ben non ça reapparait !!!!
dernir blacklight
08/21/07 12:33:07 [Info]: BlackLight Engine 1.0.64 initialized
08/21/07 12:33:07 [Info]: OS: 5.1 build 2600 (Service Pack 2)
08/21/07 12:33:07 [Note]: 7019 4
08/21/07 12:33:07 [Note]: 7005 0
08/21/07 12:33:09 [Note]: 7006 0
08/21/07 12:33:09 [Note]: 7011 456
08/21/07 12:33:10 [Note]: 7026 0
08/21/07 12:33:10 [Note]: 7026 0
08/21/07 12:33:10 [Note]: 7024 3
08/21/07 12:33:10 [Info]: Hidden process: C:\C\WINDOWS\system32\drivers\hidr.exe
08/21/07 12:33:13 [Note]: FSRAW library version 1.7.1022
08/21/07 12:33:14 [Note]: 10002 2
08/21/07 12:33:14 [Note]: 10002 2
08/21/07 12:33:54 [Info]: Hidden file: c:\C\WINDOWS\system32\drivers\srosa.sys
08/21/07 12:33:54 [Note]: 10002 2
08/21/07 12:33:54 [Info]: Hidden file: C:\C\WINDOWS\system32\drivers\hidr.exe
08/21/07 12:33:54 [Note]: 10002 2
08/21/07 12:37:58 [Note]: 7007 0
re otmoveit.....
C:\C\WINDOWS\system32\drivers\hidr.exe moved successfully.
c:\C\WINDOWS\system32\drivers\srosa.sys moved successfully.
File/Folder C:\C\WINDOWS\system32\drivers\hidr.exe not found.
Created on 08/21/2007 12:39:11
!!!!!!
impossible d'installer antivir !!
Modérateur: Modérateurs
44 messages
• Page 2 sur 3 • 1, 2, 3
par stephmac » 21 Aoû 2007 11:48
-
stephmac - Maître Libellulien
- Messages: 623
- Inscription: 24 Juin 2005 17:48
par stephmac » 21 Aoû 2007 12:14
que penses tu de cette méthode la ?????
trouvée ici : http://www.sur-la-toile.com/viewTopic_5 ... virus.html
-----------------------------------------------------------
Relancer Blacklight
A la fin du scan ==> Next
sélectionner ceci:
C:\WINDOWS\system32\hldrrr.exe
c:\WINDOWS\system32\wintems.exe
c:\Documents and Settings\Administrateur\Application Data\hidires\hidr.exe
c:\Documents and Settings\Administrateur\Application Data\hidires\m_hook.sys
==> Rename
Les applications auront alors une extension en .ren
En ayant accés aux fichiers cachés
Démarrer =>Poste de travail =>Outils =>Options des dossiers =>Affichage
Cocher = Afficher les fichiers et dossiers cachés
= Supprimer
hidires.ren ==> dans c:\Documents and Settings\Administrateur\Application Data
et
hldrrr.exe.ren
wintems.exe.ren
les 2 dans dans : C:\Windows\system32
Et
Aller à C:\ WINDOWS\Prefetch\
vider tout le contenu de Prefetch
-------
puis
Télécharger et installer
RegSeeker
=Le lancer
=Dans language mettre en français
=Nettoyer le registre==> tout cocher y compris : backup avant suppression ( en bas)
= Ok ==> à la fin :clic Sélectionner tout , encore Sélectionner tout
= dans la partie devenue jaune ==> Clic Droit Supprimer les éléments sélectionnés
==> Ok
--------
refaire un rapport blacklight
--------
Profil Citer
sernaj Envoyé le 18-02-2007 à 21:50
Avatar de sernaj
Nouveau
Intérêt de sernaj pour l'informatique et le dépannage.
Inscrit(e) le 17-02-2007
Messages : 5
Hors ligne
message pour land3
MILLE MERCI TOUT A FINALEMENT MARCHE
TU ES UN CHEF
merci pour le temps passé
SUPER SYMPA
trouvée ici : http://www.sur-la-toile.com/viewTopic_5 ... virus.html
-----------------------------------------------------------
Relancer Blacklight
A la fin du scan ==> Next
sélectionner ceci:
C:\WINDOWS\system32\hldrrr.exe
c:\WINDOWS\system32\wintems.exe
c:\Documents and Settings\Administrateur\Application Data\hidires\hidr.exe
c:\Documents and Settings\Administrateur\Application Data\hidires\m_hook.sys
==> Rename
Les applications auront alors une extension en .ren
En ayant accés aux fichiers cachés
Démarrer =>Poste de travail =>Outils =>Options des dossiers =>Affichage
Cocher = Afficher les fichiers et dossiers cachés
= Supprimer
hidires.ren ==> dans c:\Documents and Settings\Administrateur\Application Data
et
hldrrr.exe.ren
wintems.exe.ren
les 2 dans dans : C:\Windows\system32
Et
Aller à C:\ WINDOWS\Prefetch\
vider tout le contenu de Prefetch
-------
puis
Télécharger et installer
RegSeeker
=Le lancer
=Dans language mettre en français
=Nettoyer le registre==> tout cocher y compris : backup avant suppression ( en bas)
= Ok ==> à la fin :clic Sélectionner tout , encore Sélectionner tout
= dans la partie devenue jaune ==> Clic Droit Supprimer les éléments sélectionnés
==> Ok
--------
refaire un rapport blacklight
--------
Profil Citer
sernaj Envoyé le 18-02-2007 à 21:50
Avatar de sernaj
Nouveau
Intérêt de sernaj pour l'informatique et le dépannage.
Inscrit(e) le 17-02-2007
Messages : 5
Hors ligne
message pour land3
MILLE MERCI TOUT A FINALEMENT MARCHE
TU ES UN CHEF
merci pour le temps passé
SUPER SYMPA
-
stephmac - Maître Libellulien
- Messages: 623
- Inscription: 24 Juin 2005 17:48
-
stephmac - Maître Libellulien
- Messages: 623
- Inscription: 24 Juin 2005 17:48
par Falkra » 21 Aoû 2007 16:17
C'est le dernier Bagle, il utilise des techniques rootkit et se recrée. si tu n'as pas la dernière procédure, il reviendra, et les noms de fichiers changent souvent, à une lettre près.
Les fichiers que tu trouveras ici et là dans des procédures ne correspondront pas aux tiens, surtout vu ton installation windows dans un dossier C du disque dur C.
On va reprnedre depuis le début, télécharge et lance DiagHelp comme montré dans ce tuto : http://www.malekal.com/DiagHelp/DiagHelp.php
Ne lance que l'option 1 et poste le rapport dans ton prochain message stp. Attention: n'oublie pas d'appuyer sur une touche lorsque cela te sera demandé à la fin du rapport Catchme.
@ toute, comme ça on aura tout et on le shootera d'un coup.
Les fichiers que tu trouveras ici et là dans des procédures ne correspondront pas aux tiens, surtout vu ton installation windows dans un dossier C du disque dur C.
On va reprnedre depuis le début, télécharge et lance DiagHelp comme montré dans ce tuto : http://www.malekal.com/DiagHelp/DiagHelp.php
Ne lance que l'option 1 et poste le rapport dans ton prochain message stp. Attention: n'oublie pas d'appuyer sur une touche lorsque cela te sera demandé à la fin du rapport Catchme.
@ toute, comme ça on aura tout et on le shootera d'un coup.
-
Falkra - Admin libellules.ch
- Messages: 24424
- Inscription: 30 Jan 2005 13:44
- Localisation: 127.0.0.1
par stephmac » 21 Aoû 2007 16:37
le scan a bien démarré.............mais voici ce qui apparait durant celui-ci !!!
-
stephmac - Maître Libellulien
- Messages: 623
- Inscription: 24 Juin 2005 17:48
par Falkra » 21 Aoû 2007 16:41
Aïe. Fais fermer (là pas le choix) essaie de relancer après. Le virus a planté (héhé). N'oublie pas d'appuyer sur entrée quand demandé à l'écran rouge catchme.
-
Falkra - Admin libellules.ch
- Messages: 24424
- Inscription: 30 Jan 2005 13:44
- Localisation: 127.0.0.1
par stephmac » 21 Aoû 2007 16:47
j'ai fermé ces deux fenetres ,
voila ce qu'il ma mit comme fenêtre suivante
et voici ce que me donne le bloc - notes
heuuuu !!!!! bon courage pour l'analyse !!!!
DiagHelp version v1.1.2 - http://www.malekal.com
excute le 21/08/2007 à 17:26:05,31
Liste des derniers fichies modifies/crees dans windir\system32
C:\C\WINDOWS\System32/drivers\tmcomm.sys -->19/08/2007 22:41:41
C:\C\WINDOWS\System32/drivers\MxlW2k.sys -->17/08/2007 22:12:53
C:\C\WINDOWS\System32/drivers\aswRdr.sys -->28/07/2007 00:00:39
C:\C\WINDOWS\System32/drivers\pcouffin.sys -->09/07/2007 20:53:10
C:\C\WINDOWS\System32/drivers\avg7core.sys -->07/07/2007 15:39:43
C:\C\WINDOWS\System32/drivers\avgtdi.sys -->07/07/2007 14:39:57
C:\C\WINDOWS\System32/drivers\avg7rsxp.sys -->07/07/2007 14:39:56
C:\C\WINDOWS\System32\LVCOMSX.LOG -->21/08/2007 17:22:15
C:\C\WINDOWS\System32\CONFIG.NT -->21/08/2007 02:43:03
C:\C\WINDOWS\System32\wpa.dbl -->06/08/2007 14:51:04
C:\C\WINDOWS\System32\DonationCoder_ScreenshotCaptor_InstallInfo.dat -->03/08/2007 11:32:50
C:\C\WINDOWS\System32\aswBoot.exe -->28/07/2007 00:07:21
C:\C\WINDOWS\System32\jupdate-1.6.0_02-b06.log -->20/07/2007 22:17:41
C:\C\WINDOWS\System32\mlfcache.dat -->17/07/2007 20:31:32
C:\C\WINDOWS\System32\FNTCACHE.DAT -->17/07/2007 14:55:29
C:\C\WINDOWS\System32\javaws.exe -->12/07/2007 02:22:38
C:\C\WINDOWS\System32\javacpl.cpl -->12/07/2007 02:22:36
C:\C\WINDOWS\System32\javaw.exe -->12/07/2007 01:22:04
C:\C\WINDOWS\System32\java.exe -->12/07/2007 01:22:00
C:\C\WINDOWS\System32\lvcoinst.log -->10/07/2007 23:37:09
C:\C\WINDOWS\System32\msssc.dll -->09/07/2007 21:27:11
C:\C\WINDOWS\System32\BASSMOD.dll -->09/07/2007 20:54:15
C:\C\WINDOWS\System32\PerfStringBackup.INI -->08/07/2007 00:35:06
C:\C\WINDOWS\System32\perfh00C.dat -->08/07/2007 00:35:06
C:\C\WINDOWS\System32\perfh009.dat -->08/07/2007 00:35:06
C:\C\WINDOWS\System32\perfc00C.dat -->08/07/2007 00:35:06
C:\C\WINDOWS\System32\perfc009.dat -->08/07/2007 00:35:06
C:\C\WINDOWS\System32\h323log.txt -->06/07/2007 19:06:45
C:\C\WINDOWS\System32\$winnt$.inf -->06/07/2007 17:26:51
C:\C\WINDOWS\System32\nscompat.tlb -->06/07/2007 17:25:43
C:\C\WINDOWS\System32\amcompat.tlb -->06/07/2007 17:25:43
C:\C\WINDOWS\System32\WNASPI2K.BAK -->06/07/2007 17:18:08
C:\C\WINDOWS\0.log -->21/08/2007 12:05:28
C:\C\WINDOWS\wiaservc.log -->21/08/2007 12:05:23
C:\C\WINDOWS\wiadebug.log -->21/08/2007 12:05:22
C:\C\WINDOWS\bootstat.dat -->21/08/2007 12:05:03
C:\C\WINDOWS\WindowsUpdate.log -->21/08/2007 12:04:15
C:\C\WINDOWS\SchedLgU.Txt -->21/08/2007 12:04:15
C:\C\WINDOWS\setupact.log -->21/08/2007 03:13:41
C:\C\WINDOWS\win.ini -->20/08/2007 20:58:57
C:\C\WINDOWS\system.ini -->20/08/2007 20:58:57
C:\C\WINDOWS\setupapi.log -->20/08/2007 15:13:16
C:\C\WINDOWS\wmsetup.log -->19/08/2007 17:42:32
C:\C\WINDOWS\QTFont.qfn -->16/08/2007 01:56:14
C:\C\WINDOWS\Speeditup Free Setup Log.txt -->15/08/2007 11:14:06
C:\C\WINDOWS\setuperr.log -->15/08/2007 00:09:29
C:\C\WINDOWS\QTFont.for -->07/08/2007 23:16:04
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\C\WINDOWS\system
10/09/1999 13:06 4 672 wowpost.exe
1 fichier(s) 4 672 octets
0 Rép(s) 6 319 333 376 octets libres
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\C\WINDOWS\system32
04/08/2004 02:54 6 144 csrss.exe
1 fichier(s) 6 144 octets
0 Rép(s) 6 319 333 376 octets libres
Contenu de Downloaded Program Files
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\C\WINDOWS\Downloaded Program Files
07/08/2007 22:26 <REP> .
07/08/2007 22:26 <REP> ..
06/07/2007 17:12 65 desktop.ini
25/07/2002 17:13 24 576 dwusplay.dll
25/07/2002 17:13 196 608 dwusplay.exe
25/07/2002 17:05 172 032 isusweb.dll
20/01/2000 15:25 1 162 Microsoft XML Parser for Java.osd
11/06/2007 12:21 5 021 swflash.inf
6 fichier(s) 399 464 octets
Total des fichiers listés :
6 fichier(s) 399 464 octets
2 Rép(s) 6 319 329 280 octets libres
Recherche de rootkit! (Merci S!Ri)
Recherche d'infections connues
Export des clefs sensibles..
Liste des fichiers en exception sur le pare-feu XP SP2
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\\PROGRAMMES\\emule 0.48a\\eMule\\emule.exe"="D:\\PROGRAMMES\\emule 0.48a\\eMule\\emule.exe:*:Enabled:eMule"
"D:\\PROGRAMMES\\Shareaza\\Shareaza.exe"="D:\\PROGRAMMES\\Shareaza\\Shareaza.exe:*:Enabled:Shareaza"
"D:\\PROGRAMMES\\Soulseek\\slsk.exe"="D:\\PROGRAMMES\\Soulseek\\slsk.exe:*:Enabled:SoulSeek"
"C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"="C:\\Program Files\\IncrediMail\\bin\\IMApp.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"="C:\\Program Files\\IncrediMail\\bin\\IncMail.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"="C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Program Files\\IncrediMail\\bin\\ImLc.exe"="C:\\Program Files\\IncrediMail\\bin\\ImLc.exe:*:Enabled:IncrediMail"
"D:\\PROGRAMMES\\Opera\\Opera.exe"="D:\\PROGRAMMES\\Opera\\Opera.exe:*:Enabled:Opera Internet Browser"
"C:\\Program Files\\IncrediMail\\bin\\ImPackr.exe"="C:\\Program Files\\IncrediMail\\bin\\ImPackr.exe:*:Enabled:IncrediMail"
"D:\\PROGRAMMES\\avant browser\\avant.exe"="D:\\PROGRAMMES\\avant browser\\avant.exe:*:Enabled:Avant Browser"
"D:\\PROGRAMMES\\uTorrent\\uTorrent.exe"="D:\\PROGRAMMES\\uTorrent\\uTorrent.exe:*:Enabled:µTorrent"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
Export de la clef SharedTaskScheduler
[SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"
Rechercher adresses sensibles dans le fichier HOSTS...
REGEDIT4
[taskmgr.exe]
catchme 0.3.1066 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-08-21 17:26:13
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA]
"NextInstance"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000000
"ImagePath"=str(2):"\??\C:\C\WINDOWS\system32\drivers\srosa.sys"
"DisplayName"="Megadrv3"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA]
"NextInstance"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000000
"ImagePath"=str(2):"\??\C:\C\WINDOWS\system32\drivers\srosa.sys"
"DisplayName"="Megadrv3"
scanning hidden registry entries ...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\7.0\ACDInTouch\FR\StaticPages\Images\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\7.0\ACDInTouch\FR\StaticPages\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\7.0\ACDInTouch\FR\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\7.0\ACDInTouch\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\7.0\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\3.1\ACDInTouch\FR\StaticPages\Images\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\3.1\ACDInTouch\FR\StaticPages\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\3.1\ACDInTouch\FR\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\3.1\ACDInTouch\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\3.1\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\ACD Systems\"=""
"C:\C\WINDOWS\Installer\{D1D9AE2B-A4E7-41F2-938E-261D7A407EB9}\"=""
"C:\Program Files\Executive Software\Diskeeper\"="1"
"C:\Program Files\Executive Software\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Diskeeper\"=""
"C:\C\WINDOWS\Installer\{3B4C8C9E-348C-4341-AF24-9BB00D27332E}\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\"="1"
"C:\C\WINDOWS\Microsoft.NET\Framework\"="1"
"C:\C\WINDOWS\Microsoft.NET\"="1"
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ASP.NETClientFiles\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CONFIG\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.0.3705\"=""
"C:\C\WINDOWS\system32\MUI\0409\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MUI\0409\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MUI\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c509\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c59x\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c90x\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM cc10\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM EL99x with 3XP\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207D\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1657\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1658\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN166X\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\AMD PCNET Family\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\AMD ISANET Family\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\CATC USB Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Compaq N100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\common\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Corega FastEthernet PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWorks ISA (DE305)\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS EISA (DE425)\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE434-DE435\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE450\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE500\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS 2\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS 3\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DE100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DE150\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DE400\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DE400 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DFE500-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DFE530-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DFE550-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DFE650-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DMF560-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DMF560-TX Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DT620\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DT620 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DT650\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\HP EN1207D-TX PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\IBM Crystal LAN Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\IBM EtherExpress PRO 100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\IBM EtherJet 10-100 PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel EtherExpress PRO 10 PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel EtherExpress PRO 10 ISA\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Kingston EtheRx PCI 10-100 Fast Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Kingston EtheRx KNE100TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Kingston EtheRx KNE110TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Kingston EtheRx KNE110TX Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Kingston KNE120TX Fast EtheRx 10-100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD 10-100AL\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD-CDF\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD-CDF Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD-PCI2TL Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD-PCI2TL\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Melco LPC2-T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Melco LPC3-T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Melco LPC3-T NEC\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Multicard Template\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\NETGEAR FA311-FA312 PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC3210\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC217x\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2183-OC2185\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC22xx\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2315\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2325\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2326\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2335\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC237x\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC3163\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom RF2327\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom RF3118\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom RF314X\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom RF3540\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW9501F Fast Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FW-100TX Fast Ethernet Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\PXE Packet Driver\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\SN 2000\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\SN 9000\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\SN 91c95\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Tomas Conrad Tc4048 PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Tomas Conrad Tc4145 ISA\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Tomas Conrad Tx048 10-100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\WaveLAN Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom CBE10-100BTX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom CBE10-100BTX Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom Ethernet II PS\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom Ethernet II PS Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom PE3-10Bx\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom RE10 - RE100 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom RE10BT\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom External Pocket Token Ring I II III\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FNW9x00T - ENW8300T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FNW9x00T - ENW8300T Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FW-100TX Fast Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c575 (fe575c) CardBus\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c920 Integrated\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3ccfe574b\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c359 Token Ring\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom Ethernet 10-100 + Modem\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom Re-100Btx + Ce3B-100Btx\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\common\pcdos\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c509 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c59x Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c689x TokenLink III\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c319 Token Ring\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1200\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1200 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1203\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1203 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1204\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1204 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207B\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207C\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207C Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207D Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207D-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207F\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207F Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207TX Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1208\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1208 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1625\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1625 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1640\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1640 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1641\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1642\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1646\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1650\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1651 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1651\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1652\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1652 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1650 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1653\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1656\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1653 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1656 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1657 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1658 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN166X Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1843\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1844\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2216\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2216 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2218\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2218 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2228\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2228 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2320 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2328\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\AMD 2100 AM7990\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWorks ISA (DE305) Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE500 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE450 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC Fast EtherWorks (DE500)\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\IBM 10-100 Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel PRO 100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel PRO 1000\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel TokenExpress 16p\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel TokenExpress Pro\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD 10-100AL Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC212x\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC213X\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2163\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2376\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC3135\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC3136-3137-3118-32XX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC3139-3540-4XXX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW2400P-2T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW2400PT\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW2401PT-2T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW83002T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW8300T-2T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FNW9702T-3T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FNW9802T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\SN 2000p\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\SN 2000p Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Realtek RTL8139 Fast Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3Com 3c98xx\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c556\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c556 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Realtek RTL8029 Fast Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Norton Ghost 2003\"=""
"C:\C\WINDOWS\Installer\{BBAAACFA-B012-4367-ADDA-4DDCDFD48F96}\"=""
"C:\C\WINDOWS\Installer\{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\TuneUp Utilities 2007\Utilities\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\TuneUp Utilities 2007\"="1"
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\TuneUp Software\TuneUp Utilities\Web\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\The Bat! E-Mail\"=""
"C:\C\WINDOWS\Installer\{40BF1520-BAB7-4B38-A2FB-C474A888FACA}\"=""
"C:\Program Files\Google\Google Earth\"="1"
"C:\Program Files\Google\Google Earth\alchemy\"="1"
"C:\Program Files\Google\Google Earth\alchemy\dx\"="1"
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Google\"="1"
"C:\Program Files\Google\Google Earth\alchemy\ogl\"="1"
"C:\Program Files\Google\Google Earth\alchemy\optimizations\"="1"
"C:\Program Files\Google\Google Earth\kvw\"=""
"C:\Program Files\Google\Google Earth\lang\"=""
"C:\Program Files\Google\Google Earth\res\"=""
"C:\Program Files\Google\Google Earth\res\ad.country\"=""
"C:\Program Files\Google\Google Earth\res\ae.country\"=""
"C:\Program Files\Google\Google Earth\res\af.country\"=""
"C:\Program Files\Google\Google Earth\res\ag.country\"=""
"C:\Program Files\Google\Google Earth\res\ai.country\"=""
"C:\Program Files\Google\Google Earth\res\al.country\"=""
"C:\Program Files\Google\Google Earth\res\am.country\"=""
"C:\Program Files\Google\Google Earth\res\an.country\"=""
"C:\Program Files\Google\Google Earth\res\ao.country\"=""
"C:\Program Files\Google\Google Earth\res\aq.country\"=""
"C:\Program Files\Google\Google Earth\res\ar.country\"=""
"C:\Program Files\Google\Google Earth\res\ar.locale\"=""
"C:\Program Files\Google\Google Earth\res\as.country\"=""
"C:\Program Files\Google\Google Earth\res\at.country\"=""
"C:\Program Files\Google\Google Earth\res\au.country\"=""
"C:\Program Files\Google\Google Earth\res\aw.country\"=""
"C:\Program Files\Google\Google Earth\res\ax.country\"=""
"C:\Program Files\Google\Google Earth\res\az.country\"=""
"C:\Program Files\Google\Google Earth\res\ba.country\"=""
"C:\Program Files\Google\Google Earth\res\bb.country\"=""
"C:\Program Files\Google\Google Earth\res\bd.country\"=""
"C:\Program Files\Google\Google Earth\res\be.country\"=""
"C:\Program Files\Google\Google Earth\res\bf.country\"=""
"C:\Program Files\Google\Google Earth\res\bg.country\"=""
"C:\Program Files\Google\Google Earth\res\bh.country\"=""
"C:\Program Files\Google\Google Earth\res\bi.country\"=""
"C:\Program Files\Google\Google Earth\res\bj.country\"=""
"C:\Program Files\Google\Google Earth\res\bm.country\"=""
"C:\Program Files\Google\Google Earth\res\bn.country\"=""
"C:\Program Files\Google\Google Earth\res\bo.country\"=""
"C:\Program Files\Google\Google Earth\res\br.country\"=""
"C:\Program Files\Google\Google Earth\res\bs.country\"=""
"C:\Program Files\Google\Google Earth\res\bt.country\"=""
"C:\Program Files\Google\Google Earth\res\bv.country\"=""
"C:\Program Files\Google\Google Earth\res\bw.country\"=""
"C:\Program Files\Google\Google Earth\res\by.country\"=""
"C:\Program Files\Google\Google Earth\res\bz.country\"=""
"C:\Program Files\Google\Google Earth\res\ca.country\"=""
"C:\Program Files\Google\Google Earth\res\cc.country\"=""
"C:\Program Files\Google\Google Earth\res\cd.country\"=""
"C:\Program Files\Google\Google Earth\res\cf.country\"=""
"C:\Program Files\Google\Google Earth\res\cg.country\"=""
"C:\Program Files\Google\Google Earth\res\ch.country\"=""
"C:\Program Files\Google\Google Earth\res\ci.country\"=""
"C:\Program Files\Google\Google Earth\res\ck.country\"=""
"C:\Program Files\Google\Google Earth\res\cl.country\"=""
"C:\Program Files\Google\Google Earth\res\cm.country\"=""
"C:\Program Files\Google\Google Earth\res\cn.country\"=""
"C:\Program Files\Google\Google Earth\res\co.country\"=""
"C:\Program Files\Google\Google Earth\res\cr.country\"=""
"C:\Program Files\Google\Google Earth\res\cs.locale\"=""
"C:\Program Files\Google\Google Earth\res\cu.country\"=""
"C:\Program Files\Google\Google Earth\res\cv.country\"=""
"C:\Program Files\Google\Google Earth\res\cx.country\"=""
"C:\Program Files\Google\Google Earth\res\cy.country\"=""
"C:\Program Files\Google\Google Earth\res\cz.country\"=""
"C:\Program Files\Google\Google Earth\res\de.country\"=""
"C:\Program Files\Google\Google Earth\res\de.locale\"=""
"C:\Program Files\Google\Google Earth\res\dj.country\"=""
"C:\Program Files\Google\Google Earth\res\dk.country\"=""
"C:\Program Files\Google\Google Earth\res\dm.country\"=""
"C:\Program Files\Google\Google Earth\res\do.country\"=""
"C:\Program Files\Google\Google Earth\res\dz.country\"=""
"C:\Program Files\Google\Google Earth\res\ec.country\"=""
"C:\Program Files\Google\Google Earth\res\ee.country\"=""
"C:\Program Files\Google\Google Earth\res\eg.country\"=""
"C:\Program Files\Google\Google Earth\res\eh.country\"=""
"C:\Program Files\Google\Google Earth\res\en.locale\"=""
"C:\Program Files\Google\Google Earth\res\er.country\"=""
"C:\Program Files\Google\Google Earth\res\es.country\"=""
"C:\Program Files\Google\Google Earth\res\es.locale\"=""
"C:\Program Files\Google\Google Earth\res\et.country\"=""
"C:\Program Files\Google\Google Earth\res\fi.country\"=""
