probleme spaywares
Dernière réponse : dans Sécurité
salut tt le monde j'ai un probleme tres enervent ,alorsj'ai des pops genre a la fin d'extension .....yyy102.html qui sont tres repetitifs et tres genants je me suis rendu compte que mon system est infecte j'ai testé l2RMover il ne veut s'exécuter ya t'il une solution a mon probleme
voila le log:
ogfile of HijackThis v1.99.1
Scan saved at 09:30:52, on 28/12/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\ibmpmsvc.exe
C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\QCONSVC.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\IBM\Messages By IBM\ibmmessages.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Administrateur\Mes documents\Downloads\Compressed\hijackthis_199\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [ibmmessages] C:\Program Files\IBM\Messages By IBM\ibmmessages.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [FolderShare] "C:\Program Files\FolderShare\FolderShare.exe" /background
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {3D061514-8D58-40D8-BB88-2BA6DCA9E5DE} (FontDown Class) - http://www.qurancomplex.com/Downloads/DownloadQuranFont...
O16 - DPF: {B0067CA5-2C37-4C6B-AAEC-5E2CE8635060} (FontSmoother Class) - http://www.qurancomplex.com/Downloads/FontSmooth_New.ca...
O17 - HKLM\System\CCS\Services\Tcpip\..\{275511BD-12D1-4738-B70E-1D39F649892D}: NameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{275511BD-12D1-4738-B70E-1D39F649892D}: NameServer = 192.168.1.1
O20 - Winlogon Notify: Dynamic Directory - C:\WINDOWS\system32\en24l1fq1.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O21 - SSODL: SysTray.Exbr - {6368D1FC-6F5C-4f1b-B164-E67214F678E9} - C:\WINDOWS\System32\mpcopino.dll (file missing)
O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\System32\ibmpmsvc.exe
O23 - Service: QCONSVC - Unknown owner - C:\WINDOWS\System32\QCONSVC.EXE
merci pour tt aide !!
voila le log:
ogfile of HijackThis v1.99.1
Scan saved at 09:30:52, on 28/12/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\ibmpmsvc.exe
C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\QCONSVC.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\IBM\Messages By IBM\ibmmessages.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Administrateur\Mes documents\Downloads\Compressed\hijackthis_199\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [ibmmessages] C:\Program Files\IBM\Messages By IBM\ibmmessages.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [FolderShare] "C:\Program Files\FolderShare\FolderShare.exe" /background
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {3D061514-8D58-40D8-BB88-2BA6DCA9E5DE} (FontDown Class) - http://www.qurancomplex.com/Downloads/DownloadQuranFont...
O16 - DPF: {B0067CA5-2C37-4C6B-AAEC-5E2CE8635060} (FontSmoother Class) - http://www.qurancomplex.com/Downloads/FontSmooth_New.ca...
O17 - HKLM\System\CCS\Services\Tcpip\..\{275511BD-12D1-4738-B70E-1D39F649892D}: NameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{275511BD-12D1-4738-B70E-1D39F649892D}: NameServer = 192.168.1.1
O20 - Winlogon Notify: Dynamic Directory - C:\WINDOWS\system32\en24l1fq1.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O21 - SSODL: SysTray.Exbr - {6368D1FC-6F5C-4f1b-B164-E67214F678E9} - C:\WINDOWS\System32\mpcopino.dll (file missing)
O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\System32\ibmpmsvc.exe
O23 - Service: QCONSVC - Unknown owner - C:\WINDOWS\System32\QCONSVC.EXE
merci pour tt aide !!
Autres pages sur : probleme spaywares
Lassé par la pub ? Créez un compte
Salut,
Essaie sa :
1/Télécharge L2Mfix
http://www.atribune.org/downloads/l2mfix.exe ou
http://www.downloads.subratam.org/l2mfix.exe
Mets-le sur ton bureau.
Double-clic sur l2mfix.exe
A la 1ère question clic sur Accept, ensuite clic sur Install
2/ Ouvre le dossier l2mfix créé sur le bureau puis double-clic sur L2Mfix.bat
Ensuite choisis l'option 1 puis Entrée
Poste ce 1er rapport.
3/ Ouvre le dossier l2mfix créé sur le bureau puis double-clic sur L2Mfix.bat
Ensuite choisis l'option 2 puis Entrée
Puis appuie sur n'importe quelle touche pour redémarrer l'ordinateur
Après redémarrage, le bureau et les icônes vont apparaître puis disparaître, c'est normal ! Et un nouveau rapport va apparaître à l'écran.
>> Si après redémarrage les icônes n'apparaissent/disparaissent pas ou si le rapport n'apparaît pas, alors ouvre le dossier l2mfix et lance second.bat
4/ Reposte un log HijackThis.
Essaie sa :
1/Télécharge L2Mfix
http://www.atribune.org/downloads/l2mfix.exe ou
http://www.downloads.subratam.org/l2mfix.exe
Mets-le sur ton bureau.
Double-clic sur l2mfix.exe
A la 1ère question clic sur Accept, ensuite clic sur Install
2/ Ouvre le dossier l2mfix créé sur le bureau puis double-clic sur L2Mfix.bat
Ensuite choisis l'option 1 puis Entrée
Poste ce 1er rapport.
3/ Ouvre le dossier l2mfix créé sur le bureau puis double-clic sur L2Mfix.bat
Ensuite choisis l'option 2 puis Entrée
Puis appuie sur n'importe quelle touche pour redémarrer l'ordinateur
Après redémarrage, le bureau et les icônes vont apparaître puis disparaître, c'est normal ! Et un nouveau rapport va apparaître à l'écran.
>> Si après redémarrage les icônes n'apparaissent/disparaissent pas ou si le rapport n'apparaît pas, alors ouvre le dossier l2mfix et lance second.bat
4/ Reposte un log HijackThis.
L2MFIX find log 121605
These are the registry keys present
**********************************************************************************
Winlogon/notify:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\
6c,00,00,00
"Logoff"="ChainWlxLogoffEvent"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Logoff"="CryptnetWlxLogoffEvent"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
"DLLName"="cscdll.dll"
"Logon"="WinlogonLogonEvent"
"Logoff"="WinlogonLogoffEvent"
"ScreenSaver"="WinlogonScreenSaverEvent"
"Startup"="WinlogonStartupEvent"
"Shutdown"="WinlogonShutdownEvent"
"StartShell"="WinlogonStartShellEvent"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Dynamic Directory]
"Asynchronous"=dword:00000000
"DllName"="C:\\WINDOWS\\system32\\en24l1fq1.dll"
"Impersonate"=dword:00000000
"Logon"="WinLogon"
"Logoff"="WinLogoff"
"Shutdown"="WinShutdown"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
@=""
"DLLName"="igfxsrvc.dll"
"Asynchronous"=dword:00000001
"Impersonate"=dword:00000001
"Unlock"="WinlogonUnlockEvent"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
"DLLName"="wlnotify.dll"
"Logon"="SCardStartCertProp"
"Logoff"="SCardStopCertProp"
"Lock"="SCardSuspendCertProp"
"Unlock"="SCardResumeCertProp"
"Enabled"=dword:00000001
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"StartShell"="SchedStartShell"
"Logoff"="SchedEventLogOff"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
"Logoff"="WLEventLogoff"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001
"DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
"DLLName"="WlNotify.dll"
"Lock"="SensLockEvent"
"Logon"="SensLogonEvent"
"Logoff"="SensLogoffEvent"
"Safe"=dword:00000001
"MaxWait"=dword:00000258
"StartScreenSaver"="SensStartScreenSaverEvent"
"StopScreenSaver"="SensStopScreenSaverEvent"
"Startup"="SensStartupEvent"
"Shutdown"="SensShutdownEvent"
"StartShell"="SensStartShellEvent"
"PostShell"="SensPostShellEvent"
"Disconnect"="SensDisconnectEvent"
"Reconnect"="SensReconnectEvent"
"Unlock"="SensUnlockEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"Logoff"="TSEventLogoff"
"Logon"="TSEventLogon"
"PostShell"="TSEventPostShell"
"Shutdown"="TSEventShutdown"
"StartShell"="TSEventStartShell"
"Startup"="TSEventStartup"
"MaxWait"=dword:00000258
"Reconnect"="TSEventReconnect"
"Disconnect"="TSEventDisconnect"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
"DLLName"="wlnotify.dll"
"Logon"="RegisterTicketExpiredNotificationEvent"
"Logoff"="UnregisterTicketExpiredNotificationEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001
**********************************************************************************
useragent:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
"{8E2118C1-4D90-7E7A-93A7-CE4CAE43AFA1}"=""
**********************************************************************************
Shell Extension key:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{00022613-0000-0000-C000-000000000046}"="Feuille de propri‚t‚s du fichier multim‚dia"
"{176d6597-26d3-11d1-b350-080036a75b03}"="Gestion de scanneur ICM"
"{1F2E5C40-9550-11CE-99D2-00AA006E086C}"="Page de s‚curit‚ NTFS"
"{3EA48300-8CF6-101B-84FB-666CCB9BCD32}"="Page des propri‚t‚s de OLE DocFile"
"{40dd6e20-7c17-11ce-a804-00aa003ca9f6}"="Extensions de l'environnement pour le partage"
"{41E300E0-78B6-11ce-849B-444553540000}"="PlusPack CPL Extension"
"{42071712-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Carte du Panneau de configuration"
"{42071713-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage cran du Panneau de configuration"
"{42071714-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Panorama du Panneau de configuration"
"{4E40F770-369C-11d0-8922-00A024AB2DBB}"="Page de s‚curit‚ DS"
"{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"="Page de compatibilit‚"
"{56117100-C0CD-101B-81E2-00AA004AE837}"="Gestionnaire de donn‚es endommag‚es de l'environnement"
"{59099400-57FF-11CE-BD94-0020AF85B590}"="Extension copie de disquette"
"{59be4990-f85c-11ce-aff7-00aa003ca9f6}"="Extensions de l'environnement pour les objets r‚seau de Microsoft Windows"
"{5DB2625A-54DF-11D0-B6C4-0800091AA605}"="Gestion d'‚cran ICM"
"{675F097E-4C4D-11D0-B6C1-0800091AA605}"="Gestion d'imprimante ICM"
"{764BF0E1-F219-11ce-972D-00AA00A14F56}"="Extensions de l'environnement de compression de fichiers"
"{77597368-7b15-11d0-a0c2-080036af3f03}"="Extension de l'environnement d'imprimante Web"
"{7988B573-EC89-11cf-9C00-00AA00A14F56}"="Disk Quota UI"
"{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}"="Menu contextuel de cryptage"
"{85BBD920-42A0-1069-A2E4-08002B30309D}"="Porte-documents"
"{88895560-9AA2-1069-930E-00AA0030EBC8}"="Extension ic“ne HyperTerminal"
"{BD84B380-8CA2-1069-AB1D-08000948F534}"="Fonts"
"{DBCE2480-C732-101B-BE72-BA78E9AD5B27}"="Profil ICC"
"{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}"="Page de s‚curit‚ des imprimantes"
"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"="Extensions de l'environnement pour le partage"
"{f92e8c40-3d33-11d2-b1aa-080036a75b03}"="Display TroubleShoot CPL Extension"
"{7444C717-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie PKO"
"{7444C719-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie Sign"
"{7007ACC7-3202-11D1-AAD2-00805FC1270E}"="Connexions r‚seau"
"{992CFFA0-F557-101A-88EC-00DD010CCC48}"="Connexions r‚seau"
"{E211B736-43FD-11D1-9EFB-0000F8757FCD}"="&Scanneurs et appareils photo"
"{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}"="&Scanneurs et appareils photo"
"{905667aa-acd6-11d2-8080-00805f6596d2}"="&Scanneurs et appareils photo"
"{3F953603-1008-4f6e-A73A-04AAC7A992F1}"="&Scanneurs et appareils photo"
"{83bbcbf3-b28a-4919-a5aa-73027445d672}"="&Scanneurs et appareils photo"
"{F0152790-D56E-4445-850E-4F3117DB740C}"="Remote Sessions CPL Extension"
"{5F327514-6C5E-4d60-8F16-D07FA08A78ED}"="Extension feuille de propri‚t‚ de mise … jour automatique"
"{60254CA5-953B-11CF-8C96-00AA00B8708C}"="Extensions de l'interpr‚teur de commandes pour l'environnement d'ex‚cution de scripts Windows"
"{2206CDB2-19C1-11D1-89E0-00C04FD7A829}"="Liaison de donn‚es Microsoft"
"{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Icon Handler"
"{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Shell Extension"
"{D6277990-4C6A-11CF-8D87-00AA0060F5BF}"="Tƒches planifi‚es"
"{0DF44EAA-FF21-4412-828E-260A8728E7F1}"="Barre des tƒches et menu D‚marrer"
"{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}"="Rechercher"
"{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}"="Aide et support"
"{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}"="Aide et support"
"{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}"="Ex‚cuter..."
"{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}"="Internet"
"{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}"="Courrier ‚lectronique"
"{D20EA4E1-3957-11d2-A40B-0C5020524152}"="Polices"
"{D20EA4E1-3957-11d2-A40B-0C5020524153}"="Outils d'administration"
"{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}"="Audio Media Properties Handler"
"{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}"="Video Media Properties Handler"
"{E4B29F9D-D390-480b-92FD-7DDB47101D71}"="Wav Properties Handler"
"{87D62D94-71B3-4b9a-9489-5FE6850DC73E}"="Avi Properties Handler"
"{A6FD9E45-6E44-43f9-8644-08598F5A74D9}"="Midi Properties Handler"
"{c5a40261-cd64-4ccf-84cb-c394da41d590}"="Video Thumbnail Extractor"
"{5E6AB780-7743-11CF-A12B-00AA004AE837}"="Barre d'outils Internet Microsoft"
"{22BF0C20-6DA7-11D0-B373-00A0C9034938}"="tat du t‚l‚chargement"
"{91EA3F8B-C99B-11d0-9815-00C04FD91972}"="Dossier Bureau ‚tendu"
"{6413BA2C-B461-11d1-A18A-080036B11A03}"="Dossier du shell augment‚"
"{F61FFEC1-754F-11d0-80CA-00AA005B4383}"="BandProxy"
"{7BA4C742-9E81-11CF-99D3-00AA004AE837}"="Bande du navigateur Microsoft"
"{30D02401-6A81-11d0-8274-00C04FD5AE38}"="Bande de recherche"
"{32683183-48a0-441b-a342-7c2a440a9478}"="Media Band"
"{169A0691-8DF9-11d1-A1C4-00C04FD75D13}"="Volet int‚gr‚ de recherche"
"{07798131-AF23-11d1-9111-00A0C98BA67D}"="Recherche Web"
"{AF4F6510-F982-11d0-8595-00AA004CD6D8}"="Utilitaire des options de l'arborescence du Registre"
"{01E04581-4EEE-11d0-BFE9-00AA005B4383}"="&Adresse"
"{A08C11D2-A228-11d0-825B-00AA005B4383}"="BoŒte d'entr‚e de l'adresse"
"{00BB2763-6A77-11D0-A535-00C04FD7D062}"="Saisie semi-automatique Microsoft"
"{7376D660-C583-11d0-A3A5-00C04FD706EC}"="TridentImageExtractor"
"{6756A641-DE71-11d0-831B-00AA005B4383}"="Liste de saisie semi-automatique MRU"
"{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}"="Liste de saisie semi-automatique personnalis‚e MRU"
"{7e653215-fa25-46bd-a339-34a2790f3cb7}"="Accessible"
"{acf35015-526e-4230-9596-becbe19f0ac9}"="Barre de progrŠs auto-ouvrante"
"{E0E11A09-5CB8-4B6C-8332-E00720A168F2}"="Analyseur de la barre d'adresses"
"{00BB2764-6A77-11D0-A535-00C04FD7D062}"="Liste de saisie semi-automatique de l'historique Microsoft"
"{03C036F1-A186-11D0-824A-00AA005B4383}"="Liste de saisie semi-automatique du dossier Shell Microsoft"
"{00BB2765-6A77-11D0-A535-00C04FD7D062}"="Conteneur de la liste de saisie semi-automatique multiple Microsoft"
"{ECD4FC4E-521C-11D0-B792-00A0C90312E1}"="Menu Site de bandes"
"{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}"="Shell DeskBarApp"
"{ECD4FC4C-521C-11D0-B792-00A0C90312E1}"="Barre du Bureau"
"{ECD4FC4D-521C-11D0-B792-00A0C90312E1}"="Shell Rebar BandSite"
"{DD313E04-FEFF-11d1-8ECD-0000F87A470C}"="Assistance utilisateur"
"{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}"="ParamŠtres du dossier global"
"{EFA24E61-B078-11d0-89E4-00C04FC9E26E}"="Favorites Band"
"{0A89A860-D7B1-11CE-8350-444553540000}"="Shell Automation Inproc Service"
"{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}"="Shell DocObject Viewer"
"{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}"="Microsoft Browser Architecture"
"{FBF23B40-E3F0-101B-8488-00AA003E56F8}"="InternetShortcut"
"{3C374A40-BAE4-11CF-BF7D-00AA006946EE}"="Microsoft Url History Service"
"{FF393560-C2A7-11CF-BFF4-444553540000}"="Historique"
"{7BD29E00-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files"
"{7BD29E01-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files"
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"="Microsoft Url Search Hook"
