerstart_fr.exe

Outil indésirable:Application/Winantivirus2006 No Désinfecté C:\Documents and Settings\CLAUDE\Mes documents\Arm--e\WinAntiVirusPro2006FreeInstall_fr.exe

Outil indésirable:Application/DriveCleaner No Désinfecté C:\Documents and Settings\CLAUDE\Mes documents\Attachmate\installdrivecleanerstart_fr.exe

Adware:Adware/SecurityError No Désinfecté C:\Documents and Settings\CLAUDE\Mes documents\Attachmate\setup.exe[²ÜÇ\qwe.dll]

Spyware:Cookie/Hbmediapro No Désinfecté C:\Documents and Settings\claude2\Cookies\claude2@adopt.hbmediapro[2].txt

Spyware:Cookie/Doubleclick No Désinfecté C:\Documents and Settings\claude2\Cookies\claude2@doubleclick[1].txt

Spyware:Cookie/DriveCleaner No Désinfecté C:\Documents and Settings\claude2\Cookies\claude2@go.drivecleaner[1].txt

Spyware:Cookie/Winantivirus No Désinfecté C:\Documents and Settings\claude2\Cookies\claude2@go.winantispyware[1].txt

Spyware:Cookie/Itrack No Désinfecté C:\Documents and Settings\claude2\Cookies\claude2@ilead.itrack[1].txt

Spyware:Cookie/Malwarewipe No Désinfecté C:\Documents and Settings\claude2\Cookies\claude2@malwarewiped[1].txt

Spyware:Cookie/Weborama No Désinfecté C:\Documents and Settings\claude2\Cookies\claude2@weborama[2].txt

Spyware:Cookie/Winantivirus No Désinfecté C:\Documents and Settings\claude2\Cookies\claude2@www.winantivirus[2].txt

Spyware:Cookie/Xiti No Désinfecté C:\Documents and Settings\claude2\Cookies\claude2@xiti[1].txt

Spyware:Cookie/Weborama No Désinfecté C:\Documents and Settings\Invité\Cookies\invité@weborama[2].txt

Spyware:Cookie/2o7 No Désinfecté C:\Documents and Settings\JANINE\Cookies\janine@2o7[1].txt

Spyware:Cookie/Bluestreak No Désinfecté C:\Documents and Settings\JANINE\Cookies\janine@bluestreak[1].txt

Spyware:Cookie/Doubleclick No Désinfecté C:\Documents and Settings\JANINE\Cookies\janine@doubleclick[1].txt

Spyware:Cookie/Mediaplex No Désinfecté C:\Documents and Settings\JANINE\Cookies\janine@mediaplex[1].txt

Spyware:Cookie/Weborama No Désinfecté C:\Documents and Settings\JANINE\Cookies\janine@weborama[2].txt

Spyware:Spyware/Smitfraud No Désinfecté C:\Documents and Settings\JANINE\Local Settings\Temp\AGLanguage.ini

Spyware:Cookie/Xiti No Désinfecté C:\Documents and Settings\MARLENE\Cookies\marlene@xiti[1].txt

Spyware:Cookie/Weborama No Désinfecté C:\Documents and Settings\VICKIE\Cookies\vickie@weborama[2].txt

Outil indésirable:Application/WinAntispyware2006 No Désinfecté C:\WINDOWS\system32\drivers\uwasfsd.sys

Adware:Adware/NaviPromo No Désinfecté C:\WINDOWS\system32\kvgnymryz.exe

Outil indésirable:Application/Processor No Désinfecté C:\WINDOWS\system32\Process.exe

Outil indésirable:Application/Webmediaplayer No Désinfecté C:\WINDOWS\Temp\Install_WMP.exe

et voila le rapport du scan bon courage je ne suis pas la demain a compter de 8h30 du matin jusqu'au lendemain

merci de ton ide a+ papyclaude

Thanos Devil Member !

