Rapport HijackThis

[Thanos]

salut

 

Une chose que je ne comprend pas >

Je n'arrive pas à démarrer en mode normal, il se remet toujours en mode sélectif, comment faire pour le changer ?

tu veux dire qu'à chaque fois que tu démarres, tu n'as pas d'autre choix que de démarrer en mode sans échec ??

où est ce que tu veux dire que tu ne parviens plus à utiliser le Démarrage normal ?

Si c'est le cas, c'est tout a fait normal!! à partir du moment où tu as utilisé les options de démarrage, le pc fonctionnera toujours en mode sélectif. Ca ne pose aucun souci! (pareil chez moi!)

 

Est ce que tu veux bien me refaire un scan avec WinpFind3U et me poster le rapport comme précedemment ?

Tu vas pouvoir réinstaller Antivir à présent ainsi qu'un parefeu.

 

@+

Modifié le 5 août 2007 par charles ingals

[sylvaine]

Salut

Excuse-moi, j'ai dû partir pour une semaine donc le PC était resté en standby pendant ce temps...

Au démarrage il démarre bien en mode sélectif (pas en mode sans échec) donc comme tu dis, tout est normal, en fait.

Par contre à chaque démarrage il continue de m'afficher ce message d'erreur : "Le système a récupéré d'une erreur sérieuse"

Signature de l'erreur

BCCode : 1000008e BCP1 : C0000005 BCP2 : 8056E2EA BCP3 : F7C3AAA0

BCP4 : 00000000 OSVer : 5_1_2600 SP : 2_0 product : 768_1

 

Les fichiers suivants seroont inclus dans le rapport d'erreurs :

C:\DOCUME~1\Arnaud\LOCALS~1\Temp\WER881e.dir00\Mini080407-05.dmp

C:\DOCUME~1\Arnaud\LOCAL~1\Temp\WER881e.dir00\sysdata.xml

 

----------------------------------------------------------------------------------------------------------

 

J'ai refait un rapport WinPFind3U

Par contre quand je le lance il me dit : Windows - Pas de disque

Exception Processing Message c0000013 Parameters 75afbf9c 4 75afbf9c 75afbf9c

2 fois (j'ai fait continuer)

 

Voilà le rapport :

 

WinPFind3 logfile created on: 15/08/2007 10:18:06

WinPFind3U by OldTimer - Version 1.0.39 Folder = C:\Documents and Settings\Arnaud\Bureau\WinPFind3u\

Microsoft Windows XP Service Pack 2 (Version = 5.1.2600)

Internet Explorer (Version = 6.0.2900.2180)

 

511,48 Mb Total Physical Memory | 320,66 Mb Available Physical Memory | 62,69% Memory free

866,36 Mb Paging File | 712,09 Mb Available in Paging File | 82,19% Paging File free

Paging file location(s): C:\pagefile.sys 384 768;

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 18,74 Gb Total Space | 0,91 Gb Free Space | 4,83% Space Free

Drive D: | 19,53 Gb Total Space | 7,15 Gb Free Space | 36,59% Space Free

E: Drive not present or media not loaded

F: Drive not present or media not loaded

 

Computer Name: ARNAUD

Current User Name: Arnaud

Logged in as Administrator.

Current Boot Mode: Normal

 

 

[Processes - Non-Microsoft Only]

ftrtsvc.exe -> %System32%\FTRTSVC.exe -> France Telecom [Ver = 11.0 (4) | Size = 40960 bytes | Modified Date = 23/08/2004 15:49:56 | Attr = ]

hpqimzone.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpqimzone.exe -> Hewlett-Packard Co. [Ver = 053.000.013.000 | Size = 479232 bytes | Modified Date = 12/05/2005 00:33:52 | Attr = ]

hpqtra08.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpqtra08.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 282624 bytes | Modified Date = 11/05/2005 23:23:26 | Attr = ]

hprblog.exe -> %ProgramFiles%\HP\Digital Imaging\Product Assistant\bin\hprblog.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 77824 bytes | Modified Date = 11/05/2005 23:16:22 | Attr = ]

hpwuschd2.exe -> %ProgramFiles%\HP\HP Software Update\HPWuSchd2.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 49152 bytes | Modified Date = 11/05/2005 23:12:54 | Attr = ]

hpzipm12.exe -> %System32%\HPZipm12.exe -> HP [Ver = 9, 0, 0, 0 | Size = 69632 bytes | Modified Date = 29/09/2004 12:14:36 | Attr = ]

nvsvc32.exe -> %System32%\nvsvc32.exe -> NVIDIA Corporation [Ver = 6.14.10.8198 | Size = 131139 bytes | Modified Date = 10/12/2005 03:06:00 | Attr = ]

winpfind3u.exe -> %UserDesktop%\WinPFind3u\WinPFind3U.exe -> OldTimer Tools [Ver = 1.0.38.0 | Size = 322048 bytes | Modified Date = 23/06/2007 15:15:54 | Attr = ]

wkcalrem.exe -> %CommonProgramFiles%\Microsoft Shared\Works Shared\WkCalRem.exe -> MicrosoftÆ Corporation [Ver = 6.00.1911.0 | Size = 24633 bytes | Modified Date = 12/07/2000 19:22:38 | Attr = ]

 

[Win32 Services - Non-Microsoft Only]

(dmadmin) Service d'administration du Gestionnaire de disque logique [Win32_Shared | On_Demand | Stopped] -> %System32%\dmadmin.exe -> Microsoft Corp., Veritas Software [Ver = 2600.2180.503.0 | Size = 225280 bytes | Modified Date = 05/08/2004 14:00:00 | Attr = ]

(FTRTSVC) France Telecom Routing Table Service [Win32_Own | Auto | Running] -> %System32%\FTRTSVC.exe -> France Telecom [Ver = 11.0 (4) | Size = 40960 bytes | Modified Date = 23/08/2004 15:49:56 | Attr = ]

(IDriverT) InstallDriver Table Manager [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\InstallShield\Driver\11\Intel 32\IDriverT.exe -> Macrovision Corporation [Ver = 11.00.28844 | Size = 69632 bytes | Modified Date = 04/04/2005 00:41:10 | Attr = ]

(NVSvc) NVIDIA Display Driver Service [Win32_Own | Auto | Running] -> %System32%\nvsvc32.exe -> NVIDIA Corporation [Ver = 6.14.10.8198 | Size = 131139 bytes | Modified Date = 10/12/2005 03:06:00 | Attr = ]

(Pml Driver HPZ12) Pml Driver HPZ12 [Win32_Own | Auto | Running] -> %System32%\HPZipm12.exe -> HP [Ver = 9, 0, 0, 0 | Size = 69632 bytes | Modified Date = 29/09/2004 12:14:36 | Attr = ]