"{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}"="Image de d‚marrage de la Suite IE4"
"{67EA19A0-CCEF-11d0-8024-00C04FD75D13}"="CDF Extension Copy Hook"
"{131A6951-7F78-11D0-A979-00C04FD705A2}"="ISFBand OC"
"{9461b922-3c5a-11d2-bf8b-00c04fb93661}"="Search Assistant OC"
"{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}"="Internet"
"{871C5380-42A0-1069-A2EA-08002B30309D}"="Internet Name Space"
"{EFA24E64-B078-11d0-89E4-00C04FC9E26E}"="Explorer Band"
"{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service"
"{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service"
"{88C6C381-2E85-11D0-94DE-444553540000}"="Dossier ActiveX Cache"
"{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"="WebCheck"
"{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}"="Subscription Mgr"
"{F5175861-2688-11d0-9C5E-00AA00A45957}"="Dossier Inscription"
"{08165EA0-E946-11CF-9C87-00AA005127ED}"="WebCheckWebCrawler"
"{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}"="WebCheckChannelAgent"
"{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}"="TrayAgent"
"{7D559C10-9FE9-11d0-93F7-00AA0059CE02}"="Code Download Agent"
"{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}"="ConnectionAgent"
"{D8BD2030-6FC9-11D0-864F-00AA006809D9}"="PostAgent"
"{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}"="WebCheck SyncMgr Handler"
"{352EC2B7-8B9A-11D1-B8AE-006008059382}"="Gestionnaire d'applications d'environnement"
"{0B124F8F-91F0-11D1-B8B5-006008059382}"="num‚rateur d'applications install‚es"
"{CFCCC7A0-A282-11D1-9082-006008059382}"="Publication d'application Darwin"
"{e84fda7c-1d6a-45f6-b725-cb260c236066}"="Shell Image Verbs"
"{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}"="Shell Image Data Factory"
"{3F30C968-480A-4C6C-862D-EFC0897BB84B}"="Extracteur de miniatures de fichier + GDI"
"{9DBD2C50-62AD-11d0-B806-00C04FD706EC}"="Gestionnaire de miniatures - Informations de r‚sum‚ (DOCFILES)"
"{EAB841A0-9550-11cf-8C16-00805F1408F3}"="Extracteur de miniatures HTML"
"{eb9b1153-3b57-4e68-959a-a3266bc3d7fe}"="Shell Image Property Handler"
"{CC6EEFFB-43F6-46c5-9619-51D571967F7D}"="Assistant Publication de sites Web"
"{add36aa8-751a-4579-a266-d66f5202ccbb}"="Commande d'impressions via le Web"
"{6b33163c-76a5-4b6c-bf21-45de9cd503a1}"="Objet Assistant de publication Shell"
"{58f1f272-9240-4f51-b6d4-fd63d1618591}"="Assistant Obtenir une identit‚ Passport"
"{7A9D77BD-5403-11d2-8785-2E0420524153}"="Comptes d'utilisateurs"
"{BD472F60-27FA-11cf-B8B4-444553540000}"="Compressed (zipped) Folder Right Drag Handler"
"{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}"="Compressed (zipped) Folder SendTo Target"
"{f39a0dc0-9cc8-11d0-a599-00c04fd64433}"="Fichier de chaŒne"
"{f3aa0dc0-9cc8-11d0-a599-00c04fd64434}"="Raccourci de chaŒne"
"{f3ba0dc0-9cc8-11d0-a599-00c04fd64435}"="Channel Handler Object"
"{f3da0dc0-9cc8-11d0-a599-00c04fd64437}"="Channel Menu"
"{f3ea0dc0-9cc8-11d0-a599-00c04fd64438}"="Channel Properties"
"{63da6ec0-2e98-11cf-8d82-444553540000}"="FTP Folders Webview"
"{883373C3-BF89-11D1-BE35-080036B11A03}"="Microsoft DocProp Shell Ext"
"{A9CF0EAE-901A-4739-A481-E35B73E47F6D}"="Microsoft DocProp Inplace Edit Box Control"
"{8EE97210-FD1F-4B19-91DA-67914005F020}"="Microsoft DocProp Inplace ML Edit Box Control"
"{0EEA25CC-4362-4A12-850B-86EE61B0D3EB}"="Microsoft DocProp Inplace Droplist Combo Control"
"{6A205B57-2567-4A2C-B881-F787FAB579A3}"="Microsoft DocProp Inplace Calendar Control"
"{28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}"="Microsoft DocProp Inplace Time Control"
"{8A23E65E-31C2-11d0-891C-00A024AB2DBB}"="Directory Query UI"
"{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}"="Shell properties for a DS object"
"{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}"="Directory Object Find"
"{F020E586-5264-11d1-A532-0000F8757D7E}"="Directory Start/Search Find"
"{0D45D530-764B-11d0-A1CA-00AA00C16E65}"="Directory Property UI"
"{62AE1F9A-126A-11D0-A14B-0800361B1103}"="Directory Context Menu Verbs"
"{ECF03A33-103D-11d2-854D-006008059367}"="MyDocs Copy Hook"
"{ECF03A32-103D-11d2-854D-006008059367}"="MyDocs Drop Target"
"{4a7ded0a-ad25-11d0-98a8-0800361b1103}"="MyDocs Properties"
"{750fdf0e-2a26-11d1-a3ea-080036587f03}"="Offline Files Menu"
"{10CFC467-4392-11d2-8DB4-00C04FA31A66}"="Offline Files Folder Options"
"{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}"="Dossier Fichiers hors connexion"
"{143A62C8-C33B-11D1-84FE-00C04FA34A14}"="Microsoft Agent Character Property Sheet Handler"
"{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}"="DfsShell"
"{60fd46de-f830-4894-a628-6fa81bc0190d}"="%DESC_PublishDropTarget%"
"{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"="MMC Icon Handler"
"{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}"=".CAB file viewer"
"{32714800-2E5F-11d0-8B85-00AA0044F941}"="Des &personnes..."
"{8DD448E6-C188-4aed-AF92-44956194EB1F}"="Windows Media Player Play as Playlist Context Menu Handler"
"{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"="Windows Media Player Burn Audio CD Context Menu Handler"
"{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}"="Windows Media Player Add to Playlist Context Menu Handler"
"{5CA3D70E-1895-11CF-8E15-001234567890}"="DriveLetterAccess"
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}"="WinRAR shell extension"
"{00020000-0000-1011-8004-0000C06B5161}"="WIBU-SYSTEMS Shell Extension"
"{416651E4-9C3C-11D9-8BDE-F66BAD1E3F3A}"="PhoneBrowser"
"{C0C4375A-5B72-4efe-929D-3B848C3A1E91}"="Message View"
"{BDEADF00-C265-11D0-BCED-00A0C90AB50F}"="Dossiers Web"
"{00020D75-0000-0000-C000-000000000046}"="Microsoft Office Outlook Desktop Icon Handler"
"{0006F045-0000-0000-C000-000000000046}"="Microsoft Office Outlook Custom Icon Handler"
"{42042206-2D85-11D3-8CFF-005004838597}"="Microsoft Office HTML Icon Handler"
"{3F123F5F-6027-4CAF-8CF9-333B16466EBE}"=""
"{9F27B2CB-2FF8-4936-BC73-F72A95332183}"=""
"{856BF1F4-D6FC-40E3-A1C5-8A07DA4793EE}"=""
"{BBC4AAD2-200C-4B9E-AD0A-B7E5D2E5FE3A}"=""
"{52B87208-9CCF-42C9-B88E-069281105805}"="Trojan Remover Shell Extension"
"{9E87B02B-BB13-4541-B797-D9B663A68129}"=""
"{1DC551AA-0E65-4729-963E-B0F38B31B1E6}"=""
"{57EB944B-F3EF-4827-AC8B-0C1E5D1F766F}"=""
"{A10542F7-1392-4C7B-99F2-99F3733BFB42}"=""
"{2EB48A6E-AE0C-4F59-80E7-2D5DDD4E8D42}"=""
"{77399CF9-D80C-4FA1-8BB4-DACF8A8E33F5}"=""
"{6C88B9A6-0C50-47FD-BEA0-80E23619F330}"=""
"{02312283-17CD-47FD-9B2C-3BC1F2F34B9E}"=""
**********************************************************************************
HKEY ROOT CLASSIDS:
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{3F123F5F-6027-4CAF-8CF9-333B16466EBE}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{3F123F5F-6027-4CAF-8CF9-333B16466EBE}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{3F123F5F-6027-4CAF-8CF9-333B16466EBE}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{3F123F5F-6027-4CAF-8CF9-333B16466EBE}\InprocServer32]
@="C:\\WINDOWS\\system32\\lacwmi.dll"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{9F27B2CB-2FF8-4936-BC73-F72A95332183}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{9F27B2CB-2FF8-4936-BC73-F72A95332183}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{9F27B2CB-2FF8-4936-BC73-F72A95332183}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{9F27B2CB-2FF8-4936-BC73-F72A95332183}\InprocServer32]
@="C:\\WINDOWS\\system32\\kadycc.dll"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{856BF1F4-D6FC-40E3-A1C5-8A07DA4793EE}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{856BF1F4-D6FC-40E3-A1C5-8A07DA4793EE}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{856BF1F4-D6FC-40E3-A1C5-8A07DA4793EE}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{856BF1F4-D6FC-40E3-A1C5-8A07DA4793EE}\InprocServer32]