"C:\Program Files\Google\Google Earth\res\fj.country\"=""
"C:\Program Files\Google\Google Earth\res\fk.country\"=""
"C:\Program Files\Google\Google Earth\res\fm.country\"=""
"C:\Program Files\Google\Google Earth\res\fo.country\"=""
"C:\Program Files\Google\Google Earth\res\fr.country\"=""
"C:\Program Files\Google\Google Earth\res\fr.locale\"=""
"C:\Program Files\Google\Google Earth\res\ga.country\"=""
"C:\Program Files\Google\Google Earth\res\gb.country\"=""
"C:\Program Files\Google\Google Earth\res\gd.country\"=""
"C:\Program Files\Google\Google Earth\res\ge.country\"=""
"C:\Program Files\Google\Google Earth\res\gf.country\"=""
"C:\Program Files\Google\Google Earth\res\gg.country\"=""
"C:\Program Files\Google\Google Earth\res\gh.country\"=""
"C:\Program Files\Google\Google Earth\res\gi.country\"=""
"C:\Program Files\Google\Google Earth\res\gl.country\"=""
"C:\Program Files\Google\Google Earth\res\gm.country\"=""
"C:\Program Files\Google\Google Earth\res\gn.country\"=""
"C:\Program Files\Google\Google Earth\res\gp.country\"=""
"C:\Program Files\Google\Google Earth\res\gq.country\"=""
"C:\Program Files\Google\Google Earth\res\gr.country\"=""
"C:\Program Files\Google\Google Earth\res\gs.country\"=""
"C:\Program Files\Google\Google Earth\res\gt.country\"=""
"C:\Program Files\Google\Google Earth\res\gu.country\"=""
"C:\Program Files\Google\Google Earth\res\gw.country\"=""
"C:\Program Files\Google\Google Earth\res\gy.country\"=""
"C:\Program Files\Google\Google Earth\res\hk.country\"=""
"C:\Program Files\Google\Google Earth\res\hm.country\"=""
"C:\Program Files\Google\Google Earth\res\hn.country\"=""
"C:\Program Files\Google\Google Earth\res\hr.country\"=""
"C:\Program Files\Google\Google Earth\res\ht.country\"=""
"C:\Program Files\Google\Google Earth\res\hu.country\"=""
"C:\Program Files\Google\Google Earth\res\id.country\"=""
"C:\Program Files\Google\Google Earth\res\ie.country\"=""
"C:\Program Files\Google\Google Earth\res\il.country\"=""
"C:\Program Files\Google\Google Earth\res\im.country\"=""
"C:\Program Files\Google\Google Earth\res\in.country\"=""
"C:\Program Files\Google\Google Earth\res\io.country\"=""
"C:\Program Files\Google\Google Earth\res\iq.country\"=""
"C:\Program Files\Google\Google Earth\res\ir.country\"=""
"C:\Program Files\Google\Google Earth\res\is.country\"=""
"C:\Program Files\Google\Google Earth\res\it.country\"=""
"C:\Program Files\Google\Google Earth\res\it.locale\"=""
"C:\Program Files\Google\Google Earth\res\ja.locale\"=""
"C:\Program Files\Google\Google Earth\res\je.country\"=""
"C:\Program Files\Google\Google Earth\res\jm.country\"=""
"C:\Program Files\Google\Google Earth\res\jo.country\"=""
"C:\Program Files\Google\Google Earth\res\jp.country\"=""
"C:\Program Files\Google\Google Earth\res\ke.country\"=""
"C:\Program Files\Google\Google Earth\res\kg.country\"=""
"C:\Program Files\Google\Google Earth\res\kh.country\"=""
"C:\Program Files\Google\Google Earth\res\ki.country\"=""
"C:\Program Files\Google\Google Earth\res\km.country\"=""
"C:\Program Files\Google\Google Earth\res\kn.country\"=""
"C:\Program Files\Google\Google Earth\res\ko.locale\"=""
"C:\Program Files\Google\Google Earth\res\kp.country\"=""
"C:\Program Files\Google\Google Earth\res\kr.country\"=""
"C:\Program Files\Google\Google Earth\res\kw.country\"=""
"C:\Program Files\Google\Google Earth\res\ky.country\"=""
"C:\Program Files\Google\Google Earth\res\kz.country\"=""
"C:\Program Files\Google\Google Earth\res\la.country\"=""
"C:\Program Files\Google\Google Earth\res\lb.country\"=""
"C:\Program Files\Google\Google Earth\res\lc.country\"=""
"C:\Program Files\Google\Google Earth\res\li.country\"=""
"C:\Program Files\Google\Google Earth\res\lk.country\"=""
"C:\Program Files\Google\Google Earth\res\lr.country\"=""
"C:\Program Files\Google\Google Earth\res\ls.country\"=""
"C:\Program Files\Google\Google Earth\res\lt.country\"=""
"C:\Program Files\Google\Google Earth\res\lu.country\"=""
"C:\Program Files\Google\Google Earth\res\lv.country\"=""
"C:\Program Files\Google\Google Earth\res\ly.country\"=""
"C:\Program Files\Google\Google Earth\res\ma.country\"=""
"C:\Program Files\Google\Google Earth\res\mc.country\"=""
"C:\Program Files\Google\Google Earth\res\md.country\"=""
"C:\Program Files\Google\Google Earth\res\me.country\"=""
"C:\Program Files\Google\Google Earth\res\mg.country\"=""
"C:\Program Files\Google\Google Earth\res\mh.country\"=""
"C:\Program Files\Google\Google Earth\res\mk.country\"=""
"C:\Program Files\Google\Google Earth\res\ml.country\"=""
"C:\Program Files\Google\Google Earth\res\mm.country\"=""
"C:\Program Files\Google\Google Earth\res\mn.country\"=""
"C:\Program Files\Google\Google Earth\res\mo.country\"=""
"C:\Program Files\Google\Google Earth\res\mp.country\"=""
"C:\Program Files\Google\Google Earth\res\mq.country\"=""
"C:\Program Files\Google\Google Earth\res\mr.country\"=""
"C:\Program Files\Google\Google Earth\res\ms.country\"=""
"C:\Program Files\Google\Google Earth\res\mt.country\"=""
"C:\Program Files\Google\Google Earth\res\mu.country\"=""
"C:\Program Files\Google\Google Earth\res\mv.country\"=""
"C:\Program Files\Google\Google Earth\res\mw.country\"=""
"C:\Program Files\Google\Google Earth\res\mx.country\"=""
"C:\Program Files\Google\Google Earth\res\my.country\"=""
"C:\Program Files\Google\Google Earth\res\mz.country\"=""
"C:\Program Files\Google\Google Earth\res\na.country\"=""
"C:\Program Files\Google\Google Earth\res\nc.country\"=""
"C:\Program Files\Google\Google Earth\res\ne.country\"=""
"C:\Program Files\Google\Google Earth\res\nf.country\"=""
"C:\Program Files\Google\Google Earth\res\ng.country\"=""
"C:\Program Files\Google\Google Earth\res\ni.country\"=""
"C:\Program Files\Google\Google Earth\res\nl.country\"=""
"C:\Program Files\Google\Google Earth\res\nl.locale\"=""
"C:\Program Files\Google\Google Earth\res\no.country\"=""
"C:\Program Files\Google\Google Earth\res\np.country\"=""
"C:\Program Files\Google\Google Earth\res\nr.country\"=""
"C:\Program Files\Google\Google Earth\res\nu.country\"=""
"C:\Program Files\Google\Google Earth\res\nz.country\"=""
"C:\Program Files\Google\Google Earth\res\om.country\"=""
"C:\Program Files\Google\Google Earth\res\pa.country\"=""
"C:\Program Files\Google\Google Earth\res\paddle\"=""
"C:\Program Files\Google\Google Earth\res\pal2\"=""
"C:\Program Files\Google\Google Earth\res\pal3\"=""
"C:\Program Files\Google\Google Earth\res\pal4\"=""
"C:\Program Files\Google\Google Earth\res\pal5\"=""
"C:\Program Files\Google\Google Earth\res\pe.country\"=""
"C:\Program Files\Google\Google Earth\res\pf.country\"=""
"C:\Program Files\Google\Google Earth\res\pg.country\"=""
"C:\Program Files\Google\Google Earth\res\ph.country\"=""
"C:\Program Files\Google\Google Earth\res\pk.country\"=""
"C:\Program Files\Google\Google Earth\res\pl.country\"=""
"C:\Program Files\Google\Google Earth\res\pl.locale\"=""
"C:\Program Files\Google\Google Earth\res\pm.country\"=""
"C:\Program Files\Google\Google Earth\res\pn.country\"=""
"C:\Program Files\Google\Google Earth\res\pr.country\"=""
"C:\Program Files\Google\Google Earth\res\ps.country\"=""
"C:\Program Files\Google\Google Earth\res\pt.country\"=""
"C:\Program Files\Google\Google Earth\res\pt.locale\"=""
"C:\Program Files\Google\Google Earth\res\pushpin\"=""
"C:\Program Files\Google\Google Earth\res\pw.country\"=""
"C:\Program Files\Google\Google Earth\res\py.country\"=""
"C:\Program Files\Google\Google Earth\res\qa.country\"=""
"C:\Program Files\Google\Google Earth\res\re.country\"=""
"C:\Program Files\Google\Google Earth\res\ro.country\"=""
"C:\Program Files\Google\Google Earth\res\rs.country\"=""
"C:\Program Files\Google\Google Earth\res\ru.country\"=""
"C:\Program Files\Google\Google Earth\res\ru.locale\"=""
"C:\Program Files\Google\Google Earth\res\rw.country\"=""
"C:\Program Files\Google\Google Earth\res\sa.country\"=""
"C:\Program Files\Google\Google Earth\res\sb.country\"=""
"C:\Program Files\Google\Google Earth\res\sc.country\"=""
"C:\Program Files\Google\Google Earth\res\sd.country\"=""
"C:\Program Files\Google\Google Earth\res\se.country\"=""
"C:\Program Files\Google\Google Earth\res\sg.country\"=""
"C:\Program Files\Google\Google Earth\res\sh.country\"=""
"C:\Program Files\Google\Google Earth\res\shapes\"=""
"C:\Program Files\Google\Google Earth\res\si.country\"=""
"C:\Program Files\Google\Google Earth\res\sj.country\"=""
"C:\Program Files\Google\Google Earth\res\sk.country\"=""
"C:\Program Files\Google\Google Earth\res\sl.country\"=""
"C:\Program Files\Google\Google Earth\res\sm.country\"=""
"C:\Program Files\Google\Google Earth\res\sn.country\"=""
"C:\Program Files\Google\Google Earth\res\so.country\"=""
"C:\Program Files\Google\Google Earth\res\sr.country\"=""
"C:\Program Files\Google\Google Earth\res\st.country\"=""
"C:\Program Files\Google\Google Earth\res\sv.country\"=""
"C:\Program Files\Google\Google Earth\res\sy.country\"=""
"C:\Program Files\Google\Google Earth\res\sz.country\"=""
"C:\Program Files\Google\Google Earth\res\tc.country\"=""
"C:\Program Files\Google\Google Earth\res\td.country\"=""
"C:\Program Files\Google\Google Earth\res\tf.country\"=""
"C:\Program Files\Google\Google Earth\res\tg.country\"=""
"C:\Program Files\Google\Google Earth\res\th.country\"=""
"C:\Program Files\Google\Google Earth\res\tj.country\"=""
"C:\Program Files\Google\Google Earth\res\tk.country\"=""
"C:\Program Files\Google\Google Earth\res\tl.country\"=""
"C:\Program Files\Google\Google Earth\res\tm.country\"=""
"C:\Program Files\Google\Google Earth\res\tn.country\"=""
"C:\Program Files\Google\Google Earth\res\to.country\"=""
"C:\Program Files\Google\Google Earth\res\tr.country\"=""
"C:\Program Files\Google\Google Earth\res\tt.country\"=""
"C:\Program Files\Google\Google Earth\res\tv.country\"=""
"C:\Program Files\Google\Google Earth\res\tw.country\"=""
"C:\Program Files\Google\Google Earth\res\tz.country\"=""
"C:\Program Files\Google\Google Earth\res\ua.country\"=""
"C:\Program Files\Google\Google Earth\res\ug.country\"=""
"C:\Program Files\Google\Google Earth\res\um.country\"=""
"C:\Program Files\Google\Google Earth\res\us.country\"=""
"C:\Program Files\Google\Google Earth\res\uy.country\"=""
"C:\Program Files\Google\Google Earth\res\uz.country\"=""
"C:\Program Files\Google\Google Earth\res\va.country\"=""
"C:\Program Files\Google\Google Earth\res\vc.country\"=""
"C:\Program Files\Google\Google Earth\res\ve.country\"=""
"C:\Program Files\Google\Google Earth\res\vg.country\"=""
"C:\Program Files\Google\Google Earth\res\vi.country\"=""
"C:\Program Files\Google\Google Earth\res\vn.country\"=""
"C:\Program Files\Google\Google Earth\res\vu.country\"=""
"C:\Program Files\Google\Google Earth\res\wf.country\"=""
"C:\Program Files\Google\Google Earth\res\ws.country\"=""
"C:\Program Files\Google\Google Earth\res\ye.country\"=""
"C:\Program Files\Google\Google Earth\res\yt.country\"=""
"C:\Program Files\Google\Google Earth\res\za.country\"=""
"C:\Program Files\Google\Google Earth\res\zm.country\"=""
"C:\Program Files\Google\Google Earth\res\zw.country\"=""
"C:\Program Files\Google\Google Earth\xml\"=""
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Menu D\xe9marrer\Programmes\Google Earth\"=""
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\"=""
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Microsoft\Installer\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\OFFICE\DATA\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\OFFICE\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\MSDAIPP\OFFLINE\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\MSDAIPP\"="1"
"C:\C\WINDOWS\SHELLNEW\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Microsoft Office\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Microsoft Office\Outils Microsoft Office\"=""
"C:\C\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\IdentityCRL\production\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\IdentityCRL\"=""
"C:\C\WINDOWS\winsxs\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\"=""
"C:\C\WINDOWS\winsxs\Policies\x86_policy.8.0.Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_x-ww_77c24773\"=""
"C:\C\WINDOWS\Installer\{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\Ad-Aware 2007\logs\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\Ad-Aware 2007\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\Ad-Aware 2007\update\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\Ad-Aware 2007\update\backup\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\Ad-Aware 2007\update\new\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Lavasoft\Ad-Aware 2007\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Lavasoft\"=""
"C:\C\WINDOWS\Installer\{46AC899A-9ECB-43DC-85DE-272E0D116A1E}\"=""
"C:\C\WINDOWS\Installer\{20C45B32-5AB6-46A4-94EF-58950CAF05E5}\"=""
"C:\C\WINDOWS\Installer\{0496D9E9-224B-4AFA-8F37-23B98D52F1EB}\"=""
"D:\PROGRAMMES\safari\Plugins\"=""
"D:\PROGRAMMES\safari\Safari.resources\"=""
"D:\PROGRAMMES\safari\Safari.resources\en.lproj\"=""
"D:\PROGRAMMES\safari\Safari.resources\Help\"=""
"D:\PROGRAMMES\safari\Safari.resources\Help\en.lproj\"=""
"D:\PROGRAMMES\safari\CFNetwork.resources\"=""
"D:\PROGRAMMES\safari\CFNetwork.resources\English.lproj\"=""
"D:\PROGRAMMES\safari\CoreFoundation.resources\"=""
"D:\PROGRAMMES\safari\CoreFoundation.resources\CharacterSets\"=""
"D:\PROGRAMMES\safari\CoreFoundation.resources\en.lproj\"=""
"D:\PROGRAMMES\safari\PubSub.resources\"=""
"D:\PROGRAMMES\safari\PubSub.resources\English.lproj\"=""
"D:\PROGRAMMES\safari\PubSub.resources\Framework\"=""
"D:\PROGRAMMES\safari\PubSub.resources\Framework\English.lproj\"=""
"D:\PROGRAMMES\safari\WebKit.resources\en.lproj\"=""
"D:\PROGRAMMES\safari\WebKit.resources\"=""
"C:\C\WINDOWS\winsxs\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\"=""
"C:\C\WINDOWS\Installer\{3F9EFA28-D2FE-44B7-8896-0B0FF8DF5517}\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\"="1"
"C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\"="1"
"C:\Program Files\Fichiers communs\Adobe\Acrobat\"="1"
"C:\Program Files\Adobe\Adobe Help Viewer\1.0\Resources\"="1"
"C:\Program Files\Adobe\Adobe Help Viewer\1.0\"="1"
"C:\Program Files\Adobe\Adobe Help Viewer\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Reader\AMT\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Reader\Browser\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Setup Files\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Setup Files\{AC76BA86-7AD7-1036-7B44-A81000000003}\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Reader\HowTo\FRA\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Reader\HowTo\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Reader\HowTo\FRA\Images\"="1"
"C:\Program Files\Fichiers communs\Adobe\Help\en_US\Adobe Reader\8.0\images\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\en_US\Adobe Reader\8.0\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\en_US\Adobe Reader\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\en_US\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\fr_FR\Adobe Reader\8.0\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\fr_FR\Adobe Reader\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\fr_FR\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\fr_FR\Adobe Reader\8.0\images\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\VDKHome\FRA\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\VDKHome\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\VDKHome\ENU\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\AcroForm\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\AcroForm\PMP\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\Multimedia\MPP\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\Multimedia\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\CMap\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\Font\PFM\"=""
voila ce qu'il ma mit comme fenêtre suivante
et voici ce que me donne le bloc - notes
heuuuu !!!!! bon courage pour l'analyse !!!!
DiagHelp version v1.1.2 - http://www.malekal.com
excute le 21/08/2007 à 17:26:05,31
Liste des derniers fichies modifies/crees dans windir\system32
C:\C\WINDOWS\System32/drivers\tmcomm.sys -->19/08/2007 22:41:41
C:\C\WINDOWS\System32/drivers\MxlW2k.sys -->17/08/2007 22:12:53
C:\C\WINDOWS\System32/drivers\aswRdr.sys -->28/07/2007 00:00:39
C:\C\WINDOWS\System32/drivers\pcouffin.sys -->09/07/2007 20:53:10
C:\C\WINDOWS\System32/drivers\avg7core.sys -->07/07/2007 15:39:43
C:\C\WINDOWS\System32/drivers\avgtdi.sys -->07/07/2007 14:39:57
C:\C\WINDOWS\System32/drivers\avg7rsxp.sys -->07/07/2007 14:39:56
C:\C\WINDOWS\System32\LVCOMSX.LOG -->21/08/2007 17:22:15
C:\C\WINDOWS\System32\CONFIG.NT -->21/08/2007 02:43:03
C:\C\WINDOWS\System32\wpa.dbl -->06/08/2007 14:51:04
C:\C\WINDOWS\System32\DonationCoder_ScreenshotCaptor_InstallInfo.dat -->03/08/2007 11:32:50
C:\C\WINDOWS\System32\aswBoot.exe -->28/07/2007 00:07:21
C:\C\WINDOWS\System32\jupdate-1.6.0_02-b06.log -->20/07/2007 22:17:41
C:\C\WINDOWS\System32\mlfcache.dat -->17/07/2007 20:31:32
C:\C\WINDOWS\System32\FNTCACHE.DAT -->17/07/2007 14:55:29
C:\C\WINDOWS\System32\javaws.exe -->12/07/2007 02:22:38
C:\C\WINDOWS\System32\javacpl.cpl -->12/07/2007 02:22:36
C:\C\WINDOWS\System32\javaw.exe -->12/07/2007 01:22:04
C:\C\WINDOWS\System32\java.exe -->12/07/2007 01:22:00
C:\C\WINDOWS\System32\lvcoinst.log -->10/07/2007 23:37:09
C:\C\WINDOWS\System32\msssc.dll -->09/07/2007 21:27:11
C:\C\WINDOWS\System32\BASSMOD.dll -->09/07/2007 20:54:15
C:\C\WINDOWS\System32\PerfStringBackup.INI -->08/07/2007 00:35:06
C:\C\WINDOWS\System32\perfh00C.dat -->08/07/2007 00:35:06
C:\C\WINDOWS\System32\perfh009.dat -->08/07/2007 00:35:06
C:\C\WINDOWS\System32\perfc00C.dat -->08/07/2007 00:35:06
C:\C\WINDOWS\System32\perfc009.dat -->08/07/2007 00:35:06
C:\C\WINDOWS\System32\h323log.txt -->06/07/2007 19:06:45
C:\C\WINDOWS\System32\$winnt$.inf -->06/07/2007 17:26:51
C:\C\WINDOWS\System32\nscompat.tlb -->06/07/2007 17:25:43
C:\C\WINDOWS\System32\amcompat.tlb -->06/07/2007 17:25:43
C:\C\WINDOWS\System32\WNASPI2K.BAK -->06/07/2007 17:18:08
C:\C\WINDOWS\0.log -->21/08/2007 12:05:28
C:\C\WINDOWS\wiaservc.log -->21/08/2007 12:05:23
C:\C\WINDOWS\wiadebug.log -->21/08/2007 12:05:22
C:\C\WINDOWS\bootstat.dat -->21/08/2007 12:05:03
C:\C\WINDOWS\WindowsUpdate.log -->21/08/2007 12:04:15
C:\C\WINDOWS\SchedLgU.Txt -->21/08/2007 12:04:15
C:\C\WINDOWS\setupact.log -->21/08/2007 03:13:41
C:\C\WINDOWS\win.ini -->20/08/2007 20:58:57
C:\C\WINDOWS\system.ini -->20/08/2007 20:58:57
C:\C\WINDOWS\setupapi.log -->20/08/2007 15:13:16
C:\C\WINDOWS\wmsetup.log -->19/08/2007 17:42:32
C:\C\WINDOWS\QTFont.qfn -->16/08/2007 01:56:14
C:\C\WINDOWS\Speeditup Free Setup Log.txt -->15/08/2007 11:14:06
C:\C\WINDOWS\setuperr.log -->15/08/2007 00:09:29
C:\C\WINDOWS\QTFont.for -->07/08/2007 23:16:04
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\C\WINDOWS\system
10/09/1999 13:06 4 672 wowpost.exe
1 fichier(s) 4 672 octets
0 Rép(s) 6 319 333 376 octets libres
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\C\WINDOWS\system32
04/08/2004 02:54 6 144 csrss.exe
1 fichier(s) 6 144 octets
0 Rép(s) 6 319 333 376 octets libres
Contenu de Downloaded Program Files
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\C\WINDOWS\Downloaded Program Files
07/08/2007 22:26 <REP> .
07/08/2007 22:26 <REP> ..
06/07/2007 17:12 65 desktop.ini
25/07/2002 17:13 24 576 dwusplay.dll
25/07/2002 17:13 196 608 dwusplay.exe
25/07/2002 17:05 172 032 isusweb.dll
20/01/2000 15:25 1 162 Microsoft XML Parser for Java.osd
11/06/2007 12:21 5 021 swflash.inf
6 fichier(s) 399 464 octets
Total des fichiers listés :
6 fichier(s) 399 464 octets
2 Rép(s) 6 319 329 280 octets libres
Recherche de rootkit! (Merci S!Ri)
Recherche d'infections connues
Export des clefs sensibles..
Liste des fichiers en exception sur le pare-feu XP SP2
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\\PROGRAMMES\\emule 0.48a\\eMule\\emule.exe"="D:\\PROGRAMMES\\emule 0.48a\\eMule\\emule.exe:*:Enabled:eMule"
"D:\\PROGRAMMES\\Shareaza\\Shareaza.exe"="D:\\PROGRAMMES\\Shareaza\\Shareaza.exe:*:Enabled:Shareaza"
"D:\\PROGRAMMES\\Soulseek\\slsk.exe"="D:\\PROGRAMMES\\Soulseek\\slsk.exe:*:Enabled:SoulSeek"
"C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"="C:\\Program Files\\IncrediMail\\bin\\IMApp.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"="C:\\Program Files\\IncrediMail\\bin\\IncMail.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"="C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Program Files\\IncrediMail\\bin\\ImLc.exe"="C:\\Program Files\\IncrediMail\\bin\\ImLc.exe:*:Enabled:IncrediMail"
"D:\\PROGRAMMES\\Opera\\Opera.exe"="D:\\PROGRAMMES\\Opera\\Opera.exe:*:Enabled:Opera Internet Browser"
"C:\\Program Files\\IncrediMail\\bin\\ImPackr.exe"="C:\\Program Files\\IncrediMail\\bin\\ImPackr.exe:*:Enabled:IncrediMail"
"D:\\PROGRAMMES\\avant browser\\avant.exe"="D:\\PROGRAMMES\\avant browser\\avant.exe:*:Enabled:Avant Browser"
"D:\\PROGRAMMES\\uTorrent\\uTorrent.exe"="D:\\PROGRAMMES\\uTorrent\\uTorrent.exe:*:Enabled:µTorrent"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
Export de la clef SharedTaskScheduler
[SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"
Rechercher adresses sensibles dans le fichier HOSTS...
REGEDIT4
[taskmgr.exe]
catchme 0.3.1066 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-08-21 17:26:13
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA]
"NextInstance"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000000
"ImagePath"=str(2):"\??\C:\C\WINDOWS\system32\drivers\srosa.sys"
"DisplayName"="Megadrv3"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA]
"NextInstance"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000000
"ImagePath"=str(2):"\??\C:\C\WINDOWS\system32\drivers\srosa.sys"
"DisplayName"="Megadrv3"
scanning hidden registry entries ...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\7.0\ACDInTouch\FR\StaticPages\Images\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\7.0\ACDInTouch\FR\StaticPages\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\7.0\ACDInTouch\FR\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\7.0\ACDInTouch\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\7.0\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\3.1\ACDInTouch\FR\StaticPages\Images\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\3.1\ACDInTouch\FR\StaticPages\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\3.1\ACDInTouch\FR\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\3.1\ACDInTouch\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\3.1\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\ACD Systems\"=""
"C:\C\WINDOWS\Installer\{D1D9AE2B-A4E7-41F2-938E-261D7A407EB9}\"=""
"C:\Program Files\Executive Software\Diskeeper\"="1"
"C:\Program Files\Executive Software\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Diskeeper\"=""
"C:\C\WINDOWS\Installer\{3B4C8C9E-348C-4341-AF24-9BB00D27332E}\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\"="1"
"C:\C\WINDOWS\Microsoft.NET\Framework\"="1"
"C:\C\WINDOWS\Microsoft.NET\"="1"
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ASP.NETClientFiles\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CONFIG\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.0.3705\"=""
"C:\C\WINDOWS\system32\MUI\0409\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MUI\0409\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MUI\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c509\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c59x\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c90x\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM cc10\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM EL99x with 3XP\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207D\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1657\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1658\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN166X\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\AMD PCNET Family\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\AMD ISANET Family\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\CATC USB Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Compaq N100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\common\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Corega FastEthernet PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWorks ISA (DE305)\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS EISA (DE425)\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE434-DE435\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE450\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE500\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS 2\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS 3\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DE100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DE150\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DE400\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DE400 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DFE500-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DFE530-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DFE550-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DFE650-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DMF560-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DMF560-TX Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DT620\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DT620 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DT650\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\HP EN1207D-TX PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\IBM Crystal LAN Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\IBM EtherExpress PRO 100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\IBM EtherJet 10-100 PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel EtherExpress PRO 10 PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel EtherExpress PRO 10 ISA\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Kingston EtheRx PCI 10-100 Fast Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Kingston EtheRx KNE100TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Kingston EtheRx KNE110TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Kingston EtheRx KNE110TX Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Kingston KNE120TX Fast EtheRx 10-100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD 10-100AL\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD-CDF\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD-CDF Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD-PCI2TL Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD-PCI2TL\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Melco LPC2-T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Melco LPC3-T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Melco LPC3-T NEC\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Multicard Template\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\NETGEAR FA311-FA312 PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC3210\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC217x\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2183-OC2185\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC22xx\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2315\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2325\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2326\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2335\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC237x\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC3163\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom RF2327\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom RF3118\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom RF314X\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom RF3540\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW9501F Fast Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FW-100TX Fast Ethernet Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\PXE Packet Driver\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\SN 2000\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\SN 9000\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\SN 91c95\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Tomas Conrad Tc4048 PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Tomas Conrad Tc4145 ISA\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Tomas Conrad Tx048 10-100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\WaveLAN Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom CBE10-100BTX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom CBE10-100BTX Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom Ethernet II PS\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom Ethernet II PS Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom PE3-10Bx\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom RE10 - RE100 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom RE10BT\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom External Pocket Token Ring I II III\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FNW9x00T - ENW8300T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FNW9x00T - ENW8300T Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FW-100TX Fast Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c575 (fe575c) CardBus\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c920 Integrated\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3ccfe574b\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c359 Token Ring\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom Ethernet 10-100 + Modem\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom Re-100Btx + Ce3B-100Btx\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\common\pcdos\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c509 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c59x Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c689x TokenLink III\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c319 Token Ring\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1200\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1200 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1203\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1203 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1204\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1204 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207B\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207C\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207C Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207D Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207D-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207F\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207F Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207TX Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1208\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1208 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1625\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1625 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1640\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1640 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1641\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1642\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1646\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1650\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1651 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1651\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1652\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1652 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1650 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1653\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1656\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1653 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1656 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1657 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1658 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN166X Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1843\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1844\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2216\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2216 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2218\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2218 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2228\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2228 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2320 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2328\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\AMD 2100 AM7990\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWorks ISA (DE305) Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE500 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE450 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC Fast EtherWorks (DE500)\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\IBM 10-100 Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel PRO 100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel PRO 1000\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel TokenExpress 16p\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel TokenExpress Pro\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD 10-100AL Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC212x\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC213X\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2163\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2376\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC3135\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC3136-3137-3118-32XX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC3139-3540-4XXX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW2400P-2T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW2400PT\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW2401PT-2T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW83002T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW8300T-2T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FNW9702T-3T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FNW9802T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\SN 2000p\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\SN 2000p Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Realtek RTL8139 Fast Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3Com 3c98xx\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c556\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c556 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Realtek RTL8029 Fast Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Norton Ghost 2003\"=""