 

[Registry - Non-Microsoft Only]

< Run [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->

HP Software Update -> %ProgramFiles%\HP\HP Software Update\HPWuSchd2.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 49152 bytes | Modified Date = 11/05/2005 23:12:54 | Attr = ]

KernelFaultCheck -> -> File not found

Microsoft Works Portfolio -> %ProgramFiles%\Microsoft Works\wkssb.exe -> MicrosoftÆ Corporation [Ver = 6.00.1911.0 | Size = 311350 bytes | Modified Date = 12/07/2000 19:22:18 | Attr = ]

Microsoft Works Update Detection -> %ProgramFiles%\Microsoft Works\WkDetect.exe -> MicrosoftÆ Corporation [Ver = 6.00.1911.0 | Size = 28739 bytes | Modified Date = 04/08/2000 08:09:58 | Attr = ]

NeroFilterCheck -> %System32%\NeroCheck.exe -> Ahead Software Gmbh [Ver = 1, 0, 0, 2 | Size = 155648 bytes | Modified Date = 09/07/2001 12:50:42 | Attr = R ]

NvCplDaemon -> %System32%\nvcpl.dll [RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup] -> NVIDIA Corporation [Ver = 6.14.10.8198 | Size = 7311360 bytes | Modified Date = 10/12/2005 03:06:00 | Attr = ]

NvMediaCenter -> %System32%\nvmctray.dll [RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit] -> NVIDIA Corporation [Ver = 6.14.10.8198 | Size = 86016 bytes | Modified Date = 10/12/2005 03:06:00 | Attr = ]

nwiz -> %System32%\nwiz.exe -> [Ver = | Size = 1519616 bytes | Modified Date = 10/12/2005 03:06:00 | Attr = ]

QuickTime Task -> %ProgramFiles%\QuickTime\qttask.exe -> Apple Computer, Inc. [Ver = 7.0.3 | Size = 155648 bytes | Modified Date = 24/06/2006 10:40:54 | Attr = ]

WOOWATCH -> %ProgramFiles%\Wanadoo\Watch.exe -> France TÈlÈcom R&D [Ver = 11.0 (2) | Size = 20480 bytes | Modified Date = 23/08/2004 14:49:56 | Attr = ]

WorksFUD -> %ProgramFiles%\Microsoft Works\wkfud.exe -> MicrosoftÆ Corporation [Ver = 6.00.1911.0 | Size = 24576 bytes | Modified Date = 12/07/2000 18:07:18 | Attr = ]

< OptionalComponents [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\ ->

IMAIL -> Installed = 1 ->

MAPI -> Installed = 1 ->

MSFS -> Installed = 1 ->

< Run [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->

WOOKIT -> %ProgramFiles%\Wanadoo\Shell.exe -> [Ver = 10.0 (63) | Size = 122880 bytes | Modified Date = 23/08/2004 14:50:00 | Attr = ]

< Common Startup > -> C:\Documents and Settings\All Users\Menu DÈmarrer\Programmes\DÈmarrage ->

%AllUsersStartup%\DÈmarrage rapide du logiciel HP Image Zone.lnk -> %ProgramFiles%\HP\Digital Imaging\bin\hpqthb08.exe -> Hewlett-Packard Co. [Ver = 053.000.013.000 | Size = 73728 bytes | Modified Date = 12/05/2005 00:49:24 | Attr = ]

%AllUsersStartup%\HP Digital Imaging Monitor.lnk -> %ProgramFiles%\HP\Digital Imaging\bin\hpqtra08.exe -> Hewlett-Packard Co. [Ver = 53.0.13.000 | Size = 282624 bytes | Modified Date = 11/05/2005 23:23:26 | Attr = ]

%AllUsersStartup%\Lancement rapide d'Adobe Reader.lnk -> %ProgramFiles%\Adobe\Acrobat 7.0\Reader\reader_sl.exe -> Adobe Systems Incorporated [Ver = 7.0.5.2005092300 | Size = 29696 bytes | Modified Date = 23/09/2005 22:05:26 | Attr = ]

%AllUsersStartup%\Rappels du Calendrier Microsoft Works.lnk -> %CommonProgramFiles%\Microsoft Shared\Works Shared\WkCalRem.exe -> MicrosoftÆ Corporation [Ver = 6.00.1911.0 | Size = 24633 bytes | Modified Date = 12/07/2000 19:22:38 | Attr = ]

< SecurityProviders [HKLM] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders ->

< Winlogon settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon ->

< Winlogon settings [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon ->

< CurrentVersion Policy Settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{BDEADF00-C265-11D0-BCED-00A0C90AB50F} -> 1 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} -> 1073741857 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{0DF44EAA-FF21-4412-828E-260A8728E7F1} -> 32 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\dontdisplaylastusername -> 0 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticecaption -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticetext -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\shutdownwithoutlogon -> 1 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\undockwithoutlogon -> 1 ->

< CurrentVersion Policy Settings [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ ->

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ -> ->

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ -> ->

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 ->

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\ -> ->

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DisableRegistryTools -> 0 ->

< HOSTS File > (790 bytes) -> C:\WINDOWS\System32\drivers\etc\Hosts ->

127.0.0.1 localhost -> ->

< Internet Explorer Settings > -> ->

HKLM: Default_Page_URL -> http://www.microsoft.com/isapi/redir.dll?p...&ar=msnhome ->

HKLM: Main\\Default_Search_URL -> http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch ->

HKLM: Local Page -> %SystemRoot%\system32\blank.htm ->

HKLM: Search Page -> http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch ->

HKLM: Start Page -> http://www.microsoft.com/isapi/redir.dll?p...ER}&ar=home ->

HKLM: CustomizeSearch -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm ->

HKLM: SearchAssistant -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm ->

HKCU: Local Page -> C:\WINDOWS\system32\blank.htm ->

HKCU: Search Page -> http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch ->

HKCU: Start Page -> http://www.orange.fr/ ->

HKCU: URLSearchHooks\\{08C06D61-F1F3-4799-86F8-BE1A89362C85} [HKLM] -> %ProgramFiles%\Wanadoo\SearchPageURL.dll [search Class] -> [Ver = 1, 0, 0, 1 | Size = 57344 bytes | Modified Date = 06/12/2004 14:27:48 | Attr = ]

HKCU: URLSearchHooks\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! Toolbar] -> Yahoo! Inc. [Ver = 2006, 10, 26, 1 | Size = 440384 bytes | Modified Date = 26/10/2006 11:28:40 | Attr = ]