@="C:\\WINDOWS\\system32\\wwpshell.dll"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{BBC4AAD2-200C-4B9E-AD0A-B7E5D2E5FE3A}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{BBC4AAD2-200C-4B9E-AD0A-B7E5D2E5FE3A}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{BBC4AAD2-200C-4B9E-AD0A-B7E5D2E5FE3A}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{BBC4AAD2-200C-4B9E-AD0A-B7E5D2E5FE3A}\InprocServer32]
@="C:\\WINDOWS\\system32\\guard.tmp"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{9E87B02B-BB13-4541-B797-D9B663A68129}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{9E87B02B-BB13-4541-B797-D9B663A68129}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{9E87B02B-BB13-4541-B797-D9B663A68129}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{9E87B02B-BB13-4541-B797-D9B663A68129}\InprocServer32]
@="C:\\WINDOWS\\system32\\mssnap.dll"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{1DC551AA-0E65-4729-963E-B0F38B31B1E6}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{1DC551AA-0E65-4729-963E-B0F38B31B1E6}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{1DC551AA-0E65-4729-963E-B0F38B31B1E6}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{1DC551AA-0E65-4729-963E-B0F38B31B1E6}\InprocServer32]
@="C:\\WINDOWS\\system32\\kwdhe319.dll"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{57EB944B-F3EF-4827-AC8B-0C1E5D1F766F}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{57EB944B-F3EF-4827-AC8B-0C1E5D1F766F}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{57EB944B-F3EF-4827-AC8B-0C1E5D1F766F}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{57EB944B-F3EF-4827-AC8B-0C1E5D1F766F}\InprocServer32]
@="C:\\WINDOWS\\system32\\coseqchk.dll"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{A10542F7-1392-4C7B-99F2-99F3733BFB42}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{A10542F7-1392-4C7B-99F2-99F3733BFB42}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{A10542F7-1392-4C7B-99F2-99F3733BFB42}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{A10542F7-1392-4C7B-99F2-99F3733BFB42}\InprocServer32]
@="C:\\WINDOWS\\system32\\mbhgrcoi.dll"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{2EB48A6E-AE0C-4F59-80E7-2D5DDD4E8D42}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{2EB48A6E-AE0C-4F59-80E7-2D5DDD4E8D42}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{2EB48A6E-AE0C-4F59-80E7-2D5DDD4E8D42}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{2EB48A6E-AE0C-4F59-80E7-2D5DDD4E8D42}\InprocServer32]
@="C:\\WINDOWS\\system32\\mecpxl32.dLL"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{77399CF9-D80C-4FA1-8BB4-DACF8A8E33F5}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{77399CF9-D80C-4FA1-8BB4-DACF8A8E33F5}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{77399CF9-D80C-4FA1-8BB4-DACF8A8E33F5}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{77399CF9-D80C-4FA1-8BB4-DACF8A8E33F5}\InprocServer32]
@="C:\\WINDOWS\\system32\\ssfolder.dll"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{6C88B9A6-0C50-47FD-BEA0-80E23619F330}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{6C88B9A6-0C50-47FD-BEA0-80E23619F330}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{6C88B9A6-0C50-47FD-BEA0-80E23619F330}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{6C88B9A6-0C50-47FD-BEA0-80E23619F330}\InprocServer32]
@="C:\\WINDOWS\\system32\\igwdial.dll"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{02312283-17CD-47FD-9B2C-3BC1F2F34B9E}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{02312283-17CD-47FD-9B2C-3BC1F2F34B9E}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{02312283-17CD-47FD-9B2C-3BC1F2F34B9E}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{02312283-17CD-47FD-9B2C-3BC1F2F34B9E}\InprocServer32]
@="C:\\WINDOWS\\system32\\cqprops.dll"
"ThreadingModel"="Apartment"
**********************************************************************************
Files Found are not all bad files:
C:\WINDOWS\SYSTEM32\
akmfd.dll Tue 27 Dec 2005 8:40:54 ..... 233 928 228,45 K
connapi.dll Tue 29 Nov 2005 12:49:54 A.... 246 272 240,50 K
coseqchk.dll Mon 26 Dec 2005 14:19:02 ..S.R 234 870 229,36 K
cqprops.dll Wed 28 Dec 2005 8:28:18 ..S.R 233 958 228,47 K
daapi.dll Mon 28 Nov 2005 9:08:32 A.... 115 712 113,00 K
dvrawex.dll Tue 20 Dec 2005 14:35:02 ..S.R 236 860 231,31 K
en24l1~1.dll Tue 27 Dec 2005 15:59:46 ..S.R 233 958 228,47 K
enj4l1~1.dll Wed 21 Dec 2005 10:57:10 ..S.R 234 166 228,68 K
enj8l1~1.dll Tue 27 Dec 2005 10:47:22 ..S.R 235 361 229,84 K
enn6l1~1.dll Sun 25 Dec 2005 11:23:24 ..S.R 233 630 228,15 K
ennql1~1.dll Tue 27 Dec 2005 14:32:18 ..S.R 236 530 230,98 K
enrql1~1.dll Wed 21 Dec 2005 15:28:52 ..S.R 234 043 228,55 K
g604lg~1.dll Tue 27 Dec 2005 15:05:20 ..S.R 235 672 230,15 K
g622lg~1.dll Wed 21 Dec 2005 15:03:32 ..S.R 233 861 228,38 K
h4j40e~1.dll Mon 26 Dec 2005 13:40:50 ..S.R 234 044 228,56 K
h4l20e~1.dll Tue 27 Dec 2005 16:23:44 ..S.R 234 192 228,70 K
haspvdd.dll Wed 14 Dec 2005 11:49:04 A.... 6 656 6,50 K
hr6s05~1.dll Tue 27 Dec 2005 13:48:08 ..S.R 236 927 231,37 K
hrrs05~1.dll Tue 27 Dec 2005 13:39:50 ..S.R 236 957 231,40 K
ieaapi.dll Tue 20 Dec 2005 14:54:32 ..S.R 236 860 231,31 K
igwdial.dll Tue 27 Dec 2005 14:55:02 ..S.R 234 266 228,77 K
irp0l5~1.dll Wed 28 Dec 2005 8:28:18 ..S.R 235 033 229,52 K
j02q0a~1.dll Tue 27 Dec 2005 12:15:30 ..S.R 233 943 228,46 K
k044la~1.dll Tue 27 Dec 2005 15:44:24 ..S.R 233 968 228,48 K
k4620e~1.dll Wed 21 Dec 2005 9:57:10 ..S.R 236 860 231,31 K
k4js0e~1.dll Mon 26 Dec 2005 14:52:04 ..S.R 234 870 229,36 K
k4lq0e~1.dll Tue 27 Dec 2005 14:10:52 ..S.R 233 991 228,50 K
kadycc.dll Tue 20 Dec 2005 13:47:32 ..S.R 236 860 231,31 K
kt06l7~1.dll Tue 27 Dec 2005 9:13:44 ..S.R 236 693 231,14 K
kwdhe319.dll Mon 26 Dec 2005 13:49:36 ..S.R 233 630 228,15 K
lacwmi.dll Tue 20 Dec 2005 12:01:22 ..S.R 236 120 230,59 K
ltl027~1.dll Tue 27 Dec 2005 11:59:28 ..S.R 237 227 231,66 K
lv0009~1.dll Tue 27 Dec 2005 13:48:16 ..S.R 234 083 228,59 K
lv4209~1.dll Sun 25 Dec 2005 14:19:08 ..S.R 233 630 228,15 K
lv6209~1.dll Tue 27 Dec 2005 10:36:02 ..S.R 235 602 230,08 K
lvl209~1.dll Tue 27 Dec 2005 14:39:28 ..S.R 234 121 228,63 K
lvn809~1.dll Wed 21 Dec 2005 13:09:26 ..S.R 234 166 228,68 K
lvp409~1.dll Wed 21 Dec 2005 16:27:38 ..S.R 236 698 231,15 K
m4460e~1.dll Tue 20 Dec 2005 13:46:24 ..S.R 236 120 230,59 K
m6julg~1.dll Tue 27 Dec 2005 9:13:34 ..S.R 237 249 231,69 K
mbhgrcoi.dll Tue 27 Dec 2005 10:36:02 ..S.R 235 333 229,82 K
mecpxl32.dll Tue 27 Dec 2005 10:55:32 ..S.R 235 333 229,82 K
mkaatext.dll Tue 27 Dec 2005 15:02:54 ..S.R 234 266 228,77 K
mssnap.dll Mon 26 Dec 2005 8:28:12 ..S.R 233 630 228,15 K
n08ola~1.dll Tue 27 Dec 2005 10:37:38 ..S.R 235 333 229,82 K
n0n60a~1.dll Tue 27 Dec 2005 13:57:08 ..S.R 237 117 231,56 K
nclapi.dll Thu 24 Nov 2005 10:53:20 A.... 110 592 108,00 K
ncltools.dll Fri 28 Oct 2005 13:51:32 A.... 26 624 26,00 K
nmwcdcls.dll Thu 13 Oct 2005 8:15:16 A.... 48 128 47,00 K
nmwcdlog.dll Thu 13 Oct 2005 8:15:16 A.... 4 608 4,50 K
p0r4la~1.dll Tue 27 Dec 2005 15:40:28 ..S.R 234 266 228,77 K
r06u0a~1.dll Tue 27 Dec 2005 9:59:04 ..S.R 237 265 231,70 K
rmoc3260.dll Tue 15 Nov 2005 9:38:10 A.... 176 167 172,04 K
ssfolder.dll Tue 27 Dec 2005 14:39:22 ..S.R 236 162 230,63 K
t08u0a~1.dll Wed 21 Dec 2005 14:22:44 ..S.R 236 891 231,34 K
winine2.dll Wed 21 Dec 2005 15:15:24 A.... 603 136 589,00 K
wininet.dll Wed 21 Dec 2005 15:15:24 A.... 603 136 589,00 K
wwpshell.dll Tue 20 Dec 2005 14:15:48 ..S.R 236 860 231,31 K
zlib.dll Tue 20 Dec 2005 16:06:36 A.... 53 248 52,00 K
59 items found: 59 files (47 H/S), 0 directories.
Total of file sizes: 13 287 682 bytes 12,67 M
Locate .tmp files:
C:\WINDOWS\SYSTEM32\
hostsvcs.tmp Tue 20 Dec 2005 16:06:36 A.... 18 0,02 K
1 item found: 1 file, 0 directories.