"C:\C\WINDOWS\Installer\{BBAAACFA-B012-4367-ADDA-4DDCDFD48F96}\"=""
"C:\C\WINDOWS\Installer\{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\TuneUp Utilities 2007\Utilities\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\TuneUp Utilities 2007\"="1"
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\TuneUp Software\TuneUp Utilities\Web\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\The Bat! E-Mail\"=""
"C:\C\WINDOWS\Installer\{40BF1520-BAB7-4B38-A2FB-C474A888FACA}\"=""
"C:\Program Files\Google\Google Earth\"="1"
"C:\Program Files\Google\Google Earth\alchemy\"="1"
"C:\Program Files\Google\Google Earth\alchemy\dx\"="1"
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Google\"="1"
"C:\Program Files\Google\Google Earth\alchemy\ogl\"="1"
"C:\Program Files\Google\Google Earth\alchemy\optimizations\"="1"
"C:\Program Files\Google\Google Earth\kvw\"=""
"C:\Program Files\Google\Google Earth\lang\"=""
"C:\Program Files\Google\Google Earth\res\"=""
"C:\Program Files\Google\Google Earth\res\ad.country\"=""
"C:\Program Files\Google\Google Earth\res\ae.country\"=""
"C:\Program Files\Google\Google Earth\res\af.country\"=""
"C:\Program Files\Google\Google Earth\res\ag.country\"=""
"C:\Program Files\Google\Google Earth\res\ai.country\"=""
"C:\Program Files\Google\Google Earth\res\al.country\"=""
"C:\Program Files\Google\Google Earth\res\am.country\"=""
"C:\Program Files\Google\Google Earth\res\an.country\"=""
"C:\Program Files\Google\Google Earth\res\ao.country\"=""
"C:\Program Files\Google\Google Earth\res\aq.country\"=""
"C:\Program Files\Google\Google Earth\res\ar.country\"=""
"C:\Program Files\Google\Google Earth\res\ar.locale\"=""
"C:\Program Files\Google\Google Earth\res\as.country\"=""
"C:\Program Files\Google\Google Earth\res\at.country\"=""
"C:\Program Files\Google\Google Earth\res\au.country\"=""
"C:\Program Files\Google\Google Earth\res\aw.country\"=""
"C:\Program Files\Google\Google Earth\res\ax.country\"=""
"C:\Program Files\Google\Google Earth\res\az.country\"=""
"C:\Program Files\Google\Google Earth\res\ba.country\"=""
"C:\Program Files\Google\Google Earth\res\bb.country\"=""
"C:\Program Files\Google\Google Earth\res\bd.country\"=""
"C:\Program Files\Google\Google Earth\res\be.country\"=""
"C:\Program Files\Google\Google Earth\res\bf.country\"=""
"C:\Program Files\Google\Google Earth\res\bg.country\"=""
"C:\Program Files\Google\Google Earth\res\bh.country\"=""
"C:\Program Files\Google\Google Earth\res\bi.country\"=""
"C:\Program Files\Google\Google Earth\res\bj.country\"=""
"C:\Program Files\Google\Google Earth\res\bm.country\"=""
"C:\Program Files\Google\Google Earth\res\bn.country\"=""
"C:\Program Files\Google\Google Earth\res\bo.country\"=""
"C:\Program Files\Google\Google Earth\res\br.country\"=""
"C:\Program Files\Google\Google Earth\res\bs.country\"=""
"C:\Program Files\Google\Google Earth\res\bt.country\"=""
"C:\Program Files\Google\Google Earth\res\bv.country\"=""
"C:\Program Files\Google\Google Earth\res\bw.country\"=""
"C:\Program Files\Google\Google Earth\res\by.country\"=""
"C:\Program Files\Google\Google Earth\res\bz.country\"=""
"C:\Program Files\Google\Google Earth\res\ca.country\"=""
"C:\Program Files\Google\Google Earth\res\cc.country\"=""
"C:\Program Files\Google\Google Earth\res\cd.country\"=""
"C:\Program Files\Google\Google Earth\res\cf.country\"=""
"C:\Program Files\Google\Google Earth\res\cg.country\"=""
"C:\Program Files\Google\Google Earth\res\ch.country\"=""
"C:\Program Files\Google\Google Earth\res\ci.country\"=""
"C:\Program Files\Google\Google Earth\res\ck.country\"=""
"C:\Program Files\Google\Google Earth\res\cl.country\"=""
"C:\Program Files\Google\Google Earth\res\cm.country\"=""
"C:\Program Files\Google\Google Earth\res\cn.country\"=""
"C:\Program Files\Google\Google Earth\res\co.country\"=""
"C:\Program Files\Google\Google Earth\res\cr.country\"=""
"C:\Program Files\Google\Google Earth\res\cs.locale\"=""
"C:\Program Files\Google\Google Earth\res\cu.country\"=""
"C:\Program Files\Google\Google Earth\res\cv.country\"=""
"C:\Program Files\Google\Google Earth\res\cx.country\"=""
"C:\Program Files\Google\Google Earth\res\cy.country\"=""
"C:\Program Files\Google\Google Earth\res\cz.country\"=""
"C:\Program Files\Google\Google Earth\res\de.country\"=""
"C:\Program Files\Google\Google Earth\res\de.locale\"=""
"C:\Program Files\Google\Google Earth\res\dj.country\"=""
"C:\Program Files\Google\Google Earth\res\dk.country\"=""
"C:\Program Files\Google\Google Earth\res\dm.country\"=""
"C:\Program Files\Google\Google Earth\res\do.country\"=""
"C:\Program Files\Google\Google Earth\res\dz.country\"=""
"C:\Program Files\Google\Google Earth\res\ec.country\"=""
"C:\Program Files\Google\Google Earth\res\ee.country\"=""
"C:\Program Files\Google\Google Earth\res\eg.country\"=""
"C:\Program Files\Google\Google Earth\res\eh.country\"=""
"C:\Program Files\Google\Google Earth\res\en.locale\"=""
"C:\Program Files\Google\Google Earth\res\er.country\"=""
"C:\Program Files\Google\Google Earth\res\es.country\"=""
"C:\Program Files\Google\Google Earth\res\es.locale\"=""
"C:\Program Files\Google\Google Earth\res\et.country\"=""
"C:\Program Files\Google\Google Earth\res\fi.country\"=""
"C:\Program Files\Google\Google Earth\res\fj.country\"=""
"C:\Program Files\Google\Google Earth\res\fk.country\"=""
"C:\Program Files\Google\Google Earth\res\fm.country\"=""
"C:\Program Files\Google\Google Earth\res\fo.country\"=""
"C:\Program Files\Google\Google Earth\res\fr.country\"=""
"C:\Program Files\Google\Google Earth\res\fr.locale\"=""
"C:\Program Files\Google\Google Earth\res\ga.country\"=""
"C:\Program Files\Google\Google Earth\res\gb.country\"=""
"C:\Program Files\Google\Google Earth\res\gd.country\"=""
"C:\Program Files\Google\Google Earth\res\ge.country\"=""
"C:\Program Files\Google\Google Earth\res\gf.country\"=""
"C:\Program Files\Google\Google Earth\res\gg.country\"=""
"C:\Program Files\Google\Google Earth\res\gh.country\"=""
"C:\Program Files\Google\Google Earth\res\gi.country\"=""
"C:\Program Files\Google\Google Earth\res\gl.country\"=""
"C:\Program Files\Google\Google Earth\res\gm.country\"=""
"C:\Program Files\Google\Google Earth\res\gn.country\"=""
"C:\Program Files\Google\Google Earth\res\gp.country\"=""
"C:\Program Files\Google\Google Earth\res\gq.country\"=""
"C:\Program Files\Google\Google Earth\res\gr.country\"=""
"C:\Program Files\Google\Google Earth\res\gs.country\"=""
"C:\Program Files\Google\Google Earth\res\gt.country\"=""
"C:\Program Files\Google\Google Earth\res\gu.country\"=""
"C:\Program Files\Google\Google Earth\res\gw.country\"=""
"C:\Program Files\Google\Google Earth\res\gy.country\"=""
"C:\Program Files\Google\Google Earth\res\hk.country\"=""
"C:\Program Files\Google\Google Earth\res\hm.country\"=""
"C:\Program Files\Google\Google Earth\res\hn.country\"=""
"C:\Program Files\Google\Google Earth\res\hr.country\"=""
"C:\Program Files\Google\Google Earth\res\ht.country\"=""
"C:\Program Files\Google\Google Earth\res\hu.country\"=""
"C:\Program Files\Google\Google Earth\res\id.country\"=""
"C:\Program Files\Google\Google Earth\res\ie.country\"=""
"C:\Program Files\Google\Google Earth\res\il.country\"=""
"C:\Program Files\Google\Google Earth\res\im.country\"=""
"C:\Program Files\Google\Google Earth\res\in.country\"=""
"C:\Program Files\Google\Google Earth\res\io.country\"=""
"C:\Program Files\Google\Google Earth\res\iq.country\"=""
"C:\Program Files\Google\Google Earth\res\ir.country\"=""
"C:\Program Files\Google\Google Earth\res\is.country\"=""
"C:\Program Files\Google\Google Earth\res\it.country\"=""
"C:\Program Files\Google\Google Earth\res\it.locale\"=""
"C:\Program Files\Google\Google Earth\res\ja.locale\"=""
"C:\Program Files\Google\Google Earth\res\je.country\"=""
"C:\Program Files\Google\Google Earth\res\jm.country\"=""
"C:\Program Files\Google\Google Earth\res\jo.country\"=""
"C:\Program Files\Google\Google Earth\res\jp.country\"=""
"C:\Program Files\Google\Google Earth\res\ke.country\"=""
"C:\Program Files\Google\Google Earth\res\kg.country\"=""
"C:\Program Files\Google\Google Earth\res\kh.country\"=""
"C:\Program Files\Google\Google Earth\res\ki.country\"=""
"C:\Program Files\Google\Google Earth\res\km.country\"=""
"C:\Program Files\Google\Google Earth\res\kn.country\"=""
"C:\Program Files\Google\Google Earth\res\ko.locale\"=""
"C:\Program Files\Google\Google Earth\res\kp.country\"=""
"C:\Program Files\Google\Google Earth\res\kr.country\"=""
"C:\Program Files\Google\Google Earth\res\kw.country\"=""
"C:\Program Files\Google\Google Earth\res\ky.country\"=""
"C:\Program Files\Google\Google Earth\res\kz.country\"=""
"C:\Program Files\Google\Google Earth\res\la.country\"=""
"C:\Program Files\Google\Google Earth\res\lb.country\"=""
"C:\Program Files\Google\Google Earth\res\lc.country\"=""
"C:\Program Files\Google\Google Earth\res\li.country\"=""
"C:\Program Files\Google\Google Earth\res\lk.country\"=""
"C:\Program Files\Google\Google Earth\res\lr.country\"=""
"C:\Program Files\Google\Google Earth\res\ls.country\"=""
"C:\Program Files\Google\Google Earth\res\lt.country\"=""
"C:\Program Files\Google\Google Earth\res\lu.country\"=""
"C:\Program Files\Google\Google Earth\res\lv.country\"=""
"C:\Program Files\Google\Google Earth\res\ly.country\"=""
"C:\Program Files\Google\Google Earth\res\ma.country\"=""
"C:\Program Files\Google\Google Earth\res\mc.country\"=""
"C:\Program Files\Google\Google Earth\res\md.country\"=""
"C:\Program Files\Google\Google Earth\res\me.country\"=""
"C:\Program Files\Google\Google Earth\res\mg.country\"=""
"C:\Program Files\Google\Google Earth\res\mh.country\"=""
"C:\Program Files\Google\Google Earth\res\mk.country\"=""
"C:\Program Files\Google\Google Earth\res\ml.country\"=""
"C:\Program Files\Google\Google Earth\res\mm.country\"=""
"C:\Program Files\Google\Google Earth\res\mn.country\"=""
"C:\Program Files\Google\Google Earth\res\mo.country\"=""
"C:\Program Files\Google\Google Earth\res\mp.country\"=""
"C:\Program Files\Google\Google Earth\res\mq.country\"=""
"C:\Program Files\Google\Google Earth\res\mr.country\"=""
"C:\Program Files\Google\Google Earth\res\ms.country\"=""
"C:\Program Files\Google\Google Earth\res\mt.country\"=""
"C:\Program Files\Google\Google Earth\res\mu.country\"=""
"C:\Program Files\Google\Google Earth\res\mv.country\"=""
"C:\Program Files\Google\Google Earth\res\mw.country\"=""
"C:\Program Files\Google\Google Earth\res\mx.country\"=""
"C:\Program Files\Google\Google Earth\res\my.country\"=""
"C:\Program Files\Google\Google Earth\res\mz.country\"=""
"C:\Program Files\Google\Google Earth\res\na.country\"=""
"C:\Program Files\Google\Google Earth\res\nc.country\"=""
"C:\Program Files\Google\Google Earth\res\ne.country\"=""
"C:\Program Files\Google\Google Earth\res\nf.country\"=""
"C:\Program Files\Google\Google Earth\res\ng.country\"=""
"C:\Program Files\Google\Google Earth\res\ni.country\"=""
"C:\Program Files\Google\Google Earth\res\nl.country\"=""
"C:\Program Files\Google\Google Earth\res\nl.locale\"=""
"C:\Program Files\Google\Google Earth\res\no.country\"=""
"C:\Program Files\Google\Google Earth\res\np.country\"=""
"C:\Program Files\Google\Google Earth\res\nr.country\"=""
"C:\Program Files\Google\Google Earth\res\nu.country\"=""
"C:\Program Files\Google\Google Earth\res\nz.country\"=""
"C:\Program Files\Google\Google Earth\res\om.country\"=""
"C:\Program Files\Google\Google Earth\res\pa.country\"=""
"C:\Program Files\Google\Google Earth\res\paddle\"=""
"C:\Program Files\Google\Google Earth\res\pal2\"=""
"C:\Program Files\Google\Google Earth\res\pal3\"=""
"C:\Program Files\Google\Google Earth\res\pal4\"=""
"C:\Program Files\Google\Google Earth\res\pal5\"=""
"C:\Program Files\Google\Google Earth\res\pe.country\"=""
"C:\Program Files\Google\Google Earth\res\pf.country\"=""
"C:\Program Files\Google\Google Earth\res\pg.country\"=""
"C:\Program Files\Google\Google Earth\res\ph.country\"=""
"C:\Program Files\Google\Google Earth\res\pk.country\"=""
"C:\Program Files\Google\Google Earth\res\pl.country\"=""
"C:\Program Files\Google\Google Earth\res\pl.locale\"=""
"C:\Program Files\Google\Google Earth\res\pm.country\"=""
"C:\Program Files\Google\Google Earth\res\pn.country\"=""
"C:\Program Files\Google\Google Earth\res\pr.country\"=""
"C:\Program Files\Google\Google Earth\res\ps.country\"=""
"C:\Program Files\Google\Google Earth\res\pt.country\"=""
"C:\Program Files\Google\Google Earth\res\pt.locale\"=""
"C:\Program Files\Google\Google Earth\res\pushpin\"=""
"C:\Program Files\Google\Google Earth\res\pw.country\"=""
"C:\Program Files\Google\Google Earth\res\py.country\"=""
"C:\Program Files\Google\Google Earth\res\qa.country\"=""
"C:\Program Files\Google\Google Earth\res\re.country\"=""
"C:\Program Files\Google\Google Earth\res\ro.country\"=""
"C:\Program Files\Google\Google Earth\res\rs.country\"=""
"C:\Program Files\Google\Google Earth\res\ru.country\"=""
"C:\Program Files\Google\Google Earth\res\ru.locale\"=""
"C:\Program Files\Google\Google Earth\res\rw.country\"=""
"C:\Program Files\Google\Google Earth\res\sa.country\"=""
"C:\Program Files\Google\Google Earth\res\sb.country\"=""
"C:\Program Files\Google\Google Earth\res\sc.country\"=""
"C:\Program Files\Google\Google Earth\res\sd.country\"=""
"C:\Program Files\Google\Google Earth\res\se.country\"=""
"C:\Program Files\Google\Google Earth\res\sg.country\"=""
"C:\Program Files\Google\Google Earth\res\sh.country\"=""
"C:\Program Files\Google\Google Earth\res\shapes\"=""
"C:\Program Files\Google\Google Earth\res\si.country\"=""
"C:\Program Files\Google\Google Earth\res\sj.country\"=""
"C:\Program Files\Google\Google Earth\res\sk.country\"=""
"C:\Program Files\Google\Google Earth\res\sl.country\"=""
"C:\Program Files\Google\Google Earth\res\sm.country\"=""
"C:\Program Files\Google\Google Earth\res\sn.country\"=""
"C:\Program Files\Google\Google Earth\res\so.country\"=""
"C:\Program Files\Google\Google Earth\res\sr.country\"=""
"C:\Program Files\Google\Google Earth\res\st.country\"=""
"C:\Program Files\Google\Google Earth\res\sv.country\"=""
"C:\Program Files\Google\Google Earth\res\sy.country\"=""
"C:\Program Files\Google\Google Earth\res\sz.country\"=""
"C:\Program Files\Google\Google Earth\res\tc.country\"=""
"C:\Program Files\Google\Google Earth\res\td.country\"=""
"C:\Program Files\Google\Google Earth\res\tf.country\"=""
"C:\Program Files\Google\Google Earth\res\tg.country\"=""
"C:\Program Files\Google\Google Earth\res\th.country\"=""
"C:\Program Files\Google\Google Earth\res\tj.country\"=""
"C:\Program Files\Google\Google Earth\res\tk.country\"=""
"C:\Program Files\Google\Google Earth\res\tl.country\"=""
"C:\Program Files\Google\Google Earth\res\tm.country\"=""
"C:\Program Files\Google\Google Earth\res\tn.country\"=""
"C:\Program Files\Google\Google Earth\res\to.country\"=""
"C:\Program Files\Google\Google Earth\res\tr.country\"=""
"C:\Program Files\Google\Google Earth\res\tt.country\"=""
"C:\Program Files\Google\Google Earth\res\tv.country\"=""
"C:\Program Files\Google\Google Earth\res\tw.country\"=""
"C:\Program Files\Google\Google Earth\res\tz.country\"=""
"C:\Program Files\Google\Google Earth\res\ua.country\"=""
"C:\Program Files\Google\Google Earth\res\ug.country\"=""
"C:\Program Files\Google\Google Earth\res\um.country\"=""
"C:\Program Files\Google\Google Earth\res\us.country\"=""
"C:\Program Files\Google\Google Earth\res\uy.country\"=""
"C:\Program Files\Google\Google Earth\res\uz.country\"=""
"C:\Program Files\Google\Google Earth\res\va.country\"=""
"C:\Program Files\Google\Google Earth\res\vc.country\"=""
"C:\Program Files\Google\Google Earth\res\ve.country\"=""
"C:\Program Files\Google\Google Earth\res\vg.country\"=""
"C:\Program Files\Google\Google Earth\res\vi.country\"=""
"C:\Program Files\Google\Google Earth\res\vn.country\"=""
"C:\Program Files\Google\Google Earth\res\vu.country\"=""
"C:\Program Files\Google\Google Earth\res\wf.country\"=""
"C:\Program Files\Google\Google Earth\res\ws.country\"=""
"C:\Program Files\Google\Google Earth\res\ye.country\"=""
"C:\Program Files\Google\Google Earth\res\yt.country\"=""
"C:\Program Files\Google\Google Earth\res\za.country\"=""
"C:\Program Files\Google\Google Earth\res\zm.country\"=""
"C:\Program Files\Google\Google Earth\res\zw.country\"=""
"C:\Program Files\Google\Google Earth\xml\"=""
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Menu D\xe9marrer\Programmes\Google Earth\"=""
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\"=""
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Microsoft\Installer\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\OFFICE\DATA\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\OFFICE\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\MSDAIPP\OFFLINE\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\MSDAIPP\"="1"
"C:\C\WINDOWS\SHELLNEW\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Microsoft Office\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Microsoft Office\Outils Microsoft Office\"=""
"C:\C\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\IdentityCRL\production\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\IdentityCRL\"=""
"C:\C\WINDOWS\winsxs\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\"=""
"C:\C\WINDOWS\winsxs\Policies\x86_policy.8.0.Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_x-ww_77c24773\"=""
"C:\C\WINDOWS\Installer\{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\Ad-Aware 2007\logs\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\Ad-Aware 2007\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\Ad-Aware 2007\update\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\Ad-Aware 2007\update\backup\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\Ad-Aware 2007\update\new\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Lavasoft\Ad-Aware 2007\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Lavasoft\"=""
"C:\C\WINDOWS\Installer\{46AC899A-9ECB-43DC-85DE-272E0D116A1E}\"=""
"C:\C\WINDOWS\Installer\{20C45B32-5AB6-46A4-94EF-58950CAF05E5}\"=""
"C:\C\WINDOWS\Installer\{0496D9E9-224B-4AFA-8F37-23B98D52F1EB}\"=""
"D:\PROGRAMMES\safari\Plugins\"=""
"D:\PROGRAMMES\safari\Safari.resources\"=""
"D:\PROGRAMMES\safari\Safari.resources\en.lproj\"=""
"D:\PROGRAMMES\safari\Safari.resources\Help\"=""
"D:\PROGRAMMES\safari\Safari.resources\Help\en.lproj\"=""
"D:\PROGRAMMES\safari\CFNetwork.resources\"=""
"D:\PROGRAMMES\safari\CFNetwork.resources\English.lproj\"=""
"D:\PROGRAMMES\safari\CoreFoundation.resources\"=""
"D:\PROGRAMMES\safari\CoreFoundation.resources\CharacterSets\"=""
"D:\PROGRAMMES\safari\CoreFoundation.resources\en.lproj\"=""
"D:\PROGRAMMES\safari\PubSub.resources\"=""
"D:\PROGRAMMES\safari\PubSub.resources\English.lproj\"=""
"D:\PROGRAMMES\safari\PubSub.resources\Framework\"=""
"D:\PROGRAMMES\safari\PubSub.resources\Framework\English.lproj\"=""
"D:\PROGRAMMES\safari\WebKit.resources\en.lproj\"=""
"D:\PROGRAMMES\safari\WebKit.resources\"=""
"C:\C\WINDOWS\winsxs\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\"=""
"C:\C\WINDOWS\Installer\{3F9EFA28-D2FE-44B7-8896-0B0FF8DF5517}\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\"="1"
"C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\"="1"
"C:\Program Files\Fichiers communs\Adobe\Acrobat\"="1"
"C:\Program Files\Adobe\Adobe Help Viewer\1.0\Resources\"="1"
"C:\Program Files\Adobe\Adobe Help Viewer\1.0\"="1"
"C:\Program Files\Adobe\Adobe Help Viewer\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Reader\AMT\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Reader\Browser\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Setup Files\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Setup Files\{AC76BA86-7AD7-1036-7B44-A81000000003}\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Reader\HowTo\FRA\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Reader\HowTo\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Reader\HowTo\FRA\Images\"="1"
"C:\Program Files\Fichiers communs\Adobe\Help\en_US\Adobe Reader\8.0\images\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\en_US\Adobe Reader\8.0\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\en_US\Adobe Reader\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\en_US\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\fr_FR\Adobe Reader\8.0\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\fr_FR\Adobe Reader\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\fr_FR\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\fr_FR\Adobe Reader\8.0\images\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\VDKHome\FRA\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\VDKHome\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\VDKHome\ENU\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\AcroForm\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\AcroForm\PMP\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\Multimedia\MPP\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\Multimedia\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\CMap\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\Font\PFM\"=""
-
stephmac - Maître Libellulien
- Messages: 623
- Inscription: 24 Juin 2005 17:48
-
stephmac - Maître Libellulien
- Messages: 623
- Inscription: 24 Juin 2005 17:48
-
Falkra - Admin libellules.ch
- Messages: 24424
- Inscription: 30 Jan 2005 13:44
- Localisation: 127.0.0.1
par stephmac » 21 Aoû 2007 16:59
je recommence !!!!
le voici en entier
DiagHelp version v1.1.2 - http://www.malekal.com
excute le 21/08/2007 à 17:47:29,03
Liste des derniers fichies modifies/crees dans windir\system32
C:\C\WINDOWS\System32/drivers\tmcomm.sys -->19/08/2007 22:41:41
C:\C\WINDOWS\System32/drivers\MxlW2k.sys -->17/08/2007 22:12:53
C:\C\WINDOWS\System32/drivers\aswRdr.sys -->28/07/2007 00:00:39
C:\C\WINDOWS\System32/drivers\pcouffin.sys -->09/07/2007 20:53:10
C:\C\WINDOWS\System32/drivers\avg7core.sys -->07/07/2007 15:39:43
C:\C\WINDOWS\System32/drivers\avgtdi.sys -->07/07/2007 14:39:57
C:\C\WINDOWS\System32/drivers\avg7rsxp.sys -->07/07/2007 14:39:56
C:\C\WINDOWS\System32\LVCOMSX.LOG -->21/08/2007 17:22:15
C:\C\WINDOWS\System32\CONFIG.NT -->21/08/2007 02:43:03
C:\C\WINDOWS\System32\wpa.dbl -->06/08/2007 14:51:04
C:\C\WINDOWS\System32\DonationCoder_ScreenshotCaptor_InstallInfo.dat -->03/08/2007 11:32:50
C:\C\WINDOWS\System32\aswBoot.exe -->28/07/2007 00:07:21
C:\C\WINDOWS\System32\jupdate-1.6.0_02-b06.log -->20/07/2007 22:17:41
C:\C\WINDOWS\System32\mlfcache.dat -->17/07/2007 20:31:32
C:\C\WINDOWS\System32\FNTCACHE.DAT -->17/07/2007 14:55:29
C:\C\WINDOWS\System32\javaws.exe -->12/07/2007 02:22:38
C:\C\WINDOWS\System32\javacpl.cpl -->12/07/2007 02:22:36
C:\C\WINDOWS\System32\javaw.exe -->12/07/2007 01:22:04
C:\C\WINDOWS\System32\java.exe -->12/07/2007 01:22:00
C:\C\WINDOWS\System32\lvcoinst.log -->10/07/2007 23:37:09
C:\C\WINDOWS\System32\msssc.dll -->09/07/2007 21:27:11
C:\C\WINDOWS\System32\BASSMOD.dll -->09/07/2007 20:54:15
C:\C\WINDOWS\System32\PerfStringBackup.INI -->08/07/2007 00:35:06
C:\C\WINDOWS\System32\perfh00C.dat -->08/07/2007 00:35:06
C:\C\WINDOWS\System32\perfh009.dat -->08/07/2007 00:35:06
C:\C\WINDOWS\System32\perfc00C.dat -->08/07/2007 00:35:06
C:\C\WINDOWS\System32\perfc009.dat -->08/07/2007 00:35:06
C:\C\WINDOWS\System32\h323log.txt -->06/07/2007 19:06:45
C:\C\WINDOWS\System32\$winnt$.inf -->06/07/2007 17:26:51
C:\C\WINDOWS\System32\nscompat.tlb -->06/07/2007 17:25:43
C:\C\WINDOWS\System32\amcompat.tlb -->06/07/2007 17:25:43
C:\C\WINDOWS\System32\WNASPI2K.BAK -->06/07/2007 17:18:08
C:\C\WINDOWS\0.log -->21/08/2007 12:05:28
C:\C\WINDOWS\wiaservc.log -->21/08/2007 12:05:23
C:\C\WINDOWS\wiadebug.log -->21/08/2007 12:05:22
C:\C\WINDOWS\bootstat.dat -->21/08/2007 12:05:03
C:\C\WINDOWS\WindowsUpdate.log -->21/08/2007 12:04:15
C:\C\WINDOWS\SchedLgU.Txt -->21/08/2007 12:04:15
C:\C\WINDOWS\setupact.log -->21/08/2007 03:13:41
C:\C\WINDOWS\win.ini -->20/08/2007 20:58:57
C:\C\WINDOWS\system.ini -->20/08/2007 20:58:57
C:\C\WINDOWS\setupapi.log -->20/08/2007 15:13:16
C:\C\WINDOWS\wmsetup.log -->19/08/2007 17:42:32
C:\C\WINDOWS\QTFont.qfn -->16/08/2007 01:56:14
C:\C\WINDOWS\Speeditup Free Setup Log.txt -->15/08/2007 11:14:06
C:\C\WINDOWS\setuperr.log -->15/08/2007 00:09:29
C:\C\WINDOWS\QTFont.for -->07/08/2007 23:16:04
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\C\WINDOWS\system
10/09/1999 13:06 4 672 wowpost.exe
1 fichier(s) 4 672 octets
0 Rép(s) 6 313 701 376 octets libres
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\C\WINDOWS\system32
04/08/2004 02:54 6 144 csrss.exe
1 fichier(s) 6 144 octets
0 Rép(s) 6 313 701 376 octets libres
Contenu de Downloaded Program Files
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\C\WINDOWS\Downloaded Program Files
07/08/2007 22:26 <REP> .
07/08/2007 22:26 <REP> ..
06/07/2007 17:12 65 desktop.ini
25/07/2002 17:13 24 576 dwusplay.dll
25/07/2002 17:13 196 608 dwusplay.exe
25/07/2002 17:05 172 032 isusweb.dll
20/01/2000 15:25 1 162 Microsoft XML Parser for Java.osd
11/06/2007 12:21 5 021 swflash.inf
6 fichier(s) 399 464 octets
Total des fichiers listés :
6 fichier(s) 399 464 octets
2 Rép(s) 6 313 697 280 octets libres
Recherche de rootkit! (Merci S!Ri)
Recherche d'infections connues
Export des clefs sensibles..
Liste des fichiers en exception sur le pare-feu XP SP2
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\\PROGRAMMES\\emule 0.48a\\eMule\\emule.exe"="D:\\PROGRAMMES\\emule 0.48a\\eMule\\emule.exe:*:Enabled:eMule"
"D:\\PROGRAMMES\\Shareaza\\Shareaza.exe"="D:\\PROGRAMMES\\Shareaza\\Shareaza.exe:*:Enabled:Shareaza"
"D:\\PROGRAMMES\\Soulseek\\slsk.exe"="D:\\PROGRAMMES\\Soulseek\\slsk.exe:*:Enabled:SoulSeek"
"C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"="C:\\Program Files\\IncrediMail\\bin\\IMApp.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"="C:\\Program Files\\IncrediMail\\bin\\IncMail.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"="C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Program Files\\IncrediMail\\bin\\ImLc.exe"="C:\\Program Files\\IncrediMail\\bin\\ImLc.exe:*:Enabled:IncrediMail"
"D:\\PROGRAMMES\\Opera\\Opera.exe"="D:\\PROGRAMMES\\Opera\\Opera.exe:*:Enabled:Opera Internet Browser"
"C:\\Program Files\\IncrediMail\\bin\\ImPackr.exe"="C:\\Program Files\\IncrediMail\\bin\\ImPackr.exe:*:Enabled:IncrediMail"
"D:\\PROGRAMMES\\avant browser\\avant.exe"="D:\\PROGRAMMES\\avant browser\\avant.exe:*:Enabled:Avant Browser"
"D:\\PROGRAMMES\\uTorrent\\uTorrent.exe"="D:\\PROGRAMMES\\uTorrent\\uTorrent.exe:*:Enabled:µTorrent"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
Export de la clef SharedTaskScheduler
[SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"
Rechercher adresses sensibles dans le fichier HOSTS...