Thanos

Posté(e)
Posté(e)

Démarre WinPFind3U en double cliquant sur WinPFind3U.exe et copie/colle le texte ci dessous (ne copie pas le mot code) dans le Panneau Paste fix here , puis clique sur le bouton Run Fix.

 

[Unregister Dlls]
[Registry - Non-Microsoft Only]
< Run [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
YN -> EoEngine -> 
NY -> NI.UGA6PV_0001_N108M0207 -> %UserDocuments%\Attachmate\install_fr.exe
< BHO's > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
YN -> {559A0C27-B847-4e06-A81F-0E1352272DA6} [HKLM] -> %ProgramFiles%\Gratwee Toolbar\tbu1B\gratwee.dll [XBTP06668 Class]
YN -> {64F56FC1-1272-44CD-BA6E-39723696E350} [HKLM] -> %ProgramFiles%\eoRezo\EoAdv\EoRezoBHO.dll [EoBho Class]
< Internet Explorer ToolBars [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar
YN -> {01E69986-A054-4C52-ABE8-EF63DF1C5211} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found]
< Internet Explorer ToolBars [HKCU] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\
YN -> ShellBrowser\\{01E69986-A054-4C52-ABE8-EF63DF1C5211} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found]
YN -> WebBrowser\\{01E69986-A054-4C52-ABE8-EF63DF1C5211} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found]
YN -> WebBrowser\\{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found]
YN -> WebBrowser\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} [HKLM] -> Reg Data - Key not found [Yahoo! Toolbar avec bloqueur de fenêtres pop-up]
[Registry - Additional Scans - Non-Microsoft Only]
< Uninstall List > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
YN -> XBTB06668.XBTB06668Toolbar -> Gratwee Toolbar
[Files/Folders - Modified Within 30 days]
NY -> Norton Security Scan.job -> %SystemRoot%\tasks\Norton Security Scan.job
[ Extra Files ]
c:\documents and settings\all users\bureau\Online Security Guide.url 
c:\program files\WinAntiSpyware 2006 Scanner 
C:\Documents and Settings\CLAUDE\Application Data\winantispyware2006freeinstall_fr[1].exe
C:\Documents and Settings\CLAUDE\Application Data\winantiviruspro2006freeinstall_fr[1].exe 
C:\Documents and Settings\CLAUDE\Mes documents\Arm--e\installdrivecleanerstart_fr.exe
C:\Documents and Settings\CLAUDE\Mes documents\Arm--e\WinAntiVirusPro2006FreeInstall_fr.exe
C:\Documents and Settings\CLAUDE\Mes documents\Attachmate
C:\WINDOWS\system32\drivers\uwasfsd.sys 
C:\WINDOWS\system32\kvgnymryz.exe 
C:\WINDOWS\Temp\Install_WMP.exe 
[Empty Temp Folders]
[Reboot]

Le Fix va se faire rapidement,puis il te sera demandé de redémarrer ton pc : accepte en cliquant sur Yes

 

Poste aussi le rapport qui se trouve dans le dossier WinPFind3u( c'est un rapport qui a pour nom la date du jour\mois\année\heure).

 

Le pc est aussi infecté par un adware qu'on nomme Magic Control Agent. Tu as infecté ton pc sans savoir lorsque tu as installé le logiciel Webmediaplayer !

En plus du rapport de WinpFind demandé ci dessus, j'aimerais que tu me poste ceci >

 

Fais un clic droit sur ce lien > navilog1 de IL-MAFIOSO

  • Choisis Enregistrer la cible (du lien) sous et enregistre-le fichier sur ton bureau.
  • Ensuite double clique sur navilog1.exe pour lancer l'installation.
  • Une fois l'installation terminée, le fix s'exécutera automatiquement.
    (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).
  • Laisse-toi guider. Au menu principal, choisis 1 et valides.
    (ne fais pas le choix 2,3 ou 4 sans notre avis/accord)
  • Patiente jusqu'au message :
    *** Analyse Termine le ..... ***
  • Appuie sur une touche comme demandé, le bloc note va s'ouvrir.
  • Copie-colle l'intégralité dans une réponse. Referme le bloc note.
  • Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

La procédure est décrite ici , en images >

http://www.malekal.com/Adware.Magic_Control.html

ca correspond à la première étape > "Téléchargement et installation de navilog1"

Ne lance pas d'autre option pour le moment!