Total of file sizes: 18 bytes 0,02 K
**********************************************************************************
Directory Listing of system files:
Le volume dans le lecteur C s'appelle IBM_PRELOAD
Le num‚ro de s‚rie du volume est 3C46-4082
R‚pertoire de C:\WINDOWS\System32
28/12/2005 08:28 233ÿ958 cqprops.dll
28/12/2005 08:28 235ÿ033 irp0l57m1.dll
27/12/2005 16:23 234ÿ192 h4l20e3oeh.dll
27/12/2005 15:59 233ÿ958 en24l1fq1.dll
27/12/2005 15:44 233ÿ968 k044lahq1d4e.dll
27/12/2005 15:40 234ÿ266 p0r4la9q1d.dll
27/12/2005 15:05 235ÿ672 g604lgdq160e.dll
27/12/2005 15:02 234ÿ266 mkaatext.dll
27/12/2005 14:55 234ÿ266 igwdial.dll
27/12/2005 14:39 234ÿ121 lvl2093oe.dll
27/12/2005 14:39 236ÿ162 ssfolder.dll
27/12/2005 14:32 236ÿ530 ennql1551.dll
27/12/2005 14:10 233ÿ991 k4lq0e35eh.dll
27/12/2005 13:57 237ÿ117 n0n60a5sed.dll
27/12/2005 13:48 234ÿ083 lv0009dme.dll
27/12/2005 13:48 236ÿ927 hr6s05j7e.dll
27/12/2005 13:40 <REP> dllcache
27/12/2005 13:39 236ÿ957 hrrs0597e.dll
27/12/2005 12:15 233ÿ943 j02q0af5ed2.dll
27/12/2005 11:59 237ÿ227 ltl0273mg.dll
27/12/2005 10:55 235ÿ333 mecpxl32.dLL
27/12/2005 10:47 235ÿ361 enj8l11u1.dll
27/12/2005 10:37 235ÿ333 n08olal31dq.dll
27/12/2005 10:36 235ÿ333 mbhgrcoi.dll
27/12/2005 10:36 235ÿ602 lv6209joe.dll
27/12/2005 09:59 237ÿ265 r06u0aj9edo.dll
27/12/2005 09:13 236ÿ693 kt06l7ds1.dll
27/12/2005 09:13 237ÿ249 m6julg1916.dll
26/12/2005 14:52 234ÿ870 k4js0e17eh.dll
26/12/2005 14:19 234ÿ870 coseqchk.dll
26/12/2005 13:49 233ÿ630 kwdhe319.dll
26/12/2005 13:40 234ÿ044 h4j40e1qeh.dll
26/12/2005 08:28 233ÿ630 mssnap.dll
25/12/2005 14:19 233ÿ630 lv4209hoe.dll
25/12/2005 11:23 233ÿ630 enn6l15s1.dll
21/12/2005 16:27 236ÿ698 lvp4097qe.dll
21/12/2005 15:28 234ÿ043 enrql1951.dll
21/12/2005 15:03 233ÿ861 g622lgfo162c.dll
21/12/2005 14:22 236ÿ891 t08u0al9edq.dll
21/12/2005 13:09 234ÿ166 lvn8095ue.dll
21/12/2005 10:57 234ÿ166 enj4l11q1.dll
21/12/2005 09:57 236ÿ860 k4620ejoehoc0.dll
20/12/2005 14:54 236ÿ860 ieaapi.dll
20/12/2005 14:35 236ÿ860 dvrawex.dll
20/12/2005 14:15 236ÿ860 wwpshell.dll
20/12/2005 13:47 236ÿ860 kadycc.dll
20/12/2005 13:46 236ÿ120 m4460ehseh460.dll
20/12/2005 12:01 236ÿ120 lacwmi.dll
30/09/2002 17:26 <REP> Microsoft
47 fichier(s) 11ÿ059ÿ475 octets
2 R‚p(s) 11ÿ059ÿ380ÿ224 octets libres
These are the registry keys present
**********************************************************************************
Winlogon/notify:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\
6c,00,00,00
"Logoff"="ChainWlxLogoffEvent"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Logoff"="CryptnetWlxLogoffEvent"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
"DLLName"="cscdll.dll"
"Logon"="WinlogonLogonEvent"
"Logoff"="WinlogonLogoffEvent"
"ScreenSaver"="WinlogonScreenSaverEvent"
"Startup"="WinlogonStartupEvent"
"Shutdown"="WinlogonShutdownEvent"
"StartShell"="WinlogonStartShellEvent"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Dynamic Directory]
"Asynchronous"=dword:00000000
"DllName"="C:\\WINDOWS\\system32\\en24l1fq1.dll"
"Impersonate"=dword:00000000
"Logon"="WinLogon"
"Logoff"="WinLogoff"
"Shutdown"="WinShutdown"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
@=""
"DLLName"="igfxsrvc.dll"
"Asynchronous"=dword:00000001
"Impersonate"=dword:00000001
"Unlock"="WinlogonUnlockEvent"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
"DLLName"="wlnotify.dll"
"Logon"="SCardStartCertProp"
"Logoff"="SCardStopCertProp"
"Lock"="SCardSuspendCertProp"
"Unlock"="SCardResumeCertProp"
"Enabled"=dword:00000001
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"StartShell"="SchedStartShell"
"Logoff"="SchedEventLogOff"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
"Logoff"="WLEventLogoff"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001
"DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
"DLLName"="WlNotify.dll"
"Lock"="SensLockEvent"
"Logon"="SensLogonEvent"
"Logoff"="SensLogoffEvent"
"Safe"=dword:00000001
"MaxWait"=dword:00000258
"StartScreenSaver"="SensStartScreenSaverEvent"
"StopScreenSaver"="SensStopScreenSaverEvent"
"Startup"="SensStartupEvent"
"Shutdown"="SensShutdownEvent"
"StartShell"="SensStartShellEvent"
"PostShell"="SensPostShellEvent"
"Disconnect"="SensDisconnectEvent"
"Reconnect"="SensReconnectEvent"
"Unlock"="SensUnlockEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"Logoff"="TSEventLogoff"
"Logon"="TSEventLogon"
"PostShell"="TSEventPostShell"
"Shutdown"="TSEventShutdown"
"StartShell"="TSEventStartShell"
"Startup"="TSEventStartup"
"MaxWait"=dword:00000258
"Reconnect"="TSEventReconnect"
"Disconnect"="TSEventDisconnect"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
"DLLName"="wlnotify.dll"
"Logon"="RegisterTicketExpiredNotificationEvent"
"Logoff"="UnregisterTicketExpiredNotificationEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001
**********************************************************************************
useragent:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
"{8E2118C1-4D90-7E7A-93A7-CE4CAE43AFA1}"=""
**********************************************************************************
Shell Extension key:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{00022613-0000-0000-C000-000000000046}"="Feuille de propri‚t‚s du fichier multim‚dia"
"{176d6597-26d3-11d1-b350-080036a75b03}"="Gestion de scanneur ICM"
"{1F2E5C40-9550-11CE-99D2-00AA006E086C}"="Page de s‚curit‚ NTFS"
"{3EA48300-8CF6-101B-84FB-666CCB9BCD32}"="Page des propri‚t‚s de OLE DocFile"
"{40dd6e20-7c17-11ce-a804-00aa003ca9f6}"="Extensions de l'environnement pour le partage"
"{41E300E0-78B6-11ce-849B-444553540000}"="PlusPack CPL Extension"
"{42071712-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Carte du Panneau de configuration"
"{42071713-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage cran du Panneau de configuration"
"{42071714-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Panorama du Panneau de configuration"
"{4E40F770-369C-11d0-8922-00A024AB2DBB}"="Page de s‚curit‚ DS"
"{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"="Page de compatibilit‚"
"{56117100-C0CD-101B-81E2-00AA004AE837}"="Gestionnaire de donn‚es endommag‚es de l'environnement"
"{59099400-57FF-11CE-BD94-0020AF85B590}"="Extension copie de disquette"
"{59be4990-f85c-11ce-aff7-00aa003ca9f6}"="Extensions de l'environnement pour les objets r‚seau de Microsoft Windows"
"{5DB2625A-54DF-11D0-B6C4-0800091AA605}"="Gestion d'‚cran ICM"
"{675F097E-4C4D-11D0-B6C1-0800091AA605}"="Gestion d'imprimante ICM"
"{764BF0E1-F219-11ce-972D-00AA00A14F56}"="Extensions de l'environnement de compression de fichiers"
"{77597368-7b15-11d0-a0c2-080036af3f03}"="Extension de l'environnement d'imprimante Web"
"{7988B573-EC89-11cf-9C00-00AA00A14F56}"="Disk Quota UI"
"{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}"="Menu contextuel de cryptage"
"{85BBD920-42A0-1069-A2E4-08002B30309D}"="Porte-documents"
"{88895560-9AA2-1069-930E-00AA0030EBC8}"="Extension ic“ne HyperTerminal"
"{BD84B380-8CA2-1069-AB1D-08000948F534}"="Fonts"
"{DBCE2480-C732-101B-BE72-BA78E9AD5B27}"="Profil ICC"
"{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}"="Page de s‚curit‚ des imprimantes"
"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"="Extensions de l'environnement pour le partage"
"{f92e8c40-3d33-11d2-b1aa-080036a75b03}"="Display TroubleShoot CPL Extension"
"{7444C717-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie PKO"
"{7444C719-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie Sign"
"{7007ACC7-3202-11D1-AAD2-00805FC1270E}"="Connexions r‚seau"
"{992CFFA0-F557-101A-88EC-00DD010CCC48}"="Connexions r‚seau"
"{E211B736-43FD-11D1-9EFB-0000F8757FCD}"="&Scanneurs et appareils photo"
"{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}"="&Scanneurs et appareils photo"
"{905667aa-acd6-11d2-8080-00805f6596d2}"="&Scanneurs et appareils photo"
"{3F953603-1008-4f6e-A73A-04AAC7A992F1}"="&Scanneurs et appareils photo"
"{83bbcbf3-b28a-4919-a5aa-73027445d672}"="&Scanneurs et appareils photo"
"{F0152790-D56E-4445-850E-4F3117DB740C}"="Remote Sessions CPL Extension"
"{5F327514-6C5E-4d60-8F16-D07FA08A78ED}"="Extension feuille de propri‚t‚ de mise … jour automatique"
"{60254CA5-953B-11CF-8C96-00AA00B8708C}"="Extensions de l'interpr‚teur de commandes pour l'environnement d'ex‚cution de scripts Windows"
"{2206CDB2-19C1-11D1-89E0-00C04FD7A829}"="Liaison de donn‚es Microsoft"
"{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Icon Handler"
"{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Shell Extension"
"{D6277990-4C6A-11CF-8D87-00AA0060F5BF}"="Tƒches planifi‚es"
"{0DF44EAA-FF21-4412-828E-260A8728E7F1}"="Barre des tƒches et menu D‚marrer"
"{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}"="Rechercher"
"{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}"="Aide et support"
"{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}"="Aide et support"
"{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}"="Ex‚cuter..."