REGEDIT4
[taskmgr.exe]
catchme 0.3.1066 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-08-21 17:47:36
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA]
"NextInstance"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000000
"ImagePath"=str(2):"\??\C:\C\WINDOWS\system32\drivers\srosa.sys"
"DisplayName"="Megadrv3"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA]
"NextInstance"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000000
"ImagePath"=str(2):"\??\C:\C\WINDOWS\system32\drivers\srosa.sys"
"DisplayName"="Megadrv3"
scanning hidden registry entries ...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\7.0\ACDInTouch\FR\StaticPages\Images\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\7.0\ACDInTouch\FR\StaticPages\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\7.0\ACDInTouch\FR\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\7.0\ACDInTouch\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\7.0\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\3.1\ACDInTouch\FR\StaticPages\Images\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\3.1\ACDInTouch\FR\StaticPages\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\3.1\ACDInTouch\FR\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\3.1\ACDInTouch\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\3.1\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\ACD Systems\"=""
"C:\C\WINDOWS\Installer\{D1D9AE2B-A4E7-41F2-938E-261D7A407EB9}\"=""
"C:\Program Files\Executive Software\Diskeeper\"="1"
"C:\Program Files\Executive Software\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Diskeeper\"=""
"C:\C\WINDOWS\Installer\{3B4C8C9E-348C-4341-AF24-9BB00D27332E}\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\"="1"
"C:\C\WINDOWS\Microsoft.NET\Framework\"="1"
"C:\C\WINDOWS\Microsoft.NET\"="1"
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ASP.NETClientFiles\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CONFIG\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.0.3705\"=""
"C:\C\WINDOWS\system32\MUI\0409\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MUI\0409\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MUI\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c509\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c59x\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c90x\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM cc10\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM EL99x with 3XP\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207D\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1657\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1658\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN166X\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\AMD PCNET Family\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\AMD ISANET Family\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\CATC USB Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Compaq N100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\common\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Corega FastEthernet PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWorks ISA (DE305)\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS EISA (DE425)\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE434-DE435\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE450\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE500\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS 2\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS 3\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DE100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DE150\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DE400\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DE400 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DFE500-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DFE530-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DFE550-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DFE650-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DMF560-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DMF560-TX Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DT620\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DT620 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DT650\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\HP EN1207D-TX PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\IBM Crystal LAN Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\IBM EtherExpress PRO 100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\IBM EtherJet 10-100 PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel EtherExpress PRO 10 PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel EtherExpress PRO 10 ISA\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Kingston EtheRx PCI 10-100 Fast Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Kingston EtheRx KNE100TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Kingston EtheRx KNE110TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Kingston EtheRx KNE110TX Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Kingston KNE120TX Fast EtheRx 10-100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD 10-100AL\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD-CDF\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD-CDF Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD-PCI2TL Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD-PCI2TL\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Melco LPC2-T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Melco LPC3-T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Melco LPC3-T NEC\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Multicard Template\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\NETGEAR FA311-FA312 PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC3210\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC217x\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2183-OC2185\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC22xx\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2315\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2325\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2326\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2335\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC237x\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC3163\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom RF2327\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom RF3118\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom RF314X\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom RF3540\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW9501F Fast Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FW-100TX Fast Ethernet Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\PXE Packet Driver\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\SN 2000\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\SN 9000\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\SN 91c95\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Tomas Conrad Tc4048 PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Tomas Conrad Tc4145 ISA\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Tomas Conrad Tx048 10-100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\WaveLAN Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom CBE10-100BTX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom CBE10-100BTX Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom Ethernet II PS\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom Ethernet II PS Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom PE3-10Bx\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom RE10 - RE100 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom RE10BT\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom External Pocket Token Ring I II III\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FNW9x00T - ENW8300T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FNW9x00T - ENW8300T Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FW-100TX Fast Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c575 (fe575c) CardBus\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c920 Integrated\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3ccfe574b\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c359 Token Ring\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom Ethernet 10-100 + Modem\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom Re-100Btx + Ce3B-100Btx\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\common\pcdos\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c509 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c59x Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c689x TokenLink III\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c319 Token Ring\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1200\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1200 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1203\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1203 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1204\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1204 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207B\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207C\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207C Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207D Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207D-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207F\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207F Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207TX Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1208\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1208 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1625\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1625 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1640\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1640 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1641\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1642\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1646\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1650\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1651 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1651\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1652\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1652 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1650 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1653\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1656\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1653 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1656 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1657 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1658 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN166X Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1843\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1844\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2216\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2216 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2218\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2218 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2228\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2228 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2320 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2328\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\AMD 2100 AM7990\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWorks ISA (DE305) Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE500 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE450 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC Fast EtherWorks (DE500)\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\IBM 10-100 Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel PRO 100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel PRO 1000\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel TokenExpress 16p\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel TokenExpress Pro\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD 10-100AL Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC212x\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC213X\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2163\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2376\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC3135\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC3136-3137-3118-32XX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC3139-3540-4XXX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW2400P-2T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW2400PT\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW2401PT-2T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW83002T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW8300T-2T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FNW9702T-3T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FNW9802T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\SN 2000p\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\SN 2000p Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Realtek RTL8139 Fast Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3Com 3c98xx\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c556\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c556 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Realtek RTL8029 Fast Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Norton Ghost 2003\"=""
"C:\C\WINDOWS\Installer\{BBAAACFA-B012-4367-ADDA-4DDCDFD48F96}\"=""
"C:\C\WINDOWS\Installer\{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\TuneUp Utilities 2007\Utilities\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\TuneUp Utilities 2007\"="1"
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\TuneUp Software\TuneUp Utilities\Web\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\The Bat! E-Mail\"=""
"C:\C\WINDOWS\Installer\{40BF1520-BAB7-4B38-A2FB-C474A888FACA}\"=""
"C:\Program Files\Google\Google Earth\"="1"
"C:\Program Files\Google\Google Earth\alchemy\"="1"
"C:\Program Files\Google\Google Earth\alchemy\dx\"="1"
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Google\"="1"
"C:\Program Files\Google\Google Earth\alchemy\ogl\"="1"
"C:\Program Files\Google\Google Earth\alchemy\optimizations\"="1"
"C:\Program Files\Google\Google Earth\kvw\"=""
"C:\Program Files\Google\Google Earth\lang\"=""
"C:\Program Files\Google\Google Earth\res\"=""
"C:\Program Files\Google\Google Earth\res\ad.country\"=""
"C:\Program Files\Google\Google Earth\res\ae.country\"=""
"C:\Program Files\Google\Google Earth\res\af.country\"=""
"C:\Program Files\Google\Google Earth\res\ag.country\"=""
"C:\Program Files\Google\Google Earth\res\ai.country\"=""
"C:\Program Files\Google\Google Earth\res\al.country\"=""
"C:\Program Files\Google\Google Earth\res\am.country\"=""
"C:\Program Files\Google\Google Earth\res\an.country\"=""
"C:\Program Files\Google\Google Earth\res\ao.country\"=""
"C:\Program Files\Google\Google Earth\res\aq.country\"=""
"C:\Program Files\Google\Google Earth\res\ar.country\"=""
"C:\Program Files\Google\Google Earth\res\ar.locale\"=""
"C:\Program Files\Google\Google Earth\res\as.country\"=""
"C:\Program Files\Google\Google Earth\res\at.country\"=""
"C:\Program Files\Google\Google Earth\res\au.country\"=""
"C:\Program Files\Google\Google Earth\res\aw.country\"=""
"C:\Program Files\Google\Google Earth\res\ax.country\"=""
"C:\Program Files\Google\Google Earth\res\az.country\"=""
"C:\Program Files\Google\Google Earth\res\ba.country\"=""
"C:\Program Files\Google\Google Earth\res\bb.country\"=""
"C:\Program Files\Google\Google Earth\res\bd.country\"=""
"C:\Program Files\Google\Google Earth\res\be.country\"=""
"C:\Program Files\Google\Google Earth\res\bf.country\"=""
"C:\Program Files\Google\Google Earth\res\bg.country\"=""
"C:\Program Files\Google\Google Earth\res\bh.country\"=""
"C:\Program Files\Google\Google Earth\res\bi.country\"=""
"C:\Program Files\Google\Google Earth\res\bj.country\"=""
"C:\Program Files\Google\Google Earth\res\bm.country\"=""
"C:\Program Files\Google\Google Earth\res\bn.country\"=""
"C:\Program Files\Google\Google Earth\res\bo.country\"=""
"C:\Program Files\Google\Google Earth\res\br.country\"=""
"C:\Program Files\Google\Google Earth\res\bs.country\"=""
"C:\Program Files\Google\Google Earth\res\bt.country\"=""
"C:\Program Files\Google\Google Earth\res\bv.country\"=""
"C:\Program Files\Google\Google Earth\res\bw.country\"=""
"C:\Program Files\Google\Google Earth\res\by.country\"=""
"C:\Program Files\Google\Google Earth\res\bz.country\"=""
"C:\Program Files\Google\Google Earth\res\ca.country\"=""
"C:\Program Files\Google\Google Earth\res\cc.country\"=""
"C:\Program Files\Google\Google Earth\res\cd.country\"=""
"C:\Program Files\Google\Google Earth\res\cf.country\"=""
"C:\Program Files\Google\Google Earth\res\cg.country\"=""
"C:\Program Files\Google\Google Earth\res\ch.country\"=""
"C:\Program Files\Google\Google Earth\res\ci.country\"=""
"C:\Program Files\Google\Google Earth\res\ck.country\"=""
"C:\Program Files\Google\Google Earth\res\cl.country\"=""
"C:\Program Files\Google\Google Earth\res\cm.country\"=""
"C:\Program Files\Google\Google Earth\res\cn.country\"=""
"C:\Program Files\Google\Google Earth\res\co.country\"=""
"C:\Program Files\Google\Google Earth\res\cr.country\"=""
"C:\Program Files\Google\Google Earth\res\cs.locale\"=""
"C:\Program Files\Google\Google Earth\res\cu.country\"=""
"C:\Program Files\Google\Google Earth\res\cv.country\"=""
"C:\Program Files\Google\Google Earth\res\cx.country\"=""
"C:\Program Files\Google\Google Earth\res\cy.country\"=""
"C:\Program Files\Google\Google Earth\res\cz.country\"=""
"C:\Program Files\Google\Google Earth\res\de.country\"=""
"C:\Program Files\Google\Google Earth\res\de.locale\"=""
"C:\Program Files\Google\Google Earth\res\dj.country\"=""
"C:\Program Files\Google\Google Earth\res\dk.country\"=""
"C:\Program Files\Google\Google Earth\res\dm.country\"=""
"C:\Program Files\Google\Google Earth\res\do.country\"=""
"C:\Program Files\Google\Google Earth\res\dz.country\"=""
"C:\Program Files\Google\Google Earth\res\ec.country\"=""
"C:\Program Files\Google\Google Earth\res\ee.country\"=""
"C:\Program Files\Google\Google Earth\res\eg.country\"=""
"C:\Program Files\Google\Google Earth\res\eh.country\"=""
"C:\Program Files\Google\Google Earth\res\en.locale\"=""
"C:\Program Files\Google\Google Earth\res\er.country\"=""
"C:\Program Files\Google\Google Earth\res\es.country\"=""
"C:\Program Files\Google\Google Earth\res\es.locale\"=""
"C:\Program Files\Google\Google Earth\res\et.country\"=""
"C:\Program Files\Google\Google Earth\res\fi.country\"=""
"C:\Program Files\Google\Google Earth\res\fj.country\"=""
"C:\Program Files\Google\Google Earth\res\fk.country\"=""
"C:\Program Files\Google\Google Earth\res\fm.country\"=""
"C:\Program Files\Google\Google Earth\res\fo.country\"=""
"C:\Program Files\Google\Google Earth\res\fr.country\"=""
"C:\Program Files\Google\Google Earth\res\fr.locale\"=""
"C:\Program Files\Google\Google Earth\res\ga.country\"=""
"C:\Program Files\Google\Google Earth\res\gb.country\"=""
"C:\Program Files\Google\Google Earth\res\gd.country\"=""
"C:\Program Files\Google\Google Earth\res\ge.country\"=""
"C:\Program Files\Google\Google Earth\res\gf.country\"=""
"C:\Program Files\Google\Google Earth\res\gg.country\"=""
"C:\Program Files\Google\Google Earth\res\gh.country\"=""
"C:\Program Files\Google\Google Earth\res\gi.country\"=""
"C:\Program Files\Google\Google Earth\res\gl.country\"=""
"C:\Program Files\Google\Google Earth\res\gm.country\"=""
"C:\Program Files\Google\Google Earth\res\gn.country\"=""
"C:\Program Files\Google\Google Earth\res\gp.country\"=""
"C:\Program Files\Google\Google Earth\res\gq.country\"=""
"C:\Program Files\Google\Google Earth\res\gr.country\"=""
"C:\Program Files\Google\Google Earth\res\gs.country\"=""
"C:\Program Files\Google\Google Earth\res\gt.country\"=""
"C:\Program Files\Google\Google Earth\res\gu.country\"=""
"C:\Program Files\Google\Google Earth\res\gw.country\"=""
"C:\Program Files\Google\Google Earth\res\gy.country\"=""
"C:\Program Files\Google\Google Earth\res\hk.country\"=""
"C:\Program Files\Google\Google Earth\res\hm.country\"=""
"C:\Program Files\Google\Google Earth\res\hn.country\"=""
"C:\Program Files\Google\Google Earth\res\hr.country\"=""
"C:\Program Files\Google\Google Earth\res\ht.country\"=""
"C:\Program Files\Google\Google Earth\res\hu.country\"=""
"C:\Program Files\Google\Google Earth\res\id.country\"=""
"C:\Program Files\Google\Google Earth\res\ie.country\"=""
"C:\Program Files\Google\Google Earth\res\il.country\"=""
"C:\Program Files\Google\Google Earth\res\im.country\"=""
"C:\Program Files\Google\Google Earth\res\in.country\"=""
"C:\Program Files\Google\Google Earth\res\io.country\"=""
"C:\Program Files\Google\Google Earth\res\iq.country\"=""
"C:\Program Files\Google\Google Earth\res\ir.country\"=""
"C:\Program Files\Google\Google Earth\res\is.country\"=""
"C:\Program Files\Google\Google Earth\res\it.country\"=""
"C:\Program Files\Google\Google Earth\res\it.locale\"=""
"C:\Program Files\Google\Google Earth\res\ja.locale\"=""
"C:\Program Files\Google\Google Earth\res\je.country\"=""
"C:\Program Files\Google\Google Earth\res\jm.country\"=""
"C:\Program Files\Google\Google Earth\res\jo.country\"=""
"C:\Program Files\Google\Google Earth\res\jp.country\"=""
"C:\Program Files\Google\Google Earth\res\ke.country\"=""
"C:\Program Files\Google\Google Earth\res\kg.country\"=""
"C:\Program Files\Google\Google Earth\res\kh.country\"=""
"C:\Program Files\Google\Google Earth\res\ki.country\"=""
"C:\Program Files\Google\Google Earth\res\km.country\"=""
"C:\Program Files\Google\Google Earth\res\kn.country\"=""
"C:\Program Files\Google\Google Earth\res\ko.locale\"=""
"C:\Program Files\Google\Google Earth\res\kp.country\"=""
"C:\Program Files\Google\Google Earth\res\kr.country\"=""
"C:\Program Files\Google\Google Earth\res\kw.country\"=""
"C:\Program Files\Google\Google Earth\res\ky.country\"=""
"C:\Program Files\Google\Google Earth\res\kz.country\"=""
"C:\Program Files\Google\Google Earth\res\la.country\"=""
"C:\Program Files\Google\Google Earth\res\lb.country\"=""
"C:\Program Files\Google\Google Earth\res\lc.country\"=""
"C:\Program Files\Google\Google Earth\res\li.country\"=""
"C:\Program Files\Google\Google Earth\res\lk.country\"=""
"C:\Program Files\Google\Google Earth\res\lr.country\"=""
"C:\Program Files\Google\Google Earth\res\ls.country\"=""
"C:\Program Files\Google\Google Earth\res\lt.country\"=""
"C:\Program Files\Google\Google Earth\res\lu.country\"=""
"C:\Program Files\Google\Google Earth\res\lv.country\"=""
"C:\Program Files\Google\Google Earth\res\ly.country\"=""
"C:\Program Files\Google\Google Earth\res\ma.country\"=""
"C:\Program Files\Google\Google Earth\res\mc.country\"=""
"C:\Program Files\Google\Google Earth\res\md.country\"=""
"C:\Program Files\Google\Google Earth\res\me.country\"=""
"C:\Program Files\Google\Google Earth\res\mg.country\"=""
"C:\Program Files\Google\Google Earth\res\mh.country\"=""
"C:\Program Files\Google\Google Earth\res\mk.country\"=""
"C:\Program Files\Google\Google Earth\res\ml.country\"=""
"C:\Program Files\Google\Google Earth\res\mm.country\"=""
"C:\Program Files\Google\Google Earth\res\mn.country\"=""
"C:\Program Files\Google\Google Earth\res\mo.country\"=""
"C:\Program Files\Google\Google Earth\res\mp.country\"=""
"C:\Program Files\Google\Google Earth\res\mq.country\"=""
"C:\Program Files\Google\Google Earth\res\mr.country\"=""
"C:\Program Files\Google\Google Earth\res\ms.country\"=""
"C:\Program Files\Google\Google Earth\res\mt.country\"=""
"C:\Program Files\Google\Google Earth\res\mu.country\"=""
"C:\Program Files\Google\Google Earth\res\mv.country\"=""
"C:\Program Files\Google\Google Earth\res\mw.country\"=""
"C:\Program Files\Google\Google Earth\res\mx.country\"=""
"C:\Program Files\Google\Google Earth\res\my.country\"=""
"C:\Program Files\Google\Google Earth\res\mz.country\"=""
"C:\Program Files\Google\Google Earth\res\na.country\"=""
"C:\Program Files\Google\Google Earth\res\nc.country\"=""
"C:\Program Files\Google\Google Earth\res\ne.country\"=""
"C:\Program Files\Google\Google Earth\res\nf.country\"=""
"C:\Program Files\Google\Google Earth\res\ng.country\"=""
"C:\Program Files\Google\Google Earth\res\ni.country\"=""
"C:\Program Files\Google\Google Earth\res\nl.country\"=""
"C:\Program Files\Google\Google Earth\res\nl.locale\"=""
"C:\Program Files\Google\Google Earth\res\no.country\"=""
"C:\Program Files\Google\Google Earth\res\np.country\"=""
"C:\Program Files\Google\Google Earth\res\nr.country\"=""
"C:\Program Files\Google\Google Earth\res\nu.country\"=""
"C:\Program Files\Google\Google Earth\res\nz.country\"=""
"C:\Program Files\Google\Google Earth\res\om.country\"=""
"C:\Program Files\Google\Google Earth\res\pa.country\"=""
"C:\Program Files\Google\Google Earth\res\paddle\"=""
"C:\Program Files\Google\Google Earth\res\pal2\"=""
"C:\Program Files\Google\Google Earth\res\pal3\"=""
"C:\Program Files\Google\Google Earth\res\pal4\"=""
"C:\Program Files\Google\Google Earth\res\pal5\"=""
"C:\Program Files\Google\Google Earth\res\pe.country\"=""
"C:\Program Files\Google\Google Earth\res\pf.country\"=""
"C:\Program Files\Google\Google Earth\res\pg.country\"=""
"C:\Program Files\Google\Google Earth\res\ph.country\"=""
"C:\Program Files\Google\Google Earth\res\pk.country\"=""
"C:\Program Files\Google\Google Earth\res\pl.country\"=""
"C:\Program Files\Google\Google Earth\res\pl.locale\"=""
"C:\Program Files\Google\Google Earth\res\pm.country\"=""
"C:\Program Files\Google\Google Earth\res\pn.country\"=""
"C:\Program Files\Google\Google Earth\res\pr.country\"=""
"C:\Program Files\Google\Google Earth\res\ps.country\"=""
"C:\Program Files\Google\Google Earth\res\pt.country\"=""
"C:\Program Files\Google\Google Earth\res\pt.locale\"=""
"C:\Program Files\Google\Google Earth\res\pushpin\"=""
"C:\Program Files\Google\Google Earth\res\pw.country\"=""
"C:\Program Files\Google\Google Earth\res\py.country\"=""
"C:\Program Files\Google\Google Earth\res\qa.country\"=""
"C:\Program Files\Google\Google Earth\res\re.country\"=""
"C:\Program Files\Google\Google Earth\res\ro.country\"=""
"C:\Program Files\Google\Google Earth\res\rs.country\"=""
"C:\Program Files\Google\Google Earth\res\ru.country\"=""
"C:\Program Files\Google\Google Earth\res\ru.locale\"=""
"C:\Program Files\Google\Google Earth\res\rw.country\"=""
"C:\Program Files\Google\Google Earth\res\sa.country\"=""
"C:\Program Files\Google\Google Earth\res\sb.country\"=""
"C:\Program Files\Google\Google Earth\res\sc.country\"=""
"C:\Program Files\Google\Google Earth\res\sd.country\"=""
"C:\Program Files\Google\Google Earth\res\se.country\"=""
"C:\Program Files\Google\Google Earth\res\sg.country\"=""
"C:\Program Files\Google\Google Earth\res\sh.country\"=""
"C:\Program Files\Google\Google Earth\res\shapes\"=""
"C:\Program Files\Google\Google Earth\res\si.country\"=""
"C:\Program Files\Google\Google Earth\res\sj.country\"=""
"C:\Program Files\Google\Google Earth\res\sk.country\"=""
"C:\Program Files\Google\Google Earth\res\sl.country\"=""
"C:\Program Files\Google\Google Earth\res\sm.country\"=""
"C:\Program Files\Google\Google Earth\res\sn.country\"=""
"C:\Program Files\Google\Google Earth\res\so.country\"=""
"C:\Program Files\Google\Google Earth\res\sr.country\"=""
"C:\Program Files\Google\Google Earth\res\st.country\"=""
"C:\Program Files\Google\Google Earth\res\sv.country\"=""
"C:\Program Files\Google\Google Earth\res\sy.country\"=""
"C:\Program Files\Google\Google Earth\res\sz.country\"=""
"C:\Program Files\Google\Google Earth\res\tc.country\"=""
"C:\Program Files\Google\Google Earth\res\td.country\"=""
"C:\Program Files\Google\Google Earth\res\tf.country\"=""
"C:\Program Files\Google\Google Earth\res\tg.country\"=""
"C:\Program Files\Google\Google Earth\res\th.country\"=""
"C:\Program Files\Google\Google Earth\res\tj.country\"=""
"C:\Program Files\Google\Google Earth\res\tk.country\"=""
"C:\Program Files\Google\Google Earth\res\tl.country\"=""
"C:\Program Files\Google\Google Earth\res\tm.country\"=""
"C:\Program Files\Google\Google Earth\res\tn.country\"=""
"C:\Program Files\Google\Google Earth\res\to.country\"=""
"C:\Program Files\Google\Google Earth\res\tr.country\"=""
"C:\Program Files\Google\Google Earth\res\tt.country\"=""
"C:\Program Files\Google\Google Earth\res\tv.country\"=""
"C:\Program Files\Google\Google Earth\res\tw.country\"=""
"C:\Program Files\Google\Google Earth\res\tz.country\"=""
"C:\Program Files\Google\Google Earth\res\ua.country\"=""
"C:\Program Files\Google\Google Earth\res\ug.country\"=""
"C:\Program Files\Google\Google Earth\res\um.country\"=""
"C:\Program Files\Google\Google Earth\res\us.country\"=""
"C:\Program Files\Google\Google Earth\res\uy.country\"=""
"C:\Program Files\Google\Google Earth\res\uz.country\"=""
"C:\Program Files\Google\Google Earth\res\va.country\"=""
"C:\Program Files\Google\Google Earth\res\vc.country\"=""
"C:\Program Files\Google\Google Earth\res\ve.country\"=""
"C:\Program Files\Google\Google Earth\res\vg.country\"=""
"C:\Program Files\Google\Google Earth\res\vi.country\"=""
"C:\Program Files\Google\Google Earth\res\vn.country\"=""
"C:\Program Files\Google\Google Earth\res\vu.country\"=""
"C:\Program Files\Google\Google Earth\res\wf.country\"=""
"C:\Program Files\Google\Google Earth\res\ws.country\"=""
"C:\Program Files\Google\Google Earth\res\ye.country\"=""
"C:\Program Files\Google\Google Earth\res\yt.country\"=""
"C:\Program Files\Google\Google Earth\res\za.country\"=""
"C:\Program Files\Google\Google Earth\res\zm.country\"=""
"C:\Program Files\Google\Google Earth\res\zw.country\"=""
"C:\Program Files\Google\Google Earth\xml\"=""
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Menu D\xe9marrer\Programmes\Google Earth\"=""
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\"=""
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Microsoft\Installer\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\OFFICE\DATA\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\OFFICE\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\MSDAIPP\OFFLINE\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\MSDAIPP\"="1"
"C:\C\WINDOWS\SHELLNEW\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Microsoft Office\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Microsoft Office\Outils Microsoft Office\"=""
"C:\C\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\IdentityCRL\production\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\IdentityCRL\"=""
"C:\C\WINDOWS\winsxs\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\"=""
"C:\C\WINDOWS\winsxs\Policies\x86_policy.8.0.Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_x-ww_77c24773\"=""
"C:\C\WINDOWS\Installer\{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\Ad-Aware 2007\logs\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\Ad-Aware 2007\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\Ad-Aware 2007\update\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\Ad-Aware 2007\update\backup\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\Ad-Aware 2007\update\new\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Lavasoft\Ad-Aware 2007\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Lavasoft\"=""
"C:\C\WINDOWS\Installer\{46AC899A-9ECB-43DC-85DE-272E0D116A1E}\"=""
"C:\C\WINDOWS\Installer\{20C45B32-5AB6-46A4-94EF-58950CAF05E5}\"=""
"C:\C\WINDOWS\Installer\{0496D9E9-224B-4AFA-8F37-23B98D52F1EB}\"=""
"D:\PROGRAMMES\safari\Plugins\"=""
"D:\PROGRAMMES\safari\Safari.resources\"=""
"D:\PROGRAMMES\safari\Safari.resources\en.lproj\"=""
"D:\PROGRAMMES\safari\Safari.resources\Help\"=""
"D:\PROGRAMMES\safari\Safari.resources\Help\en.lproj\"=""
"D:\PROGRAMMES\safari\CFNetwork.resources\"=""
"D:\PROGRAMMES\safari\CFNetwork.resources\English.lproj\"=""
"D:\PROGRAMMES\safari\CoreFoundation.resources\"=""
"D:\PROGRAMMES\safari\CoreFoundation.resources\CharacterSets\"=""
"D:\PROGRAMMES\safari\CoreFoundation.resources\en.lproj\"=""
"D:\PROGRAMMES\safari\PubSub.resources\"=""
"D:\PROGRAMMES\safari\PubSub.resources\English.lproj\"=""
"D:\PROGRAMMES\safari\PubSub.resources\Framework\"=""
"D:\PROGRAMMES\safari\PubSub.resources\Framework\English.lproj\"=""
"D:\PROGRAMMES\safari\WebKit.resources\en.lproj\"=""
"D:\PROGRAMMES\safari\WebKit.resources\"=""
"C:\C\WINDOWS\winsxs\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\"=""
"C:\C\WINDOWS\Installer\{3F9EFA28-D2FE-44B7-8896-0B0FF8DF5517}\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\"="1"
"C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\"="1"
"C:\Program Files\Fichiers communs\Adobe\Acrobat\"="1"
"C:\Program Files\Adobe\Adobe Help Viewer\1.0\Resources\"="1"
"C:\Program Files\Adobe\Adobe Help Viewer\1.0\"="1"
"C:\Program Files\Adobe\Adobe Help Viewer\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Reader\AMT\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Reader\Browser\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Setup Files\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Setup Files\{AC76BA86-7AD7-1036-7B44-A81000000003}\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Reader\HowTo\FRA\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Reader\HowTo\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Reader\HowTo\FRA\Images\"="1"
"C:\Program Files\Fichiers communs\Adobe\Help\en_US\Adobe Reader\8.0\images\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\en_US\Adobe Reader\8.0\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\en_US\Adobe Reader\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\en_US\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\fr_FR\Adobe Reader\8.0\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\fr_FR\Adobe Reader\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\fr_FR\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\fr_FR\Adobe Reader\8.0\images\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\VDKHome\FRA\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\VDKHome\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\VDKHome\ENU\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\AcroForm\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\AcroForm\PMP\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\Multimedia\MPP\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\Multimedia\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\CMap\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\Font\PFM\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\Font\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\Annotations\Stamps\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\Annotations\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\An
le voici en entier
DiagHelp version v1.1.2 - http://www.malekal.com
excute le 21/08/2007 à 17:47:29,03
Liste des derniers fichies modifies/crees dans windir\system32
C:\C\WINDOWS\System32/drivers\tmcomm.sys -->19/08/2007 22:41:41
C:\C\WINDOWS\System32/drivers\MxlW2k.sys -->17/08/2007 22:12:53
C:\C\WINDOWS\System32/drivers\aswRdr.sys -->28/07/2007 00:00:39
C:\C\WINDOWS\System32/drivers\pcouffin.sys -->09/07/2007 20:53:10
C:\C\WINDOWS\System32/drivers\avg7core.sys -->07/07/2007 15:39:43
C:\C\WINDOWS\System32/drivers\avgtdi.sys -->07/07/2007 14:39:57
C:\C\WINDOWS\System32/drivers\avg7rsxp.sys -->07/07/2007 14:39:56
C:\C\WINDOWS\System32\LVCOMSX.LOG -->21/08/2007 17:22:15
C:\C\WINDOWS\System32\CONFIG.NT -->21/08/2007 02:43:03
C:\C\WINDOWS\System32\wpa.dbl -->06/08/2007 14:51:04
C:\C\WINDOWS\System32\DonationCoder_ScreenshotCaptor_InstallInfo.dat -->03/08/2007 11:32:50
C:\C\WINDOWS\System32\aswBoot.exe -->28/07/2007 00:07:21
C:\C\WINDOWS\System32\jupdate-1.6.0_02-b06.log -->20/07/2007 22:17:41
C:\C\WINDOWS\System32\mlfcache.dat -->17/07/2007 20:31:32
C:\C\WINDOWS\System32\FNTCACHE.DAT -->17/07/2007 14:55:29
C:\C\WINDOWS\System32\javaws.exe -->12/07/2007 02:22:38
C:\C\WINDOWS\System32\javacpl.cpl -->12/07/2007 02:22:36
C:\C\WINDOWS\System32\javaw.exe -->12/07/2007 01:22:04
C:\C\WINDOWS\System32\java.exe -->12/07/2007 01:22:00
C:\C\WINDOWS\System32\lvcoinst.log -->10/07/2007 23:37:09
C:\C\WINDOWS\System32\msssc.dll -->09/07/2007 21:27:11
C:\C\WINDOWS\System32\BASSMOD.dll -->09/07/2007 20:54:15
C:\C\WINDOWS\System32\PerfStringBackup.INI -->08/07/2007 00:35:06
C:\C\WINDOWS\System32\perfh00C.dat -->08/07/2007 00:35:06
C:\C\WINDOWS\System32\perfh009.dat -->08/07/2007 00:35:06
C:\C\WINDOWS\System32\perfc00C.dat -->08/07/2007 00:35:06
C:\C\WINDOWS\System32\perfc009.dat -->08/07/2007 00:35:06
C:\C\WINDOWS\System32\h323log.txt -->06/07/2007 19:06:45
C:\C\WINDOWS\System32\$winnt$.inf -->06/07/2007 17:26:51
C:\C\WINDOWS\System32\nscompat.tlb -->06/07/2007 17:25:43
C:\C\WINDOWS\System32\amcompat.tlb -->06/07/2007 17:25:43
C:\C\WINDOWS\System32\WNASPI2K.BAK -->06/07/2007 17:18:08
C:\C\WINDOWS\0.log -->21/08/2007 12:05:28
C:\C\WINDOWS\wiaservc.log -->21/08/2007 12:05:23
C:\C\WINDOWS\wiadebug.log -->21/08/2007 12:05:22
C:\C\WINDOWS\bootstat.dat -->21/08/2007 12:05:03
C:\C\WINDOWS\WindowsUpdate.log -->21/08/2007 12:04:15
C:\C\WINDOWS\SchedLgU.Txt -->21/08/2007 12:04:15
C:\C\WINDOWS\setupact.log -->21/08/2007 03:13:41
C:\C\WINDOWS\win.ini -->20/08/2007 20:58:57
C:\C\WINDOWS\system.ini -->20/08/2007 20:58:57
C:\C\WINDOWS\setupapi.log -->20/08/2007 15:13:16
C:\C\WINDOWS\wmsetup.log -->19/08/2007 17:42:32
C:\C\WINDOWS\QTFont.qfn -->16/08/2007 01:56:14
C:\C\WINDOWS\Speeditup Free Setup Log.txt -->15/08/2007 11:14:06
C:\C\WINDOWS\setuperr.log -->15/08/2007 00:09:29
C:\C\WINDOWS\QTFont.for -->07/08/2007 23:16:04
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\C\WINDOWS\system
10/09/1999 13:06 4 672 wowpost.exe
1 fichier(s) 4 672 octets
0 Rép(s) 6 313 701 376 octets libres
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\C\WINDOWS\system32
04/08/2004 02:54 6 144 csrss.exe
1 fichier(s) 6 144 octets
0 Rép(s) 6 313 701 376 octets libres
Contenu de Downloaded Program Files
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\C\WINDOWS\Downloaded Program Files
07/08/2007 22:26 <REP> .
07/08/2007 22:26 <REP> ..
06/07/2007 17:12 65 desktop.ini
25/07/2002 17:13 24 576 dwusplay.dll
25/07/2002 17:13 196 608 dwusplay.exe
25/07/2002 17:05 172 032 isusweb.dll
20/01/2000 15:25 1 162 Microsoft XML Parser for Java.osd
11/06/2007 12:21 5 021 swflash.inf
6 fichier(s) 399 464 octets
Total des fichiers listés :
6 fichier(s) 399 464 octets
2 Rép(s) 6 313 697 280 octets libres
Recherche de rootkit! (Merci S!Ri)
Recherche d'infections connues
Export des clefs sensibles..
Liste des fichiers en exception sur le pare-feu XP SP2
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\\PROGRAMMES\\emule 0.48a\\eMule\\emule.exe"="D:\\PROGRAMMES\\emule 0.48a\\eMule\\emule.exe:*:Enabled:eMule"
"D:\\PROGRAMMES\\Shareaza\\Shareaza.exe"="D:\\PROGRAMMES\\Shareaza\\Shareaza.exe:*:Enabled:Shareaza"
"D:\\PROGRAMMES\\Soulseek\\slsk.exe"="D:\\PROGRAMMES\\Soulseek\\slsk.exe:*:Enabled:SoulSeek"
"C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"="C:\\Program Files\\IncrediMail\\bin\\IMApp.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"="C:\\Program Files\\IncrediMail\\bin\\IncMail.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"="C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Program Files\\IncrediMail\\bin\\ImLc.exe"="C:\\Program Files\\IncrediMail\\bin\\ImLc.exe:*:Enabled:IncrediMail"
"D:\\PROGRAMMES\\Opera\\Opera.exe"="D:\\PROGRAMMES\\Opera\\Opera.exe:*:Enabled:Opera Internet Browser"
"C:\\Program Files\\IncrediMail\\bin\\ImPackr.exe"="C:\\Program Files\\IncrediMail\\bin\\ImPackr.exe:*:Enabled:IncrediMail"
"D:\\PROGRAMMES\\avant browser\\avant.exe"="D:\\PROGRAMMES\\avant browser\\avant.exe:*:Enabled:Avant Browser"
"D:\\PROGRAMMES\\uTorrent\\uTorrent.exe"="D:\\PROGRAMMES\\uTorrent\\uTorrent.exe:*:Enabled:µTorrent"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
Export de la clef SharedTaskScheduler
[SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"
Rechercher adresses sensibles dans le fichier HOSTS...