 

Ne te décourage pas !! tu as déjà bien effectué les manipulations demandées :P on touche au but...

papyclaude Member

papyclaude

Posté(e)
  • Auteur
Posté(e)
Démarre WinPFind3U en double cliquant sur WinPFind3U.exe et copie/colle le texte ci dessous (ne copie pas le mot code) dans le Panneau Paste fix here , puis clique sur le bouton Run Fix.

 

[Unregister Dlls]
[Registry - Non-Microsoft Only]
< Run [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
YN -> EoEngine -> 
NY -> NI.UGA6PV_0001_N108M0207 -> %UserDocuments%\Attachmate\install_fr.exe
< BHO's > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
YN -> {559A0C27-B847-4e06-A81F-0E1352272DA6} [HKLM] -> %ProgramFiles%\Gratwee Toolbar\tbu1B\gratwee.dll [XBTP06668 Class]
YN -> {64F56FC1-1272-44CD-BA6E-39723696E350} [HKLM] -> %ProgramFiles%\eoRezo\EoAdv\EoRezoBHO.dll [EoBho Class]
< Internet Explorer ToolBars [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar
YN -> {01E69986-A054-4C52-ABE8-EF63DF1C5211} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found]
< Internet Explorer ToolBars [HKCU] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\
YN -> ShellBrowser\\{01E69986-A054-4C52-ABE8-EF63DF1C5211} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found]
YN -> WebBrowser\\{01E69986-A054-4C52-ABE8-EF63DF1C5211} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found]
YN -> WebBrowser\\{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found]
YN -> WebBrowser\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} [HKLM] -> Reg Data - Key not found [Yahoo! Toolbar avec bloqueur de fenêtres pop-up]
[Registry - Additional Scans - Non-Microsoft Only]
< Uninstall List > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
YN -> XBTB06668.XBTB06668Toolbar -> Gratwee Toolbar
[Files/Folders - Modified Within 30 days]
NY -> Norton Security Scan.job -> %SystemRoot%\tasks\Norton Security Scan.job
[ Extra Files ]
c:\documents and settings\all users\bureau\Online Security Guide.url 
c:\program files\WinAntiSpyware 2006 Scanner 
C:\Documents and Settings\CLAUDE\Application Data\winantispyware2006freeinstall_fr[1].exe
C:\Documents and Settings\CLAUDE\Application Data\winantiviruspro2006freeinstall_fr[1].exe 
C:\Documents and Settings\CLAUDE\Mes documents\Arm--e\installdrivecleanerstart_fr.exe
C:\Documents and Settings\CLAUDE\Mes documents\Arm--e\WinAntiVirusPro2006FreeInstall_fr.exe
C:\Documents and Settings\CLAUDE\Mes documents\Attachmate
C:\WINDOWS\system32\drivers\uwasfsd.sys 
C:\WINDOWS\system32\kvgnymryz.exe 
C:\WINDOWS\Temp\Install_WMP.exe 
[Empty Temp Folders]
[Reboot]

Le Fix va se faire rapidement,puis il te sera demandé de redémarrer ton pc : accepte en cliquant sur Yes

 

Poste aussi le rapport qui se trouve dans le dossier WinPFind3u( c'est un rapport qui a pour nom la date du jour\mois\année\heure).

 

Le pc est aussi infecté par un adware qu'on nomme Magic Control Agent. Tu as infecté ton pc sans savoir lorsque tu as installé le logiciel Webmediaplayer !