"{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}"="Internet"
"{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}"="Courrier ‚lectronique"
"{D20EA4E1-3957-11d2-A40B-0C5020524152}"="Polices"
"{D20EA4E1-3957-11d2-A40B-0C5020524153}"="Outils d'administration"
"{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}"="Audio Media Properties Handler"
"{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}"="Video Media Properties Handler"
"{E4B29F9D-D390-480b-92FD-7DDB47101D71}"="Wav Properties Handler"
"{87D62D94-71B3-4b9a-9489-5FE6850DC73E}"="Avi Properties Handler"
"{A6FD9E45-6E44-43f9-8644-08598F5A74D9}"="Midi Properties Handler"
"{c5a40261-cd64-4ccf-84cb-c394da41d590}"="Video Thumbnail Extractor"
"{5E6AB780-7743-11CF-A12B-00AA004AE837}"="Barre d'outils Internet Microsoft"
"{22BF0C20-6DA7-11D0-B373-00A0C9034938}"="tat du t‚l‚chargement"
"{91EA3F8B-C99B-11d0-9815-00C04FD91972}"="Dossier Bureau ‚tendu"
"{6413BA2C-B461-11d1-A18A-080036B11A03}"="Dossier du shell augment‚"
"{F61FFEC1-754F-11d0-80CA-00AA005B4383}"="BandProxy"
"{7BA4C742-9E81-11CF-99D3-00AA004AE837}"="Bande du navigateur Microsoft"
"{30D02401-6A81-11d0-8274-00C04FD5AE38}"="Bande de recherche"
"{32683183-48a0-441b-a342-7c2a440a9478}"="Media Band"
"{169A0691-8DF9-11d1-A1C4-00C04FD75D13}"="Volet int‚gr‚ de recherche"
"{07798131-AF23-11d1-9111-00A0C98BA67D}"="Recherche Web"
"{AF4F6510-F982-11d0-8595-00AA004CD6D8}"="Utilitaire des options de l'arborescence du Registre"
"{01E04581-4EEE-11d0-BFE9-00AA005B4383}"="&Adresse"
"{A08C11D2-A228-11d0-825B-00AA005B4383}"="BoŒte d'entr‚e de l'adresse"
"{00BB2763-6A77-11D0-A535-00C04FD7D062}"="Saisie semi-automatique Microsoft"
"{7376D660-C583-11d0-A3A5-00C04FD706EC}"="TridentImageExtractor"
"{6756A641-DE71-11d0-831B-00AA005B4383}"="Liste de saisie semi-automatique MRU"
"{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}"="Liste de saisie semi-automatique personnalis‚e MRU"
"{7e653215-fa25-46bd-a339-34a2790f3cb7}"="Accessible"
"{acf35015-526e-4230-9596-becbe19f0ac9}"="Barre de progrŠs auto-ouvrante"
"{E0E11A09-5CB8-4B6C-8332-E00720A168F2}"="Analyseur de la barre d'adresses"
"{00BB2764-6A77-11D0-A535-00C04FD7D062}"="Liste de saisie semi-automatique de l'historique Microsoft"
"{03C036F1-A186-11D0-824A-00AA005B4383}"="Liste de saisie semi-automatique du dossier Shell Microsoft"
"{00BB2765-6A77-11D0-A535-00C04FD7D062}"="Conteneur de la liste de saisie semi-automatique multiple Microsoft"
"{ECD4FC4E-521C-11D0-B792-00A0C90312E1}"="Menu Site de bandes"
"{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}"="Shell DeskBarApp"
"{ECD4FC4C-521C-11D0-B792-00A0C90312E1}"="Barre du Bureau"
"{ECD4FC4D-521C-11D0-B792-00A0C90312E1}"="Shell Rebar BandSite"
"{DD313E04-FEFF-11d1-8ECD-0000F87A470C}"="Assistance utilisateur"
"{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}"="ParamŠtres du dossier global"
"{EFA24E61-B078-11d0-89E4-00C04FC9E26E}"="Favorites Band"
"{0A89A860-D7B1-11CE-8350-444553540000}"="Shell Automation Inproc Service"
"{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}"="Shell DocObject Viewer"
"{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}"="Microsoft Browser Architecture"
"{FBF23B40-E3F0-101B-8488-00AA003E56F8}"="InternetShortcut"
"{3C374A40-BAE4-11CF-BF7D-00AA006946EE}"="Microsoft Url History Service"
"{FF393560-C2A7-11CF-BFF4-444553540000}"="Historique"
"{7BD29E00-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files"
"{7BD29E01-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files"
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"="Microsoft Url Search Hook"
"{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}"="Image de d‚marrage de la Suite IE4"
"{67EA19A0-CCEF-11d0-8024-00C04FD75D13}"="CDF Extension Copy Hook"
"{131A6951-7F78-11D0-A979-00C04FD705A2}"="ISFBand OC"
"{9461b922-3c5a-11d2-bf8b-00c04fb93661}"="Search Assistant OC"
"{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}"="Internet"
"{871C5380-42A0-1069-A2EA-08002B30309D}"="Internet Name Space"
"{EFA24E64-B078-11d0-89E4-00C04FC9E26E}"="Explorer Band"
"{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service"
"{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service"
"{88C6C381-2E85-11D0-94DE-444553540000}"="Dossier ActiveX Cache"
"{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"="WebCheck"
"{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}"="Subscription Mgr"
"{F5175861-2688-11d0-9C5E-00AA00A45957}"="Dossier Inscription"
"{08165EA0-E946-11CF-9C87-00AA005127ED}"="WebCheckWebCrawler"
"{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}"="WebCheckChannelAgent"
"{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}"="TrayAgent"
"{7D559C10-9FE9-11d0-93F7-00AA0059CE02}"="Code Download Agent"
"{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}"="ConnectionAgent"
"{D8BD2030-6FC9-11D0-864F-00AA006809D9}"="PostAgent"
"{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}"="WebCheck SyncMgr Handler"
"{352EC2B7-8B9A-11D1-B8AE-006008059382}"="Gestionnaire d'applications d'environnement"
"{0B124F8F-91F0-11D1-B8B5-006008059382}"="num‚rateur d'applications install‚es"
"{CFCCC7A0-A282-11D1-9082-006008059382}"="Publication d'application Darwin"
"{e84fda7c-1d6a-45f6-b725-cb260c236066}"="Shell Image Verbs"
"{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}"="Shell Image Data Factory"
"{3F30C968-480A-4C6C-862D-EFC0897BB84B}"="Extracteur de miniatures de fichier + GDI"
"{9DBD2C50-62AD-11d0-B806-00C04FD706EC}"="Gestionnaire de miniatures - Informations de r‚sum‚ (DOCFILES)"
"{EAB841A0-9550-11cf-8C16-00805F1408F3}"="Extracteur de miniatures HTML"
"{eb9b1153-3b57-4e68-959a-a3266bc3d7fe}"="Shell Image Property Handler"
"{CC6EEFFB-43F6-46c5-9619-51D571967F7D}"="Assistant Publication de sites Web"
"{add36aa8-751a-4579-a266-d66f5202ccbb}"="Commande d'impressions via le Web"
"{6b33163c-76a5-4b6c-bf21-45de9cd503a1}"="Objet Assistant de publication Shell"
"{58f1f272-9240-4f51-b6d4-fd63d1618591}"="Assistant Obtenir une identit‚ Passport"
"{7A9D77BD-5403-11d2-8785-2E0420524153}"="Comptes d'utilisateurs"
"{BD472F60-27FA-11cf-B8B4-444553540000}"="Compressed (zipped) Folder Right Drag Handler"
"{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}"="Compressed (zipped) Folder SendTo Target"
"{f39a0dc0-9cc8-11d0-a599-00c04fd64433}"="Fichier de chaŒne"
"{f3aa0dc0-9cc8-11d0-a599-00c04fd64434}"="Raccourci de chaŒne"
"{f3ba0dc0-9cc8-11d0-a599-00c04fd64435}"="Channel Handler Object"
"{f3da0dc0-9cc8-11d0-a599-00c04fd64437}"="Channel Menu"
"{f3ea0dc0-9cc8-11d0-a599-00c04fd64438}"="Channel Properties"
"{63da6ec0-2e98-11cf-8d82-444553540000}"="FTP Folders Webview"
"{883373C3-BF89-11D1-BE35-080036B11A03}"="Microsoft DocProp Shell Ext"
"{A9CF0EAE-901A-4739-A481-E35B73E47F6D}"="Microsoft DocProp Inplace Edit Box Control"
"{8EE97210-FD1F-4B19-91DA-67914005F020}"="Microsoft DocProp Inplace ML Edit Box Control"
"{0EEA25CC-4362-4A12-850B-86EE61B0D3EB}"="Microsoft DocProp Inplace Droplist Combo Control"
"{6A205B57-2567-4A2C-B881-F787FAB579A3}"="Microsoft DocProp Inplace Calendar Control"
"{28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}"="Microsoft DocProp Inplace Time Control"
"{8A23E65E-31C2-11d0-891C-00A024AB2DBB}"="Directory Query UI"
"{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}"="Shell properties for a DS object"
"{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}"="Directory Object Find"
"{F020E586-5264-11d1-A532-0000F8757D7E}"="Directory Start/Search Find"
"{0D45D530-764B-11d0-A1CA-00AA00C16E65}"="Directory Property UI"
"{62AE1F9A-126A-11D0-A14B-0800361B1103}"="Directory Context Menu Verbs"
"{ECF03A33-103D-11d2-854D-006008059367}"="MyDocs Copy Hook"
"{ECF03A32-103D-11d2-854D-006008059367}"="MyDocs Drop Target"
"{4a7ded0a-ad25-11d0-98a8-0800361b1103}"="MyDocs Properties"
"{750fdf0e-2a26-11d1-a3ea-080036587f03}"="Offline Files Menu"
"{10CFC467-4392-11d2-8DB4-00C04FA31A66}"="Offline Files Folder Options"
"{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}"="Dossier Fichiers hors connexion"
"{143A62C8-C33B-11D1-84FE-00C04FA34A14}"="Microsoft Agent Character Property Sheet Handler"
"{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}"="DfsShell"
"{60fd46de-f830-4894-a628-6fa81bc0190d}"="%DESC_PublishDropTarget%"
"{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"="MMC Icon Handler"
"{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}"=".CAB file viewer"
"{32714800-2E5F-11d0-8B85-00AA0044F941}"="Des &personnes..."