HKCU: ProxyEnable -> 0 ->

HKCU: ProxyOverride -> ->

< Trusted Sites > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->

msn.com [ - ] -> ->

< BHO's > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ ->

{02478D38-C3F9-4EFB-9B51-7695ECA05670} [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! Toolbar Helper] -> Yahoo! Inc. [Ver = 2006, 10, 26, 1 | Size = 440384 bytes | Modified Date = 26/10/2006 11:28:40 | Attr = ]

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [HKLM] -> %ProgramFiles%\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [Adobe PDF Reader Link Helper] -> Adobe Systems Incorporated [Ver = 7.0.9.2006121800 | Size = 59032 bytes | Modified Date = 18/12/2006 04:16:42 | Attr = ]

< Internet Explorer Bars [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\ ->

{9455301C-CF6B-11D3-A266-00C04F689C50} [HKLM] -> %CommonProgramFiles%\Microsoft Shared\Reference 2001\EROProj.dll [&Organise-notes Encarta] -> [Ver = | Size = 258048 bytes | Modified Date = 08/08/2000 23:08:30 | Attr = ]

< Internet Explorer ToolBars [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar ->

{EF99BD32-C1FB-11D2-892F-0090271D4F88} [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! Toolbar] -> Yahoo! Inc. [Ver = 2006, 10, 26, 1 | Size = 440384 bytes | Modified Date = 26/10/2006 11:28:40 | Attr = ]

< Internet Explorer ToolBars [HKCU] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ ->

WebBrowser\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} [HKLM] -> %ProgramFiles%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! Toolbar] -> Yahoo! Inc. [Ver = 2006, 10, 26, 1 | Size = 440384 bytes | Modified Date = 26/10/2006 11:28:40 | Attr = ]

< Internet Explorer Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ ->

{9455301C-CF6B-11D3-A266-00C04F689C50} -> Reg Data - Value does not exist [buttonText: Organise-notes] -> File not found

< User Agent Post Platform [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform ->

Orange 7.4 ; NaviWoo1.1 -> IEAKFT ->

SV1 -> ->

< DNS Name Servers [HKLM] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ ->

{7CFABC67-FEBF-4977-AA6C-5BC5F662C089} -> (VIA Rhine II Fast Ethernet Adapter) ->

< Protocol Handlers [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ ->

compta -> coNetIE.ocx -> File not found

ipp -> Reg Data - Key not found -> File not found

msdaipp -> Reg Data - Key not found -> File not found

msencarta -> %CommonProgramFiles%\Microsoft Shared\Reference 2001\MSREF.DLL -> [Ver = | Size = 90112 bytes | Modified Date = 08/08/2000 15:57:12 | Attr = ]

msero -> %CommonProgramFiles%\Microsoft Shared\Reference 2001\msero.dll -> [Ver = | Size = 143360 bytes | Modified Date = 08/08/2000 23:08:20 | Attr = ]

msref -> %CommonProgramFiles%\Microsoft Shared\Reference 2001\MSREF.DLL -> [Ver = | Size = 90112 bytes | Modified Date = 08/08/2000 15:57:12 | Attr = ]

skype4com -> %CommonProgramFiles%\Skype\Skype4COM.dll -> Skype Technologies [Ver = 1, 0, 26, 0 | Size = 1783384 bytes | Modified Date = 01/11/2006 16:21:20 | Attr = R ]

< Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ ->

{00B71CFB-6864-4346-A978-C0A14556272C} -> Checkers Class - CodeBase = http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab ->

{8E0D4DE5-3180-4024-A327-4DFAD1796A8D} -> MessengerStatsClient Class - CodeBase = http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab ->

{9A9307A0-7DA4-4DAF-B042-5009F29E09E1} -> ActiveScan Installer Class - CodeBase = http://acs.pandasoftware.com/activescan/as5free/asinst.cab ->

{D27CDB6E-AE6D-11CF-96B8-444553540000} -> - CodeBase = http://download.macromedia.com/pub/shockwa...ash/swflash.cab ->

 

 

[Registry - Additional Scans - Non-Microsoft Only]

< Security Settings > -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirstRunDisabled -> 1 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\AntiVirusDisableNotify -> 0 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirewallDisableNotify -> 0 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\UpdatesDisableNotify -> 0 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\AntiVirusOverride -> 0 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirewallOverride -> 0 ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall\ -> ->