En plus du rapport de WinpFind demandé ci dessus, j'aimerais que tu me poste ceci >

 

Fais un clic droit sur ce lien > navilog1 de IL-MAFIOSO

  • Choisis Enregistrer la cible (du lien) sous et enregistre-le fichier sur ton bureau.
  • Ensuite double clique sur navilog1.exe pour lancer l'installation.
  • Une fois l'installation terminée, le fix s'exécutera automatiquement.
    (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).
  • Laisse-toi guider. Au menu principal, choisis 1 et valides.
    (ne fais pas le choix 2,3 ou 4 sans notre avis/accord)
  • Patiente jusqu'au message :
     
  • Appuie sur une touche comme demandé, le bloc note va s'ouvrir.
  • Copie-colle l'intégralité dans une réponse. Referme le bloc note.
  • Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

La procédure est décrite ici , en images >

http://www.malekal.com/Adware.Magic_Control.html

ca correspond à la première étape > "Téléchargement et installation de navilog1"

Ne lance pas d'autre option pour le moment!

 

Ne te décourage pas !! tu as déjà bien effectué les manipulations demandées :P on touche au but...

soit sur je ne suis pas découragé juste un petit peu angoissé car je n'ai pas l'habitude de triturer mon ordi de la sorte ,je vais essayé de faire la manip avant de partir

a+ papyclaude

papyclaude Member

papyclaude

Posté(e)
  • Auteur
Posté(e)
soit sur je ne suis pas découragé juste un petit peu angoissé car je n'ai pas l'habitude de triturer mon ordi de la sorte ,je vais essayé de faire la manip avant de partir

a+ papyclaude

[Registry - Non-Microsoft Only]

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\EoEngine deleted successfully.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\NI.UGA6PV_0001_N108M0207 deleted successfully.

C:\Documents and Settings\CLAUDE\Mes documents\Attachmate\install_fr.exe moved successfully.

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{559A0C27-B847-4e06-A81F-0E1352272DA6} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{559A0C27-B847-4e06-A81F-0E1352272DA6} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350} deleted successfully.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar\\{01E69986-A054-4C52-ABE8-EF63DF1C5211} deleted successfully.

Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{01E69986-A054-4C52-ABE8-EF63DF1C5211} deleted successfully.

Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{01E69986-A054-4C52-ABE8-EF63DF1C5211} deleted successfully.

Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} deleted successfully.

Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully.

[Registry - Additional Scans - Non-Microsoft Only]

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XBTB06668.XBTB06668Toolbar deleted successfully.

[Files/Folders - Modified Within 30 days]

C:\WINDOWS\tasks\Norton Security Scan.job moved successfully.

[ Extra Files ]

c:\documents and settings\all users\bureau\Online Security Guide.url moved successfully.

c:\program files\WinAntiSpyware 2006 Scanner\database moved successfully.

c:\program files\WinAntiSpyware 2006 Scanner moved successfully.

C:\Documents and Settings\CLAUDE\Application Data\winantispyware2006freeinstall_fr[1].exe moved successfully.

C:\Documents and Settings\CLAUDE\Application Data\winantiviruspro2006freeinstall_fr[1].exe moved successfully.

C:\Documents and Settings\CLAUDE\Mes documents\Arm--e\installdrivecleanerstart_fr.exe moved successfully.

C:\Documents and Settings\CLAUDE\Mes documents\Arm--e\WinAntiVirusPro2006FreeInstall_fr.exe moved successfully.

C:\Documents and Settings\CLAUDE\Mes documents\Attachmate moved successfully.

C:\WINDOWS\system32\drivers\uwasfsd.sys moved successfully.

C:\WINDOWS\system32\kvgnymryz.exe moved successfully.

C:\WINDOWS\Temp\Install_WMP.exe moved successfully.

[Empty Temp Folders]

C:\DOCUME~1\CLAUDE\LOCALS~1\Temp\ -> emptied.

C:\Documents and Settings\CLAUDE\Local Settings\Temporary Internet Files\Content.IE5\ -> emptied

RecycleBin -> emptied.

< End of log >

Created on 07/25/2007 03:56:37

encore un petit bout.......

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...