"{8DD448E6-C188-4aed-AF92-44956194EB1F}"="Windows Media Player Play as Playlist Context Menu Handler"
"{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"="Windows Media Player Burn Audio CD Context Menu Handler"
"{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}"="Windows Media Player Add to Playlist Context Menu Handler"
"{5CA3D70E-1895-11CF-8E15-001234567890}"="DriveLetterAccess"
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}"="WinRAR shell extension"
"{00020000-0000-1011-8004-0000C06B5161}"="WIBU-SYSTEMS Shell Extension"
"{416651E4-9C3C-11D9-8BDE-F66BAD1E3F3A}"="PhoneBrowser"
"{C0C4375A-5B72-4efe-929D-3B848C3A1E91}"="Message View"
"{BDEADF00-C265-11D0-BCED-00A0C90AB50F}"="Dossiers Web"
"{00020D75-0000-0000-C000-000000000046}"="Microsoft Office Outlook Desktop Icon Handler"
"{0006F045-0000-0000-C000-000000000046}"="Microsoft Office Outlook Custom Icon Handler"
"{42042206-2D85-11D3-8CFF-005004838597}"="Microsoft Office HTML Icon Handler"
"{3F123F5F-6027-4CAF-8CF9-333B16466EBE}"=""
"{9F27B2CB-2FF8-4936-BC73-F72A95332183}"=""
"{856BF1F4-D6FC-40E3-A1C5-8A07DA4793EE}"=""
"{BBC4AAD2-200C-4B9E-AD0A-B7E5D2E5FE3A}"=""
"{52B87208-9CCF-42C9-B88E-069281105805}"="Trojan Remover Shell Extension"
"{9E87B02B-BB13-4541-B797-D9B663A68129}"=""
"{1DC551AA-0E65-4729-963E-B0F38B31B1E6}"=""
"{57EB944B-F3EF-4827-AC8B-0C1E5D1F766F}"=""
"{A10542F7-1392-4C7B-99F2-99F3733BFB42}"=""
"{2EB48A6E-AE0C-4F59-80E7-2D5DDD4E8D42}"=""
"{77399CF9-D80C-4FA1-8BB4-DACF8A8E33F5}"=""
"{6C88B9A6-0C50-47FD-BEA0-80E23619F330}"=""
"{02312283-17CD-47FD-9B2C-3BC1F2F34B9E}"=""
**********************************************************************************
HKEY ROOT CLASSIDS:
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{3F123F5F-6027-4CAF-8CF9-333B16466EBE}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{3F123F5F-6027-4CAF-8CF9-333B16466EBE}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{3F123F5F-6027-4CAF-8CF9-333B16466EBE}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{3F123F5F-6027-4CAF-8CF9-333B16466EBE}\InprocServer32]
@="C:\\WINDOWS\\system32\\lacwmi.dll"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{9F27B2CB-2FF8-4936-BC73-F72A95332183}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{9F27B2CB-2FF8-4936-BC73-F72A95332183}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{9F27B2CB-2FF8-4936-BC73-F72A95332183}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{9F27B2CB-2FF8-4936-BC73-F72A95332183}\InprocServer32]
@="C:\\WINDOWS\\system32\\kadycc.dll"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{856BF1F4-D6FC-40E3-A1C5-8A07DA4793EE}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{856BF1F4-D6FC-40E3-A1C5-8A07DA4793EE}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{856BF1F4-D6FC-40E3-A1C5-8A07DA4793EE}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{856BF1F4-D6FC-40E3-A1C5-8A07DA4793EE}\InprocServer32]
@="C:\\WINDOWS\\system32\\wwpshell.dll"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{BBC4AAD2-200C-4B9E-AD0A-B7E5D2E5FE3A}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{BBC4AAD2-200C-4B9E-AD0A-B7E5D2E5FE3A}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{BBC4AAD2-200C-4B9E-AD0A-B7E5D2E5FE3A}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{BBC4AAD2-200C-4B9E-AD0A-B7E5D2E5FE3A}\InprocServer32]
@="C:\\WINDOWS\\system32\\guard.tmp"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{9E87B02B-BB13-4541-B797-D9B663A68129}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{9E87B02B-BB13-4541-B797-D9B663A68129}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{9E87B02B-BB13-4541-B797-D9B663A68129}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{9E87B02B-BB13-4541-B797-D9B663A68129}\InprocServer32]
@="C:\\WINDOWS\\system32\\mssnap.dll"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{1DC551AA-0E65-4729-963E-B0F38B31B1E6}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{1DC551AA-0E65-4729-963E-B0F38B31B1E6}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{1DC551AA-0E65-4729-963E-B0F38B31B1E6}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{1DC551AA-0E65-4729-963E-B0F38B31B1E6}\InprocServer32]
@="C:\\WINDOWS\\system32\\kwdhe319.dll"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{57EB944B-F3EF-4827-AC8B-0C1E5D1F766F}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{57EB944B-F3EF-4827-AC8B-0C1E5D1F766F}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{57EB944B-F3EF-4827-AC8B-0C1E5D1F766F}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{57EB944B-F3EF-4827-AC8B-0C1E5D1F766F}\InprocServer32]
@="C:\\WINDOWS\\system32\\coseqchk.dll"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{A10542F7-1392-4C7B-99F2-99F3733BFB42}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{A10542F7-1392-4C7B-99F2-99F3733BFB42}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{A10542F7-1392-4C7B-99F2-99F3733BFB42}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{A10542F7-1392-4C7B-99F2-99F3733BFB42}\InprocServer32]
@="C:\\WINDOWS\\system32\\mbhgrcoi.dll"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{2EB48A6E-AE0C-4F59-80E7-2D5DDD4E8D42}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{2EB48A6E-AE0C-4F59-80E7-2D5DDD4E8D42}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{2EB48A6E-AE0C-4F59-80E7-2D5DDD4E8D42}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{2EB48A6E-AE0C-4F59-80E7-2D5DDD4E8D42}\InprocServer32]
@="C:\\WINDOWS\\system32\\mecpxl32.dLL"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{77399CF9-D80C-4FA1-8BB4-DACF8A8E33F5}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{77399CF9-D80C-4FA1-8BB4-DACF8A8E33F5}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{77399CF9-D80C-4FA1-8BB4-DACF8A8E33F5}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{77399CF9-D80C-4FA1-8BB4-DACF8A8E33F5}\InprocServer32]
@="C:\\WINDOWS\\system32\\ssfolder.dll"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{6C88B9A6-0C50-47FD-BEA0-80E23619F330}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{6C88B9A6-0C50-47FD-BEA0-80E23619F330}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{6C88B9A6-0C50-47FD-BEA0-80E23619F330}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{6C88B9A6-0C50-47FD-BEA0-80E23619F330}\InprocServer32]
@="C:\\WINDOWS\\system32\\igwdial.dll"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{02312283-17CD-47FD-9B2C-3BC1F2F34B9E}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{02312283-17CD-47FD-9B2C-3BC1F2F34B9E}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{02312283-17CD-47FD-9B2C-3BC1F2F34B9E}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{02312283-17CD-47FD-9B2C-3BC1F2F34B9E}\InprocServer32]