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\Type -> 32 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\Start -> 3 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\ErrorControl -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\ImagePath -> %SystemRoot%\system32\svchost.exe -k netsvcs ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\DisplayName -> Service de transfert intelligent en arriËre-plan ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\DependOnService -> RpcSs; ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\DependOnGroup -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\ObjectName -> LocalSystem ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\Description -> TransfËre des donnÈes entre les clients et les serveurs en t‚che de fond. Si le service BITS est dÈsactivÈ, les fonctionnalitÈs telles que Windows Update ne fonctionneront pas correctement. ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\FailureActions ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Parameters\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Parameters\\ServiceDll -> C:\WINDOWS\system32\qmgr.dll ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Security\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Security\\Security ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\ -> Root\LEGACY_BITS00 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\\Count -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\\NextInstance -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DependOnGroup -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DependOnService -> Netman;WinMgmt; ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Description -> Assure la traduction d'adresses de rÈseau, l'adressage, les services de rÈsolution de noms et/ou les services de prÈvention d'intrusion pour un rÈseau de petite entreprise ou un rÈseau domestique. ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DisplayName -> Pare-feu Windows / Partage de connexion Internet ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ErrorControl -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ImagePath -> %SystemRoot%\system32\svchost.exe -k netsvcs ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ObjectName -> LocalSystem ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Start -> 2 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Type -> 32 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch\\Epoch -> 11759 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\\ServiceDll -> %SystemRoot%\System32\ipnathlp.dll ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\%windir%\system32\sessmgr.exe -> %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\MSN Messenger\msnmsgr.exe -> C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\MSN Messenger\msncall.exe -> C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone) ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\1900:UDP -> 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\2869:TCP -> 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\10280:UDP -> 10280:UDP:LocalSubNet:Enabled:Windows Media Connect ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\10281:UDP -> 10281:UDP:LocalSubNet:Enabled:Windows Media Connect ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\10282:UDP -> 10282:UDP:LocalSubNet:Enabled:Windows Media Connect ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\10283:UDP -> 10283:UDP:LocalSubNet:Enabled:Windows Media Connect ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\10284:UDP -> 10284:UDP:LocalSubNet:Enabled:Windows Media Connect ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\10243:TCP -> 10243:TCP:LocalSubNet:Enabled:Windows Media Connect ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\EnableFirewall -> 0 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\DoNotAllowExceptions -> 0 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\DisableNotifications -> 0 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\%windir%\system32\sessmgr.exe -> %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe -> C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe -> C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe -> C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hposid01.exe -> C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe -> C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe -> C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe -> C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe -> C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe -> C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe -> C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe -> C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\MSN Messenger\msnmsgr.exe -> C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\MSN Messenger\msncall.exe -> C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone) ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Skype\Phone\Skype.exe -> C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Grisoft\AVG7\avginet.exe -> C:\Program Files\Grisoft\AVG7\avginet.exe:*:Enabled:avginet.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Grisoft\AVG7\avgamsvr.exe -> C:\Program Files\Grisoft\AVG7\avgamsvr.exe:*:Enabled:avgamsvr.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Grisoft\AVG7\avgcc.exe -> C:\Program Files\Grisoft\AVG7\avgcc.exe:*:Enabled:avgcc.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Grisoft\AVG7\avgemc.exe -> C:\Program Files\Grisoft\AVG7\avgemc.exe:*:Enabled:avgemc.exe ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe -> C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe:*:Enabled:Kaspersky AV Scanner ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\1900:UDP -> 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\2869:TCP -> 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\10280:UDP -> 10280:UDP:LocalSubNet:Enabled:Windows Media Connect ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\10281:UDP -> 10281:UDP:LocalSubNet:Enabled:Windows Media Connect ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\10282:UDP -> 10282:UDP:LocalSubNet:Enabled:Windows Media Connect ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\10283:UDP -> 10283:UDP:LocalSubNet:Enabled:Windows Media Connect ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\10284:UDP -> 10284:UDP:LocalSubNet:Enabled:Windows Media Connect ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\10243:TCP -> 10243:TCP:LocalSubNet:Enabled:Windows Media Connect ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\IcmpSettings\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\IcmpSettings\\AllowOutboundSourceQuench -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\IcmpSettings\\AllowOutboundParameterProblem -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\IcmpSettings\\AllowOutboundTimeExceeded -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\IcmpSettings\\AllowRedirect -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\\ServiceUpgrade -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\InterfacesUnfirewalledAtUpdate\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\InterfacesUnfirewalledAtUpdate\\All -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\ -> Root\LEGACY_SHAREDACCESS00 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\\Count -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\\NextInstance -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Type -> 32 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Start -> 2 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ErrorControl -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ImagePath -> %systemroot%\system32\svchost.exe -k netsvcs ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\DisplayName -> Mises ‡ jour automatiques ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ObjectName -> LocalSystem ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Description -> Active le tÈlÈchargement et l'installation des mises ‡ jour Windows. Si ce service est dÈsactivÈ, cet ordinateur ne pourra pas utiliser la fonctionnalitÈ des mises ‡ jour automatiques ou le site Windows Update. ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Parameters\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Parameters\\ServiceDll -> C:\WINDOWS\system32\wuauserv.dll ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Security\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Security\\Security ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\ -> ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\ -> Root\LEGACY_WUAUSERV00 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\\Count -> 1 ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\\NextInstance -> 1 ->

< Uninstall List > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ ->

{02020202-5D65-445A-B3B4-3DCE72BA0C6C} -> Atlas mondial Microsoft Encarta 2001 ->

{03B1B42B-F6DE-41d9-8CFF-DC44E895C7A7} -> PhotoGallery ->

{0611BD4E-4FE4-4a62-B0C0-18A4CC463428} -> CP_Package_Variety1 ->

{09984AEC-6B9F-4ca7-B78D-CB44D4771DA3} -> Destinations ->

{0B33B738-AD79-4E32-90C5-E67BFB10BBFF} -> AiO_Scan ->

{0B69DA57-BC7D-461D-B7D6-2AA9F08869CD} -> QuickTime ->

{15C19366-3261-4D69-BF40-C3E30241A264} -> OS Pack Works Suite ->

{15EE79F4-4ED1-4267-9B0F-351009325D7D} -> HP Software Update ->

{172975EB-9465-4861-95B5-C7BB6D3DE62A} -> DocumentViewer ->

{17342E3B-0818-4A6F-BFF8-99476605ADD6} -> livebox ->

{1A995D22-F711-4199-83D4-579B593A46C5} -> TMPGEnc DVD Author 1.6 ->

{1C139D7D-9FEA-468d-A9C8-2A6E3BDE564A} -> CP_Package_Variety3 ->

{20D4A895-748C-4D88-871C-FDB1695B0169} -> Platform ->

{21DB3D90-D816-4092-A260-CA3F6B55A6DD} -> Sonic_PrimoSDK ->

{23A7B376-BBEC-4e76-BBD7-0F155E70D74B} -> CP_Panorama1Config ->

{2CADCEAB-D5DA-44D6-B5FC-7DEE87AB3C0C} -> Unload ->

{30C19FF2-7FBA-4d09-B9DE-1659977F64F6} -> TrayApp ->

{32BDCCB8-9DC8-496d-9DB1-F77510775BDB} -> InstantShareDevices ->

{3462AC6D-A932-4E96-B4B7-801CF5BC88BD} -> Synchronisation de Works ->

{350C940c-3D7C-4EE8-BAA9-00BCB3D54227} -> WebFldrs XP ->

{36E47DA1-10E1-45d9-8B19-14D19607CDCF} -> CP_CalendarTemplates1 ->

{37477865-A3F1-4772-AD43-AAFC6BCFF99F} -> MSXML 4.0 SP2 (KB927978) ->

{3D5E5C0A-5B36-4F98-99A7-287F7DBDCE03} -> Skype Plugin Manager ->

{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B} -> Google Earth ->

{457B00DC-314C-48E8-870E-BE04B2DCC1E9} -> Dolet Light for Finale ->

{4D719053-5593-11D3-8F25-0060085C1758} -> Microsoft AutoRoute 2001 ->

{4F41AD68-89F2-4262-A32C-2F70B01FCE9E} -> PhotorÈcit 3 pour Windows ->

{53EE9E42-CECB-4C92-BF76-9CA65DAF8F1C} -> FullDPAppQFolder ->

{54E3707F-808E-4fd4-95C9-15D1AB077E5D} -> NewCopy ->

{56EE8B17-8274-418d-89AC-C057C5DB251E} -> RandMap ->

{56F8AFC3-FA98-4ff1-9673-8A026CBF85BE} -> WebReg ->

{5A01C58E-B0EC-49b9-AD71-7C0468688087} -> CP_Package_Basic1 ->

{5B622B7A-60FB-4630-B11D-F121D20BCCD6} -> MarketResearch ->

{5B79CFD1-6845-4158-9D7D-6BE89DF2C135} -> HP PSC & OfficeJet 5.3.B ->

{5F26311C-B135-4F7F-B11E-8E650F83651E} -> DeviceFunctionQFolder ->

{66BA8C26-AFE4-4408-807B-43E76B57EF53} -> SkinsHP1 ->

{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8} -> eSupportQFolder ->

{6BB6627C-694F-4FDC-A3E5-C7F4BED4C724} -> DocProc ->

{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15} -> CustomerResearchQFolder ->