REGEDIT4
[taskmgr.exe]
catchme 0.3.1066 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-08-21 17:47:36
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA]
"NextInstance"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000000
"ImagePath"=str(2):"\??\C:\C\WINDOWS\system32\drivers\srosa.sys"
"DisplayName"="Megadrv3"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA]
"NextInstance"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000000
"ImagePath"=str(2):"\??\C:\C\WINDOWS\system32\drivers\srosa.sys"
"DisplayName"="Megadrv3"
scanning hidden registry entries ...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\7.0\ACDInTouch\FR\StaticPages\Images\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\7.0\ACDInTouch\FR\StaticPages\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\7.0\ACDInTouch\FR\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\7.0\ACDInTouch\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\7.0\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\ACDSee\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\3.1\ACDInTouch\FR\StaticPages\Images\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\3.1\ACDInTouch\FR\StaticPages\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\3.1\ACDInTouch\FR\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\3.1\ACDInTouch\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\3.1\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\ACD Systems\FotoSlate\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\ACD Systems\"=""
"C:\C\WINDOWS\Installer\{D1D9AE2B-A4E7-41F2-938E-261D7A407EB9}\"=""
"C:\Program Files\Executive Software\Diskeeper\"="1"
"C:\Program Files\Executive Software\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Diskeeper\"=""
"C:\C\WINDOWS\Installer\{3B4C8C9E-348C-4341-AF24-9BB00D27332E}\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\"="1"
"C:\C\WINDOWS\Microsoft.NET\Framework\"="1"
"C:\C\WINDOWS\Microsoft.NET\"="1"
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ASP.NETClientFiles\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CONFIG\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.0.3705\"=""
"C:\C\WINDOWS\system32\MUI\0409\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MUI\0409\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MUI\"=""
"C:\C\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c509\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c59x\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c90x\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM cc10\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM EL99x with 3XP\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207D\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1657\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1658\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN166X\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\AMD PCNET Family\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\AMD ISANET Family\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\CATC USB Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Compaq N100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\common\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Corega FastEthernet PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWorks ISA (DE305)\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS EISA (DE425)\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE434-DE435\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE450\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE500\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS 2\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS 3\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DE100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DE150\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DE400\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DE400 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DFE500-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DFE530-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DFE550-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DFE650-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DMF560-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DMF560-TX Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DT620\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DT620 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DLink DT650\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\HP EN1207D-TX PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\IBM Crystal LAN Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\IBM EtherExpress PRO 100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\IBM EtherJet 10-100 PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel EtherExpress PRO 10 PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel EtherExpress PRO 10 ISA\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Kingston EtheRx PCI 10-100 Fast Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Kingston EtheRx KNE100TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Kingston EtheRx KNE110TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Kingston EtheRx KNE110TX Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Kingston KNE120TX Fast EtheRx 10-100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD 10-100AL\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD-CDF\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD-CDF Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD-PCI2TL Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD-PCI2TL\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Melco LPC2-T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Melco LPC3-T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Melco LPC3-T NEC\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Multicard Template\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\NETGEAR FA311-FA312 PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC3210\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC217x\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2183-OC2185\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC22xx\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2315\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2325\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2326\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2335\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC237x\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC3163\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom RF2327\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom RF3118\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom RF314X\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom RF3540\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW9501F Fast Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FW-100TX Fast Ethernet Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\PXE Packet Driver\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\SN 2000\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\SN 9000\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\SN 91c95\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Tomas Conrad Tc4048 PCI\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Tomas Conrad Tc4145 ISA\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Tomas Conrad Tx048 10-100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\WaveLAN Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom CBE10-100BTX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom CBE10-100BTX Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom Ethernet II PS\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom Ethernet II PS Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom PE3-10Bx\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom RE10 - RE100 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom RE10BT\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom External Pocket Token Ring I II III\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FNW9x00T - ENW8300T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FNW9x00T - ENW8300T Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FW-100TX Fast Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c575 (fe575c) CardBus\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c920 Integrated\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3ccfe574b\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c359 Token Ring\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom Ethernet 10-100 + Modem\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Xircom Re-100Btx + Ce3B-100Btx\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\common\pcdos\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c509 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c59x Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c689x TokenLink III\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c319 Token Ring\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1200\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1200 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1203\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1203 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1204\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1204 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207B\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207C\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207C Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207D Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207D-TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207F\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207F Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207TX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1207TX Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1208\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1208 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1625\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1625 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1640\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1640 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1641\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1642\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1646\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1650\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1651 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1651\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1652\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1652 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1650 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1653\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1656\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1653 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1656 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1657 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1658 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN166X Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1843\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN1844\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2216\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2216 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2218\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2218 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2228\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2228 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2320 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\ACCTON EN2328\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\AMD 2100 AM7990\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWorks ISA (DE305) Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE500 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC EtherWORKS DE450 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\DEC Fast EtherWorks (DE500)\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\IBM 10-100 Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel PRO 100\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel PRO 1000\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel TokenExpress 16p\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Intel TokenExpress Pro\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Laneed LD 10-100AL Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC212x\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC213X\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2163\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC2376\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC3135\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC3136-3137-3118-32XX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Olicom OC3139-3540-4XXX\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW2400P-2T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW2400PT\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW2401PT-2T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW83002T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex ENW8300T-2T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FNW9702T-3T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Planex FNW9802T\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\SN 2000p\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\SN 2000p Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Realtek RTL8139 Fast Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3Com 3c98xx\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c556\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\3COM 3c556 Packet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Ghost\Template\Realtek RTL8029 Fast Ethernet\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Norton Ghost 2003\"=""
"C:\C\WINDOWS\Installer\{BBAAACFA-B012-4367-ADDA-4DDCDFD48F96}\"=""
"C:\C\WINDOWS\Installer\{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\TuneUp Utilities 2007\Utilities\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\TuneUp Utilities 2007\"="1"
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\TuneUp Software\TuneUp Utilities\Web\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\The Bat! E-Mail\"=""
"C:\C\WINDOWS\Installer\{40BF1520-BAB7-4B38-A2FB-C474A888FACA}\"=""
"C:\Program Files\Google\Google Earth\"="1"
"C:\Program Files\Google\Google Earth\alchemy\"="1"
"C:\Program Files\Google\Google Earth\alchemy\dx\"="1"
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Google\"="1"
"C:\Program Files\Google\Google Earth\alchemy\ogl\"="1"
"C:\Program Files\Google\Google Earth\alchemy\optimizations\"="1"
"C:\Program Files\Google\Google Earth\kvw\"=""
"C:\Program Files\Google\Google Earth\lang\"=""
"C:\Program Files\Google\Google Earth\res\"=""
"C:\Program Files\Google\Google Earth\res\ad.country\"=""
"C:\Program Files\Google\Google Earth\res\ae.country\"=""
"C:\Program Files\Google\Google Earth\res\af.country\"=""
"C:\Program Files\Google\Google Earth\res\ag.country\"=""
"C:\Program Files\Google\Google Earth\res\ai.country\"=""
"C:\Program Files\Google\Google Earth\res\al.country\"=""
"C:\Program Files\Google\Google Earth\res\am.country\"=""
"C:\Program Files\Google\Google Earth\res\an.country\"=""
"C:\Program Files\Google\Google Earth\res\ao.country\"=""
"C:\Program Files\Google\Google Earth\res\aq.country\"=""
"C:\Program Files\Google\Google Earth\res\ar.country\"=""
"C:\Program Files\Google\Google Earth\res\ar.locale\"=""
"C:\Program Files\Google\Google Earth\res\as.country\"=""
"C:\Program Files\Google\Google Earth\res\at.country\"=""
"C:\Program Files\Google\Google Earth\res\au.country\"=""
"C:\Program Files\Google\Google Earth\res\aw.country\"=""
"C:\Program Files\Google\Google Earth\res\ax.country\"=""
"C:\Program Files\Google\Google Earth\res\az.country\"=""
"C:\Program Files\Google\Google Earth\res\ba.country\"=""
"C:\Program Files\Google\Google Earth\res\bb.country\"=""
"C:\Program Files\Google\Google Earth\res\bd.country\"=""
"C:\Program Files\Google\Google Earth\res\be.country\"=""
"C:\Program Files\Google\Google Earth\res\bf.country\"=""
"C:\Program Files\Google\Google Earth\res\bg.country\"=""
"C:\Program Files\Google\Google Earth\res\bh.country\"=""
"C:\Program Files\Google\Google Earth\res\bi.country\"=""
"C:\Program Files\Google\Google Earth\res\bj.country\"=""
"C:\Program Files\Google\Google Earth\res\bm.country\"=""
"C:\Program Files\Google\Google Earth\res\bn.country\"=""
"C:\Program Files\Google\Google Earth\res\bo.country\"=""
"C:\Program Files\Google\Google Earth\res\br.country\"=""
"C:\Program Files\Google\Google Earth\res\bs.country\"=""
"C:\Program Files\Google\Google Earth\res\bt.country\"=""
"C:\Program Files\Google\Google Earth\res\bv.country\"=""
"C:\Program Files\Google\Google Earth\res\bw.country\"=""
"C:\Program Files\Google\Google Earth\res\by.country\"=""
"C:\Program Files\Google\Google Earth\res\bz.country\"=""
"C:\Program Files\Google\Google Earth\res\ca.country\"=""
"C:\Program Files\Google\Google Earth\res\cc.country\"=""
"C:\Program Files\Google\Google Earth\res\cd.country\"=""
"C:\Program Files\Google\Google Earth\res\cf.country\"=""
"C:\Program Files\Google\Google Earth\res\cg.country\"=""
"C:\Program Files\Google\Google Earth\res\ch.country\"=""
"C:\Program Files\Google\Google Earth\res\ci.country\"=""
"C:\Program Files\Google\Google Earth\res\ck.country\"=""
"C:\Program Files\Google\Google Earth\res\cl.country\"=""
"C:\Program Files\Google\Google Earth\res\cm.country\"=""
"C:\Program Files\Google\Google Earth\res\cn.country\"=""
"C:\Program Files\Google\Google Earth\res\co.country\"=""
"C:\Program Files\Google\Google Earth\res\cr.country\"=""
"C:\Program Files\Google\Google Earth\res\cs.locale\"=""
"C:\Program Files\Google\Google Earth\res\cu.country\"=""
"C:\Program Files\Google\Google Earth\res\cv.country\"=""
"C:\Program Files\Google\Google Earth\res\cx.country\"=""
"C:\Program Files\Google\Google Earth\res\cy.country\"=""
"C:\Program Files\Google\Google Earth\res\cz.country\"=""
"C:\Program Files\Google\Google Earth\res\de.country\"=""
"C:\Program Files\Google\Google Earth\res\de.locale\"=""
"C:\Program Files\Google\Google Earth\res\dj.country\"=""
"C:\Program Files\Google\Google Earth\res\dk.country\"=""
"C:\Program Files\Google\Google Earth\res\dm.country\"=""
"C:\Program Files\Google\Google Earth\res\do.country\"=""
"C:\Program Files\Google\Google Earth\res\dz.country\"=""
"C:\Program Files\Google\Google Earth\res\ec.country\"=""
"C:\Program Files\Google\Google Earth\res\ee.country\"=""
"C:\Program Files\Google\Google Earth\res\eg.country\"=""
"C:\Program Files\Google\Google Earth\res\eh.country\"=""
"C:\Program Files\Google\Google Earth\res\en.locale\"=""
"C:\Program Files\Google\Google Earth\res\er.country\"=""
"C:\Program Files\Google\Google Earth\res\es.country\"=""
"C:\Program Files\Google\Google Earth\res\es.locale\"=""
"C:\Program Files\Google\Google Earth\res\et.country\"=""
"C:\Program Files\Google\Google Earth\res\fi.country\"=""
"C:\Program Files\Google\Google Earth\res\fj.country\"=""
"C:\Program Files\Google\Google Earth\res\fk.country\"=""
"C:\Program Files\Google\Google Earth\res\fm.country\"=""
"C:\Program Files\Google\Google Earth\res\fo.country\"=""
"C:\Program Files\Google\Google Earth\res\fr.country\"=""
"C:\Program Files\Google\Google Earth\res\fr.locale\"=""
"C:\Program Files\Google\Google Earth\res\ga.country\"=""
"C:\Program Files\Google\Google Earth\res\gb.country\"=""
"C:\Program Files\Google\Google Earth\res\gd.country\"=""
"C:\Program Files\Google\Google Earth\res\ge.country\"=""
"C:\Program Files\Google\Google Earth\res\gf.country\"=""
"C:\Program Files\Google\Google Earth\res\gg.country\"=""
"C:\Program Files\Google\Google Earth\res\gh.country\"=""
"C:\Program Files\Google\Google Earth\res\gi.country\"=""
"C:\Program Files\Google\Google Earth\res\gl.country\"=""
"C:\Program Files\Google\Google Earth\res\gm.country\"=""
"C:\Program Files\Google\Google Earth\res\gn.country\"=""
"C:\Program Files\Google\Google Earth\res\gp.country\"=""
"C:\Program Files\Google\Google Earth\res\gq.country\"=""
"C:\Program Files\Google\Google Earth\res\gr.country\"=""
"C:\Program Files\Google\Google Earth\res\gs.country\"=""
"C:\Program Files\Google\Google Earth\res\gt.country\"=""
"C:\Program Files\Google\Google Earth\res\gu.country\"=""
"C:\Program Files\Google\Google Earth\res\gw.country\"=""
"C:\Program Files\Google\Google Earth\res\gy.country\"=""
"C:\Program Files\Google\Google Earth\res\hk.country\"=""
"C:\Program Files\Google\Google Earth\res\hm.country\"=""
"C:\Program Files\Google\Google Earth\res\hn.country\"=""
"C:\Program Files\Google\Google Earth\res\hr.country\"=""
"C:\Program Files\Google\Google Earth\res\ht.country\"=""
"C:\Program Files\Google\Google Earth\res\hu.country\"=""
"C:\Program Files\Google\Google Earth\res\id.country\"=""
"C:\Program Files\Google\Google Earth\res\ie.country\"=""
"C:\Program Files\Google\Google Earth\res\il.country\"=""
"C:\Program Files\Google\Google Earth\res\im.country\"=""
"C:\Program Files\Google\Google Earth\res\in.country\"=""
"C:\Program Files\Google\Google Earth\res\io.country\"=""
"C:\Program Files\Google\Google Earth\res\iq.country\"=""
"C:\Program Files\Google\Google Earth\res\ir.country\"=""
"C:\Program Files\Google\Google Earth\res\is.country\"=""
"C:\Program Files\Google\Google Earth\res\it.country\"=""
"C:\Program Files\Google\Google Earth\res\it.locale\"=""
"C:\Program Files\Google\Google Earth\res\ja.locale\"=""
"C:\Program Files\Google\Google Earth\res\je.country\"=""
"C:\Program Files\Google\Google Earth\res\jm.country\"=""
"C:\Program Files\Google\Google Earth\res\jo.country\"=""
"C:\Program Files\Google\Google Earth\res\jp.country\"=""
"C:\Program Files\Google\Google Earth\res\ke.country\"=""
"C:\Program Files\Google\Google Earth\res\kg.country\"=""
"C:\Program Files\Google\Google Earth\res\kh.country\"=""
"C:\Program Files\Google\Google Earth\res\ki.country\"=""
"C:\Program Files\Google\Google Earth\res\km.country\"=""
"C:\Program Files\Google\Google Earth\res\kn.country\"=""
"C:\Program Files\Google\Google Earth\res\ko.locale\"=""
"C:\Program Files\Google\Google Earth\res\kp.country\"=""
"C:\Program Files\Google\Google Earth\res\kr.country\"=""
"C:\Program Files\Google\Google Earth\res\kw.country\"=""
"C:\Program Files\Google\Google Earth\res\ky.country\"=""
"C:\Program Files\Google\Google Earth\res\kz.country\"=""
"C:\Program Files\Google\Google Earth\res\la.country\"=""
"C:\Program Files\Google\Google Earth\res\lb.country\"=""
"C:\Program Files\Google\Google Earth\res\lc.country\"=""
"C:\Program Files\Google\Google Earth\res\li.country\"=""
"C:\Program Files\Google\Google Earth\res\lk.country\"=""
"C:\Program Files\Google\Google Earth\res\lr.country\"=""
"C:\Program Files\Google\Google Earth\res\ls.country\"=""
"C:\Program Files\Google\Google Earth\res\lt.country\"=""
"C:\Program Files\Google\Google Earth\res\lu.country\"=""
"C:\Program Files\Google\Google Earth\res\lv.country\"=""
"C:\Program Files\Google\Google Earth\res\ly.country\"=""
"C:\Program Files\Google\Google Earth\res\ma.country\"=""
"C:\Program Files\Google\Google Earth\res\mc.country\"=""
"C:\Program Files\Google\Google Earth\res\md.country\"=""
"C:\Program Files\Google\Google Earth\res\me.country\"=""
"C:\Program Files\Google\Google Earth\res\mg.country\"=""
"C:\Program Files\Google\Google Earth\res\mh.country\"=""
"C:\Program Files\Google\Google Earth\res\mk.country\"=""
"C:\Program Files\Google\Google Earth\res\ml.country\"=""
"C:\Program Files\Google\Google Earth\res\mm.country\"=""
"C:\Program Files\Google\Google Earth\res\mn.country\"=""
"C:\Program Files\Google\Google Earth\res\mo.country\"=""
"C:\Program Files\Google\Google Earth\res\mp.country\"=""
"C:\Program Files\Google\Google Earth\res\mq.country\"=""
"C:\Program Files\Google\Google Earth\res\mr.country\"=""
"C:\Program Files\Google\Google Earth\res\ms.country\"=""
"C:\Program Files\Google\Google Earth\res\mt.country\"=""
"C:\Program Files\Google\Google Earth\res\mu.country\"=""
"C:\Program Files\Google\Google Earth\res\mv.country\"=""
"C:\Program Files\Google\Google Earth\res\mw.country\"=""
"C:\Program Files\Google\Google Earth\res\mx.country\"=""
"C:\Program Files\Google\Google Earth\res\my.country\"=""
"C:\Program Files\Google\Google Earth\res\mz.country\"=""
"C:\Program Files\Google\Google Earth\res\na.country\"=""
"C:\Program Files\Google\Google Earth\res\nc.country\"=""
"C:\Program Files\Google\Google Earth\res\ne.country\"=""
"C:\Program Files\Google\Google Earth\res\nf.country\"=""
"C:\Program Files\Google\Google Earth\res\ng.country\"=""
"C:\Program Files\Google\Google Earth\res\ni.country\"=""
"C:\Program Files\Google\Google Earth\res\nl.country\"=""
"C:\Program Files\Google\Google Earth\res\nl.locale\"=""
"C:\Program Files\Google\Google Earth\res\no.country\"=""
"C:\Program Files\Google\Google Earth\res\np.country\"=""
"C:\Program Files\Google\Google Earth\res\nr.country\"=""
"C:\Program Files\Google\Google Earth\res\nu.country\"=""
"C:\Program Files\Google\Google Earth\res\nz.country\"=""
"C:\Program Files\Google\Google Earth\res\om.country\"=""
"C:\Program Files\Google\Google Earth\res\pa.country\"=""
"C:\Program Files\Google\Google Earth\res\paddle\"=""
"C:\Program Files\Google\Google Earth\res\pal2\"=""
"C:\Program Files\Google\Google Earth\res\pal3\"=""
"C:\Program Files\Google\Google Earth\res\pal4\"=""
"C:\Program Files\Google\Google Earth\res\pal5\"=""
"C:\Program Files\Google\Google Earth\res\pe.country\"=""
"C:\Program Files\Google\Google Earth\res\pf.country\"=""
"C:\Program Files\Google\Google Earth\res\pg.country\"=""
"C:\Program Files\Google\Google Earth\res\ph.country\"=""
"C:\Program Files\Google\Google Earth\res\pk.country\"=""
"C:\Program Files\Google\Google Earth\res\pl.country\"=""
"C:\Program Files\Google\Google Earth\res\pl.locale\"=""
"C:\Program Files\Google\Google Earth\res\pm.country\"=""
"C:\Program Files\Google\Google Earth\res\pn.country\"=""
"C:\Program Files\Google\Google Earth\res\pr.country\"=""
"C:\Program Files\Google\Google Earth\res\ps.country\"=""
"C:\Program Files\Google\Google Earth\res\pt.country\"=""
"C:\Program Files\Google\Google Earth\res\pt.locale\"=""
"C:\Program Files\Google\Google Earth\res\pushpin\"=""
"C:\Program Files\Google\Google Earth\res\pw.country\"=""
"C:\Program Files\Google\Google Earth\res\py.country\"=""
"C:\Program Files\Google\Google Earth\res\qa.country\"=""
"C:\Program Files\Google\Google Earth\res\re.country\"=""
"C:\Program Files\Google\Google Earth\res\ro.country\"=""
"C:\Program Files\Google\Google Earth\res\rs.country\"=""
"C:\Program Files\Google\Google Earth\res\ru.country\"=""
"C:\Program Files\Google\Google Earth\res\ru.locale\"=""
"C:\Program Files\Google\Google Earth\res\rw.country\"=""
"C:\Program Files\Google\Google Earth\res\sa.country\"=""
"C:\Program Files\Google\Google Earth\res\sb.country\"=""
"C:\Program Files\Google\Google Earth\res\sc.country\"=""
"C:\Program Files\Google\Google Earth\res\sd.country\"=""
"C:\Program Files\Google\Google Earth\res\se.country\"=""
"C:\Program Files\Google\Google Earth\res\sg.country\"=""
"C:\Program Files\Google\Google Earth\res\sh.country\"=""
"C:\Program Files\Google\Google Earth\res\shapes\"=""
"C:\Program Files\Google\Google Earth\res\si.country\"=""
"C:\Program Files\Google\Google Earth\res\sj.country\"=""
"C:\Program Files\Google\Google Earth\res\sk.country\"=""
"C:\Program Files\Google\Google Earth\res\sl.country\"=""
"C:\Program Files\Google\Google Earth\res\sm.country\"=""
"C:\Program Files\Google\Google Earth\res\sn.country\"=""
"C:\Program Files\Google\Google Earth\res\so.country\"=""
"C:\Program Files\Google\Google Earth\res\sr.country\"=""
"C:\Program Files\Google\Google Earth\res\st.country\"=""
"C:\Program Files\Google\Google Earth\res\sv.country\"=""
"C:\Program Files\Google\Google Earth\res\sy.country\"=""
"C:\Program Files\Google\Google Earth\res\sz.country\"=""
"C:\Program Files\Google\Google Earth\res\tc.country\"=""
"C:\Program Files\Google\Google Earth\res\td.country\"=""
"C:\Program Files\Google\Google Earth\res\tf.country\"=""
"C:\Program Files\Google\Google Earth\res\tg.country\"=""
"C:\Program Files\Google\Google Earth\res\th.country\"=""
"C:\Program Files\Google\Google Earth\res\tj.country\"=""
"C:\Program Files\Google\Google Earth\res\tk.country\"=""
"C:\Program Files\Google\Google Earth\res\tl.country\"=""
"C:\Program Files\Google\Google Earth\res\tm.country\"=""
"C:\Program Files\Google\Google Earth\res\tn.country\"=""
"C:\Program Files\Google\Google Earth\res\to.country\"=""
"C:\Program Files\Google\Google Earth\res\tr.country\"=""
"C:\Program Files\Google\Google Earth\res\tt.country\"=""
"C:\Program Files\Google\Google Earth\res\tv.country\"=""
"C:\Program Files\Google\Google Earth\res\tw.country\"=""
"C:\Program Files\Google\Google Earth\res\tz.country\"=""
"C:\Program Files\Google\Google Earth\res\ua.country\"=""
"C:\Program Files\Google\Google Earth\res\ug.country\"=""
"C:\Program Files\Google\Google Earth\res\um.country\"=""
"C:\Program Files\Google\Google Earth\res\us.country\"=""
"C:\Program Files\Google\Google Earth\res\uy.country\"=""
"C:\Program Files\Google\Google Earth\res\uz.country\"=""
"C:\Program Files\Google\Google Earth\res\va.country\"=""
"C:\Program Files\Google\Google Earth\res\vc.country\"=""
"C:\Program Files\Google\Google Earth\res\ve.country\"=""
"C:\Program Files\Google\Google Earth\res\vg.country\"=""
"C:\Program Files\Google\Google Earth\res\vi.country\"=""
"C:\Program Files\Google\Google Earth\res\vn.country\"=""
"C:\Program Files\Google\Google Earth\res\vu.country\"=""
"C:\Program Files\Google\Google Earth\res\wf.country\"=""
"C:\Program Files\Google\Google Earth\res\ws.country\"=""
"C:\Program Files\Google\Google Earth\res\ye.country\"=""
"C:\Program Files\Google\Google Earth\res\yt.country\"=""
"C:\Program Files\Google\Google Earth\res\za.country\"=""
"C:\Program Files\Google\Google Earth\res\zm.country\"=""
"C:\Program Files\Google\Google Earth\res\zw.country\"=""
"C:\Program Files\Google\Google Earth\xml\"=""
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Menu D\xe9marrer\Programmes\Google Earth\"=""
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\"=""
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Microsoft\Installer\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\OFFICE\DATA\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\OFFICE\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\MSDAIPP\OFFLINE\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\MSDAIPP\"="1"
"C:\C\WINDOWS\SHELLNEW\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Microsoft Office\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Microsoft Office\Outils Microsoft Office\"=""
"C:\C\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\IdentityCRL\production\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\IdentityCRL\"=""
"C:\C\WINDOWS\winsxs\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\"=""
"C:\C\WINDOWS\winsxs\Policies\x86_policy.8.0.Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_x-ww_77c24773\"=""
"C:\C\WINDOWS\Installer\{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\Ad-Aware 2007\logs\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\Ad-Aware 2007\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\Ad-Aware 2007\update\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\Ad-Aware 2007\update\backup\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\Ad-Aware 2007\update\new\"="1"
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Lavasoft\Ad-Aware 2007\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\Lavasoft\"=""
"C:\C\WINDOWS\Installer\{46AC899A-9ECB-43DC-85DE-272E0D116A1E}\"=""
"C:\C\WINDOWS\Installer\{20C45B32-5AB6-46A4-94EF-58950CAF05E5}\"=""
"C:\C\WINDOWS\Installer\{0496D9E9-224B-4AFA-8F37-23B98D52F1EB}\"=""
"D:\PROGRAMMES\safari\Plugins\"=""
"D:\PROGRAMMES\safari\Safari.resources\"=""
"D:\PROGRAMMES\safari\Safari.resources\en.lproj\"=""
"D:\PROGRAMMES\safari\Safari.resources\Help\"=""
"D:\PROGRAMMES\safari\Safari.resources\Help\en.lproj\"=""
"D:\PROGRAMMES\safari\CFNetwork.resources\"=""
"D:\PROGRAMMES\safari\CFNetwork.resources\English.lproj\"=""
"D:\PROGRAMMES\safari\CoreFoundation.resources\"=""
"D:\PROGRAMMES\safari\CoreFoundation.resources\CharacterSets\"=""
"D:\PROGRAMMES\safari\CoreFoundation.resources\en.lproj\"=""
"D:\PROGRAMMES\safari\PubSub.resources\"=""
"D:\PROGRAMMES\safari\PubSub.resources\English.lproj\"=""
"D:\PROGRAMMES\safari\PubSub.resources\Framework\"=""
"D:\PROGRAMMES\safari\PubSub.resources\Framework\English.lproj\"=""
"D:\PROGRAMMES\safari\WebKit.resources\en.lproj\"=""
"D:\PROGRAMMES\safari\WebKit.resources\"=""
"C:\C\WINDOWS\winsxs\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\"=""
"C:\C\WINDOWS\Installer\{3F9EFA28-D2FE-44B7-8896-0B0FF8DF5517}\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\"="1"
"C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\"="1"
"C:\Program Files\Fichiers communs\Adobe\Acrobat\"="1"
"C:\Program Files\Adobe\Adobe Help Viewer\1.0\Resources\"="1"
"C:\Program Files\Adobe\Adobe Help Viewer\1.0\"="1"
"C:\Program Files\Adobe\Adobe Help Viewer\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Reader\AMT\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Reader\Browser\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Setup Files\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Setup Files\{AC76BA86-7AD7-1036-7B44-A81000000003}\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Reader\HowTo\FRA\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Reader\HowTo\"="1"
"D:\PROGRAMMES\ADOBE READER 8\Reader\HowTo\FRA\Images\"="1"
"C:\Program Files\Fichiers communs\Adobe\Help\en_US\Adobe Reader\8.0\images\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\en_US\Adobe Reader\8.0\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\en_US\Adobe Reader\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\en_US\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\fr_FR\Adobe Reader\8.0\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\fr_FR\Adobe Reader\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\fr_FR\"=""
"C:\Program Files\Fichiers communs\Adobe\Help\fr_FR\Adobe Reader\8.0\images\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\VDKHome\FRA\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\VDKHome\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\VDKHome\ENU\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\AcroForm\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\AcroForm\PMP\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\Multimedia\MPP\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\Multimedia\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\CMap\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\Font\PFM\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\Font\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\Annotations\Stamps\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\Annotations\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\An
-
stephmac - Maître Libellulien
- Messages: 623
- Inscription: 24 Juin 2005 17:48
par Falkra » 21 Aoû 2007 17:00
Il y a une limitation en caractères par post, poste ce qui manque (seul) à la suite, stp. On va y arriver. 