@="C:\\WINDOWS\\system32\\cqprops.dll"
"ThreadingModel"="Apartment"
**********************************************************************************
Files Found are not all bad files:
C:\WINDOWS\SYSTEM32\
akmfd.dll Tue 27 Dec 2005 8:40:54 ..... 233 928 228,45 K
connapi.dll Tue 29 Nov 2005 12:49:54 A.... 246 272 240,50 K
coseqchk.dll Mon 26 Dec 2005 14:19:02 ..S.R 234 870 229,36 K
cqprops.dll Wed 28 Dec 2005 8:28:18 ..S.R 233 958 228,47 K
daapi.dll Mon 28 Nov 2005 9:08:32 A.... 115 712 113,00 K
dvrawex.dll Tue 20 Dec 2005 14:35:02 ..S.R 236 860 231,31 K
en24l1~1.dll Tue 27 Dec 2005 15:59:46 ..S.R 233 958 228,47 K
enj4l1~1.dll Wed 21 Dec 2005 10:57:10 ..S.R 234 166 228,68 K
enj8l1~1.dll Tue 27 Dec 2005 10:47:22 ..S.R 235 361 229,84 K
enn6l1~1.dll Sun 25 Dec 2005 11:23:24 ..S.R 233 630 228,15 K
ennql1~1.dll Tue 27 Dec 2005 14:32:18 ..S.R 236 530 230,98 K
enrql1~1.dll Wed 21 Dec 2005 15:28:52 ..S.R 234 043 228,55 K
g604lg~1.dll Tue 27 Dec 2005 15:05:20 ..S.R 235 672 230,15 K
g622lg~1.dll Wed 21 Dec 2005 15:03:32 ..S.R 233 861 228,38 K
h4j40e~1.dll Mon 26 Dec 2005 13:40:50 ..S.R 234 044 228,56 K
h4l20e~1.dll Tue 27 Dec 2005 16:23:44 ..S.R 234 192 228,70 K
haspvdd.dll Wed 14 Dec 2005 11:49:04 A.... 6 656 6,50 K
hr6s05~1.dll Tue 27 Dec 2005 13:48:08 ..S.R 236 927 231,37 K
hrrs05~1.dll Tue 27 Dec 2005 13:39:50 ..S.R 236 957 231,40 K
ieaapi.dll Tue 20 Dec 2005 14:54:32 ..S.R 236 860 231,31 K
igwdial.dll Tue 27 Dec 2005 14:55:02 ..S.R 234 266 228,77 K
irp0l5~1.dll Wed 28 Dec 2005 8:28:18 ..S.R 235 033 229,52 K
j02q0a~1.dll Tue 27 Dec 2005 12:15:30 ..S.R 233 943 228,46 K
k044la~1.dll Tue 27 Dec 2005 15:44:24 ..S.R 233 968 228,48 K
k4620e~1.dll Wed 21 Dec 2005 9:57:10 ..S.R 236 860 231,31 K
k4js0e~1.dll Mon 26 Dec 2005 14:52:04 ..S.R 234 870 229,36 K
k4lq0e~1.dll Tue 27 Dec 2005 14:10:52 ..S.R 233 991 228,50 K
kadycc.dll Tue 20 Dec 2005 13:47:32 ..S.R 236 860 231,31 K
kt06l7~1.dll Tue 27 Dec 2005 9:13:44 ..S.R 236 693 231,14 K
kwdhe319.dll Mon 26 Dec 2005 13:49:36 ..S.R 233 630 228,15 K
lacwmi.dll Tue 20 Dec 2005 12:01:22 ..S.R 236 120 230,59 K
ltl027~1.dll Tue 27 Dec 2005 11:59:28 ..S.R 237 227 231,66 K
lv0009~1.dll Tue 27 Dec 2005 13:48:16 ..S.R 234 083 228,59 K
lv4209~1.dll Sun 25 Dec 2005 14:19:08 ..S.R 233 630 228,15 K
lv6209~1.dll Tue 27 Dec 2005 10:36:02 ..S.R 235 602 230,08 K
lvl209~1.dll Tue 27 Dec 2005 14:39:28 ..S.R 234 121 228,63 K
lvn809~1.dll Wed 21 Dec 2005 13:09:26 ..S.R 234 166 228,68 K
lvp409~1.dll Wed 21 Dec 2005 16:27:38 ..S.R 236 698 231,15 K
m4460e~1.dll Tue 20 Dec 2005 13:46:24 ..S.R 236 120 230,59 K
m6julg~1.dll Tue 27 Dec 2005 9:13:34 ..S.R 237 249 231,69 K
mbhgrcoi.dll Tue 27 Dec 2005 10:36:02 ..S.R 235 333 229,82 K
mecpxl32.dll Tue 27 Dec 2005 10:55:32 ..S.R 235 333 229,82 K
mkaatext.dll Tue 27 Dec 2005 15:02:54 ..S.R 234 266 228,77 K
mssnap.dll Mon 26 Dec 2005 8:28:12 ..S.R 233 630 228,15 K
n08ola~1.dll Tue 27 Dec 2005 10:37:38 ..S.R 235 333 229,82 K
n0n60a~1.dll Tue 27 Dec 2005 13:57:08 ..S.R 237 117 231,56 K
nclapi.dll Thu 24 Nov 2005 10:53:20 A.... 110 592 108,00 K
ncltools.dll Fri 28 Oct 2005 13:51:32 A.... 26 624 26,00 K
nmwcdcls.dll Thu 13 Oct 2005 8:15:16 A.... 48 128 47,00 K
nmwcdlog.dll Thu 13 Oct 2005 8:15:16 A.... 4 608 4,50 K
p0r4la~1.dll Tue 27 Dec 2005 15:40:28 ..S.R 234 266 228,77 K
r06u0a~1.dll Tue 27 Dec 2005 9:59:04 ..S.R 237 265 231,70 K
rmoc3260.dll Tue 15 Nov 2005 9:38:10 A.... 176 167 172,04 K
ssfolder.dll Tue 27 Dec 2005 14:39:22 ..S.R 236 162 230,63 K
t08u0a~1.dll Wed 21 Dec 2005 14:22:44 ..S.R 236 891 231,34 K
winine2.dll Wed 21 Dec 2005 15:15:24 A.... 603 136 589,00 K
wininet.dll Wed 21 Dec 2005 15:15:24 A.... 603 136 589,00 K
wwpshell.dll Tue 20 Dec 2005 14:15:48 ..S.R 236 860 231,31 K
zlib.dll Tue 20 Dec 2005 16:06:36 A.... 53 248 52,00 K
59 items found: 59 files (47 H/S), 0 directories.
Total of file sizes: 13 287 682 bytes 12,67 M
Locate .tmp files:
C:\WINDOWS\SYSTEM32\
hostsvcs.tmp Tue 20 Dec 2005 16:06:36 A.... 18 0,02 K
1 item found: 1 file, 0 directories.
Total of file sizes: 18 bytes 0,02 K
**********************************************************************************
Directory Listing of system files:
Le volume dans le lecteur C s'appelle IBM_PRELOAD
Le num‚ro de s‚rie du volume est 3C46-4082
R‚pertoire de C:\WINDOWS\System32
28/12/2005 08:28 233ÿ958 cqprops.dll
28/12/2005 08:28 235ÿ033 irp0l57m1.dll
27/12/2005 16:23 234ÿ192 h4l20e3oeh.dll
27/12/2005 15:59 233ÿ958 en24l1fq1.dll
27/12/2005 15:44 233ÿ968 k044lahq1d4e.dll
27/12/2005 15:40 234ÿ266 p0r4la9q1d.dll
27/12/2005 15:05 235ÿ672 g604lgdq160e.dll
27/12/2005 15:02 234ÿ266 mkaatext.dll
27/12/2005 14:55 234ÿ266 igwdial.dll
27/12/2005 14:39 234ÿ121 lvl2093oe.dll
27/12/2005 14:39 236ÿ162 ssfolder.dll
27/12/2005 14:32 236ÿ530 ennql1551.dll
27/12/2005 14:10 233ÿ991 k4lq0e35eh.dll
27/12/2005 13:57 237ÿ117 n0n60a5sed.dll
27/12/2005 13:48 234ÿ083 lv0009dme.dll
27/12/2005 13:48 236ÿ927 hr6s05j7e.dll
27/12/2005 13:40 <REP> dllcache
27/12/2005 13:39 236ÿ957 hrrs0597e.dll
27/12/2005 12:15 233ÿ943 j02q0af5ed2.dll
27/12/2005 11:59 237ÿ227 ltl0273mg.dll
27/12/2005 10:55 235ÿ333 mecpxl32.dLL
27/12/2005 10:47 235ÿ361 enj8l11u1.dll
27/12/2005 10:37 235ÿ333 n08olal31dq.dll
27/12/2005 10:36 235ÿ333 mbhgrcoi.dll
27/12/2005 10:36 235ÿ602 lv6209joe.dll
27/12/2005 09:59 237ÿ265 r06u0aj9edo.dll
27/12/2005 09:13 236ÿ693 kt06l7ds1.dll
27/12/2005 09:13 237ÿ249 m6julg1916.dll
26/12/2005 14:52 234ÿ870 k4js0e17eh.dll
26/12/2005 14:19 234ÿ870 coseqchk.dll
26/12/2005 13:49 233ÿ630 kwdhe319.dll
26/12/2005 13:40 234ÿ044 h4j40e1qeh.dll
26/12/2005 08:28 233ÿ630 mssnap.dll
25/12/2005 14:19 233ÿ630 lv4209hoe.dll
25/12/2005 11:23 233ÿ630 enn6l15s1.dll
21/12/2005 16:27 236ÿ698 lvp4097qe.dll
21/12/2005 15:28 234ÿ043 enrql1951.dll
21/12/2005 15:03 233ÿ861 g622lgfo162c.dll
21/12/2005 14:22 236ÿ891 t08u0al9edq.dll
21/12/2005 13:09 234ÿ166 lvn8095ue.dll
21/12/2005 10:57 234ÿ166 enj4l11q1.dll
21/12/2005 09:57 236ÿ860 k4620ejoehoc0.dll
20/12/2005 14:54 236ÿ860 ieaapi.dll
20/12/2005 14:35 236ÿ860 dvrawex.dll
20/12/2005 14:15 236ÿ860 wwpshell.dll
20/12/2005 13:47 236ÿ860 kadycc.dll
20/12/2005 13:46 236ÿ120 m4460ehseh460.dll
20/12/2005 12:01 236ÿ120 lacwmi.dll
30/09/2002 17:26 <REP> Microsoft
47 fichier(s) 11ÿ059ÿ475 octets
2 R‚p(s) 11ÿ059ÿ380ÿ224 octets libres
Lassé par la pub ? Créez un compte