{7131646D-CD3C-40F4-97B9-CD9E4E6262EF} -> Microsoft .NET Framework 2.0 ->

{75DEB69B-4B6C-11D4-B0CE-00AA00BCC218} -> Microsoft Works 6.0 ->

{7850A6D2-CBEA-4728-9877-F1BEDEA9F619} -> AiOSoftware ->

{7C03270C-4FAB-4F5C-B10D-52FEDA190790} -> DocumentViewerQFolder ->

{7C9B95B7-B598-4398-B30F-7F6827192E6C} -> ProductContext ->

{7E27304E-BAA2-4d90-A34E-76641FAFABB4} -> CP_AtenaShokunin1Config ->

{9028040C-6000-11D3-8CFE-0050048383C9} -> Microsoft Office XP Professional avec FrontPage ->

{923A7F5A-1E8C-4FBE-8DF6-85940A60A79F} -> Readme ->

{9A394342-4A68-4EBA-85A6-55B559F4E700} -> Microsoft .NET Framework 1.1 French Language Pack ->

{A195B13E-A5E3-4BAF-A995-7F70F445CD06} -> ScannerCopy ->

{A5BB5365-EFB4-44c3-A7E2-EB59B7EFD23D} -> CueTour ->

{AB5D51AE-EBC3-438D-872C-705C7C2084B0} -> DeviceManagementQFolder ->

{AC76BA86-7AD7-1036-7B44-A70900000002} -> Adobe Reader 7.0.9 - FranÁais ->

{B4D279F1-4309-49cc-A4B5-3A0D2E59C7B5} -> PanoStandAlone ->

{B824B5C9-849F-4b9e-9EA7-6FD8CD8116DA} -> CP_Package_Variety2 ->

{B996AE66-10DB-4ac5-B151-E8B4BFBC42FC} -> BufferChm ->

{C506A18C-1469-4678-B094-F4EC9DAE6DB7} -> Scan ->

{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} -> Microsoft .NET Framework 1.1 ->

{CE24344F-DFD8-40C8-8FD8-C9740B5F25AC} -> Fax ->

{D085A1B6-90A4-11D3-82B7-00C04FA309DE} -> Microsoft Money 2001 ->

{D28FDA7D-15C6-48A2-9868-6BCB28BE6254} -> Microsoft Picture It! Photo 2001 ->

{E22885AB-B503-46E2-8437-73BBC6BC5487} -> Windows Live Messenger ->

{E3F90083-80D4-4b5a-87C7-E97E12F5516D} -> HPProductAssistant ->

{EA103B64-C0E4-4C0E-A506-751590E1653D} -> SolutionCenter ->

{F196AC50-7C95-42E1-9947-BDAB18BF3C8C} -> Microsoft .NET Framework 2.0 Language Pack - FRA ->

{F4C2E5F5-2970-45f4-ABD3-C180C4D961C4} -> Status ->

Audacity_is1 -> Audacity 1.2.4 ->

CDex -> CDex extraction audio ->

Ditoo(C:/Program files/Ditoo) -> Ditoo(C:/Program files/Ditoo) ->

Finale 2003 -> Finale 2003 ->

FranceTelecomUninstall_FTBrowser -> Navigateur Orange ->

GestionnaireInternet.exe -> Orange ->

HijackThis -> HijackThis 1.99.1 ->

HP DeskJet 690C Series -> HP DeskJet Serie 690C (Supprimer uniquement) ->

HP Document Viewer -> HP Document Viewer 5.3 ->

HP Imaging Device Functions -> HP Imaging Device Functions 5.3 ->

HP Photo & Imaging -> HP Image Zone 5.3 ->

HP PSC 1500 series_Driver -> HP PSC 1500 series ->

HP Solution Center & Imaging Support Tools -> HP Solution Center & Imaging Support Tools 5.3 ->

HPExtendedCapabilities -> HP Extended Capabilities 5.3 ->

InstallShield_{0B69DA57-BC7D-461D-B7D6-2AA9F08869CD} -> QuickTime ->

Isacompta Windows(C:/isacowp) -> Isacompta Windows(C:/isacowp) ->

KB873339 -> Correctif Windows XP - KB873339 ->

KB885835 -> Correctif Windows XP - KB885835 ->

KB885836 -> Correctif Windows XP - KB885836 ->

KB885884 -> Correctif Windows XP - KB885884 ->

KB886185 -> Correctif Windows XP - KB886185 ->

KB887472 -> Correctif Windows XP - KB887472 ->

KB887742 -> Correctif Windows XP - KB887742 ->

KB888113 -> Correctif Windows XP - KB888113 ->

KB888302 -> Correctif Windows XP - KB888302 ->

KB890046 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB890046) ->

KB890859 -> Correctif Windows XP - KB890859 ->

KB891122 -> Windows Media Format SDK Hotfix - KB891122 ->

KB891781 -> Correctif Windows XP - KB891781 ->

KB892130 -> Windows Genuine Advantage Validation Tool (KB892130) ->

KB893756 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB893756) ->

KB893803v2 -> Windows Installer 3.1 (KB893803) ->

KB894391 -> Mise ‡ jour pour Windows XP (KB894391) ->

KB896358 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB896358) ->

KB896422 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB896422) ->

KB896423 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB896423) ->

KB896424 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB896424) ->

KB896428 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB896428) ->

KB898461 -> Mise ‡ jour pour Windows XP (KB898461) ->

KB899587 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB899587) ->

KB899591 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB899591) ->

KB900485 -> Mise ‡ jour pour Windows XP (KB900485) ->

KB900725 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB900725) ->

KB901017 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB901017) ->

KB901214 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB901214) ->

KB902400 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB902400) ->

KB904706 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB904706) ->

KB904942 -> Mise ‡ jour pour Windows XP (KB904942) ->

KB905414 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB905414) ->

KB905749 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB905749) ->

KB908519 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB908519) ->

KB908531 -> Mise ‡ jour pour Windows XP (KB908531) ->

KB909520 -> Package de base Microsoft de service de chiffrement pour cartes ‡ puce ->

KB910437 -> Mise ‡ jour pour Windows XP (KB910437) ->

KB911280 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB911280) ->

KB911562 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB911562) ->

KB911564 -> Mise ‡ jour de sÈcuritÈ pour Lecteur Windows Media (KB911564) ->

KB911567 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB911567) ->

KB911927 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB911927) ->

KB912919 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB912919) ->

KB913433 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB913433) ->

KB913580 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB913580) ->

KB914388 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB914388) ->

KB914389 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB914389) ->

KB916281 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB916281) ->

KB916595 -> Mise ‡ jour pour Windows XP (KB916595) ->

KB917159 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB917159) ->

KB917344 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB917344) ->

KB917422 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB917422) ->

KB917734_WMP10 -> Mise ‡ jour de sÈcuritÈ pour Lecteur Windows Media 10 (KB917734) ->