-
Falkra - Admin libellules.ch
- Messages: 24424
- Inscription: 30 Jan 2005 13:44
- Localisation: 127.0.0.1
par stephmac » 21 Aoû 2007 17:04
suite et fin du log ......désolé
D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\Annotations\Stamps\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\Annotations\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\Annotations\Stamps\FRA\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\Annotations\Stamps\ENU\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\Optional\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\HowTo\ENU\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\HowTo\ENU\Images\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\SPPlugins\"=""
"D:\PROGRAMMES\ADOBE READER 8\Esl\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\Javascripts\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\Legal\fr_FR\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\Legal\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\Legal\en_US\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Adobe\Acrobat\8.0\Replicate\Security\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Adobe\Acrobat\8.0\Replicate\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Adobe\Acrobat\8.0\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Adobe\Acrobat\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Adobe\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\adobe_epic\eula\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\adobe_epic\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\Tracker\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\AIR\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\adobe_epic\eula\fr_FR\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\adobe_epic\eula\en_US\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\IDTemplates\ENU\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\IDTemplates\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\IDTemplates\FRA\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\ImageViewer\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\ImageViewer\en_US\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\ImageViewer\fr_FR\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\BeyondReader\ENU\Onramp\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\BeyondReader\ENU\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\BeyondReader\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\BeyondReader\FRA\Onramp\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\BeyondReader\FRA\"=""
"C:\Program Files\Adobe\Adobe Help Viewer\1.0\Resources\fr\"=""
"C:\Program Files\Adobe\Adobe Help Viewer\1.0\Resources\en\"=""
"C:\Program Files\Fichiers communs\Adobe\Updater5\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins3d\prc\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins3d\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\Linguistics\LanguageNames\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\Linguistics\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\Linguistics\Providers\Proximity\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\Linguistics\Providers\"=""
"C:\C\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A81000000003}\"=""
"C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0_02.b06\"=""
"C:\Program Files\Java\jre1.6.0_02\"=""
"C:\Program Files\Java\jre1.6.0_02\bin\"=""
"C:\C\WINDOWS\Installer\{3248F0A8-6813-11D6-A77B-00B0D0160020}\"=""
"D:\PROGRAMMES\Safari\"=""
"C:\C\WINDOWS\Installer\{3E719879-9914-4C56-843E-96D0C3FCC3FB}\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Apple Computer\Installer Cache\QuickTime 7.2.0.240\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Apple Computer\Installer Cache\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Apple Computer\"=""
"C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\PictureViewer.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\da.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\de.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\en.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\es.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\fi.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\fr.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\it.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\ja.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\ko.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\nb.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\nl.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\sv.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\zh_CN.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\zh_TW.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\ru.lproj\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\QuickTime\"=""
"C:\C\WINDOWS\Installer\{95A890AA-B3B1-44B6-9C18-A8F7AB3EE7FC}\"=""
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Microsoft\Installer\{45A54FAD-AADB-4CD2-9E56-2507A15F013D}\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hldrrr"="C:\C\WINDOWS\system32\hldrrr.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\C\WINDOWS\system32\lsdelete.exe"=dword:00000001
"C:\C\WINDOWS\system32\pxsfs.dll"=dword:00000002
"C:\C\WINDOWS\system32\pxafs.dll"=dword:00000002
"C:\C\WINDOWS\system32\pxinsa64.exe"=dword:00000002
"C:\C\WINDOWS\system32\pxcpya64.exe"=dword:00000002
"D:\PROGRAMMES\convertxtodvd\common\VsoVprev.ax"=dword:00000001
"D:\PROGRAMMES\convertxtodvd\ConvertXtoDVD\wmadmod.dll"=dword:00000001
"D:\PROGRAMMES\convertxtodvd\ConvertXtoDVD\WMVADVD.DLL"=dword:00000001
"D:\PROGRAMMES\convertxtodvd\ConvertXtoDVD\wmvdmod.dll"=dword:00000001
"C:\C\WINDOWS\system32\drv23260.dll"=dword:00000001
"C:\C\WINDOWS\system32\drv33260.dll"=dword:00000001
"C:\C\WINDOWS\system32\drv43260.dll"=dword:00000001
"C:\C\WINDOWS\system32\Pncrt.dll"=dword:00000002
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\corecomp.ini"=dword:0000000b
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\ctor.dll"=dword:0000000b
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\objectps.dll"=dword:0000000b
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\iuser.dll"=dword:0000000b
"C:\Program Files\Fichiers communs\InstallShield\IScript\IScript.dll"=dword:0000000b
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\iKernel.exe"=dword:0000000a
"C:\C\WINDOWS\system32\virtear.dll"=dword:00000001
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\iKernel.dll"=dword:00000002
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\Setup.dll"=dword:00000002
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\DotNetInstaller.exe"=dword:00000002
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\iscript.dll"=dword:00000002
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\ctor.dll"=dword:00000002
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\iuser.dll"=dword:00000002
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\IGDI.dll"=dword:00000002
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\IsProBE.tlb"=dword:0000000f
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\objectps.dll"=dword:0000000f
"C:\C\WINDOWS\system32\EPPICLocal_BP.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_CF.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_DU.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_EN.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_ES.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_FR.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_GE.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_IT.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_KO.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_PT.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_RU.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_SC.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_TC.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPicMgr.dll"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPattern1.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPattern2.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPattern3.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPattern4.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPattern5.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPattern6.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPresetData_BP.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPresetData_CF.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPresetData_DU.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPresetData_EN.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPresetData_ES.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPresetData_FR.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPresetData_GE.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPresetData_IT.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPresetData_PT.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPrinterDB.dat"=dword:00000002
"C:\C\WINDOWS\system32\EpPicPrt.dll"=dword:00000002
"C:\C\WINDOWS\system32\PICSDK.dll"=dword:00000002
"C:\C\WINDOWS\system32\PICSDK.ini"=dword:00000002
"C:\C\WINDOWS\system32\SPOOL\DRIVERS\W32x86\3\EPICDI_E.CFG"=dword:00000002
"C:\C\WINDOWS\system32\SPOOL\DRIVERS\W32x86\3\EPICDI_J.CFG"=dword:00000002
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll"=dword:0000000d
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\Setup.dll"=dword:0000000d
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe"=dword:0000000d
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll"=dword:0000000d
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll"=dword:0000000d
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll"=dword:0000000d
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\IGDI.dll"=dword:0000000d
"C:\C\WINDOWS\system32\Drivers\pfc.sys"=dword:00000001
"C:\Program Files\Fichiers communs\InstallShield\UpdateService\agent.exe"=dword:00000003
"C:\C\WINDOWS\system32\Vb6stkit.dll"=dword:00000002
"C:\C\WINDOWS\system32\asycfilt.dll"=dword:00000003
"C:\C\WINDOWS\system32\COMCAT.DLL"=dword:00000004
"C:\C\WINDOWS\system32\Comdlg32.ocx"=dword:00000002
"C:\C\WINDOWS\system32\Msmapi32.ocx"=dword:00000001
"C:\C\WINDOWS\system32\Msvbvm60.dll"=dword:00000002
"C:\C\WINDOWS\system32\OLEAUT32.DLL"=dword:00000004
"C:\C\WINDOWS\system32\Olepro32.dll"=dword:00000004
"C:\C\WINDOWS\system32\RICHED32.DLL"=dword:00000001
"C:\C\WINDOWS\system32\richtx32.ocx"=dword:00000001
"C:\C\WINDOWS\system32\Stdole2.tlb"=dword:00000004
"C:\C\WINDOWS\system32\CamCpl.cpl"=dword:00000001
"C:\C\WINDOWS\system32\LCamCpl.dll"=dword:00000001
"C:\C\WINDOWS\system32\vatee.ax"=dword:00000001
"C:\C\WINDOWS\system32\QCUI2.dll"=dword:00000001
"C:\C\WINDOWS\system32\LQCUI2.dll"=dword:00000001
"C:\C\WINDOWS\system32\Ltwvc12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\lfbmp12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\Lfcmp12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\lftif12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\Ltdis12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\Ltefx12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\Ltfil12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\Ltimg12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\Ltkrn12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\ltocx12n.ocx"=dword:00000001
"C:\C\WINDOWS\system32\ltscr12n.ocx"=dword:00000001
"C:\C\WINDOWS\system32\Lvkrn12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\ITIG726.acm"=dword:00000001
"C:\C\WINDOWS\system32\lffax12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\comctl32.ocx"=dword:00000002
"C:\C\WINDOWS\system32\gdiplus.dll"=dword:00000001
"C:\C\WINDOWS\system32\MFC71CHS.DLL"=dword:00000002
"C:\C\WINDOWS\system32\mfc71u.dll"=dword:00000002
"C:\C\WINDOWS\system32\mfc71.dll"=dword:00000003
"C:\C\WINDOWS\system32\atl.dll"=dword:00000004
"C:\C\WINDOWS\system32\msxml4.dll"=dword:00000001
"C:\C\WINDOWS\system32\msxml4r.dll"=dword:00000001
"C:\C\WINDOWS\system32\MFC71FRA.DLL"=dword:00000001
"C:\C\WINDOWS\system32\MFC71ESP.DLL"=dword:00000001
"C:\C\WINDOWS\system32\MFC71ENU.DLL"=dword:00000001
"C:\C\WINDOWS\system32\MFC71DEU.DLL"=dword:00000001
"C:\C\WINDOWS\system32\MFC71CHT.DLL"=dword:00000001
"C:\C\WINDOWS\system32\MFC71ITA.DLL"=dword:00000001
"C:\C\WINDOWS\system32\MFC71JPN.DLL"=dword:00000001
"C:\C\WINDOWS\system32\MFC71KOR.DLL"=dword:00000001
"C:\Program Files\Fichiers communs\Logitech\WebColct\WebColct.exe"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\WebColps.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\opera.lgm"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\ie3.lgm"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\ie4.lgm"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\ie5.lgm"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\ie6.lgm"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\msn6.lgm"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\neoplnet.lgm"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\ns3.lgm"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\ns4.lgm"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\ns6.lgm"=dword:00000002
"C:\C\WINDOWS\system32\pxinsi64.exe"=dword:00000001
"C:\C\WINDOWS\system32\pxcpyi64.exe"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\win\CP1258.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\win\CP1257.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\win\CP1254.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\win\CP1253.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\win\CP1251.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\win\CP1250.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\GREEK.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\UKRAINE.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\TURKISH.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\ROMANIAN.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\ICELAND.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\CYRILLIC.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\CROATIAN.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\CENTEURO.TXT"=dword:00000001
"D:\PROGRAMMES\Opera\Opera.exe"=dword:00000002
"D:\PROGRAMMES\Opera\OUniAnsi.dll"=dword:00000002
"D:\PROGRAMMES\Opera\Opera.dll"=dword:00000002
"D:\PROGRAMMES\Opera\program\netscape.exe"=dword:00000002
"D:\PROGRAMMES\Opera\spellcheck.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.6.0.b105\core1.zip"=dword:00000002
"C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.6.0.b105\core2.zip"=dword:00000002
"C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.6.0.b105\core3.zip"=dword:00000002
"C:\Program Files\EPSON\Creativity Suite\Common\AppInfo1\Use Image.plg"=dword:00000001
"C:\Program Files\EPSON\Creativity Suite\Common\AppInfo1\Scan and Save.plh"=dword:00000001
"C:\Program Files\QuickTime\QTSystem\Ir41_qc.dll"=dword:00000002
"C:\C\WINDOWS\system32\QuickTimeVR.qtx"=dword:00000001
"C:\C\WINDOWS\system32\QuickTime.qts"=dword:00000001
"C:\Program Files\QuickTime\QTSystem\Ir41_qcx.dll"=dword:00000002
"C:\C\WINDOWS\system32\CMDLGFR.DLL"=dword:00000001
"C:\C\WINDOWS\system32\Mscc2fr.dll"=dword:00000001
"C:\C\WINDOWS\system32\MSCMCFR.DLL"=dword:00000001
"C:\C\WINDOWS\system32\MSCOMCT2.OCX"=dword:00000001
"C:\C\WINDOWS\system32\TABCTFR.DLL"=dword:00000001
"C:\C\WINDOWS\system32\TABCTL32.OCX"=dword:00000001
"C:\C\WINDOWS\system32\VB6FR.DLL"=dword:00000001
"C:\C\WINDOWS\system32\inetfr.DLL"=dword:00000001
"C:\C\WINDOWS\system32\msinet.OCX"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\AudFile.dll"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\AudioInfos.dll"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\AudioTrans.dll"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\AudPlayer.dll"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\WMAFile.dll"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\ControlActiveX.ocx"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\MusicExplorer.ocx"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\HookMenu.ocx"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\libfaac.dll"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\libfaad2.dll"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\AACencoder.ocx"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\AACdecoder.ocx"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\M4ADecoder.ocx"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\Flac_Codec.ocx"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\ac3dec.ocx"=dword:00000001
"C:\C\WINDOWS\system32\COMCT232.OCX"=dword:00000001
"C:\C\WINDOWS\system32\capicom.dll"=dword:00000001
"C:\C\WINDOWS\system32\psapi.dll"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"drvsyskit"="C:\C\WINDOWS\system32\drivers\hidr.exe"
"hldrrr"="C:\C\WINDOWS\system32\hldrrr.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\DOCUME~1\ADMINI~1.PER\LOCALS~1\Temp\RarSFX0\avgsetup.exe"="AVG Setup"
"D:\PROGRAMMES\screenshotcaptor\ScreenshotCaptor\ScreenshotCaptor.exe"="ScreenshotCaptor"
"D:\PROGRAMMES\avant browser\avant.exe"="Avant Browser"
"@shell32.dll,-31254"="Renommer ce dossier"
"@shell32.dll,-31256"="D\xe9placer ce dossier"
"@shell32.dll,-31258"="Copier ce dossier"
"@shell32.dll,-31380"="Envoyer les fichiers de ce dossier par courrier \xe9lectronique"
"@shell32.dll,-31262"="Supprimer ce dossier"
"@shell32.dll,-31234"="Ces t\x00e2ches s'appliquent aux fichiers et aux dossiers que vous s\xe9lectionnez."
"@sendmail.dll,-21"="Bureau (cr\x00e9er un raccourci)"
"@sendmail.dll,-4"="Destinataire"
"C:\C\WINDOWS\system32\taskmgr.exe"="Gestionnaire des t\x00e2ches de Windows"
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Bureau\setupeng.exe"="ALWIL Software Setup Engine"
"C:\DOCUME~1\ADMINI~1.PER\LOCALS~1\Temp\_av_sfx.tm~a00936\avast.setup"="avast! antivirus Update"
"C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe"="ashDisp"
"@C:\C\WINDOWS\system32\SHELL32.dll,-12696"="Affiche les imprimantes et les imprimantes t\xe9l\x00e9copieurs et vous aide \xe0 en ajouter de nouvelles."
"D:\PROGRAMMES\the bat\thebat.exe"="The Bat! E-Mail Client by Ritlabs"
"@C:\C\WINDOWS\system32\SHELL32.dll,-32517"="Barre des t\x00e2ches et menu D\xe9marrer"
"@C:\C\WINDOWS\system32\Audiodev.dll,-510"="Appareils mobiles multim\x00e9dias"
"@C:\C\WINDOWS\system32\SHELL32.dll,-22985"="Options des dossiers"
"@C:\C\WINDOWS\system32\SHELL32.dll,-22981"="Polices"
"@C:\C\WINDOWS\system32\SHELL32.dll,-22982"="Outils d'administration"
"@C:\C\WINDOWS\system32\mstask.dll,-3408"="T\x00e2ches planifi\x00e9es"
"@C:\C\WINDOWS\system32\wiashext.dll,-331"="Scanneurs et appareils photo"
"C:\C\WINDOWS\system32\rundll32.exe"="Ex\x00e9cuter une DLL en tant qu'application"
"C:\Program Files\Alwil Software\Avast4\setup\avast.setup"="avast! antivirus Update"
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Bureau\aswclear.exe"="avast! Antivirus Removal Tool"
"@C:\C\WINDOWS\system32\SHELL32.dll,-8503"="Rec&hercher..."
"@C:\C\WINDOWS\system32\mycomput.dll,-400"="&G\xe9rer"
"@shell32.dll,-31232"="Gestion du syst\xe8me"
"@shell32.dll,-31294"="Afficher les informations syst\xe8me"
"@shell32.dll,-31327"="Ajouter ou supprimer des programmes"
"@shell32.dll,-31312"="Modifier un param\xe8tre"
"@C:\C\WINDOWS\system32\SHELL32.dll,-22913"="Affiche les lecteurs de disque et le mat\xe9riel connect\xe9 \xe0 cet ordinateur."
"@shell32.dll,-31291"="Ces t\x00e2ches s'appliquent \xe0 votre ordinateur ou aux \xe9quipements mat\xe9riels que vous s\xe9lectionnez."
"@shell32.dll,-31317"="Gestion du syst\xe8me"
"@shell32.dll,-31321"="Masquer le contenu de ce lecteur"
"@shell32.dll,-31292"="Rechercher des fichiers ou des dossiers"
"@shell32.dll,-31325"="Masquer le contenu de ce dossier"
"@shell32.dll,-31273"="Ces liens ouvrent d'autres dossiers et vous am\xe8nent rapidement \xe0 des emplacements utiles."
"@shell32.dll,-31249"="Transf\xe8re des copies des \xe9l\xe9ments s\xe9lectionn\xe9s vers une page Web publique afin que vous puissiez les partager avec d'autres personnes."
"@shell32.dll,-31237"="Cr\x00e9e un nouveau dossier vide dans le dossier que vous avez ouvert."
"@shell32.dll,-31318"="Ces t\x00e2ches s'appliquent \xe0 votre ordinateur et \xe0 ce dossier prot\xe9g\xe9."
"@shell32.dll,-31326"="Masque les \xe9l\xe9ments stock\xe9s dans ce dossier pour emp\x00eacher qu'ils soient chang\xe9s ou supprim\xe9s."
"D:\PROGRAMMES\tuneup 2007\OneClickMaintenance.exe"="TuneUp OCM"
"D:\PROGRAMMES\tuneup 2007\SystemOptimizer.exe"="TuneUp System Optimizer"
"D:\PROGRAMMES\tuneup 2007\RegistryCleaner.exe"="TuneUp RegistryCleaner"
"@shell32.dll,-21772"="Divertissement"
"@shell32.dll,-21782"="Programmes"
"@shell32.dll,-31329"="Gestion de la Corbeille"
"@shell32.dll,-31331"="Vider la Corbeille"
"@shell32.dll,-31333"="Restaurer tous les \xe9l\xe9ments"
"@C:\C\WINDOWS\system32\SHELL32.dll,-22915"="Contient les fichiers et les dossiers que vous avez effac\xe9s."
"@shell32.dll,-31334"="Restaurer cet \xe9l\xe9ment"
"D:\PROGRAMMES\disccleaner\Disk Cleaner\dclean.exe"="Disk Cleaner main module"
"@shell32.dll,-31243"="Donner \xe0 ce fichier ou dossier un nouveau nom que vous entrez."
"@C:\C\WINDOWS\system32\msxml3r.dll,-1"="Document XML"
"@shell32.dll,-31245"="D\xe9place les \xe9l\xe9ments s\xe9lectionn\xe9s vers l'emplacement de votre choix."
"D:\PROGRAMMES\HijackThis.exe"="HijackThis"
"
KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (http://www.security.org.sg)
Process list by traversal of KiWaitListHead
4 - System
112 - LVCOMSX.EXE
416 - cmd.exe
456 - explorer.exe
556 - ScreenshotCapto
576 - aawservice.exe
652 - E_FATIAGE.EXE
692 - csrss.exe
732 - winlogon.exe
792 - services.exe
804 - lsass.exe
884 - RocketDock.exe
972 - svchost.exe
1076 - svchost.exe
1124 - MailWasher.exe
1168 - svchost.exe
1208 - DkService.exe
1488 - spoolsv.exe
1896 - firefox.exe
Total number of processes = 19
NOTE: Under WinXP, this will not show all processes.
KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (http://www.security.org.sg)
Driver/Module list by traversal of PsLoadedModuleList
804D7000 - \C\WINDOWS\system32\ntkrnlpa.exe
806CE000 - \C\WINDOWS\system32\hal.dll
F7ADC000 - \C\WINDOWS\system32\KDCOM.DLL
F79EC000 - \C\WINDOWS\system32\BOOTVID.dll
F74AC000 - ACPI.sys
F7ADE000 - \C\WINDOWS\system32\DRIVERS\WMILIB.SYS
F749B000 - pci.sys
F75DC000 - isapnp.sys
F75EC000 - MountMgr.sys
F747C000 - ftdisk.sys
F7AE0000 - dmload.sys
F7456000 - dmio.sys
F785C000 - PartMgr.sys
F75FC000 - VolSnap.sys
F743E000 - atapi.sys
F760C000 - viadsk.sys
F7426000 - \C\WINDOWS\system32\DRIVERS\SCSIPORT.SYS
F761C000 - disk.sys
F762C000 - \C\WINDOWS\system32\DRIVERS\CLASSPNP.SYS
F7407000 - fltMgr.sys
F73F5000 - sr.sys
F763C000 - PxHelp20.sys
F73DE000 - KSecDD.sys
F7351000 - Ntfs.sys
F7324000 - NDIS.sys
F764C000 - uagp35.sys
F7309000 - Mup.sys
F77AC000 - \SystemRoot\system32\DRIVERS\amdk7.sys
BA802000 - \SystemRoot\system32\DRIVERS\ati2mtag.sys
BA7EE000 - \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
F78D4000 - \SystemRoot\system32\DRIVERS\usbuhci.sys
BA7CB000 - \SystemRoot\system32\DRIVERS\USBPORT.SYS
F78DC000 - \SystemRoot\system32\DRIVERS\usbehci.sys
F78E4000 - \SystemRoot\system32\DRIVERS\fdc.sys
BA7B7000 - \SystemRoot\system32\DRIVERS\parport.sys
BA7A6000 - \SystemRoot\system32\DRIVERS\serial.sys
F7AB8000 - \SystemRoot\system32\DRIVERS\serenum.sys
F77BC000 - \SystemRoot\system32\DRIVERS\i8042prt.sys
F7ABC000 - \SystemRoot\system32\DRIVERS\L8042Kbd.sys
F78EC000 - \SystemRoot\system32\DRIVERS\kbdclass.sys
F77CC000 - \SystemRoot\system32\DRIVERS\L8042mou.Sys
F77DC000 - \SystemRoot\system32\DRIVERS\LMouKE.Sys
F78F4000 - \SystemRoot\system32\DRIVERS\mouclass.sys
F7A88000 - \SystemRoot\system32\DRIVERS\gameenum.sys
B8664000 - \SystemRoot\system32\drivers\smwdm.sys
B8640000 - \SystemRoot\system32\drivers\portcls.sys
F773C000 - \SystemRoot\system32\drivers\drmk.sys
B861D000 - \SystemRoot\system32\drivers\ks.sys
F7B7E000 - \SystemRoot\system32\drivers\aeaudio.sys
F7904000 - \SystemRoot\system32\DRIVERS\fetnd5.sys
B89BA000 - \SystemRoot\system32\DRIVERS\audstub.sys
B6B9D000 - \SystemRoot\system32\DRIVERS\rasl2tp.sys
B6F08000 - \SystemRoot\system32\DRIVERS\ndistapi.sys
B62E4000 - \SystemRoot\system32\DRIVERS\ndiswan.sys
B6B8D000 - \SystemRoot\system32\DRIVERS\raspppoe.sys
B6B7D000 - \SystemRoot\system32\DRIVERS\raspptp.sys
F79A4000 - \SystemRoot\system32\DRIVERS\TDI.SYS
B62D3000 - \SystemRoot\system32\DRIVERS\psched.sys
B65ED000 - \SystemRoot\system32\DRIVERS\msgpc.sys
F78B4000 - \SystemRoot\system32\DRIVERS\ptilink.sys
F78BC000 - \SystemRoot\system32\DRIVERS\raspti.sys
B65DD000 - \SystemRoot\System32\Drivers\pcouffin.sys
B62A2000 - \SystemRoot\system32\DRIVERS\rdpdr.sys
B65CD000 - \SystemRoot\system32\DRIVERS\termdd.sys
F7B2A000 - \SystemRoot\system32\DRIVERS\swenum.sys
B626E000 - \SystemRoot\system32\DRIVERS\update.sys
B6DFC000 - \SystemRoot\system32\DRIVERS\mssmbios.sys
F794C000 - \SystemRoot\system32\drivers\pfc.sys
F79D4000 - \SystemRoot\System32\Drivers\MxlW2k.SYS
B65BD000 - \SystemRoot\system32\DRIVERS\cdrom.sys
B65AD000 - \SystemRoot\system32\DRIVERS\redbook.sys
B659D000 - \SystemRoot\system32\DRIVERS\imapi.sys
B658D000 - \SystemRoot\System32\Drivers\NDProxy.SYS
F779C000 - \SystemRoot\system32\DRIVERS\usbhub.sys
F7B36000 - \SystemRoot\system32\DRIVERS\USBD.SYS
F797C000 - \SystemRoot\system32\DRIVERS\flpydisk.sys
F7B3A000 - \SystemRoot\System32\Drivers\Fs_Rec.SYS
F7CE3000 - \SystemRoot\System32\Drivers\Null.SYS
F7B3C000 - \SystemRoot\System32\Drivers\Beep.SYS
F7CA0000 - \SystemRoot\System32\DRIVERS\AvgArCln.sys
F7C9F000 - \SystemRoot\System32\DRIVERS\AvgAsCln.sys
F78AC000 - \??\C:\Program Files\Symantec\Norton Ghost 2003\ghpciscan.sys
F78C4000 - \SystemRoot\System32\drivers\vga.sys
F7B46000 - \SystemRoot\System32\Drivers\mnmdd.SYS
F7B4E000 - \SystemRoot\System32\DRIVERS\RDPCDD.sys
F798C000 - \SystemRoot\System32\Drivers\Msfs.SYS
F7944000 - \SystemRoot\System32\Drivers\Npfs.SYS
B654D000 - \SystemRoot\system32\DRIVERS\rasacd.sys
AE1FB000 - \SystemRoot\system32\DRIVERS\ipsec.sys
AE1A3000 - \SystemRoot\system32\DRIVERS\tcpip.sys
AE17B000 - \SystemRoot\system32\DRIVERS\netbt.sys
AE159000 - \SystemRoot\System32\drivers\afd.sys
F777C000 - \SystemRoot\system32\DRIVERS\netbios.sys
AE12E000 - \SystemRoot\system32\DRIVERS\rdbss.sys
AE0C0000 - \SystemRoot\system32\DRIVERS\mrxsmb.sys
F781C000 - \SystemRoot\System32\Drivers\Fips.SYS
BA973000 - \SystemRoot\system32\DRIVERS\wanarp.sys
F7994000 - \SystemRoot\system32\DRIVERS\usbccgp.sys
F76DC000 - \SystemRoot\system32\drivers\lvusbsta.sys
AE04C000 - \SystemRoot\system32\DRIVERS\LVCM.sys
F76AC000 - \SystemRoot\system32\DRIVERS\STREAM.SYS
F76FC000 - \SystemRoot\system32\drivers\usbaudio.sys
BA933000 - \SystemRoot\System32\Drivers\Cdfs.SYS
BA0F5000 - \SystemRoot\System32\Drivers\dump_diskdump.sys
F77FC000 - \SystemRoot\System32\Drivers\dump_viadsk.sys
BF800000 - \SystemRoot\System32\win32k.sys
F79B4000 - \SystemRoot\System32\watchdog.sys
F7A70000 - \SystemRoot\System32\drivers\Dxapi.sys
BF9C1000 - \SystemRoot\System32\drivers\dxg.sys
F7CE7000 - \SystemRoot\System32\drivers\dxgthk.sys
BF9D3000 - \SystemRoot\System32\ati2dvag.dll
BFA0D000 - \SystemRoot\System32\ati2cqag.dll
BFA4A000 - \SystemRoot\System32\ati3duag.dll
BFC7D000 - \SystemRoot\System32\ativvaxx.dll
BFFA0000 - \SystemRoot\System32\ATMFD.DLL
ABF1F000 - \SystemRoot\system32\drivers\wdmaud.sys
BA943000 - \SystemRoot\system32\drivers\sysaudio.sys
F7B0E000 - \SystemRoot\System32\Drivers\ParVdm.SYS
AC004000 - \SystemRoot\System32\Drivers\Aspi32.SYS
ABBFF000 - \SystemRoot\system32\DRIVERS\srv.sys
ABBED000 - \??\C:\C\WINDOWS\system32\drivers\tmcomm.sys
ABB6D000 - \??\C:\C\WINDOWS\system32\drivers\srosa.sys
F7CAC000 - \SystemRoot\System32\DRIVERS\KProcCheck.sys
Total number of drivers = 123
Liste des programmes installes
ACDSee 7.0 PowerPack
Ad-Aware 2007
Adobe Flash Player Plugin
Adobe Reader 8.1.0 - Français
Alcatech BPM Studio Professional v4.9.1
Archiveur WinRAR
ArcSoft PhotoImpression 5
ATI Display Driver
Avant Browser (remove only)
BeWAN ADSL modem
CCleaner (remove only)
ConvertXtoDVD 2.2.0.251
Disk Cleaner (remove only)
Diskeeper Professional Edition
DivX Codec
DivX Content Uploader
DivX Converter
DivX Player
DivX Web Player
DriveImage XML
EPSON Attach To Email
EPSON Copy Utility 3
EPSON Image Clip Palette
EPSON Scan
EPSON Scan Assistant
EPSON Web-To-Page
ESPRX520 Guide d'utilisation
FastStone Image Viewer 3.2
Foxit Reader
Free Mp3 Wma Converter V 1.6.0
Google Earth
HijackThis 1.99.1
IncrediMail Xe
Java(TM) 6 Update 2
K-Lite Codec Pack 3.2.5 Basic
Lecteur Windows Media 10
LiveReg (Symantec Corporation)
LiveUpdate 1.80 (Symantec Corporation)
Logitech Desktop Messenger
Logitech QuickCam
Logitech SetPoint
Macromedia Shockwave Player
Magic Transfer 2.3
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft Office Professional Edition 2003
Mozilla Firefox (2.0.0.6)
Mozilla Thunderbird (2.0.0.6)
MYIE2 Browser (remove only)
MySpaceIM
Nero 6 Ultra Edition
Norton Ghost
Opera 9.23
Picasa 2
PIF DESIGNER
Programme de gestion Camera de Logitech®
QuickTime
Real Alternative 1.29
Safari
Safari
Screenshot Captor 2.25.03
Skin Creator
SoulSeek Client 156c
SoundMAX
Speeditup Free 4.50e
Spybot - Search & Destroy 1.4
StuffPlug 3
The Bat! Professional v3.99.3
TuneUp Utilities 2007
Unlocker 1.8.5
VIA Bus Master Ultra ATA Driver (Remove)
Virtual DJ - Atomix Productions
WebFldrs XP
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Media Format Runtime
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\Program Files
21/08/2007 02:45 <REP> .
21/08/2007 02:45 <REP> ..
07/12/2004 16:33 <REP> AC3Filter
11/09/2006 18:11 <REP> ACD Systems
30/04/2006 18:36 <REP> Adobe
26/04/2007 16:57 <REP> ADSL Drivers
27/10/2004 01:34 <REP> Ahead
29/09/2004 16:50 <REP> Analog Devices
17/12/2005 17:15 <REP> ArcSoft
06/07/2007 15:26 <REP> Aspell
29/09/2004 15:36 <REP> ATI Technologies
23/01/2006 21:19 <REP> CachemanXP
07/08/2007 21:45 <REP> CCleaner
05/07/2006 20:37 <REP> Common files
07/02/2007 19:48 <REP> directx
03/08/2007 15:31 <REP> EPSON
07/06/2004 00:28 <REP> Executive Software
21/08/2007 01:51 <REP> Fichiers communs
12/10/2004 17:15 <REP> FileZilla
07/07/2007 23:55 <REP> Google
29/09/2004 15:17 <REP> Gspot
31/07/2005 20:30 <REP> hardwaredetection
30/04/2006 18:36 <REP> ICEOWS
04/05/2006 18:50 <REP> iColorFolder
04/01/2005 14:49 <REP> IEPrivacyKeeper
07/02/2007 18:28 <REP> Illustrate
28/07/2007 18:37 <REP> IncrediMail
25/01/2005 23:40 <REP> Internet Cleaner
06/07/2007 17:10 <REP> Internet Explorer
20/07/2007 22:17 <REP> Java
20/02/2007 21:33 <REP> JSAL Software
09/07/2007 19:32 <REP> K-Lite Codec Pack
06/12/2004 18:19 <REP> Kodak
11/07/2007 00:13 <REP> Logitech
29/07/2005 18:02 <REP> Logon Loader
06/07/2007 17:19 <REP> Media Player Classic
26/09/2006 16:59 <REP> Microsoft.NET
29/09/2004 15:09 <REP> Movie Maker
08/07/2007 11:10 <REP> MSN Messenger
04/01/2005 17:02 <REP> MYIE2
28/07/2007 21:20 <REP> MySpace
29/09/2004 15:09 <REP> NetMeeting
11/09/2006 18:05 <REP> Outlook Express
03/09/2005 17:35 <REP> PhotoFiltre
07/07/2007 15:37 <REP> Picasa2
07/08/2007 23:28 <REP> QuickTime
20/09/2006 22:08 <REP> Raxco
15/02/2006 19:26 <REP> Real
06/07/2007 17:18 <REP> Real Alternative
30/07/2005 17:51 <REP> RenMultiFiles
05/11/2004 21:35 <REP> Soft4Ever
11/09/2006 18:16 <REP> Symantec
29/09/2004 15:17 <REP> Sysinternals
11/09/2006 21:28 <REP> TuneUp Utilities 2006
17/02/2006 20:36 <REP> UltraEdit
06/01/2005 21:52 <REP> UnderCoverXP
03/06/2005 18:49 <REP> UxTheme Multipatcher Fr
28/06/2007 20:47 <REP> Windows Live
06/07/2007 17:26 <REP> Windows Media Player
06/07/2007 17:09 <REP> windows nt
15/12/2004 00:15 <REP> WinRAR
30/04/2006 18:36 <REP> WXPSP2ConnectionPatcher
29/01/2006 11:55 <REP> XemiComputers
28/03/2007 13:03 <REP> XnView
0 fichier(s) 0 octets
64 Rép(s) 6 312 480 768 octets libres
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\Program Files\fichiers communs
21/08/2007 01:51 <REP> .
21/08/2007 01:51 <REP> ..
30/10/2004 23:37 <REP> ACD Systems
21/02/2007 20:56 <REP> Acronis
18/07/2007 14:22 <REP> Adobe
21/10/2006 18:29 <REP> Ahead
16/01/2007 22:07 <REP> COWON
12/03/2005 15:03 <REP> debugmode
28/09/2006 18:04 <REP> DESIGNER
30/09/2004 18:14 <REP> EPSON
12/09/2006 19:25 <REP> FotoWire
02/05/2006 17:42 <REP> GTK
17/12/2005 17:21 <REP> InstallShield
02/01/2005 01:01 <REP> Java
06/12/2004 18:18 <REP> Kodak
04/03/2005 16:26 <REP> Logitech
08/07/2007 11:10 <REP> Microsoft Shared
29/09/2004 15:09 <REP> MSSoap
07/06/2007 23:04 <REP> NSV
11/09/2006 19:53 <REP> ODBC
15/02/2006 19:26 <REP> Real
29/09/2004 15:09 <REP> Services
29/09/2004 17:01 <REP> SpeechEngines
17/01/2006 15:52 <REP> Stardock
11/09/2006 18:16 <REP> Symantec Shared
26/09/2006 16:59 <REP> System
01/10/2006 17:24 <REP> Teknum Systems
29/06/2006 15:44 <REP> Webroot Shared
08/07/2007 22:29 <REP> Wise Installation Wizard
15/02/2006 19:26 <REP> xing shared
0 fichier(s) 0 octets
30 Rép(s) 6 312 476 672 octets libres
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders
06/07/2007 17:30 <REP> .