KB917734_WMP9 -> Mise ‡ jour de sÈcuritÈ pour Lecteur Windows Media 9 (KB917734) ->

KB917953 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB917953) ->

KB918118 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB918118) ->

KB918439 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB918439) ->

KB918899 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB918899) ->

KB919007 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB919007) ->

KB920213 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB920213) ->

KB920214 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB920214) ->

KB920670 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB920670) ->

KB920683 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB920683) ->

KB920685 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB920685) ->

KB920872 -> Mise ‡ jour pour Windows XP (KB920872) ->

KB921398 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB921398) ->

KB921883 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB921883) ->

KB922582 -> Mise ‡ jour pour Windows XP (KB922582) ->

KB922616 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB922616) ->

KB922760 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB922760) ->

KB922819 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB922819) ->

KB923191 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB923191) ->

KB923414 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB923414) ->

KB923689 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB923689) ->

KB923694 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB923694) ->

KB923980 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB923980) ->

KB924191 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB924191) ->

KB924270 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB924270) ->

KB924496 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB924496) ->

KB924667 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB924667) ->

KB925398_WMP64 -> Mise ‡ jour de sÈcuritÈ pour Lecteur Windows Media 6.4 (KB925398) ->

KB925454 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB925454) ->

KB925486 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB925486) ->

KB925902 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB925902) ->

KB926255 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB926255) ->

KB926436 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB926436) ->

KB927779 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB927779) ->

KB927802 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB927802) ->

KB927891 -> Mise ‡ jour pour Windows XP (KB927891) ->

KB928090 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB928090) ->

KB928255 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB928255) ->

KB928365.T1_1ToU569_1 -> Security Update pour Microsoft .NET Framework 2.0 (KB928365) ->

KB928843 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB928843) ->

KB929123 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB929123) ->

KB929338 -> Mise ‡ jour pour Windows XP (KB929338) ->

KB929969 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB929969) ->

KB930178 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB930178) ->

KB930916 -> Mise ‡ jour pour Windows XP (KB930916) ->

KB931261 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB931261) ->

KB931768 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB931768) ->

KB931784 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB931784) ->

KB931836 -> Mise ‡ jour pour Windows XP (KB931836) ->

KB932168 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB932168) ->

KB933566 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB933566) ->

KB935839 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB935839) ->

KB935840 -> Mise ‡ jour de sÈcuritÈ pour Windows XP (KB935840) ->

LM 2.0 -> LM 2.0 ->

M928366 -> Microsoft .NET Framework 1.1 Hotfix (KB928366) ->

Machinist2DLL -> Machinist2DLL ->

Microsoft .NET Framework 1.1 (1033) -> Microsoft .NET Framework 1.1 ->

Microsoft .NET Framework 2.0 -> Microsoft .NET Framework 2.0 ->

Microsoft .NET Framework 2.0 Language Pack - FRA -> Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA ->

Mozilla (1.7.1) -> Mozilla (1.7.1) ->

MSNINST -> MSN ->

Navilog1 -> Navilog1 Version 2.0.5 ->

Nero - Burning Rom!UninstallKey -> Nero OEM ->

NeroVision!UninstallKey -> NeroVision Express 2 SE ->

NMPUninstallKey -> Nero Media Player ->

NVIDIA Drivers -> NVIDIA Drivers ->

PhotoFiltre -> PhotoFiltre ->

SharpEye Music Reader 2 -> SharpEye Music Reader 2 ->

Shockwave -> Shockwave ->

ShockwaveFlash -> Adobe Flash Player 9 ActiveX ->

ShrinkTo5Basic -> ShrinkTo5Basic ->

Skype_is1 -> Skype 3.0 ->

VIA Audio Driver Setup Program -> VIA Audio Driver Setup Program ->

VN_VUIns_Rhine_VIA -> VIA Rhine-Family Fast Ethernet Adapter ->

WGA -> Windows Genuine Advantage Validation Tool (KB892130) ->

WgaNotify -> Windows Genuine Advantage Notifications (KB905474) ->

Windows Media Format Runtime -> Windows Media Format Runtime ->

Windows Media Player -> Lecteur Windows Media†10 ->

WMCSetup -> Windows Media Connect ->

Works2001Setup -> Installation de Microsoft Works Suite 2001 ->

Yahoo! Companion -> Yahoo! Toolbar ->

Yahoo! Toolbar -> Yahoo! Toolbar ->

 

[Files/Folders - Created Within 30 days]

hiberfil.sys -> %SystemDrive%\hiberfil.sys -> [Ver = | Size = 536399872 bytes | Created Date = 02/01/1601 23:00:00 | Attr = HS]

Internet Logs -> %SystemRoot%\Internet Logs -> [Folder | Created Date = 30/07/2007 13:45:55 | Attr = ]

Process.exe -> %System32%\Process.exe -> http://www.beyondlogic.org [Ver = 2, 0, 0, 0 | Size = 53248 bytes | Created Date = 01/08/2007 18:31:43 | Attr = ]

vsdata.dll -> %System32%\vsdata.dll -> Zone Labs, LLC [Ver = 7.0.362.000 | Size = 83432 bytes | Created Date = 30/07/2007 13:45:54 | Attr = ]

vsutil_loc040c.dll -> %System32%\vsutil_loc040c.dll -> Zone Labs Inc. [Ver = 5.3.017.000 | Size = 54672 bytes | Created Date = 30/07/2007 13:47:50 | Attr = ]

vsxml.dll -> %System32%\vsxml.dll -> Zone Labs, LLC [Ver = 7.0.362.000 | Size = 99816 bytes | Created Date = 30/07/2007 13:46:53 | Attr = ]

zllictbl.dat -> %System32%\zllictbl.dat -> [Ver = | Size = 4212 bytes | Created Date = 30/07/2007 13:47:58 | Attr = H ]

ZoneLabs -> %System32%\ZoneLabs -> [Folder | Created Date = 30/07/2007 13:46:52 | Attr = ]

avg7core.sys -> %System32%\drivers\avg7core.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.476 | Size = 820928 bytes | Created Date = 30/07/2007 12:04:17 | Attr = ]

avg7rsw.sys -> %System32%\drivers\avg7rsw.sys -> GRISOFT, s.r.o. [Ver = 7,0,0,340 | Size = 4224 bytes | Created Date = 30/07/2007 12:04:25 | Attr = ]

avg7rsxp.sys -> %System32%\drivers\avg7rsxp.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.442 | Size = 27776 bytes | Created Date = 30/07/2007 12:04:25 | Attr = ]

avgtdi.sys -> %System32%\drivers\avgtdi.sys -> GRISOFT, s.r.o. [Ver = 7,0,0,346 | Size = 4960 bytes | Created Date = 30/07/2007 12:04:27 | Attr = ]

fidbox.dat -> %System32%\drivers\fidbox.dat -> [Ver = | Size = 176160 bytes | Created Date = 30/07/2007 20:27:24 | Attr = HS]

fidbox.idx -> %System32%\drivers\fidbox.idx -> [Ver = | Size = 4064 bytes | Created Date = 30/07/2007 20:27:33 | Attr = HS]

 

[Files/Folders - Modified Within 30 days]

boot.ini -> %SystemDrive%\boot.ini -> [Ver = | Size = 216 bytes | Modified Date = 04/08/2007 23:16:48 | Attr = HS]

Config.Msi -> %SystemDrive%\Config.Msi -> [Folder | Modified Date = 15/08/2007 09:54:42 | Attr = H ]

hiberfil.sys -> %SystemDrive%\hiberfil.sys -> [Ver = | Size = 536399872 bytes | Modified Date = 15/08/2007 09:53:40 | Attr = HS]

Program Files -> %ProgramFiles% -> [Folder | Modified Date = 31/07/2007 13:47:38 | Attr = R ]

sqmdata00.sqm -> %SystemDrive%\sqmdata00.sqm -> [Ver = | Size = 232 bytes | Modified Date = 30/07/2007 21:35:26 | Attr = H ]

sqmdata01.sqm -> %SystemDrive%\sqmdata01.sqm -> [Ver = | Size = 268 bytes | Modified Date = 30/07/2007 23:05:56 | Attr = H ]

sqmdata02.sqm -> %SystemDrive%\sqmdata02.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 00:13:22 | Attr = H ]

sqmdata03.sqm -> %SystemDrive%\sqmdata03.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 00:47:02 | Attr = H ]

sqmdata04.sqm -> %SystemDrive%\sqmdata04.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 01:02:22 | Attr = H ]

sqmdata05.sqm -> %SystemDrive%\sqmdata05.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 09:58:28 | Attr = H ]

sqmdata06.sqm -> %SystemDrive%\sqmdata06.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 10:09:10 | Attr = H ]

sqmdata07.sqm -> %SystemDrive%\sqmdata07.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 10:12:06 | Attr = H ]

sqmdata08.sqm -> %SystemDrive%\sqmdata08.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 10:32:00 | Attr = H ]

sqmdata09.sqm -> %SystemDrive%\sqmdata09.sqm -> [Ver = | Size = 268 bytes | Modified Date = 31/07/2007 13:37:46 | Attr = H ]

sqmdata10.sqm -> %SystemDrive%\sqmdata10.sqm -> [Ver = | Size = 232 bytes | Modified Date = 31/07/2007 13:37:46 | Attr = H ]

sqmdata11.sqm -> %SystemDrive%\sqmdata11.sqm -> [Ver = | Size = 268 bytes | Modified Date = 01/08/2007 00:01:22 | Attr = H ]

sqmdata12.sqm -> %SystemDrive%\sqmdata12.sqm -> [Ver = | Size = 268 bytes | Modified Date = 02/08/2007 22:22:54 | Attr = H ]

sqmdata13.sqm -> %SystemDrive%\sqmdata13.sqm -> [Ver = | Size = 268 bytes | Modified Date = 03/08/2007 19:18:14 | Attr = H ]

sqmdata14.sqm -> %SystemDrive%\sqmdata14.sqm -> [Ver = | Size = 268 bytes | Modified Date = 04/08/2007 11:49:30 | Attr = H ]

sqmdata15.sqm -> %SystemDrive%\sqmdata15.sqm -> [Ver = | Size = 268 bytes | Modified Date = 04/08/2007 11:54:12 | Attr = H ]

sqmdata16.sqm -> %SystemDrive%\sqmdata16.sqm -> [Ver = | Size = 268 bytes | Modified Date = 04/08/2007 11:56:32 | Attr = H ]

sqmdata17.sqm -> %SystemDrive%\sqmdata17.sqm -> [Ver = | Size = 268 bytes | Modified Date = 04/08/2007 23:15:36 | Attr = H ]

sqmdata18.sqm -> %SystemDrive%\sqmdata18.sqm -> [Ver = | Size = 268 bytes | Modified Date = 04/08/2007 23:17:12 | Attr = H ]

sqmdata19.sqm -> %SystemDrive%\sqmdata19.sqm -> [Ver = | Size = 268 bytes | Modified Date = 30/07/2007 22:58:40 | Attr = H ]

sqmnoopt00.sqm -> %SystemDrive%\sqmnoopt00.sqm -> [Ver = | Size = 244 bytes | Modified Date = 30/07/2007 22:58:40 | Attr = H ]

sqmnoopt01.sqm -> %SystemDrive%\sqmnoopt01.sqm -> [Ver = | Size = 244 bytes | Modified Date = 30/07/2007 23:05:56 | Attr = H ]

sqmnoopt02.sqm -> %SystemDrive%\sqmnoopt02.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 00:13:22 | Attr = H ]

sqmnoopt03.sqm -> %SystemDrive%\sqmnoopt03.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 00:47:02 | Attr = H ]

sqmnoopt04.sqm -> %SystemDrive%\sqmnoopt04.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 01:02:22 | Attr = H ]

sqmnoopt05.sqm -> %SystemDrive%\sqmnoopt05.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 09:58:28 | Attr = H ]

sqmnoopt06.sqm -> %SystemDrive%\sqmnoopt06.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 10:09:10 | Attr = H ]

sqmnoopt07.sqm -> %SystemDrive%\sqmnoopt07.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 10:12:06 | Attr = H ]

sqmnoopt08.sqm -> %SystemDrive%\sqmnoopt08.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 10:32:00 | Attr = H ]

sqmnoopt09.sqm -> %SystemDrive%\sqmnoopt09.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 13:37:46 | Attr = H ]

sqmnoopt10.sqm -> %SystemDrive%\sqmnoopt10.sqm -> [Ver = | Size = 244 bytes | Modified Date = 31/07/2007 13:37:46 | Attr = H ]

sqmnoopt11.sqm -> %SystemDrive%\sqmnoopt11.sqm -> [Ver = | Size = 244 bytes | Modified Date = 01/08/2007 00:01:22 | Attr = H ]

sqmnoopt12.sqm -> %SystemDrive%\sqmnoopt12.sqm -> [Ver = | Size = 244 bytes | Modified Date = 02/08/2007 22:22:54 | Attr = H ]

sqmnoopt13.sqm -> %SystemDrive%\sqmnoopt13.sqm -> [Ver = | Size = 244 bytes | Modified Date = 03/08/2007 19:18:14 | Attr = H ]