06/07/2007 17:30 <REP> ..
28/09/2006 18:04 <REP> 1033
28/09/2006 18:04 <REP> 1036
11/07/2003 10:15 1 292 872 MSONSEXT.DLL
29/10/2005 05:19 41 664 MSOSV.DLL
03/06/1999 12:09 122 937 MSOWS409.DLL
07/03/2001 07:00 127 033 MSOWS40c.DLL
11/07/2003 02:25 80 448 PKMWS.DLL
5 fichier(s) 1 664 954 octets
4 Rép(s) 6 312 476 672 octets libres
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\Program Files\common files
05/07/2006 20:37 <REP> .
05/07/2006 20:37 <REP> ..
05/07/2006 20:36 <REP> a?sembly
05/07/2006 20:36 <REP> F?nts
22/12/2005 15:39 <REP> Microsoft Shared
05/07/2006 20:37 <REP> M?crosoft.NET
05/07/2006 20:37 <REP> s?stem
05/07/2006 20:36 <REP> s?stem32
05/07/2006 20:36 <REP> W?nSxS
05/07/2006 20:36 <REP> ?icrosoft.NET
05/07/2006 20:37 <REP> ?ecurity
05/07/2006 20:37 <REP> ?ymantec
05/07/2006 20:36 <REP> ??curity
05/07/2006 20:37 <REP> ??mantec
05/07/2006 20:36 <REP> ??mbols
05/07/2006 20:36 <REP> ??stem32
05/07/2006 20:37 <REP> ?ppPatch
05/07/2006 20:36 <REP> ?icrosoft.NET
0 fichier(s) 0 octets
18 Rép(s) 6 312 476 672 octets libres
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\
12/05/2007 18:22 68 096 diff.exe
12/05/2007 18:22 103 424 grep.exe
2 fichier(s) 171 520 octets
0 Rép(s) 6 312 476 672 octets libres
c:\Documents and Settings\Administrateur\.housecall6.6\getMac.exe
c:\Documents and Settings\Administrateur\.housecall6.6\patch.exe
c:\Documents and Settings\Administrateur\.housecall6.6\tsc.exe
c:\Documents and Settings\Administrateur\Application Data\ezpinst.exe
c:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdatepl\fpupdatepl.exe
c:\Documents and Settings\Administrateur\Application Data\Microsoft\Installer\{0049F6AE-4FE2-4C43-A039-60FCE98A1986}\ARPPRODUCTICON.exe
c:\Documents and Settings\Administrateur\Application Data\Microsoft\Installer\{1CB92574-96F2-467B-B793-5CEB35C40C29}\ARPPRODUCTICON.exe
c:\Documents and Settings\Administrateur\Application Data\Microsoft\Installer\{215937A1-D4A5-4177-ABF8-611131E5B380}\Icon215937A1.exe
c:\Documents and Settings\Administrateur\Application Data\Microsoft\Installer\{215937A1-D4A5-4177-ABF8-611131E5B380}\Icon215937A11.exe
c:\Documents and Settings\Administrateur\Application Data\Microsoft\Installer\{556C9B0C-9BAC-48AC-AC3E-41326A4356F8}\ARPPRODUCTICON.exe
c:\Documents and Settings\Administrateur\Application Data\Microsoft\Installer\{556C9B0C-9BAC-48AC-AC3E-41326A4356F8}\NewShortcut3_556C9B0C9BAC48ACAC3E41326A4356F8.exe
c:\Documents and Settings\Administrateur\Application Data\Microsoft\Installer\{8DD86BF7-28B3-4CE9-88AE-E6EC790CAECA}\NewShortcut1_8315396A5EA1419DBEC4978284BDF556.exe
c:\Documents and Settings\Administrateur\Application Data\Microsoft\Installer\{9A317B59-6A64-4E1C-9BC8-E9659F20DF14}\ARPPRODUCTICON.exe
c:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\7fdgusqm.stephane\extensions\{9A2D4708-9C13-47d3-9620-5617DC48C5FF}\components\Skype4FF.exe
c:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\qdnq6yan.default\FlashGot.exe
c:\Documents and Settings\Administrateur\Favoris\Liens\.EXE
c:\Documents and Settings\Administrateur\nsw88E.tmp\trialstarter180day.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\.housecall6.6\getMac.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\.housecall6.6\patch.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\.housecall6.6\tsc.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\ezpinst.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\inst.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\ARPPRODUCTICON.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\googleearth.exe1_407B9B5CDAC54F44A756B57CAB4E6A8B.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\UNINST_Uninstall_G_3DE5E7D47B88403CA3FD2017A8240C5B.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Microsoft\Installer\{45A54FAD-AADB-4CD2-9E56-2507A15F013D}\ARPPRODUCTICON.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Mozilla\Firefox\Profiles\t8sedybd.default\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}\FEBEbg.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Mozilla\Firefox\Profiles\t8sedybd.default\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}\FEBEunzip.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Mozilla\Firefox\Profiles\t8sedybd.default\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}\FEBEzip.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\MySpace\IM\Install\MSIMClientSetup.1.0.697.0-static-fr.exe
c:\Documents and Settings\Administrateur\Application Data\Avant Browser\update.dll
c:\Documents and Settings\Administrateur\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll
c:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\7fdgusqm.stephane\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbar.dll
c:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\7fdgusqm.stephane\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\metrics.dll
c:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\7fdgusqm.stephane\extensions\{9A2D4708-9C13-47d3-9620-5617DC48C5FF}\components\XPSkype.dll
c:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\8t409b0o.default\extensions\{8e117890-a33f-424b-a2ea-deb272731365}\components\xpical.dll
c:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\qdnq6yan.default\extensions\{31513E58-F253-47ad-86DB-D5F21E905429}\components\mintray-9178506d-2005072516-trunk.dll
c:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\qdnq6yan.default\extensions\{847b3a00-7ab1-11d4-8f02-006008948af5}\components\enigmime.dll
c:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\qdnq6yan.default\extensions\{8e117890-a33f-424b-a2ea-deb272731365}\components\xpical.dll
****** Fin du rapport DiagHelp
D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\Annotations\Stamps\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\Annotations\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\Annotations\Stamps\FRA\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\Annotations\Stamps\ENU\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\Optional\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\HowTo\ENU\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\HowTo\ENU\Images\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\SPPlugins\"=""
"D:\PROGRAMMES\ADOBE READER 8\Esl\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\Javascripts\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\Legal\fr_FR\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\Legal\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\Legal\en_US\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Adobe\Acrobat\8.0\Replicate\Security\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Adobe\Acrobat\8.0\Replicate\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Adobe\Acrobat\8.0\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Adobe\Acrobat\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Adobe\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\adobe_epic\eula\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\adobe_epic\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\Tracker\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\AIR\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\adobe_epic\eula\fr_FR\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\adobe_epic\eula\en_US\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\IDTemplates\ENU\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\IDTemplates\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\IDTemplates\FRA\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\ImageViewer\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\ImageViewer\en_US\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins\ImageViewer\fr_FR\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\BeyondReader\ENU\Onramp\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\BeyondReader\ENU\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\BeyondReader\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\BeyondReader\FRA\Onramp\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\BeyondReader\FRA\"=""
"C:\Program Files\Adobe\Adobe Help Viewer\1.0\Resources\fr\"=""
"C:\Program Files\Adobe\Adobe Help Viewer\1.0\Resources\en\"=""
"C:\Program Files\Fichiers communs\Adobe\Updater5\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins3d\prc\"=""
"D:\PROGRAMMES\ADOBE READER 8\Reader\plug_ins3d\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\Linguistics\LanguageNames\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\Linguistics\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\Linguistics\Providers\Proximity\"=""
"D:\PROGRAMMES\ADOBE READER 8\Resource\Linguistics\Providers\"=""
"C:\C\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A81000000003}\"=""
"C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0_02.b06\"=""
"C:\Program Files\Java\jre1.6.0_02\"=""
"C:\Program Files\Java\jre1.6.0_02\bin\"=""
"C:\C\WINDOWS\Installer\{3248F0A8-6813-11D6-A77B-00B0D0160020}\"=""
"D:\PROGRAMMES\Safari\"=""
"C:\C\WINDOWS\Installer\{3E719879-9914-4C56-843E-96D0C3FCC3FB}\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Apple Computer\Installer Cache\QuickTime 7.2.0.240\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Apple Computer\Installer Cache\"=""
"C:\Documents and Settings\All Users.WINDOWS\Application Data\Apple Computer\"=""
"C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\PictureViewer.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\da.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\de.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\en.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\es.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\fi.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\fr.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\it.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\ja.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\ko.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\nb.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\nl.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\sv.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\zh_CN.lproj\"=""
"C:\Program Files\QuickTime\QuickTimePlayer.Resources\zh_TW.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\ru.lproj\"=""
"C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\ru.lproj\"=""
"C:\Documents and Settings\All Users.WINDOWS\Menu D\xe9marrer\Programmes\QuickTime\"=""
"C:\C\WINDOWS\Installer\{95A890AA-B3B1-44B6-9C18-A8F7AB3EE7FC}\"=""
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Microsoft\Installer\{45A54FAD-AADB-4CD2-9E56-2507A15F013D}\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hldrrr"="C:\C\WINDOWS\system32\hldrrr.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\C\WINDOWS\system32\lsdelete.exe"=dword:00000001
"C:\C\WINDOWS\system32\pxsfs.dll"=dword:00000002
"C:\C\WINDOWS\system32\pxafs.dll"=dword:00000002
"C:\C\WINDOWS\system32\pxinsa64.exe"=dword:00000002
"C:\C\WINDOWS\system32\pxcpya64.exe"=dword:00000002
"D:\PROGRAMMES\convertxtodvd\common\VsoVprev.ax"=dword:00000001
"D:\PROGRAMMES\convertxtodvd\ConvertXtoDVD\wmadmod.dll"=dword:00000001
"D:\PROGRAMMES\convertxtodvd\ConvertXtoDVD\WMVADVD.DLL"=dword:00000001
"D:\PROGRAMMES\convertxtodvd\ConvertXtoDVD\wmvdmod.dll"=dword:00000001
"C:\C\WINDOWS\system32\drv23260.dll"=dword:00000001
"C:\C\WINDOWS\system32\drv33260.dll"=dword:00000001
"C:\C\WINDOWS\system32\drv43260.dll"=dword:00000001
"C:\C\WINDOWS\system32\Pncrt.dll"=dword:00000002
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\corecomp.ini"=dword:0000000b
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\ctor.dll"=dword:0000000b
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\objectps.dll"=dword:0000000b
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\iuser.dll"=dword:0000000b
"C:\Program Files\Fichiers communs\InstallShield\IScript\IScript.dll"=dword:0000000b
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\iKernel.exe"=dword:0000000a
"C:\C\WINDOWS\system32\virtear.dll"=dword:00000001
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\iKernel.dll"=dword:00000002
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\Setup.dll"=dword:00000002
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\DotNetInstaller.exe"=dword:00000002
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\iscript.dll"=dword:00000002
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\ctor.dll"=dword:00000002
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\iuser.dll"=dword:00000002
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\IGDI.dll"=dword:00000002
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\IsProBE.tlb"=dword:0000000f
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\objectps.dll"=dword:0000000f
"C:\C\WINDOWS\system32\EPPICLocal_BP.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_CF.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_DU.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_EN.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_ES.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_FR.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_GE.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_IT.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_KO.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_PT.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_RU.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_SC.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPICLocal_TC.cfg"=dword:00000002
"C:\C\WINDOWS\system32\EPPicMgr.dll"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPattern1.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPattern2.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPattern3.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPattern4.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPattern5.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPattern6.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPresetData_BP.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPresetData_CF.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPresetData_DU.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPresetData_EN.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPresetData_ES.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPresetData_FR.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPresetData_GE.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPresetData_IT.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPresetData_PT.dat"=dword:00000002
"C:\C\WINDOWS\system32\EPPICPrinterDB.dat"=dword:00000002
"C:\C\WINDOWS\system32\EpPicPrt.dll"=dword:00000002
"C:\C\WINDOWS\system32\PICSDK.dll"=dword:00000002
"C:\C\WINDOWS\system32\PICSDK.ini"=dword:00000002
"C:\C\WINDOWS\system32\SPOOL\DRIVERS\W32x86\3\EPICDI_E.CFG"=dword:00000002
"C:\C\WINDOWS\system32\SPOOL\DRIVERS\W32x86\3\EPICDI_J.CFG"=dword:00000002
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll"=dword:0000000d
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\Setup.dll"=dword:0000000d
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe"=dword:0000000d
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll"=dword:0000000d
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll"=dword:0000000d
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll"=dword:0000000d
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\IGDI.dll"=dword:0000000d
"C:\C\WINDOWS\system32\Drivers\pfc.sys"=dword:00000001
"C:\Program Files\Fichiers communs\InstallShield\UpdateService\agent.exe"=dword:00000003
"C:\C\WINDOWS\system32\Vb6stkit.dll"=dword:00000002
"C:\C\WINDOWS\system32\asycfilt.dll"=dword:00000003
"C:\C\WINDOWS\system32\COMCAT.DLL"=dword:00000004
"C:\C\WINDOWS\system32\Comdlg32.ocx"=dword:00000002
"C:\C\WINDOWS\system32\Msmapi32.ocx"=dword:00000001
"C:\C\WINDOWS\system32\Msvbvm60.dll"=dword:00000002
"C:\C\WINDOWS\system32\OLEAUT32.DLL"=dword:00000004
"C:\C\WINDOWS\system32\Olepro32.dll"=dword:00000004
"C:\C\WINDOWS\system32\RICHED32.DLL"=dword:00000001
"C:\C\WINDOWS\system32\richtx32.ocx"=dword:00000001
"C:\C\WINDOWS\system32\Stdole2.tlb"=dword:00000004
"C:\C\WINDOWS\system32\CamCpl.cpl"=dword:00000001
"C:\C\WINDOWS\system32\LCamCpl.dll"=dword:00000001
"C:\C\WINDOWS\system32\vatee.ax"=dword:00000001
"C:\C\WINDOWS\system32\QCUI2.dll"=dword:00000001
"C:\C\WINDOWS\system32\LQCUI2.dll"=dword:00000001
"C:\C\WINDOWS\system32\Ltwvc12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\lfbmp12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\Lfcmp12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\lftif12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\Ltdis12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\Ltefx12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\Ltfil12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\Ltimg12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\Ltkrn12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\ltocx12n.ocx"=dword:00000001
"C:\C\WINDOWS\system32\ltscr12n.ocx"=dword:00000001
"C:\C\WINDOWS\system32\Lvkrn12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\ITIG726.acm"=dword:00000001
"C:\C\WINDOWS\system32\lffax12n.dll"=dword:00000001
"C:\C\WINDOWS\system32\comctl32.ocx"=dword:00000002
"C:\C\WINDOWS\system32\gdiplus.dll"=dword:00000001
"C:\C\WINDOWS\system32\MFC71CHS.DLL"=dword:00000002
"C:\C\WINDOWS\system32\mfc71u.dll"=dword:00000002
"C:\C\WINDOWS\system32\mfc71.dll"=dword:00000003
"C:\C\WINDOWS\system32\atl.dll"=dword:00000004
"C:\C\WINDOWS\system32\msxml4.dll"=dword:00000001
"C:\C\WINDOWS\system32\msxml4r.dll"=dword:00000001
"C:\C\WINDOWS\system32\MFC71FRA.DLL"=dword:00000001
"C:\C\WINDOWS\system32\MFC71ESP.DLL"=dword:00000001
"C:\C\WINDOWS\system32\MFC71ENU.DLL"=dword:00000001
"C:\C\WINDOWS\system32\MFC71DEU.DLL"=dword:00000001
"C:\C\WINDOWS\system32\MFC71CHT.DLL"=dword:00000001
"C:\C\WINDOWS\system32\MFC71ITA.DLL"=dword:00000001
"C:\C\WINDOWS\system32\MFC71JPN.DLL"=dword:00000001
"C:\C\WINDOWS\system32\MFC71KOR.DLL"=dword:00000001
"C:\Program Files\Fichiers communs\Logitech\WebColct\WebColct.exe"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\WebColps.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\opera.lgm"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\ie3.lgm"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\ie4.lgm"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\ie5.lgm"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\ie6.lgm"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\msn6.lgm"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\neoplnet.lgm"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\ns3.lgm"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\ns4.lgm"=dword:00000002
"C:\Program Files\Fichiers communs\Logitech\WebColct\ns6.lgm"=dword:00000002
"C:\C\WINDOWS\system32\pxinsi64.exe"=dword:00000001
"C:\C\WINDOWS\system32\pxcpyi64.exe"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\win\CP1258.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\win\CP1257.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\win\CP1254.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\win\CP1253.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\win\CP1251.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\win\CP1250.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\GREEK.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\UKRAINE.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\TURKISH.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\ROMANIAN.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\ICELAND.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\CYRILLIC.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\CROATIAN.TXT"=dword:00000001
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\CENTEURO.TXT"=dword:00000001
"D:\PROGRAMMES\Opera\Opera.exe"=dword:00000002
"D:\PROGRAMMES\Opera\OUniAnsi.dll"=dword:00000002
"D:\PROGRAMMES\Opera\Opera.dll"=dword:00000002
"D:\PROGRAMMES\Opera\program\netscape.exe"=dword:00000002
"D:\PROGRAMMES\Opera\spellcheck.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.6.0.b105\core1.zip"=dword:00000002
"C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.6.0.b105\core2.zip"=dword:00000002
"C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.6.0.b105\core3.zip"=dword:00000002
"C:\Program Files\EPSON\Creativity Suite\Common\AppInfo1\Use Image.plg"=dword:00000001
"C:\Program Files\EPSON\Creativity Suite\Common\AppInfo1\Scan and Save.plh"=dword:00000001
"C:\Program Files\QuickTime\QTSystem\Ir41_qc.dll"=dword:00000002
"C:\C\WINDOWS\system32\QuickTimeVR.qtx"=dword:00000001
"C:\C\WINDOWS\system32\QuickTime.qts"=dword:00000001
"C:\Program Files\QuickTime\QTSystem\Ir41_qcx.dll"=dword:00000002
"C:\C\WINDOWS\system32\CMDLGFR.DLL"=dword:00000001
"C:\C\WINDOWS\system32\Mscc2fr.dll"=dword:00000001
"C:\C\WINDOWS\system32\MSCMCFR.DLL"=dword:00000001
"C:\C\WINDOWS\system32\MSCOMCT2.OCX"=dword:00000001
"C:\C\WINDOWS\system32\TABCTFR.DLL"=dword:00000001
"C:\C\WINDOWS\system32\TABCTL32.OCX"=dword:00000001
"C:\C\WINDOWS\system32\VB6FR.DLL"=dword:00000001
"C:\C\WINDOWS\system32\inetfr.DLL"=dword:00000001
"C:\C\WINDOWS\system32\msinet.OCX"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\AudFile.dll"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\AudioInfos.dll"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\AudioTrans.dll"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\AudPlayer.dll"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\WMAFile.dll"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\ControlActiveX.ocx"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\MusicExplorer.ocx"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\HookMenu.ocx"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\libfaac.dll"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\libfaad2.dll"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\AACencoder.ocx"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\AACdecoder.ocx"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\M4ADecoder.ocx"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\Flac_Codec.ocx"=dword:00000001
"D:\PROGRAMMES\Free Audio Pack\FreeConverter\ac3dec.ocx"=dword:00000001
"C:\C\WINDOWS\system32\COMCT232.OCX"=dword:00000001
"C:\C\WINDOWS\system32\capicom.dll"=dword:00000001
"C:\C\WINDOWS\system32\psapi.dll"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"drvsyskit"="C:\C\WINDOWS\system32\drivers\hidr.exe"
"hldrrr"="C:\C\WINDOWS\system32\hldrrr.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\DOCUME~1\ADMINI~1.PER\LOCALS~1\Temp\RarSFX0\avgsetup.exe"="AVG Setup"
"D:\PROGRAMMES\screenshotcaptor\ScreenshotCaptor\ScreenshotCaptor.exe"="ScreenshotCaptor"
"D:\PROGRAMMES\avant browser\avant.exe"="Avant Browser"
"@shell32.dll,-31254"="Renommer ce dossier"
"@shell32.dll,-31256"="D\xe9placer ce dossier"
"@shell32.dll,-31258"="Copier ce dossier"
"@shell32.dll,-31380"="Envoyer les fichiers de ce dossier par courrier \xe9lectronique"
"@shell32.dll,-31262"="Supprimer ce dossier"
"@shell32.dll,-31234"="Ces t\x00e2ches s'appliquent aux fichiers et aux dossiers que vous s\xe9lectionnez."
"@sendmail.dll,-21"="Bureau (cr\x00e9er un raccourci)"
"@sendmail.dll,-4"="Destinataire"
"C:\C\WINDOWS\system32\taskmgr.exe"="Gestionnaire des t\x00e2ches de Windows"
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Bureau\setupeng.exe"="ALWIL Software Setup Engine"
"C:\DOCUME~1\ADMINI~1.PER\LOCALS~1\Temp\_av_sfx.tm~a00936\avast.setup"="avast! antivirus Update"
"C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe"="ashDisp"
"@C:\C\WINDOWS\system32\SHELL32.dll,-12696"="Affiche les imprimantes et les imprimantes t\xe9l\x00e9copieurs et vous aide \xe0 en ajouter de nouvelles."
"D:\PROGRAMMES\the bat\thebat.exe"="The Bat! E-Mail Client by Ritlabs"
"@C:\C\WINDOWS\system32\SHELL32.dll,-32517"="Barre des t\x00e2ches et menu D\xe9marrer"
"@C:\C\WINDOWS\system32\Audiodev.dll,-510"="Appareils mobiles multim\x00e9dias"
"@C:\C\WINDOWS\system32\SHELL32.dll,-22985"="Options des dossiers"
"@C:\C\WINDOWS\system32\SHELL32.dll,-22981"="Polices"
"@C:\C\WINDOWS\system32\SHELL32.dll,-22982"="Outils d'administration"
"@C:\C\WINDOWS\system32\mstask.dll,-3408"="T\x00e2ches planifi\x00e9es"
"@C:\C\WINDOWS\system32\wiashext.dll,-331"="Scanneurs et appareils photo"
"C:\C\WINDOWS\system32\rundll32.exe"="Ex\x00e9cuter une DLL en tant qu'application"
"C:\Program Files\Alwil Software\Avast4\setup\avast.setup"="avast! antivirus Update"
"C:\Documents and Settings\Administrateur.PERSO-8C004E35B\Bureau\aswclear.exe"="avast! Antivirus Removal Tool"
"@C:\C\WINDOWS\system32\SHELL32.dll,-8503"="Rec&hercher..."
"@C:\C\WINDOWS\system32\mycomput.dll,-400"="&G\xe9rer"
"@shell32.dll,-31232"="Gestion du syst\xe8me"
"@shell32.dll,-31294"="Afficher les informations syst\xe8me"
"@shell32.dll,-31327"="Ajouter ou supprimer des programmes"
"@shell32.dll,-31312"="Modifier un param\xe8tre"
"@C:\C\WINDOWS\system32\SHELL32.dll,-22913"="Affiche les lecteurs de disque et le mat\xe9riel connect\xe9 \xe0 cet ordinateur."
"@shell32.dll,-31291"="Ces t\x00e2ches s'appliquent \xe0 votre ordinateur ou aux \xe9quipements mat\xe9riels que vous s\xe9lectionnez."
"@shell32.dll,-31317"="Gestion du syst\xe8me"
"@shell32.dll,-31321"="Masquer le contenu de ce lecteur"
"@shell32.dll,-31292"="Rechercher des fichiers ou des dossiers"
"@shell32.dll,-31325"="Masquer le contenu de ce dossier"
"@shell32.dll,-31273"="Ces liens ouvrent d'autres dossiers et vous am\xe8nent rapidement \xe0 des emplacements utiles."
"@shell32.dll,-31249"="Transf\xe8re des copies des \xe9l\xe9ments s\xe9lectionn\xe9s vers une page Web publique afin que vous puissiez les partager avec d'autres personnes."
"@shell32.dll,-31237"="Cr\x00e9e un nouveau dossier vide dans le dossier que vous avez ouvert."
"@shell32.dll,-31318"="Ces t\x00e2ches s'appliquent \xe0 votre ordinateur et \xe0 ce dossier prot\xe9g\xe9."
"@shell32.dll,-31326"="Masque les \xe9l\xe9ments stock\xe9s dans ce dossier pour emp\x00eacher qu'ils soient chang\xe9s ou supprim\xe9s."
"D:\PROGRAMMES\tuneup 2007\OneClickMaintenance.exe"="TuneUp OCM"
"D:\PROGRAMMES\tuneup 2007\SystemOptimizer.exe"="TuneUp System Optimizer"
"D:\PROGRAMMES\tuneup 2007\RegistryCleaner.exe"="TuneUp RegistryCleaner"
"@shell32.dll,-21772"="Divertissement"
"@shell32.dll,-21782"="Programmes"
"@shell32.dll,-31329"="Gestion de la Corbeille"
"@shell32.dll,-31331"="Vider la Corbeille"
"@shell32.dll,-31333"="Restaurer tous les \xe9l\xe9ments"
"@C:\C\WINDOWS\system32\SHELL32.dll,-22915"="Contient les fichiers et les dossiers que vous avez effac\xe9s."
"@shell32.dll,-31334"="Restaurer cet \xe9l\xe9ment"
"D:\PROGRAMMES\disccleaner\Disk Cleaner\dclean.exe"="Disk Cleaner main module"
"@shell32.dll,-31243"="Donner \xe0 ce fichier ou dossier un nouveau nom que vous entrez."
"@C:\C\WINDOWS\system32\msxml3r.dll,-1"="Document XML"
"@shell32.dll,-31245"="D\xe9place les \xe9l\xe9ments s\xe9lectionn\xe9s vers l'emplacement de votre choix."
"D:\PROGRAMMES\HijackThis.exe"="HijackThis"
"
KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (http://www.security.org.sg)
Process list by traversal of KiWaitListHead
4 - System
112 - LVCOMSX.EXE
416 - cmd.exe
456 - explorer.exe
556 - ScreenshotCapto
576 - aawservice.exe
652 - E_FATIAGE.EXE
692 - csrss.exe
732 - winlogon.exe
792 - services.exe
804 - lsass.exe
884 - RocketDock.exe
972 - svchost.exe
1076 - svchost.exe
1124 - MailWasher.exe
1168 - svchost.exe
1208 - DkService.exe
1488 - spoolsv.exe
1896 - firefox.exe
Total number of processes = 19
NOTE: Under WinXP, this will not show all processes.
KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (http://www.security.org.sg)
Driver/Module list by traversal of PsLoadedModuleList
804D7000 - \C\WINDOWS\system32\ntkrnlpa.exe
806CE000 - \C\WINDOWS\system32\hal.dll
F7ADC000 - \C\WINDOWS\system32\KDCOM.DLL
F79EC000 - \C\WINDOWS\system32\BOOTVID.dll
F74AC000 - ACPI.sys
F7ADE000 - \C\WINDOWS\system32\DRIVERS\WMILIB.SYS
F749B000 - pci.sys
F75DC000 - isapnp.sys
F75EC000 - MountMgr.sys
F747C000 - ftdisk.sys
F7AE0000 - dmload.sys
F7456000 - dmio.sys
F785C000 - PartMgr.sys
F75FC000 - VolSnap.sys
F743E000 - atapi.sys
F760C000 - viadsk.sys
F7426000 - \C\WINDOWS\system32\DRIVERS\SCSIPORT.SYS
F761C000 - disk.sys
F762C000 - \C\WINDOWS\system32\DRIVERS\CLASSPNP.SYS
F7407000 - fltMgr.sys
F73F5000 - sr.sys
F763C000 - PxHelp20.sys
F73DE000 - KSecDD.sys
F7351000 - Ntfs.sys
F7324000 - NDIS.sys
F764C000 - uagp35.sys
F7309000 - Mup.sys
F77AC000 - \SystemRoot\system32\DRIVERS\amdk7.sys
BA802000 - \SystemRoot\system32\DRIVERS\ati2mtag.sys
BA7EE000 - \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
F78D4000 - \SystemRoot\system32\DRIVERS\usbuhci.sys
BA7CB000 - \SystemRoot\system32\DRIVERS\USBPORT.SYS
F78DC000 - \SystemRoot\system32\DRIVERS\usbehci.sys
F78E4000 - \SystemRoot\system32\DRIVERS\fdc.sys
BA7B7000 - \SystemRoot\system32\DRIVERS\parport.sys
BA7A6000 - \SystemRoot\system32\DRIVERS\serial.sys
F7AB8000 - \SystemRoot\system32\DRIVERS\serenum.sys
F77BC000 - \SystemRoot\system32\DRIVERS\i8042prt.sys
F7ABC000 - \SystemRoot\system32\DRIVERS\L8042Kbd.sys
F78EC000 - \SystemRoot\system32\DRIVERS\kbdclass.sys
F77CC000 - \SystemRoot\system32\DRIVERS\L8042mou.Sys
F77DC000 - \SystemRoot\system32\DRIVERS\LMouKE.Sys
F78F4000 - \SystemRoot\system32\DRIVERS\mouclass.sys
F7A88000 - \SystemRoot\system32\DRIVERS\gameenum.sys
B8664000 - \SystemRoot\system32\drivers\smwdm.sys
B8640000 - \SystemRoot\system32\drivers\portcls.sys
F773C000 - \SystemRoot\system32\drivers\drmk.sys
B861D000 - \SystemRoot\system32\drivers\ks.sys
F7B7E000 - \SystemRoot\system32\drivers\aeaudio.sys
F7904000 - \SystemRoot\system32\DRIVERS\fetnd5.sys
B89BA000 - \SystemRoot\system32\DRIVERS\audstub.sys
B6B9D000 - \SystemRoot\system32\DRIVERS\rasl2tp.sys
B6F08000 - \SystemRoot\system32\DRIVERS\ndistapi.sys
B62E4000 - \SystemRoot\system32\DRIVERS\ndiswan.sys
B6B8D000 - \SystemRoot\system32\DRIVERS\raspppoe.sys
B6B7D000 - \SystemRoot\system32\DRIVERS\raspptp.sys
F79A4000 - \SystemRoot\system32\DRIVERS\TDI.SYS
B62D3000 - \SystemRoot\system32\DRIVERS\psched.sys
B65ED000 - \SystemRoot\system32\DRIVERS\msgpc.sys
F78B4000 - \SystemRoot\system32\DRIVERS\ptilink.sys
F78BC000 - \SystemRoot\system32\DRIVERS\raspti.sys
B65DD000 - \SystemRoot\System32\Drivers\pcouffin.sys
B62A2000 - \SystemRoot\system32\DRIVERS\rdpdr.sys
B65CD000 - \SystemRoot\system32\DRIVERS\termdd.sys
F7B2A000 - \SystemRoot\system32\DRIVERS\swenum.sys
B626E000 - \SystemRoot\system32\DRIVERS\update.sys
B6DFC000 - \SystemRoot\system32\DRIVERS\mssmbios.sys
F794C000 - \SystemRoot\system32\drivers\pfc.sys
F79D4000 - \SystemRoot\System32\Drivers\MxlW2k.SYS
B65BD000 - \SystemRoot\system32\DRIVERS\cdrom.sys
B65AD000 - \SystemRoot\system32\DRIVERS\redbook.sys
B659D000 - \SystemRoot\system32\DRIVERS\imapi.sys
B658D000 - \SystemRoot\System32\Drivers\NDProxy.SYS
F779C000 - \SystemRoot\system32\DRIVERS\usbhub.sys
F7B36000 - \SystemRoot\system32\DRIVERS\USBD.SYS
F797C000 - \SystemRoot\system32\DRIVERS\flpydisk.sys
F7B3A000 - \SystemRoot\System32\Drivers\Fs_Rec.SYS
F7CE3000 - \SystemRoot\System32\Drivers\Null.SYS
F7B3C000 - \SystemRoot\System32\Drivers\Beep.SYS
F7CA0000 - \SystemRoot\System32\DRIVERS\AvgArCln.sys
F7C9F000 - \SystemRoot\System32\DRIVERS\AvgAsCln.sys
F78AC000 - \??\C:\Program Files\Symantec\Norton Ghost 2003\ghpciscan.sys
F78C4000 - \SystemRoot\System32\drivers\vga.sys
F7B46000 - \SystemRoot\System32\Drivers\mnmdd.SYS
F7B4E000 - \SystemRoot\System32\DRIVERS\RDPCDD.sys
F798C000 - \SystemRoot\System32\Drivers\Msfs.SYS
F7944000 - \SystemRoot\System32\Drivers\Npfs.SYS
B654D000 - \SystemRoot\system32\DRIVERS\rasacd.sys
AE1FB000 - \SystemRoot\system32\DRIVERS\ipsec.sys
AE1A3000 - \SystemRoot\system32\DRIVERS\tcpip.sys
AE17B000 - \SystemRoot\system32\DRIVERS\netbt.sys
AE159000 - \SystemRoot\System32\drivers\afd.sys
F777C000 - \SystemRoot\system32\DRIVERS\netbios.sys
AE12E000 - \SystemRoot\system32\DRIVERS\rdbss.sys
AE0C0000 - \SystemRoot\system32\DRIVERS\mrxsmb.sys
F781C000 - \SystemRoot\System32\Drivers\Fips.SYS
BA973000 - \SystemRoot\system32\DRIVERS\wanarp.sys
F7994000 - \SystemRoot\system32\DRIVERS\usbccgp.sys
F76DC000 - \SystemRoot\system32\drivers\lvusbsta.sys
AE04C000 - \SystemRoot\system32\DRIVERS\LVCM.sys
F76AC000 - \SystemRoot\system32\DRIVERS\STREAM.SYS
F76FC000 - \SystemRoot\system32\drivers\usbaudio.sys
BA933000 - \SystemRoot\System32\Drivers\Cdfs.SYS
BA0F5000 - \SystemRoot\System32\Drivers\dump_diskdump.sys
F77FC000 - \SystemRoot\System32\Drivers\dump_viadsk.sys
BF800000 - \SystemRoot\System32\win32k.sys
F79B4000 - \SystemRoot\System32\watchdog.sys
F7A70000 - \SystemRoot\System32\drivers\Dxapi.sys
BF9C1000 - \SystemRoot\System32\drivers\dxg.sys
F7CE7000 - \SystemRoot\System32\drivers\dxgthk.sys
BF9D3000 - \SystemRoot\System32\ati2dvag.dll
BFA0D000 - \SystemRoot\System32\ati2cqag.dll
BFA4A000 - \SystemRoot\System32\ati3duag.dll
BFC7D000 - \SystemRoot\System32\ativvaxx.dll
BFFA0000 - \SystemRoot\System32\ATMFD.DLL
ABF1F000 - \SystemRoot\system32\drivers\wdmaud.sys
BA943000 - \SystemRoot\system32\drivers\sysaudio.sys
F7B0E000 - \SystemRoot\System32\Drivers\ParVdm.SYS
AC004000 - \SystemRoot\System32\Drivers\Aspi32.SYS
ABBFF000 - \SystemRoot\system32\DRIVERS\srv.sys
ABBED000 - \??\C:\C\WINDOWS\system32\drivers\tmcomm.sys
ABB6D000 - \??\C:\C\WINDOWS\system32\drivers\srosa.sys
F7CAC000 - \SystemRoot\System32\DRIVERS\KProcCheck.sys
Total number of drivers = 123
Liste des programmes installes
ACDSee 7.0 PowerPack
Ad-Aware 2007
Adobe Flash Player Plugin
Adobe Reader 8.1.0 - Français
Alcatech BPM Studio Professional v4.9.1
Archiveur WinRAR
ArcSoft PhotoImpression 5
ATI Display Driver
Avant Browser (remove only)
BeWAN ADSL modem
CCleaner (remove only)
ConvertXtoDVD 2.2.0.251
Disk Cleaner (remove only)
Diskeeper Professional Edition
DivX Codec
DivX Content Uploader
DivX Converter
DivX Player
DivX Web Player
DriveImage XML
EPSON Attach To Email
EPSON Copy Utility 3
EPSON Image Clip Palette
EPSON Scan
EPSON Scan Assistant
EPSON Web-To-Page
ESPRX520 Guide d'utilisation
FastStone Image Viewer 3.2
Foxit Reader
Free Mp3 Wma Converter V 1.6.0
Google Earth
HijackThis 1.99.1
IncrediMail Xe
Java(TM) 6 Update 2
K-Lite Codec Pack 3.2.5 Basic
Lecteur Windows Media 10
LiveReg (Symantec Corporation)
LiveUpdate 1.80 (Symantec Corporation)
Logitech Desktop Messenger
Logitech QuickCam
Logitech SetPoint
Macromedia Shockwave Player
Magic Transfer 2.3
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft Office Professional Edition 2003
Mozilla Firefox (2.0.0.6)
Mozilla Thunderbird (2.0.0.6)
MYIE2 Browser (remove only)
MySpaceIM
Nero 6 Ultra Edition
Norton Ghost
Opera 9.23
Picasa 2
PIF DESIGNER
Programme de gestion Camera de Logitech®
QuickTime
Real Alternative 1.29
Safari
Safari
Screenshot Captor 2.25.03
Skin Creator
SoulSeek Client 156c
SoundMAX
Speeditup Free 4.50e
Spybot - Search & Destroy 1.4
StuffPlug 3
The Bat! Professional v3.99.3
TuneUp Utilities 2007
Unlocker 1.8.5
VIA Bus Master Ultra ATA Driver (Remove)
Virtual DJ - Atomix Productions
WebFldrs XP
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Media Format Runtime
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\Program Files
21/08/2007 02:45 <REP> .
21/08/2007 02:45 <REP> ..
07/12/2004 16:33 <REP> AC3Filter
11/09/2006 18:11 <REP> ACD Systems
30/04/2006 18:36 <REP> Adobe
26/04/2007 16:57 <REP> ADSL Drivers
27/10/2004 01:34 <REP> Ahead
29/09/2004 16:50 <REP> Analog Devices
17/12/2005 17:15 <REP> ArcSoft
06/07/2007 15:26 <REP> Aspell
29/09/2004 15:36 <REP> ATI Technologies
23/01/2006 21:19 <REP> CachemanXP
07/08/2007 21:45 <REP> CCleaner
05/07/2006 20:37 <REP> Common files
07/02/2007 19:48 <REP> directx
03/08/2007 15:31 <REP> EPSON
07/06/2004 00:28 <REP> Executive Software
21/08/2007 01:51 <REP> Fichiers communs
12/10/2004 17:15 <REP> FileZilla
07/07/2007 23:55 <REP> Google
29/09/2004 15:17 <REP> Gspot
31/07/2005 20:30 <REP> hardwaredetection
30/04/2006 18:36 <REP> ICEOWS
04/05/2006 18:50 <REP> iColorFolder
04/01/2005 14:49 <REP> IEPrivacyKeeper
07/02/2007 18:28 <REP> Illustrate
28/07/2007 18:37 <REP> IncrediMail
25/01/2005 23:40 <REP> Internet Cleaner
06/07/2007 17:10 <REP> Internet Explorer
20/07/2007 22:17 <REP> Java
20/02/2007 21:33 <REP> JSAL Software
09/07/2007 19:32 <REP> K-Lite Codec Pack
06/12/2004 18:19 <REP> Kodak
11/07/2007 00:13 <REP> Logitech
29/07/2005 18:02 <REP> Logon Loader
06/07/2007 17:19 <REP> Media Player Classic
26/09/2006 16:59 <REP> Microsoft.NET
29/09/2004 15:09 <REP> Movie Maker
08/07/2007 11:10 <REP> MSN Messenger
04/01/2005 17:02 <REP> MYIE2
28/07/2007 21:20 <REP> MySpace
29/09/2004 15:09 <REP> NetMeeting
11/09/2006 18:05 <REP> Outlook Express
03/09/2005 17:35 <REP> PhotoFiltre
07/07/2007 15:37 <REP> Picasa2
07/08/2007 23:28 <REP> QuickTime
20/09/2006 22:08 <REP> Raxco
15/02/2006 19:26 <REP> Real
06/07/2007 17:18 <REP> Real Alternative
30/07/2005 17:51 <REP> RenMultiFiles
05/11/2004 21:35 <REP> Soft4Ever
11/09/2006 18:16 <REP> Symantec
29/09/2004 15:17 <REP> Sysinternals
11/09/2006 21:28 <REP> TuneUp Utilities 2006
17/02/2006 20:36 <REP> UltraEdit
06/01/2005 21:52 <REP> UnderCoverXP
03/06/2005 18:49 <REP> UxTheme Multipatcher Fr
28/06/2007 20:47 <REP> Windows Live
06/07/2007 17:26 <REP> Windows Media Player
06/07/2007 17:09 <REP> windows nt
15/12/2004 00:15 <REP> WinRAR
30/04/2006 18:36 <REP> WXPSP2ConnectionPatcher
29/01/2006 11:55 <REP> XemiComputers
28/03/2007 13:03 <REP> XnView
0 fichier(s) 0 octets
64 Rép(s) 6 312 480 768 octets libres
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\Program Files\fichiers communs
21/08/2007 01:51 <REP> .
21/08/2007 01:51 <REP> ..
30/10/2004 23:37 <REP> ACD Systems
21/02/2007 20:56 <REP> Acronis
18/07/2007 14:22 <REP> Adobe
21/10/2006 18:29 <REP> Ahead
16/01/2007 22:07 <REP> COWON
12/03/2005 15:03 <REP> debugmode
28/09/2006 18:04 <REP> DESIGNER
30/09/2004 18:14 <REP> EPSON
12/09/2006 19:25 <REP> FotoWire
02/05/2006 17:42 <REP> GTK
17/12/2005 17:21 <REP> InstallShield
02/01/2005 01:01 <REP> Java
06/12/2004 18:18 <REP> Kodak
04/03/2005 16:26 <REP> Logitech
08/07/2007 11:10 <REP> Microsoft Shared
29/09/2004 15:09 <REP> MSSoap
07/06/2007 23:04 <REP> NSV
11/09/2006 19:53 <REP> ODBC
15/02/2006 19:26 <REP> Real
29/09/2004 15:09 <REP> Services
29/09/2004 17:01 <REP> SpeechEngines
17/01/2006 15:52 <REP> Stardock
11/09/2006 18:16 <REP> Symantec Shared
26/09/2006 16:59 <REP> System
01/10/2006 17:24 <REP> Teknum Systems
29/06/2006 15:44 <REP> Webroot Shared
08/07/2007 22:29 <REP> Wise Installation Wizard
15/02/2006 19:26 <REP> xing shared
0 fichier(s) 0 octets
30 Rép(s) 6 312 476 672 octets libres
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders
06/07/2007 17:30 <REP> .
06/07/2007 17:30 <REP> ..
28/09/2006 18:04 <REP> 1033
28/09/2006 18:04 <REP> 1036
11/07/2003 10:15 1 292 872 MSONSEXT.DLL
29/10/2005 05:19 41 664 MSOSV.DLL
03/06/1999 12:09 122 937 MSOWS409.DLL
07/03/2001 07:00 127 033 MSOWS40c.DLL
11/07/2003 02:25 80 448 PKMWS.DLL
5 fichier(s) 1 664 954 octets
4 Rép(s) 6 312 476 672 octets libres
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\Program Files\common files
05/07/2006 20:37 <REP> .
05/07/2006 20:37 <REP> ..
05/07/2006 20:36 <REP> a?sembly
05/07/2006 20:36 <REP> F?nts
22/12/2005 15:39 <REP> Microsoft Shared
05/07/2006 20:37 <REP> M?crosoft.NET
05/07/2006 20:37 <REP> s?stem
05/07/2006 20:36 <REP> s?stem32
05/07/2006 20:36 <REP> W?nSxS
05/07/2006 20:36 <REP> ?icrosoft.NET
05/07/2006 20:37 <REP> ?ecurity
05/07/2006 20:37 <REP> ?ymantec
05/07/2006 20:36 <REP> ??curity
05/07/2006 20:37 <REP> ??mantec
05/07/2006 20:36 <REP> ??mbols
05/07/2006 20:36 <REP> ??stem32
05/07/2006 20:37 <REP> ?ppPatch
05/07/2006 20:36 <REP> ?icrosoft.NET
0 fichier(s) 0 octets
18 Rép(s) 6 312 476 672 octets libres
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 543F-5A11
Répertoire de C:\
12/05/2007 18:22 68 096 diff.exe
12/05/2007 18:22 103 424 grep.exe
2 fichier(s) 171 520 octets
0 Rép(s) 6 312 476 672 octets libres
c:\Documents and Settings\Administrateur\.housecall6.6\getMac.exe
c:\Documents and Settings\Administrateur\.housecall6.6\patch.exe
c:\Documents and Settings\Administrateur\.housecall6.6\tsc.exe
c:\Documents and Settings\Administrateur\Application Data\ezpinst.exe
c:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdatepl\fpupdatepl.exe
c:\Documents and Settings\Administrateur\Application Data\Microsoft\Installer\{0049F6AE-4FE2-4C43-A039-60FCE98A1986}\ARPPRODUCTICON.exe
c:\Documents and Settings\Administrateur\Application Data\Microsoft\Installer\{1CB92574-96F2-467B-B793-5CEB35C40C29}\ARPPRODUCTICON.exe
c:\Documents and Settings\Administrateur\Application Data\Microsoft\Installer\{215937A1-D4A5-4177-ABF8-611131E5B380}\Icon215937A1.exe
c:\Documents and Settings\Administrateur\Application Data\Microsoft\Installer\{215937A1-D4A5-4177-ABF8-611131E5B380}\Icon215937A11.exe
c:\Documents and Settings\Administrateur\Application Data\Microsoft\Installer\{556C9B0C-9BAC-48AC-AC3E-41326A4356F8}\ARPPRODUCTICON.exe
c:\Documents and Settings\Administrateur\Application Data\Microsoft\Installer\{556C9B0C-9BAC-48AC-AC3E-41326A4356F8}\NewShortcut3_556C9B0C9BAC48ACAC3E41326A4356F8.exe
c:\Documents and Settings\Administrateur\Application Data\Microsoft\Installer\{8DD86BF7-28B3-4CE9-88AE-E6EC790CAECA}\NewShortcut1_8315396A5EA1419DBEC4978284BDF556.exe
c:\Documents and Settings\Administrateur\Application Data\Microsoft\Installer\{9A317B59-6A64-4E1C-9BC8-E9659F20DF14}\ARPPRODUCTICON.exe
c:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\7fdgusqm.stephane\extensions\{9A2D4708-9C13-47d3-9620-5617DC48C5FF}\components\Skype4FF.exe
c:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\qdnq6yan.default\FlashGot.exe
c:\Documents and Settings\Administrateur\Favoris\Liens\.EXE
c:\Documents and Settings\Administrateur\nsw88E.tmp\trialstarter180day.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\.housecall6.6\getMac.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\.housecall6.6\patch.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\.housecall6.6\tsc.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\ezpinst.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\inst.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\ARPPRODUCTICON.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\googleearth.exe1_407B9B5CDAC54F44A756B57CAB4E6A8B.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\UNINST_Uninstall_G_3DE5E7D47B88403CA3FD2017A8240C5B.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Microsoft\Installer\{45A54FAD-AADB-4CD2-9E56-2507A15F013D}\ARPPRODUCTICON.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Mozilla\Firefox\Profiles\t8sedybd.default\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}\FEBEbg.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Mozilla\Firefox\Profiles\t8sedybd.default\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}\FEBEunzip.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\Mozilla\Firefox\Profiles\t8sedybd.default\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}\FEBEzip.exe
c:\Documents and Settings\Administrateur.PERSO-8C004E35B\Application Data\MySpace\IM\Install\MSIMClientSetup.1.0.697.0-static-fr.exe
c:\Documents and Settings\Administrateur\Application Data\Avant Browser\update.dll
c:\Documents and Settings\Administrateur\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll
c:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\7fdgusqm.stephane\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbar.dll
c:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\7fdgusqm.stephane\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\metrics.dll
c:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\7fdgusqm.stephane\extensions\{9A2D4708-9C13-47d3-9620-5617DC48C5FF}\components\XPSkype.dll
c:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\8t409b0o.default\extensions\{8e117890-a33f-424b-a2ea-deb272731365}\components\xpical.dll
c:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\qdnq6yan.default\extensions\{31513E58-F253-47ad-86DB-D5F21E905429}\components\mintray-9178506d-2005072516-trunk.dll
c:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\qdnq6yan.default\extensions\{847b3a00-7ab1-11d4-8f02-006008948af5}\components\enigmime.dll
c:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\qdnq6yan.default\extensions\{8e117890-a33f-424b-a2ea-deb272731365}\components\xpical.dll
****** Fin du rapport DiagHelp
-
stephmac - Maître Libellulien
- Messages: 623
- Inscription: 24 Juin 2005 17:48
par Falkra » 21 Aoû 2007 17:11
Ajoute un log hijackthis. On va le shooter en mode sans échec, à la main.
Ne tente rien en attendant, sinon les infos que tu m'as données ne seront plus valables.
Je ponds ça dans la soirée.
Ne tente rien en attendant, sinon les infos que tu m'as données ne seront plus valables.
Je ponds ça dans la soirée.
-
Falkra - Admin libellules.ch
- Messages: 24424
- Inscription: 30 Jan 2005 13:44
- Localisation: 127.0.0.1
par stephmac » 21 Aoû 2007 17:13
le voici :
Logfile of HijackThis v1.99.1
Scan saved at 18:06:24, on 21/08/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 SP2 (7.00.5730.0011)
Running processes:
C:\C\WINDOWS\System32\smss.exe
C:\C\WINDOWS\system32\winlogon.exe
C:\C\WINDOWS\system32\services.exe
C:\C\WINDOWS\system32\lsass.exe
C:\C\WINDOWS\system32\svchost.exe
C:\C\WINDOWS\System32\svchost.exe
C:\C\WINDOWS\system32\spoolsv.exe
C:\C\WINDOWS\Explorer.EXE
D:\PROGRAMMES\adaware2007\aawservice.exe
C:\C\WINDOWS\system32\spool\DRIVERS\W32X86\3\E_FATIAGE.EXE
C:\C\WINDOWS\system32\LVCOMSX.EXE
D:\PROGRAMMES\RocketDock\RocketDock.exe
D:\PROGRAMMES\MAILWASHERPRO2\MailWasher.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\C\WINDOWS\system32\svchost.exe
D:\PROGRAMMES\Mozilla Firefox\firefox.exe
D:\PROGRAMMES\screenshotcaptor\ScreenshotCaptor\ScreenshotCaptor.exe
C:\C\WINDOWS\system32\notepad.exe
D:\PROGRAMMES\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.searchgateway.net/search
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.searchgateway.net/search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com/french
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.searchgateway.net/search-Goo ... 8859-1&oe=
ISO-8859-1&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF
%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID
%3A11&q=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Ultimate Edition 2.0
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRAMMES\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [EPSON Stylus Photo RX520 Series] C:\C\WINDOWS\system32\spool\DRIVERS\W32X86\3\E_FATIAGE.EXE /P31 "EPSON Stylus Photo RX520 Series" /O6 "USB001" /M "Stylus Photo RX520"
O4 - HKLM\..\Run: [LVCOMSX] C:\C\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKCU\..\Run: [RocketDock] "D:\PROGRAMMES\RocketDock\RocketDock.exe"
O4 - Startup: MailWasherPro.lnk = D:\PROGRAMMES\MAILWASHERPRO2\MailWasher.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\OFFICE~1\OFFICE11\REFIEBAR.DLL
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: a-squared Free Service (a2free) - - (no file)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - D:\PROGRAMMES\adaware2007\aawservice.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
Logfile of HijackThis v1.99.1
Scan saved at 18:06:24, on 21/08/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 SP2 (7.00.5730.0011)
Running processes:
C:\C\WINDOWS\System32\smss.exe
C:\C\WINDOWS\system32\winlogon.exe
C:\C\WINDOWS\system32\services.exe
C:\C\WINDOWS\system32\lsass.exe
C:\C\WINDOWS\system32\svchost.exe
C:\C\WINDOWS\System32\svchost.exe
C:\C\WINDOWS\system32\spoolsv.exe
C:\C\WINDOWS\Explorer.EXE
D:\PROGRAMMES\adaware2007\aawservice.exe
C:\C\WINDOWS\system32\spool\DRIVERS\W32X86\3\E_FATIAGE.EXE
C:\C\WINDOWS\system32\LVCOMSX.EXE
D:\PROGRAMMES\RocketDock\RocketDock.exe
D:\PROGRAMMES\MAILWASHERPRO2\MailWasher.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\C\WINDOWS\system32\svchost.exe
D:\PROGRAMMES\Mozilla Firefox\firefox.exe
D:\PROGRAMMES\screenshotcaptor\ScreenshotCaptor\ScreenshotCaptor.exe
C:\C\WINDOWS\system32\notepad.exe
D:\PROGRAMMES\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.searchgateway.net/search
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.searchgateway.net/search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com/french
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.searchgateway.net/search-Goo ... 8859-1&oe=
ISO-8859-1&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF
%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID
%3A11&q=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Ultimate Edition 2.0
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRAMMES\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [EPSON Stylus Photo RX520 Series] C:\C\WINDOWS\system32\spool\DRIVERS\W32X86\3\E_FATIAGE.EXE /P31 "EPSON Stylus Photo RX520 Series" /O6 "USB001" /M "Stylus Photo RX520"
O4 - HKLM\..\Run: [LVCOMSX] C:\C\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKCU\..\Run: [RocketDock] "D:\PROGRAMMES\RocketDock\RocketDock.exe"
O4 - Startup: MailWasherPro.lnk = D:\PROGRAMMES\MAILWASHERPRO2\MailWasher.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\OFFICE~1\OFFICE11\REFIEBAR.DLL
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: a-squared Free Service (a2free) - - (no file)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - D:\PROGRAMMES\adaware2007\aawservice.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
-
stephmac - Maître Libellulien
- Messages: 623
- Inscription: 24 Juin 2005 17:48
-
Falkra - Admin libellules.ch
- Messages: 24424
- Inscription: 30 Jan 2005 13:44
- Localisation: 127.0.0.1
-
stephmac - Maître Libellulien
- Messages: 623
- Inscription: 24 Juin 2005 17:48
par Falkra » 21 Aoû 2007 17:45
Bof, je suis très moyennement efficace là. D'ordinaire ça traîne moins.
On va faire un truc un peu dangereux, donc au moindre doute, tu pose la question avant de te lancer dedans. Je vais te faire utiliser un outil délicat.
----------------------------------
téléchargement et redémarrage
----------------------------------
Télécharge Icesword sur ton bureau depuis ce lien (c'est lent, mais le lien fonctionne) :
http://mail.ustc.edu.cn/~jfpan/download/IceSword122enBeta3.zip
Décompresse-le.
Démarre en mode sans échec. (note la suite si besoin tu ne pourras pas te connecter).
Une fois en mode sans échec, lance icesword.exe, nouvellement créé (icône d'épée sur fond blanc).
Dans la colonne de gauche, tu as un bouton "registry" en bas. clique dessus, ça ouvre un équivalent de regedit.
Là tu peux aller voir les clés comme dans le regedit de windows, cela fonctionne de la même manière.
----------------------------------
Clés
----------------------------------
Dans la partie gauche, déplie de façon à voir cette clé :
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA
Toujours dans la partie gauche, fais un clic droit sur la partie LEGACY_SROSA et choisis "delete" pour l'effacer.
Répète l'opération avec la clé suivante :
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
Après, va sans l'effacer dans la clé :HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
clique dans la aprtie gauche sur la clé "Run".
A droite tu auras des entrées. Parmi elles, ces deux là :
"drvsyskit"="C:\C\WINDOWS\system32\drivers\hidr.exe"
"hldrrr"="C:\C\WINDOWS\system32\hldrrr.exe"
Dans la partie droite, supprime-les par clic droit puis "delete".
----------------------------------
Fichiers :
----------------------------------
Tout en bas tout à gauche tu as un bouton "file". Clique dessus.
Tu auras une sorte d'explorateur windows, cela fonctionne pareil.
Efface par clic droit delete ou "force delete" si cela échoue les fichiers suivants si tu les trouves (il se peut qu'ils soient déjà hors circuit) :
C:\C\WINDOWS\system32\drivers\srosa.sys
C:\C\WINDOWS\system32\drivers\hidr.exe
C:\C\WINDOWS\system32\hldrrr.exe
Et ce dossier (donc clic droit delete sur la partie gauche), sur le dossier exefld si encore présent.
C:\C\WINDOWS\exefld
----------------------------------
Redémarre en mode normal et poste un rapport blacklight.
Je te conseille de télécharger le logiciel et de regarder l'interface avant de commencer en mode sans échec, tant que tu ne fais pas de clic droit delete, rien à craindre.
On va faire un truc un peu dangereux, donc au moindre doute, tu pose la question avant de te lancer dedans. Je vais te faire utiliser un outil délicat.
----------------------------------
téléchargement et redémarrage
----------------------------------
Télécharge Icesword sur ton bureau depuis ce lien (c'est lent, mais le lien fonctionne) :
http://mail.ustc.edu.cn/~jfpan/download/IceSword122enBeta3.zip
Décompresse-le.
Démarre en mode sans échec. (note la suite si besoin tu ne pourras pas te connecter).
Une fois en mode sans échec, lance icesword.exe, nouvellement créé (icône d'épée sur fond blanc).
Dans la colonne de gauche, tu as un bouton "registry" en bas. clique dessus, ça ouvre un équivalent de regedit.
Là tu peux aller voir les clés comme dans le regedit de windows, cela fonctionne de la même manière.
----------------------------------
Clés
----------------------------------
Dans la partie gauche, déplie de façon à voir cette clé :
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA
Toujours dans la partie gauche, fais un clic droit sur la partie LEGACY_SROSA et choisis "delete" pour l'effacer.
Répète l'opération avec la clé suivante :
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
Après, va sans l'effacer dans la clé :HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
clique dans la aprtie gauche sur la clé "Run".
A droite tu auras des entrées. Parmi elles, ces deux là :
"drvsyskit"="C:\C\WINDOWS\system32\drivers\hidr.exe"
"hldrrr"="C:\C\WINDOWS\system32\hldrrr.exe"
Dans la partie droite, supprime-les par clic droit puis "delete".
----------------------------------
Fichiers :
----------------------------------
Tout en bas tout à gauche tu as un bouton "file". Clique dessus.
Tu auras une sorte d'explorateur windows, cela fonctionne pareil.
Efface par clic droit delete ou "force delete" si cela échoue les fichiers suivants si tu les trouves (il se peut qu'ils soient déjà hors circuit) :
C:\C\WINDOWS\system32\drivers\srosa.sys
C:\C\WINDOWS\system32\drivers\hidr.exe
C:\C\WINDOWS\system32\hldrrr.exe
Et ce dossier (donc clic droit delete sur la partie gauche), sur le dossier exefld si encore présent.
C:\C\WINDOWS\exefld
----------------------------------
Redémarre en mode normal et poste un rapport blacklight.
Je te conseille de télécharger le logiciel et de regarder l'interface avant de commencer en mode sans échec, tant que tu ne fais pas de clic droit delete, rien à craindre. -
Falkra - Admin libellules.ch
- Messages: 24424
- Inscription: 30 Jan 2005 13:44
- Localisation: 127.0.0.1
par stephmac » 21 Aoû 2007 18:34
Falkra , c'est la fin du monde !!! la je t'écris d'un autre poste chez moi mais celui sur lequel nous bossions ne redémarre pas ni en mode sans echec ni en autres modes
en clair j'ai voulu demarrer sans echec et a chaque fois je tombe sur la page ou il ya les options de démarrage
la je choisis a nouveau mode sans echec , il se lance et reviens toujours sur cette premiere page avec le choix , et me mets directement sur " demarrer windoxs normalement " ...... je le laisse faire avec le decompte , il se lance et reviens en boucle sur " demarrer windows normalement " même quand je demande " derniere bonne configuration connue " je reviens sur " demarrer sur windows normalement " !!!!!
la y'a gros problème...................
en clair j'ai voulu demarrer sans echec et a chaque fois je tombe sur la page ou il ya les options de démarrage
la je choisis a nouveau mode sans echec , il se lance et reviens toujours sur cette premiere page avec le choix , et me mets directement sur " demarrer windoxs normalement " ...... je le laisse faire avec le decompte , il se lance et reviens en boucle sur " demarrer windows normalement " même quand je demande " derniere bonne configuration connue " je reviens sur " demarrer sur windows normalement " !!!!!
la y'a gros problème...................
-
stephmac - Maître Libellulien
- Messages: 623
- Inscription: 24 Juin 2005 17:48
par Falkra » 21 Aoû 2007 19:25
Quelle galère, je croyais qu'on l'avait déjà fait, mais Bagle met la zone dans la clé de redémarrage mode sans échec aussi, je n'aurais pas dû te le conseiller. 
toutes mes excuses, ça aurait pu être évité.
Au menu, on ne peut pas avoir la restauration système (et redémarrer avec) ?
Sinon par la console de récupération (depuis le cd pour booter), tu pourras toujours effacer les fichiers coupables (listés plus haut) :
http://www.zebulon.fr/dossiers/61-console-de-recuperation.html
toutes mes excuses, ça aurait pu être évité.
Au menu, on ne peut pas avoir la restauration système (et redémarrer avec) ?
Sinon par la console de récupération (depuis le cd pour booter), tu pourras toujours effacer les fichiers coupables (listés plus haut) :
http://www.zebulon.fr/dossiers/61-console-de-recuperation.html
-
Falkra - Admin libellules.ch
- Messages: 24424
- Inscription: 30 Jan 2005 13:44
- Localisation: 127.0.0.1
par stephmac » 21 Aoû 2007 21:51
coucou Falkra ...........me revoila !!!!
bon et bien un sacré bordel , j'ai fait une complete réinstall windows sur C , heureusement j'avais de nombreuses sauvegardes ( profils. marques pages, parametres....ect ) ça n'a pas été trop long
j'ai pu installer antivir sans problème , mais j'ai toujours l'autre dossier c et son sous dossier windows ( le merdique )
bon et bien un sacré bordel , j'ai fait une complete réinstall windows sur C , heureusement j'avais de nombreuses sauvegardes ( profils. marques pages, parametres....ect ) ça n'a pas été trop long
j'ai pu installer antivir sans problème , mais j'ai toujours l'autre dossier c et son sous dossier windows ( le merdique )
-
stephmac - Maître Libellulien
- Messages: 623
- Inscription: 24 Juin 2005 17:48
44 messages
• Page 2 sur 3 • 1, 2, 3
Qui est en ligne
Utilisateurs parcourant ce forum: Aucun utilisateur enregistré et 5 invités
Développé par phpBB® Forum Software © phpBB Group
Traduction par phpBB-fr.com
Traduction par phpBB-fr.com
phpBB Metro Theme by PixelGoose Studio