sqmnoopt14.sqm -> %SystemDrive%\sqmnoopt14.sqm -> [Ver = | Size = 244 bytes | Modified Date = 04/08/2007 11:49:30 | Attr = H ]

sqmnoopt15.sqm -> %SystemDrive%\sqmnoopt15.sqm -> [Ver = | Size = 244 bytes | Modified Date = 04/08/2007 11:54:12 | Attr = H ]

sqmnoopt16.sqm -> %SystemDrive%\sqmnoopt16.sqm -> [Ver = | Size = 244 bytes | Modified Date = 04/08/2007 11:56:32 | Attr = H ]

sqmnoopt17.sqm -> %SystemDrive%\sqmnoopt17.sqm -> [Ver = | Size = 244 bytes | Modified Date = 04/08/2007 23:15:36 | Attr = H ]

sqmnoopt18.sqm -> %SystemDrive%\sqmnoopt18.sqm -> [Ver = | Size = 244 bytes | Modified Date = 04/08/2007 23:17:12 | Attr = H ]

sqmnoopt19.sqm -> %SystemDrive%\sqmnoopt19.sqm -> [Ver = | Size = 244 bytes | Modified Date = 30/07/2007 21:35:26 | Attr = H ]

WINDOWS -> %SystemRoot% -> [Folder | Modified Date = 15/08/2007 09:53:58 | Attr = ]

bootstat.dat -> %SystemRoot%\bootstat.dat -> [Ver = | Size = 2048 bytes | Modified Date = 15/08/2007 09:53:42 | Attr = S]

inf -> %SystemRoot%\inf -> [Folder | Modified Date = 30/07/2007 14:47:30 | Attr = H ]

Installer -> %SystemRoot%\Installer -> [Folder | Modified Date = 15/08/2007 09:54:42 | Attr = HS]

Internet Logs -> %SystemRoot%\Internet Logs -> [Folder | Modified Date = 31/07/2007 00:45:58 | Attr = ]

Minidump -> %SystemRoot%\Minidump -> [Folder | Modified Date = 04/08/2007 11:57:28 | Attr = ]

NeroDigital.ini -> %SystemRoot%\NeroDigital.ini -> [Ver = | Size = 135 bytes | Modified Date = 23/07/2007 12:16:52 | Attr = ]

Prefetch -> %SystemRoot%\Prefetch -> [Folder | Modified Date = 15/08/2007 10:17:38 | Attr = ]

system -> %SystemRoot%\system -> [Folder | Modified Date = 30/07/2007 21:23:44 | Attr = ]

system.ini -> %SystemRoot%\system.ini -> [Ver = | Size = 227 bytes | Modified Date = 04/08/2007 23:16:48 | Attr = ]

system32 -> %System32% -> [Folder | Modified Date = 04/08/2007 11:48:34 | Attr = ]

Temp -> %SystemRoot%\Temp -> [Folder | Modified Date = 15/08/2007 10:17:50 | Attr = ]

win.ini -> %SystemRoot%\win.ini -> [Ver = | Size = 628 bytes | Modified Date = 15/08/2007 09:54:42 | Attr = ]

SA.DAT -> %SystemRoot%\tasks\SA.DAT -> [Ver = | Size = 6 bytes | Modified Date = 15/08/2007 09:53:44 | Attr = H ]

CatRoot -> %System32%\CatRoot -> [Folder | Modified Date = 31/07/2007 00:46:10 | Attr = ]

CatRoot2 -> %System32%\CatRoot2 -> [Folder | Modified Date = 31/07/2007 00:46:08 | Attr = ]

drivers -> %System32%\drivers -> [Folder | Modified Date = 31/07/2007 10:15:42 | Attr = ]

nvapps.xml -> %System32%\nvapps.xml -> [Ver = | Size = 43573 bytes | Modified Date = 15/08/2007 09:53:56 | Attr = ]

wpa.dbl -> %System32%\wpa.dbl -> [Ver = | Size = 13646 bytes | Modified Date = 15/08/2007 09:53:58 | Attr = ]

zllictbl.dat -> %System32%\zllictbl.dat -> [Ver = | Size = 4212 bytes | Modified Date = 30/07/2007 14:59:20 | Attr = H ]

ZoneLabs -> %System32%\ZoneLabs -> [Folder | Modified Date = 31/07/2007 00:46:16 | Attr = ]

avg7core.sys -> %System32%\drivers\avg7core.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.476 | Size = 820928 bytes | Modified Date = 30/07/2007 13:04:18 | Attr = ]

avg7rsw.sys -> %System32%\drivers\avg7rsw.sys -> GRISOFT, s.r.o. [Ver = 7,0,0,340 | Size = 4224 bytes | Modified Date = 30/07/2007 13:04:26 | Attr = ]

avg7rsxp.sys -> %System32%\drivers\avg7rsxp.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.442 | Size = 27776 bytes | Modified Date = 30/07/2007 13:04:26 | Attr = ]

avgtdi.sys -> %System32%\drivers\avgtdi.sys -> GRISOFT, s.r.o. [Ver = 7,0,0,346 | Size = 4960 bytes | Modified Date = 30/07/2007 13:04:28 | Attr = ]

fidbox.dat -> %System32%\drivers\fidbox.dat -> [Ver = | Size = 176160 bytes | Modified Date = 31/07/2007 00:45:42 | Attr = HS]

fidbox.idx -> %System32%\drivers\fidbox.idx -> [Ver = | Size = 4064 bytes | Modified Date = 31/07/2007 00:39:56 | Attr = HS]

 

[File String Scan - Non-Microsoft Only]

@Alternate Data Stream - 0 bytes -> %SystemRoot%\Thumbs.db:encryptable ->

PEC2 , -> %System32%\dfrg.msc -> [Ver = | Size = 41131 bytes | Modified Date = 05/08/2004 14:00:00 | Attr = ]

winsync , -> %System32%\wbdbase.deu -> [Ver = | Size = 1309184 bytes | Modified Date = 05/08/2004 14:00:00 | Attr = ]

WSUD , UPX0 , -> %System32%\dllcache\hwxjpn.dll -> [Ver = | Size = 13463552 bytes | Modified Date = 05/08/2004 14:00:00 | Attr = ]

UPX0 , -> %System32%\dllcache\NT5IIS.CAT -> [Ver = | Size = 809394 bytes | Modified Date = 05/08/2004 14:00:00 | Attr = ]

UPX! , FSG! , PEC2 , aspack , -> %System32%\drivers\avg7core.sys -> GRISOFT, s.r.o. [Ver = 7.5.0.476 | Size = 820928 bytes | Modified Date = 30/07/2007 13:04:18 | Attr = ]

 

< End of report >